₦airaland Forum

Welcome, Guest: RegisterLoginWith GoogleTrendingRecentNew

Stats: 3,325,135 members, 8,420,513 topics. Date: Thursday, 04 June 2026 at 10:57 PM

Toggle theme

2mNaira's Posts

Nairaland Forum2mNaira's Profile2mNaira's Posts

1 2 3 4 5 6 7 8 9 10 11 12 13 (of 22 pages)

InvestmentDeleted for lack of interest by 2mNaira(op):
Deleted for lack of interest.
HealthRe: 4 Sure Fire Ways To Get Rid Of Mouth Odour by 2mNaira: 7:53pm On Oct 08, 2016
ok.
HealthRe: Help Before I Kill Myself. Body Odour Has Turned Me To A Recluse. by 2mNaira: 8:18pm On Oct 07, 2016
I pray you.get help here.
ProgrammingRe: How Many Lines Of Code Is Your Largest Work So Far? by 2mNaira: 8:57am On Oct 06, 2016
100 thousand I think or something there about.

I am not too sure. I am not imposition to verify now. But I will update it as soon as i verify.
FamilyRe: Should I Marry A Man With A Low Sperm Count? by 2mNaira: 4:17am On Oct 06, 2016
Interesting
ProgrammingRe: Can An Array In Java Hold Multiple Types? by 2mNaira: 8:40pm On Oct 05, 2016
larisoft:
To the best of my knowledge; the assertion that a java array can contain different types is false.

You could do this of course by making your objects extend one parent object, or implement a common interface, but then, they wouldnt be 'different types' anymore.

Also, to the best of my knowledge, arrays in java cannot be extended.
Does java have the tuple dats type.
CrimeRe: "We Didn’t Know It Was CBN Governor’s Wife We Kidnapped" - Suspect by 2mNaira: 8:03pm On Oct 05, 2016
Sleekbabz:
From previous reportsn the security details attached to her fled because of the superior firepower of the kidnappers
I don't get it; fulani herdsmen have superior firearms than that of a security team? This is not adding up
They probably paid ransom and got some random criminals to take the fall
Sorry but sorry. . Nigeria is indeed a zoo
This is most likely it.
ProgrammingRe: Lessons In How Not To Implement Application Security by 2mNaira: 6:47am On Oct 05, 2016
@SeunThomas,I hope you have not abandoned this thread.
ProgrammingRe: The most popular programmer on Nairaland 2016 Edition by 2mNaira: 6:37am On Oct 05, 2016
In my own opinion,this thread should have been titled , The most popular programmer on Nairaland.Whether that title is adopted or not, it is the most popular programmer it will end up discovering.

I know that the owner of the thread advised people who have issues with the thread to create their own thread instead of complaining.

Well, I do not have issues with the thread or its objective. Of course every one knows it will not discover the best programmer but only the most popular. Everyone is participating just for the fun.As stated by the creator, the primary objective of the thread is to create fun and if you ask me, then I'll tell you that it is succeeding at its aim.

I really do believe that, this thread would have generated no controversy if it has used a more suitable title.

Funny enough, I almost heeded the creator's advice by creating another thread with the same title that seeks to find the best programmer via programming prowess,but refrained from so doing so it wont appear that I did it out of spite.

While I am all out for creating threads for the purpose of fun, I think suitability of title should not be sacrificed for fun.
CrimeRe: How A Man Was Raped By 2 Women In South Africa by 2mNaira: 8:57am On Oct 04, 2016
doveda:
You are right, there is no crime but you wouldn't use the word ‘crime' to justify his awful post if you knew what crime is and understand why he must be disgracedsmiley

It was definitely called for. Ask him to go and marry biko
Must everybody be like u or reason like you?
If I have to be candid you are wrong and owe him an apilogy. Your approach was definitey improper.

Ever heard of the phrase 'maner of approach'?
CrimeRe: How A Man Was Raped By 2 Women In South Africa by 2mNaira: 8:46am On Oct 04, 2016
doveda:
Hilarious ko hilarious ni because rape is very humorous abi

No wonder your marriage lasted, Mr wisdom undecided

Agbaya!
Pls let this fellow be.There is no crime if he finds it funny.
That was unxalled for.
PoliticsRe: ‘Blame 1999 Constitution For Lack Of Savings, Not Past Regimes’ – Akinyemi by 2mNaira: 9:29pm On Oct 03, 2016
zaboy:
you are right. Adjusted for inflation and other factors, 51trillion today may (or may not) be equal to 1trillion back in the day. Now, what we need to do is see what previous administrations achieved with their earnings and compare with what GEJ achieved with his. Start with comparing OBJ and GEJ since their periods were not too dissimilar.
That would be fairer comparison.

Anyway, I am more of an observer here. I just needed to pointvout thatbfaulty analysis
PoliticsRe: ‘Blame 1999 Constitution For Lack Of Savings, Not Past Regimes’ – Akinyemi by 2mNaira: 9:11pm On Oct 03, 2016
ochuciano:
Keep deceiving ursef. show us facts to buttress ur point.
Even if the infornation ge gave were factual it still cannot help in proving his point. N51 T today is probably equal to N1 M in the sixties in purchasing power.
PoliticsRe: ‘Blame 1999 Constitution For Lack Of Savings, Not Past Regimes’ – Akinyemi by 2mNaira: 9:05pm On Oct 03, 2016
zaboy:
The Prof is right...though OBJ was able to save despite the constitution. However, our problem i believe is not lack of savings per se, but what was done with the money that wasn't saved?
No one is saying GEJ did nothing, however, with the revenue they had in his 5yrs, they ought to have done much much much more!!!
Nigeria earned a total of 97trillion naira as oil revenue since its discovery in the 1960s. 51 of the 97trillion was during GEJ's time...let that sink in!!!
This you analysis is a faulty one.
N51trillion naira today is probably equal in purchasing power to N1 trillion naira many years back.
I used to go to school with say 10 kobo or so when I was in primary school.That money was more than enough for my transportation to and from school and for my feeding. That amount is large today does not make it large comparatively many years ago. You have to consider a lot of parameters like the prevailing exchange rate and infkation during th e two periods in order to get the eqivalent or true value of an amont of money in naira in one period of time to that in another period of time.
FamilyRe: My Wife Absconded With Our Kids by 2mNaira:
taiiremide:
What faith are you talking about bro Do you want me to force myself on her? She doesn't want the marriage again, and am better off than been with her. This woman never supportd me in anyway, I pay all the bills, house rent, diapers, food, clothes, hospital bills, etc fine it's my responsiebility and I don't complain, but little appreciation wouldn't hurt. Yet she still complain, my salary including other freelance jobs is more than 150k per month, still no savings, I don't even have half plot of land. When I travel my wife will not call to know if I arrive safely, she doesn't care about me. I'm not saying this to crucify her, I'm saying the truth, and God is my witness, I'm human I need pampers too. She made her choice, good for her.
Some people don't show 'emotiona love ' because they were not brougt up that way or sonething happened in there growing up years and they stoppd showing emotional care.

Its more of a backgroud, growing up environment thing. It does'n mean they don't love you.

Complaining is also an intrinsic part of some people's character.
My guese is that your wife is very beautiful
which is the most important thing that attracted you to her in the first place and so you did not pay attention to her character. She most likely have always been like this even before you married her.

On her own part it is most likely that the most important reason she was attracted to you was you financial buoyancy. She most likely is of humble background and saw you as an escape from hardship which she seem to be now experiencing or she grew up in comfort and has become used to it and now she is not getting it again..Or because of your financial buoyancy she already has great dreams that seem to have been dashed and she is now feeling frustrated.

It is likely that she doesn't mean it when she said she is not interested in the marriage again but only said that out of immaturity to manipulate you.She probably has told some stories about you to her parent and was hoping when she tells you she is not interested in the marriage again you would come down from your high horse and come to her parents place to beg.She just wants her parents to talk some senses into you becsuse she believes you are more likely to listen to them than to her.

In my own opinion, you do not yet understand how your wife is and you do not know how to manage her.

Also, reading in between the line.I sense that you and your wife often disagree and she often have her way but recently she doesn't always have her way often again and she needs to get you more in line now, hence the manipulation.

I believe your wife stil loves you.She is just somehow immature. She feels your love for her has waned and is trying to whip it up through manipulation.

You need to find a way to manage your wife well without.enstranging her , without
making her feel feel less loved and without
allowing her to succeed at manupulating you.

What you need to do is find a way to resolve the impasse by meeting her half-way.

You shoud continue to be nice, loving,caring and kind to her thus tactically maintainig cordial relationship with her but let her continue to take care of the children alone. When the burden gets too much for her she will find her way back.After all, you did not send her packing.
PoliticsRe: Ondo Governorship Election: Another Crisis Looms In APC Over Deputy Gov. Slot by 2mNaira: 12:04pm On Oct 03, 2016
ODVanguard:
I don't have the latest voters' registration figures but based on past elections, suffice it to say that ondo central has the largest number of voters, followed by ondo south and then the north comes third. In the entire state, akure south (located in ondo central) has the largest pool of voters in the state. If Aketi fails to pacify both Abraham and Boroffice, the APC will be out of contention because if APC can't have a clear and solid win in the northern zone, they should forget it. If Oke manages to win all the local governments in the south and does o.k in ondo central, he may just nick it. If he doesn't then Jegede will certainly get it. Whoever wins the highest number of local governments will win the election. At least on paper, for now the odds are in favour of Jegede and Oke as they can at least claim they will receive bloc votes from their senatorial zones. APC's poor performance at the federal level, coupled with the current crisis rocking the party is a devastating blow to the party's chances. It's not looking good at all for Aketi at this point. IMO.
That is if they allow your vote to count. I am concerned that there may be rigging which make rubbish of people's vote.

Going by threads on nairaland , I was convinced that APC stood no chance ib Edo State.


I have been using analysis online as bases for forming opinion on how election result is likely to be in state's in which I don't reside, but after the Edo's election results were released, I stopped reckonning with online anwlyses. I am now more interested in how rig-free the election will be.
PoliticsRe: Ondo Governorship Election: Another Crisis Looms In APC Over Deputy Gov. Slot by 2mNaira: 11:43am On Oct 03, 2016
FagsamPHP:
if you knw you are not on ground here stop spewing rubbish..... This is our state & APC is not an option, its now between PDP vs AD, Underate Olusola Oke at ur own peril, OKE will beat iyalaya anybody in all the local govt in the South, PDP to floor anybody in Central, Only OWO is sure outrightly for APC in the north,, NORTH will. be the battleground........



And to that idiot up there talking about salaries, tell us if he's the only gov owing salaries in Nigeria.. At least if u want to be partisan. do it with sense
That is if they allow your vote to count. To the best if my knowledge it did not count in Edo state
RomanceRe: Those Big Aunties That Disvirgin Us When We Were Small by 2mNaira: 4:50am On Oct 03, 2016
Quite revealing.
ProgrammingRe: Lessons In How Not To Implement Application Security by 2mNaira: 7:55am On Oct 02, 2016
DanielTheGeek:
Next time, read through well.. disable JavaScript access to the cookies.
The session Id stuff is still worth mentioning, so no one turns it on in production without knowing the risk.
OK. Sorry about that.
ProgrammingRe: Lessons In How Not To Implement Application Security by 2mNaira: 12:58am On Oct 02, 2016
lekropasky:
thanks. I kinda like the option d, but does that mean C/C++ codes are free from being reverse engineered?.
Of course all codes can be reversed engineered. Its just that codes that are compile directly to machine language like c/c++ are more difficult to reverse engineer than those the compile to intemediate language like Java and C#.
ProgrammingRe: Lessons In How Not To Implement Application Security by 2mNaira:
DanielTheGeek:
You can disable passing session id's through the URL by turning it off in a .htaccess file or PHP ini file. This doesn't prevent the hijacking (made a mistake earlier) just makes it less vulnerable.
When use_trans_sid is enabled, PHP will pass the session ID
via the URL. This makes the application more vulnerable to
session hijacking attacks.
Another measure is to disable JavaScript access to cookies so a hacker cannot get access to the session id from a cookie using XSS.
To the best of my knowledge, session id are never sent via url by default unless you specifically request that it be sent via url.

If my memory serves me right, cookies get sent by url only when you do not allow creation of cookies on your computer.

Disabling javascript to prevent session hijacking by turning javacsript off is not a good idea because most applications need javascript and so it is not really a pragmatic solution. Besides, there are many other ways of preventing XSS without turning javascrpt off.
ProgrammingRe: Lessons In How Not To Implement Application Security by 2mNaira:
From what I have gathered here this is my opinion on how to prevent session hijack.

Ensure login is done per device. This means each time a person logs in you must save sufficient information about the device from which the logged in into your database.

Create a Table probably named UserSession.
Along with other device identity identifying fields that you create in your UserSession Table you must also create a field probably named sessionid.

Insert, along with other device identity identifying information, a randomly generated session id into the UserSession Table.(You might want use the table's primary key instead).

From the server create a cookie using this your application generated session id.

Before you create any page for a logged in user on the server, get the current user's session id from the session id cookie you created and any get all necessary information about the current user's device.

Using the session id gotten from the cookie read/load the corresponding device identity row from database.

Compare the user identity values from database with those of the current user.If they do not match then suspect a fowl play and flag or mark all rows that have that session id in your database.

On suspecting a foul play request the current user to re-log in.

If the re-login succeeds delete that all rows that have that session id from your UserSession table ( since eached saved session id is per user per devuce)

Insert a new device identity identifucatuon row which should include a new generated session id( unless you are using primary key).

Create the user requested page you were about to create before you suspected foul play.

If re-authentication after foul play fails a number if times say,three times, then you can require the user to answer security question or any other higher levek authentication you desire.

Please note that the session id your application creates does not replace the one that the web server creates to identify clients. The web server still carries out its own session and client identification activities wuthout being disturbed.


Do add addition improvement suggestion that you deem necessary.
ProgrammingRe: Lessons In How Not To Implement Application Security by 2mNaira: 10:24pm On Oct 01, 2016
DanielTheGeek:
Nay! I disagree with this method as it sacrifices user experience. What of web-apps that allow users the choice of logging out of other devices manually?

The request verification method is perfect but also turning session id's off makes it more complicated, The way Facebook does it is you get a pop-up requiring you to re-auth to remain logged in the moment they detect any issue with the session.
Reading through your post a second time, I think I now understand your point.

You are saying that, rather than ending the session because a foul play is suspected facebook requires the user to re-login.
Hmn, that sounds better truely because it saves user experience like you pointed out.
This means that facebook will flag the session id on which it suspects foul play and will refuse to grant the request of any client request from any device that attempt to use that session id unless the person behind it re-logs in.

Thats actually sounds like a better approach than snap chat's approach to me.

The hacker will not be able to use that session id again unless he uses the device
that is being used by the authentic user.
FamilyRe: She Got Pregnant At 11 But Today She Is Married And Also A Masters Holder by 2mNaira: 9:48pm On Oct 01, 2016
teamsynergy:
as much as agree wif u, I wud admonish u not to mind comments u read on nairaland... too many unreal pipu... dey usually blow tinx out of proportion and r always very judgemental
I guess you are right.
ProgrammingRe: Lessons In How Not To Implement Application Security by 2mNaira:
DanielTheGeek:
Nay! I disagree with this method as it sacrifices user experience. What of web-apps that allow users the choice of logging out of other devices manually?

The request verification method is perfect but also turning session id's off makes it more complicated, The way Facebook does it is you get a pop-up requiring you to re-auth to remain logged in the moment they detect any issue with the session.
Even though SeunThomas's snapchat approach may not be the most pertinent, It appears to me considering this your post that he understands how session works.better than you do.

Http access is stateless. Server have no memory.Once a client connects to a server
the server checks to see if it sends a session id with its request.If a session Id is not found, the server creates a new session id for that client and hands the new session id to the client. The clients saves the session id as as a cookie on the client's computer. Once this is done, the client sends the session id with every request to the server.The server identifies each client app by comparing the cookie they send with the request with the one saved with a client identity on the server computer.

Session , hijacks occurs when an hacker successfully snifs out a client's session id while its being sent with request to the server.

There after,the hacker impersonates the client by sending his own request along with the clients original session id to the server. The server ends up comparing that session id with the one saved with a client identity and it assumes thr request came from the client. By so doing the hacker can carry out adminitative task on the app if the user whose session is hijacked is an admin.

Because the session id is saved as a cookie on the client cimputer,the client can end the session any time it wants by destroying or deleting the cookie.

Having said all these , I now suddenly see why snapchat approach is quite relevant and appropriate because it is unlikely that the hacker will be operating from the same device as the user, so even if the session id from the hscker and the authentic user are thesame it is unlikely that their ip address and any other device related information will be the same.

Pls note that when I said client above meant web
browser and when I said server above I meant't web server as opposed to the client computer and server computer themselves.

Thanks @SeunThomas , I see now that the snap chat approach is the way to go. It may not be 100% reliable , but considering
its format, it would most probably be 90% reliable. The hacker woule have to get, in addition to the session id, other information about the client in other to hijack a session. His greatest huddle would be determining the pool of addional information about the cient thar the web app keeps for completey identifying a client.
FamilyRe: She Got Pregnant At 11 But Today She Is Married And Also A Masters Holder by 2mNaira: 7:45pm On Oct 01, 2016
Acidosis:
Only a f00lish woman will save her child, leaving her husband behind.

Same husband that can get her pregnant again to make more babies.
I conpletely disagree with these. Ever heard of the matenal instinct. I am sure you know an instinct can be said to be that wish make you do something without thinking.
Besides studies of the brain has shown that emotion often prevail over logic in women.
ProgrammingRe: Lessons In How Not To Implement Application Security by 2mNaira: 7:31pm On Oct 01, 2016
DanielTheGeek:
You can use a .htaccess file to prevent this kind of attack.
Research on turning of the ID in sessions by using something like:
session.trans_id off (I'm not sure of the exact line of code tho)
OK. Thanks.I'll look into it.
FamilyRe: She Got Pregnant At 11 But Today She Is Married And Also A Masters Holder by 2mNaira: 7:23pm On Oct 01, 2016
dominique:
Same husband than can easily cheat on her, kick out and remarry. Nothing or no one can ever break the bond between mother and child. Your wife can never love you more than her child, sorry about that smiley
This my sister is the truth. Women generally love their children more than their husbands and men love their children more than their wives. This ought not to be so. But a single mum that is married to another man should be smart in her demonstration and profession of such love so as not to get in the way of harmony with her husband and and not to get people to regard her husband as being
foolish.
FamilyRe: She Got Pregnant At 11 But Today She Is Married And Also A Masters Holder by 2mNaira: 6:57pm On Oct 01, 2016
teamsynergy:
some folks r just too damn narrow minded. just becos a single mom didnt acknowledge her husby, it's now a single mothers thing... some of u av neva even dated a gal older Dan u or a single mom, u r already judging ... everybody is different and for those thinking its a stigma to marry a single mom, think again.. single mom get married and live hapily and if u tink d man deserves an applause, u definitely sexist... u marry out of love and contentment, not out of pity... marrying a single mom is no biggy. . if u can't do it , it doesn't mean others wont... can't stop ma bro from marry one, cos I can do it ma sef.....
Do you know what the problem is? People out there are never rational. You may be, the single mum may be, the man may be, but are his parents and siblings rational? Are his friends rational?Are his neigbours rational? Is the society at large rational?

I know what arose from my own parents and siblings when I spoke of wanting to marry a single mum. For your information, I personally have no issues with marrying a single mum but I am very much aware a lot of people have issues with it. One more thing , I am speaking from experience.

Talking about people's irrationality, are people rational about men or women who are more than ripe for marriage in Nigeria? The answer is an emphatic NO. People see them as people who have a great problem.If you have been on Nairaland for sometime you would have heard of what people often say about Linda Ikeji, Rita Dominc and all such people.

Believe me, it takes a lot of courage to marry a single mum if you are not a single dad, and not a widower.
ProgrammingRe: Lessons In How Not To Implement Application Security by 2mNaira: 6:44pm On Oct 01, 2016
seunthomas:
What snapchat did was to make it more difficult to hijack sessions. But like i stated first in my reply, there is no way to totally prevent it.
OK.Thanks a lot.
ProgrammingRe: Lessons In How Not To Implement Application Security by 2mNaira: 6:17pm On Oct 01, 2016
seunthomas:
To be honest with you, there is actually no way to prevent it.

You can actually make it more difficult for sessions to be hijacked.

One way is by allowing one user signup per device. If a user logs in from one device, you automatically sign them out from all other devices. You may need to add some headers in the request to act as a challenge. Thats what snapchat does.

They log you out from all other devices and you have to generate a specific header which is a challenge between the server and client to verify if the requests has been tampered with.

However, like i said, a determined attacker can still bypass this with some effort.
I used to think people hijack sessions of people who have already logged in. If that indeed is the case then what snap chat does will be completely irrelevant.

I have been searching for a good solution to this but is yet to find one.

1 2 3 4 5 6 7 8 9 10 11 12 13 (of 22 pages)