Recent questions tagged Security

0 votes

1.0k views

1 answer

I'm writing a web app with a separate frontend and backend. The frontend is written in React, and the backend ... used to access the endpoint? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - Where should I store an encryption key for php?

I'm writing a php application that accepts sensitive customer data, and so I need to encrypt it before storing ... way? Maybe shared memory? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - In Android, how to ensure that Private Key is stored inside secure hardware

KeyInfo's isInsideSecureHardware-method's return value seems to depend on device model, os version, and some other ... falling back to SW. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.2k views

1 answer

security - PHP htmlentities() on input before DB insert, instead of on output

I wonder if there's any downside or bad practice in doing the following procedure: $user_input -> htmlentities( ... download, PDF, etc. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - Can one's post request data be sniffed?

I apologize, I am new to this and assume that I will mix some terms up. I am trying to setup Google ... will send positive thoughts your way! See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - How long should the lifetime of a CSRF token be?

Should I have short lifetime for my CSRF token or can I have it last for the length of the session? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - How do I prevent Node.js / Express serving up my application's source code?

I never thought this would be a problem with Node.js and Express, but on a crazy whim I decided to type ... the filesystem from. Any ideas? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - How secure is ASP.NET Identity session cookie?

Of course cookies can be stolen and sessions hijacked, but how secure is the encryption itself of the ... without even stealing passwords. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

915 views

1 answer

security - Why is Java 7 requesting network permissions for a signed application?

Since Java 7 Update 5 my Java Web Start application is requesting the permission to establish connections. The ... Unknown Source) at com.sun.javaws.ui.JavawsSysRun$SecureThread.ru...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

964 views

1 answer

security - Sensitive Data In Memory

I'm working on a Java password manager and I currently have all of the user's data, after being decrypted ... lot of code on a superstition. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

968 views

1 answer

security - Detect broken lock icon (mixed secure/insecure content) from Javascript

I'm working on making a site fully functional under HTTPS. As part of this, I'd like to ensure we never " ... of the current page's content? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

862 views

1 answer

security - Source and importance of nonce / IV for protocol using AES-GCM

I am making a protocol that uses packets (i.e., not a stream) encrypted with AES. I've ... this compromise its authentication functionality? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - What is best possible way of salting and storing salt?

I have read about password salting, but this might sound a little odd. But how do I store and secure the ... is the best practice of salting? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Sending password safely from the front-end to the back-end using MD5

I've encrypted a password field in my DB by MD5, and I handle it encrypted in my back-end, but when user ... m using HTTPS and the POST Method. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - Can i deny access to a jvm class by configuring java.policy file?

I wanted to add to my jdk6jrelibsecurityjava.policy file an interdiction to create some classes that are blacklisted by ... such a policy file. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - PHP's new input_filter does not read $_GET or $_POST arrays

In PHP 5.2 there was a nice security function added called "input_filter", so instead of saying: $name = ... system arrays that already exist. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Android System App 101

Can somebody explain to me what are the benefits of Android System App over a "normal" app (besides ... be uninstalled)? Special permissions? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - Are MongoDB ids guessable?

If you bind an api call to the object's id, could one simply brute force this api to get all objects? If ... other (next, previous) ids? Thanks! See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

930 views

1 answer

security - Attacking Python's pickle

I'm writing a web app that stores user input in an object. This object will be pickled. Is it possible for ... ? x = pickle.loads(p) See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - How to securely delete files in java

How do I securely delete files in java? I tried the code at javafaq.nu, but the problem is you can't actually ... use it which I want to avoid. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - Are breaches of JWT-based servers more damaging?

UPDATE: I have concluded my research on this problem and posted a lengthy blog entry explaining my findings: The ... ways to mitigate the risk? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

994 views

1 answer

security - SSL on entire site or just part of it?

I have a site... let's call it mysite.com. On this site, there's the sign up section which I think ... of enabling it for the whole site? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

883 views

1 answer

security - SSL: How are certificates protected against man in the middle attacks?

My question is about certificates specifically in ssl but I think the questions should apply to all certificates. ... keys of most authorities. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.3k views

1 answer

security - How do I convert an XML RSA key to a PEM file?

I have two XML files, structured as follows: My Key <RSAKeyValue> <Modulus> ... </Modulus> <Exponent ... particularly obvious... Thanks! See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

915 views

1 answer

security - How to add Windows group as “Readers” to all projects in TFS 2010 collection?

I asked this question originally on ServerFault.com, but there seems to me more activity regarding TFS 2010 on ... accessible when set up. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Image sanitization library

I have a website that displays images submitted by users. I am concerned about some wiseguy uploading an image ... that supports JPEG/PNG/GIF? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

844 views

1 answer

security - Raw sockets need root priviliege

Why do we need root privileges when we use raw sockets ? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Can I use latest BouncyCastle provider on Android?

I am writing the app for Android 1.6. Can anyone tell me if it is possible to use latest Bouncy ... , correct instructions will be appreciated. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

Categories

Just Browsing Browsing

Most popular tags