News for hackers. Stuff that matters.
Re:The Database Programmer: Advanced Table Design: Secure Pa... by trezor on Monday September 08, 2008 @12:10PM (#298461)
The technique presented today makes full use of database server abilities to create a password reset system that is highly resistant to forgery, interception, and evil-admin meddling.

If you for a second honestly believe that this design will stop admins from being able to tamper with the process, you should be fired on sight.

If you are going to design a secure process, I'd say you should focus more on security outside your system, and worry less about keeping admins out. If you're an admin, you have full access, or the ability to give yourself the full access needed to tamper with this system.

Re:The Database Programmer: Advanced Table Design: Secure Pa... by ardit33 on Monday September 08, 2008 @01:29PM (#298550)
not so fast. There are companies whose data is very sensitive. Financial, highly sensitive law firm documents, etc. And a large of percentage of data thefts is from inside jobs.

Not everybody is doing only web 2.0, where the data secrecy is not a big deal.

Re:The Database Programmer: Advanced Table Design: Secure Pa... by Alaric on Monday September 08, 2008 @12:42PM (#298485)
... and carefully vet who your admins are.