Recent questions tagged Security

0 votes

659 views

1 answer

security - Is Rails shared-nothing or can separate requests access the same runtime variables?

PHP runs in a shared-nothing environment, which in this context means that every web request is run in ... persist across multiple requests? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

748 views

1 answer

security - Are there any asymmetric encryption options for JavaScript?

I have to transfer some sensitive information over a JavaScript AJAX Call, over an unencrypted channel (HTTP, ... JavaScript > Server message) See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

740 views

1 answer

security - Secret vs. Non-secret Initialization Vector

Today I was doing some leisurely reading and stumbled upon Section 5.8 (on page 45) of Recommendation for ... cryptography. Likewise with caf. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

656 views

1 answer

security - Accessing secure restful web services using jersey client

I have created web services based on Jersey (auto generated via Netbeans). I have also created a user names ... ; kindly help me. Cheers! See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

955 views

1 answer

security - Enforce Https routing for login with play framework

I want to enforce https routing for the login page only of my application. Is it possible to do so with Play! ... of a front end http server? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

667 views

1 answer

security - Why is there no preflight in CORS for POST requests with standard content-type

I'm a bit confused about the security aspects of CORS POST requests. I know there is a lost of ... employ the technique described above? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

901 views

1 answer

security - Rails SQL injection?

In Rails, when I want to find by a user given value and avoid SQL injection (escape apostrophes and the like) I ... {:title => params[:title]}) See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

818 views

1 answer

security - GAE: best practices for storing secret keys?

Are there any non-terrible ways of storing secret keys for Google App Engine? Or, at least, less terrible ... checking them into source control? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - When will C# AES algorithm be FIPS compliant?

Right now the only way I can get the RijndaelManaged algorithm to work on a computer with the Local Security ... know when this might happen? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

770 views

1 answer

security - How does ASN.1 encode an object identifier?

I am having trouble understanding the basic concepts of ASN.1. If a type is an OID, does the corresponding number ... sure how to interpret it. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

2.3k views

1 answer

security - Creating a secure login using sessions and cookies in PHP

I am making a login script that I would like to be as secure as possible. Problem is, security seems to be a ... my login? Thanks for the help! See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Throttling login attempts

(This is in principal a language-agnostic question, though in my case I am using ASP.NET 3.5) I am using the ... be used from the UK and India See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

749 views

1 answer

security - Are secret URLs truly secure?

I never leave backdoors in my system, but out of curiosity I was wondering if I left a secret URL like / ... tactic be done for secret URLs? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

966 views

1 answer

security - How to Export Certificate from Chrome on a Mac?

How do I export a security certificate from Chrome v37 on a Mac? Previously I could click on the little lock ... would appear. Not so anymore! See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

833 views

1 answer

security - How to Snoop proof your wpf application?

Snoop allows you to look inside the application and change element properties. Its a great asset for developers, but ... more here. Thank you. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

785 views

1 answer

security - What are the risks of PHP sessions?

So everyone says that sessions have security risks, I want to know what kind of risks are these? What can ... I talk about PHP SESSIONS. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

708 views

1 answer

security - Android In App Billing: securing application public key

From Android In App Billing version 3 (TrivialDrive)sample application coming with sdk MainActivity.java /* ... to do this? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

634 views

1 answer

security - REST Web Service authentication token implementation

I'm implementing a REST web service using C# which will be hosted on Azure as a cloud service. Since it is a ... as well. Thanks for your help See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

981 views

1 answer

security - Is redirecting http to https a bad idea?

I'm reading over this page and it says that if a site is SSL and the user tries to access it via ... phising attacks is educating your users. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

962 views

1 answer

security - PHP API Key Generator

Does anyone know of any API key generator script/class for PHP? The class should have method generate, that would ... if the key is valid. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

681 views

1 answer

security - Is HTTPS the only defense against Session Hijacking in an open network?

So with Firesheep, everyone in a public Wi-Fi now has a one-click session hijack tool. The way it works - to ... do to protect his/her users. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

747 views

1 answer

security - Techniques for obscuring sensitive strings in C++

I need to store sensitive information (a symmetric encryption key that I want to keep private) in my C++ ... -voted all the useful answers. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

689 views

1 answer

security - Is there a difference between authentication and authorization?

I see these two terms bandied about quite a bit (specifically in web-based scenarios but I suppose it's not ... a basic difference in meaning? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

814 views

1 answer

security - What's the best approach for generating a new API key?

So with lots of different services around now, Google APIs, Twitter API, Facebook API, etc etc. Each service has ... to get some more ideas. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

743 views

1 answer

security - How to keep the client credentials confidential, while using OAuth2's Resource Owner Password Credentials grant type

We are building a rest service and we want to use OAauth 2 for authorization. The current draft (v2-16 from ... so these could easily be stolen. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

720 views

1 answer

security - API Keys vs HTTP Authentication vs OAuth in a RESTful API

I'm working on building a RESTful API for one of the applications I maintain. We're currently looking to ... be considered over the others? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

865 views

1 answer

security - How to block external http requests? (securing AJAX calls)

I want to use post to update a database and don't want people doing it manually, i.e., it should only ... my database by issuing fake requests. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

799 views

1 answer

security - How to manage installation from Unknown Sources in Android Oreo?

In Android Oreo (8.0), several changes where made on how to allow the installation of apps from Unknown ... or comments pointing that out.) See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

Categories

Just Browsing Browsing

Most popular tags