Recent questions tagged security

0 votes

859 views

1 answer

security - Secure C# Assemblies from unauthorized Callers

Is there any way to secure your assembly down to the class/property & class/method level to prevent the using ... () and is not rejected See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - The data protection operation was unsuccessful on Azure using OWIN / Katana

I'm trying to implement password reset on an OWIN/Katana based ASP.NET MVC website running in Azure. It ... .UserManager`2.d__e9.MoveNext() See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

788 views

1 answer

security - Having a POST'able API and Django's CSRF Middleware

I have a Django webapp that has both a front-end, web-accessible component and an API that is accessed by ... how this would be handled better. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

684 views

1 answer

security - Why is Chrome reporting a secure / non secure warning when no other browsers aren't?

When I go to our web site through HTTPS mode, Chome is reporting an error saying that the page contains secure ... to give out the actual URL. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

859 views

1 answer

security - Exploiting JavaScript's eval() method

Many developers believe that JavaScript's eval() method should be avoided. This idea makes sense from a design ... than the Developer Tools? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

790 views

1 answer

security - Forming sanitary shell commands or system calls in Ruby

I'm building a daemon that will help me manage my server(s). Webmin works fine, as does just opening a ... actions? Thanks for the help arb See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

780 views

1 answer

security - Can a Shadow DOM secure my elements?

Goal: an encapculated widget Suppose I'm the developer of a friends widget for FakeBook?. I provide a ... the nesessary confinement property. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

752 views

1 answer

security - How does Windows decide whether to display the UAC prompt?

In my VB6 application I open other EXE files. My application runs without any UAC prompt, but I have an EXE which ... I am not clear about it. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

844 views

1 answer

security - How to prevent others from using my .Net assembly?

I have an assembly which should not be used by any application other than the designated executable. Please give me some instructions to do so. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - AES-256 encryption in PHP

I need a PHP function, AES256_encode($dataToEcrypt) to encrypt the $data into AES-256 and another one ... should this functions have? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

850 views

1 answer

security - Mixed content in Chrome and IE

In my HTTPS enabled site I have added an iframe that should show content from my other site, but it is ... 't changed any browser settings. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

826 views

1 answer

security - Simple example for why Same Origin Policy is needed

I've read about Same Origin Policy, but for a better understanding of the matter: could anyone please write a ... someone before SOP came about? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

952 views

1 answer

security - ASP.NET Session Mix-up using StateServer (SCARY!)

We store two objects in session. Somehow, one of the objects from another user got loaded into a different user's ... ? How can we resolve it? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

865 views

1 answer

security - Prevent decompiling android apk

I'm creating an app for android and ios, and i already know that it's theoretically possible to ... from spamming my webserver. Thankss See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

937 views

1 answer

security - Best way to limit (and record) login attempts

Obviously some sort of mechanism for limiting login attempts is a security requisite. While I like the concept of ... t know what's practical. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

776 views

1 answer

security - Difference between CSRF and X-CSRF-Token

What is the difference between use X-CSRF-Token in an HTTP header or token in the hidden field? When to use the ... / AJAX but I'm not sure. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

995 views

1 answer

security - How can ASP.NET or ASP.NET MVC be protected from related domain cookie attacks?

The related domain cookie attack (more info) allows machines in the same DNS domain to add additional cookies that ... from this type of attack. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

787 views

1 answer

security - How to demonstrate a CSRF attack

I'm doing an introduction to the web security to some other people in our enterprise, and I want to show some example ... /> </body> </html> See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

817 views

1 answer

security - Secure credential storage in python

The attack One possible threat model, in the context of credential storage, is an attacker which has the ... and using another language? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

746 views

1 answer

security - How to store passwords *correctly*?

An article that I stumbled upon here in SO provided links to other articles which in turn provided links to ... -about-secure-password-schemes/ See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

970 views

1 answer

security - How do you create the hash of a folder in C#?

I need to create the hash for a folder that contains some files. I've already done this task for each of the files, ... it's not a way I like) See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

817 views

1 answer

security - How does the RSA private key passphrase work under the hood?

RSA private keys may be assigned a "passphrase" which - as I understand it - is intended to provide ... layer of security implemented? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

843 views

1 answer

security - Rails - Separate Database per Subdomain

I am about to begin writing a Rails application that will allow clients to have a separate subdomain for their ... less likely to be exposed? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

990 views

1 answer

security - difference between gcc -D_FORTIFY_SOURCE=1 and -D_FORTIFY_SOURCE=2

Can someone point out the difference between gcc -D_FORTIFY_SOURCE=1 and -D_FORTIFY_SOURCE=2? I guess =2 is ... this is documented welcome! See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

768 views

1 answer

security - How to create a self signed certificate with the private key inside in a file in one simple step?

I'd like to generate a certificate for development purposes, but I don't want to install the certificate in ... password in one simple step? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

790 views

1 answer

security - How secure is .htaccess password protection?

Is password protecting a directory with .htaccess the best way to prevent its files from being seen by unauthorized ... strain on the server? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

882 views

1 answer

security - Hide/encrypt password in bash file to stop accidentally seeing it

Sorry if this has been asked before, I did check but couldn't find anything... Is there a function in ... seeing it over my shoulder. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

658 views

1 answer

security - What reasons are there NOT to use OpenID?

You see a fair bit (in the Geek community anyway) about OpenID. It seems like a good idea. I'm ... technical reasons NOT to use OpenID? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

Categories

Just Browsing Browsing

Most popular tags