This is pretty alarming yet can be considered almost a victory in some ways. Technology is finally being recognized.

Yeah huge value in my opinion, wealth of information for the cost!

Hi Alucian - Don't see that it is restricted, give it a shot:

http://www.owaspa.org/learning_blocks/login/index.php

I am a member of OWASP and wanted to give a shout to everyone out there to try to attend meetings (typically free) and check out free OWASP courses/learning materials.

Amen to that, I'm still trying to get adjusted, 2 weeks vacation and 10 lbs later, I think I'm ready to get back after it in 2012 

Congrats!

Correct, it would all be tunneled and the cifs ports will not be exposed. It's unlikely the ports are exposed externally as you would have to have explicitly defined this. Hope this helps!

Are the other sites similar sites to this or common social networking sites and this is a portal to those? Just curious as to the goal.

Interesting experiences, very good reads from both of you!

Would think it is on srv side

I've seen more discussion around secure coding on the forums lately. Last year we funded a decent size Fortify implementation and this site is what we pass to our developers as somewhat of an online reference.

https://www.fortify.com/security-resources/index.html

What does the master password do exactly?

I have written an app before that used a similar setup but the master password was more of the value of an  encryption key that was stored (hashed) in a configuration file, with the keys residing at the OS level.

Happy Holidays to all EH-Netters across the world!

Just a brief anecdote. I am visiting my relatives for the holidays. My mother receives a phone call from an unknown number and passes it over to me as they are asking her computer questions. I get on and some guy claims to be from a computer research company and needs me to go on to the computer and type a few commands in. Luckily I didn't take him serious or let it go to far but I asked him if by any chance I'd be going to a web site, downloading a rootkit, and allowing this computer to participate in their botnet/spam army after he roots it with a known exploit. He just kind of laughed and I told him to F'k off and hung up. No mercy from the dark side, even on the holidays.

Happy Holidays to all!

+1