Recent questions tagged Security

0 votes

745 views

1 answer

I wonder if I should use the CAS protocol or OAuth + some authentication provider for single sign-on. ... CAS is dispensable with OpenID. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

932 views

1 answer

security - Can a client view server-side PHP source code?

I'm developing a PHP application that has to respond to request from several clients, and I thinks "Can any of the ... code that I'm writing?". See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

799 views

1 answer

security - Compare password hashes between C# and ColdFusion (CFMX_COMPAT)

I have a password hash that is stored in a table and is put there by the following coldfusion script- #Hash( ... c#? Thanks for any thoughts. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

864 views

1 answer

security - Using a Single system() Call to Execute Multiple Commands in C

In an information security lab I'm working on, I've been tasked with executing multiple commands with a single call ... ??? "; system(command); See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

824 views

1 answer

security - Blocking Chrome Extensions from running on my site

As a web developer, is there any way to prevent a user's Chrome extensions from being applied to my ... way to whitelist particular extensions? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

810 views

1 answer

security - Is MD5 less secure than SHA et. al. in a practical sense?

I've seen a few questions and answers on SO suggesting that MD5 is less secure than something like SHA. My ... clear with what I was asking. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

762 views

1 answer

security - Asp.net Access To Network Share

I have an ASP.NET app which needs to save files to a network share (Samba). The share requires a username and ... drive. What am I missing out? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

682 views

1 answer

security - Verification of dependency authenticity in Maven POM based automated build systems

I was just pointed to a very interesting article (archived) about a security problem called Cross Build Injection ( ... state of this in maven? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

2.5k views

1 answer

security - Use App Scripts to open form and make a selection

To put this briefly I am testing a Google drive form that will record votes for a school election to ... .com/forms/d/RANDOM_STRING/viewform See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

750 views

1 answer

security - Can I serve MP3 files with PHP?

In the same way that it's possible to serve up images with php, for use in CAPTACHAS and such, is it possible to ... why I'd want to do this. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

707 views

1 answer

security - Is there a "safe" subset of Python for use as an embedded scripting language?

In the many Python applications I've created, I often create simple modules containing nothing but constants to be ... should be able to do. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

801 views

1 answer

security - Sanitize file path in PHP

Greetings, I'm hoping to make my tiny program secure so that potential malicious users cannot view sensitive files ... and how to prevent them. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

791 views

1 answer

security - Is it OK to return a HTTP 401 for a non existent resource instead of 404 to prevent information disclosure?

Inspired by a thought while looking at the question "Correct HTTP status code when resource is available but not ... the server return a 200? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

919 views

1 answer

security - How to prevent PHP files from being downloaded? And what are some ways someone can download them?

How do i prevent php files from being downloaded "illegally" like through the browser. And what are some ways ... to download the php files? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

682 views

1 answer

security - Understanding CSRF

I don't understand how using a 'challenge token' would add any sort of prevention: what value should ... bookmarking harder for the user. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

667 views

1 answer

security - Understanding CSRF

I don't understand how using a 'challenge token' would add any sort of prevention: what value should ... bookmarking harder for the user. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

701 views

1 answer

security - Where is the PEM file format specified?

I need to parse .PEM files. I know that the standard for "Privacy-enhanced Electronic Mail" is defined in ... this an OpenSSL-specific format? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

938 views

1 answer

security - Java AES/GCM/NoPadding - What is cipher.getIV() giving me?

I'm using AES/GCM/NoPadding encryption in Java 8 and I'm wondering whether my code has a security flaw. My code ... 's format. Let me know!) See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

830 views

1 answer

security - Proper session hijacking prevention in PHP

I know this topic has been discussed a lot, but I have a few specific questions still not answered. For ... use of session_id() correct? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

676 views

1 answer

security - How to prevent multiple logins in PHP website

I want to prevent multiple logins in a php application. First, I create login status (active, notactive) in ... have any suggestion about this? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

843 views

1 answer

security - How to store passwords in Winforms application?

I have some code like this in a winforms app I was writing to query a user's mail box Storage Quota ... since they are machine dependent. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

667 views

1 answer

security - Why not use HTTPS for everything?

If I was setting up a server, and had the SSL certificate(s), why wouldn't I use HTTPS for the entire ... to apply https to the entire site. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

671 views

1 answer

security - Session timeouts in PHP: best practices

What is the actual difference between session.gc_maxlifetime and session_cache_expire() ? Suppose I want the users ... this though. Thanks. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.2k views

1 answer

security - Removing the remembered login and password list in SQL Server Management Studio

I've recently used our company's spare laptop (that has a general user set up) while mine was being repaired. ... passwords. How can I do this? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

613 views

1 answer

security - How to secure RESTful web services?

I have to implement secure RESTful web services. I already did some research using Google but I'm stuck. Options: ... REST API... The Right Way See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

668 views

1 answer

security - Google Authenticator implementation in Python

I am trying to use one-time passwords that can be generated using Google Authenticator application. What Google ... within my Python code. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

980 views

1 answer

security - Is there a way to force apache to return 404 instead of 403?

Is there a way how I can configure the Apache web server to return a 404 (not found) error code instead ... accessed does in fact exist. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

696 views

1 answer

security - Mark data as sensitive in python

I need to store a user's password for a short period of time in memory. How can I do so yet not have ... 's not saved anywhere by a debugger? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

Categories

Just Browsing Browsing

Most popular tags