Re: Security stumper [mildly OT]
This WebDNA talk-list message is from 2004
It keeps the original formatting.
numero = 57197
interpreted = N
texte = you can't use the referrer tag since that's easy to spoof. passwords would be the best way. you could also have 1 global password for everyone, but then what happens if an employee gets fired? if they are a bank then they should already be used to high security. so why not create a system whereby a new password gets generated every day, or every week, or upon demand. then that password would get sent to everyone somehow. this way its a global password for everyone so you don't manage users passwords. there are hardware systems out there used by big banks and medical corporations that use electronic key rings. the employees actually carry these things around with them and every time they need to log into their system they have to look at the LCD on their key chain to find out what the new password is. that system uses a previously created password list that is stored in the key chain and in the system. the key chain always shows the next number, and the system always knows to disallow any number already used. maybe you can come up with something like that. personally i never think that anything is impossible... for me impasse = creative thinking. Matt Perosi Psi Prime, Inc. ijo.com nj-singles.com Phil Herring wrote: >Hi all, > >I have a client who is about to launch a site that supports an internal >promotion for a bank. > >The bank wants to secure the site, but they won't host it on their intranet. > >Here are the parameters: > >- can't use passwords, way too many users > >- not all the users are on the same network, so screening by IP won't work > >- I considered screening by referrer (they can click a link on their >intranet to get to the site) but that would block people using bookmarks > > >I just told my client this is impossible. But have I missed something? > > > > > >------------------------------------------------------------- >This message is sent to you because you are subscribed to > the mailing list
. >To unsubscribe, E-mail to: >To switch to the DIGEST mode, E-mail to >Web Archive of this list is at: http://webdna.smithmicro.com/ > > > ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
you can't use the referrer tag since that's easy to spoof. passwords would be the best way. you could also have 1 global password for everyone, but then what happens if an employee gets fired? if they are a bank then they should already be used to high security. so why not create a system whereby a new password gets generated every day, or every week, or upon demand. then that password would get sent to everyone somehow. this way its a global password for everyone so you don't manage users passwords. there are hardware systems out there used by big banks and medical corporations that use electronic key rings. the employees actually carry these things around with them and every time they need to log into their system they have to look at the LCD on their key chain to find out what the new password is. that system uses a previously created password list that is stored in the key chain and in the system. the key chain always shows the next number, and the system always knows to disallow any number already used. maybe you can come up with something like that. personally i never think that anything is impossible... for me impasse = creative thinking. Matt Perosi Psi Prime, Inc. ijo.com nj-singles.com Phil Herring wrote: >Hi all, > >I have a client who is about to launch a site that supports an internal >promotion for a bank. > >The bank wants to secure the site, but they won't host it on their intranet. > >Here are the parameters: > >- can't use passwords, way too many users > >- not all the users are on the same network, so screening by IP won't work > >- I considered screening by referrer (they can click a link on their >intranet to get to the site) but that would block people using bookmarks > > >I just told my client this is impossible. But have I missed something? > > > > > >------------------------------------------------------------- >This message is sent to you because you are subscribed to > the mailing list . >To unsubscribe, E-mail to: >To switch to the DIGEST mode, E-mail to >Web Archive of this list is at: http://webdna.smithmicro.com/ > > > ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Matthew A Perosi
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Bug Report, maybe (1997)
Nested tags count question (1997)
pop up menu's (1998)
Showif, Hideif reverse logic ? (1997)
Spiders and Bots (2000)
Problem with [CART] number (1998)
Multiple Pulldowns (1997)
RE: Can't get appendfile to work (1997)
Setting up WebCatalog with Retail Pro data (1996)
Why is [authenticate] not recognizing [username] on all sitedirectories? (2000)
Site Test Please [OT] (2005)
field validation problem (1999)
ConverChars (1999)
[WebDNA] last month's last day expressed as days since 00/00/0000 would be what? (in code) (2008)
Problems appending to database (1997)
Templates for Customer Database? (1997)
RAM variables (1997)
setcookie getcookie on the same page (2003)
WebCat2b15MacPlugin - showing [math] (1997)
Wanted: More Math Functions (or, Can You Solve This?) (1997)