321 reputation
18
bio website jefflunt.com
location Evanston, IL
age 35
visits member for 3 years, 7 months
seen Dec 8 '12 at 23:03

I'm that guy who fundamentally loves to tinker and build stuff. I code because it's the single greatest creative outlet I've ever discovered, and I can't get enough of it.


Feb
7
awarded  Autobiographer
May
18
awarded  Yearling
Nov
5
awarded  Commentator
Nov
4
comment How can you prevent someone destroying your app if they get into your account on heroku?
You know, after thinking it over for a couple of days, I'm going to take back what I said earlier. I've come to agree with you much more in general. Because of possible problems such as password database theft (even if unlikely) I do support two-factor authentication in all mission-critical software. So, in the case of Heroku, two-factor authentication would protect your app from being destroyed if someone was able to steal, and decrypt the authentication database, because if someone was able to break in and steal your password, they would still need your second factor to do damage.
Nov
2
comment How can you prevent someone destroying your app if they get into your account on heroku?
Recent, very serious social engineering example: krebsonsecurity.com/tag/fortune-100
Nov
2
comment How can you prevent someone destroying your app if they get into your account on heroku?
All the more reason to take password security very seriously. It's great that you're thinking of all the possible ways someone could get in. The other (arguably more likely), scenario is that someone breaks in using social engineering. I.E. if your password security is sufficiently good, then the likelihood that someone will get in with a compromised/brute-force password attack is effectively zero, but that doesn't protect you from employees inadvertently providing information that results in compromised security. After you solve your password problem, move toward educating your employees.
Nov
2
comment How can you prevent someone destroying your app if they get into your account on heroku?
If you're working on a team where multiple people need to have access, does heroku provide key-based authentication, whereby users would each have their own access key which you can revoke?
Nov
2
comment How can you prevent someone destroying your app if they get into your account on heroku?
Well, maybe that's crossing how easy it is to login, with how easy it is to get your password - they're definitely not the same. I agree that two-factor authentication would be very nice. I suppose my point is, password-based authentication is still extremely strong - it just puts the burden of secrecy on the user, whereas two-factor authentication can allow your password to get free, but you would still have the safety net of the second factor. There's no reason that, if you're able to keep your password absolutely private, that it isn't every bit as good.
Nov
2
answered How can you prevent someone destroying your app if they get into your account on heroku?
Jun
13
awarded  Revival
Jun
13
revised Looking to move current e-commerce website to Squarespace
added 1 characters in body
Jun
13
answered Looking to move current e-commerce website to Squarespace
May
28
comment Tips on hosting a non-web framework based application on a Windows host (i.e. - not IIS, Apache, etc.)?
Is this something you can build on a spare machine in your house, and see what performance bottlenecks you run into there?
May
26
revised What's the best way to implement texting into my webapp?
added 279 characters in body
May
26
answered Artists and music - Need Help Deciding on a CMS
May
26
answered Subdomain configuration
May
26
answered What's the best way to implement texting into my webapp?
May
26
comment What can I do if someone is spoofing my site?
I might also suggest you check on the more business oriented site (also on the StackExchange network), answers.onstartups.com
May
26
answered What hosting solutions help with traffic spikes?
May
25
awarded  Teacher