Welcome To Ask or Share your Answers For Others

Recent questions tagged security

0 votes

722 views

1 answer

security - Signed session cookies. A good idea?

In an effort to increase performance, I was thinking of trying to eliminate a plain 'session cookie', but encrypt all ... JWT is now a thing. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

723 views

1 answer

security - How can a virus exist in an image?

I have recently watched this video of a Finnish internet security expert. Somewhere around eleventh minute, he talks ... Thank you very much. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

645 views

1 answer

security - Access Control in Domain Driven Design

I read about DDD and Access Control, and I found some contradiction between the following two opinions: "security ... should we implement it? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

850 views

1 answer

security - Session management : How to generate Authentication token for REST service ? (Jersey)

I am trying to implement session management in my REST service. I came to know these guidelines while surfing : ... access an OAuth service ?? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

697 views

1 answer

security - Single Sign-On in Microservice Architecture

I'm trying to design a green-field project that will have several services (serving data) and web-applications ... would also be acceptable. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

673 views

1 answer

security - Writing Secure C and Secure C Idioms

"The average man does not want to be free. He simply wants to be safe." - H. L. Menken I am ... to prove safety by Yannick Moy libsafe See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

691 views

1 answer

security - PHP Forgot Password Function

I have a small community website and I need to implement some sort of forgotten password function. I currently ... have a password reset page? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

781 views

1 answer

security - What are best practices for activation/registration/password-reset links in emails with nonce

Applications send out emails to verify user accounts or reset a password. I believe the following is the way it should ... when do you use GET? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

711 views

1 answer

security - Best practices around generating OAuth tokens?

I realize that the OAuth spec doesn't specify anything about the origin of the ConsumerKey, ConsumerSecret, ... 10 Entropy of Secrets. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

696 views

1 answer

security - Why is it not advisable to have the database and web server on the same machine?

Listening to Scott Hanselman's interview with the Stack Overflow team (part 1 and 2), he was adamant that the ... performance isn't an issue? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

629 views

1 answer

security - Modelling a permissions system

How would you model a system that handles permissions for carrying out certain actions inside an application? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

688 views

1 answer

security - Passing untampered data from Flash app to server?

I'm looking for secure ways to pass data between a client running Flash and a server. The data in question ... being sent back to the server. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

702 views

1 answer

security - How to write to a file in applets in java?

Since Applets run in sandbox mode in browsers, I am using AccessController.doPrivileged to write to a file. It writes to the ... TRUE; } }); } } See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

991 views

1 answer

security - Client side password hash versus plain text

I'm putting together an android client (and possibly in the future iOS, web portal, etc) and php mysql ... algorithm) every outgoing password? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - Can I setup an IP filter for a WCF Service?

I'm modifying my WCF API to include a new service that should be exposed to internal IP addresses only. All of ... WCF. Am I missing something? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

855 views

1 answer

security - How to securely store database connection details

In an application that needs to open a database connection, the username/password details must be sent to the ... and using, this data? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

825 views

1 answer

security - Is there a way to secure an Azure Function that will only be called from a specific Azure Logic App?

I understand that Azure Functions are potentially open endpoints on the internet if I read Microsoft's documentation correctly and ... }; } } } See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

670 views

1 answer

security - MySQL Injection - Use SELECT query to UPDATE/DELETE

I've got one easy question: say there is a site with a query like: SELECT id, name, message FROM messages WHERE ... , so, is it even possible? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

741 views

1 answer

security - Cross-browser techniques for disabling password caching

Saving and auto-filing of username/password is a feature of most modern browsers. And the user can generally ... without any disable feature? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.2k views

1 answer

security - Custom certificate validation in WCF service

I want to check client certificates in my WCF service. My goal is to allow only clients with certificates ... with any valid certificate. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

779 views

1 answer

security - Python: can I safely unpickle untrusted data?

The pickle module documentation says right at the beginning: Warning: The pickle module is not intended to be ... dict, set and frozenset See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

779 views

1 answer

security - How to secure my java web application?

I have a web application in which when users login they reach the mainjsp.jsp page. In this page there are few ... if they haven't logged in. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

990 views

1 answer

security - Sharing login-system between classic ASP and ASP.Net

A client uses classic ASP to log in to their web based backoffice. I have written a new ASP.Net ... most likely overlooking something simple. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

910 views

1 answer

security - What TargetName to use when calling InitializeSecurityContext (Negotiate)?

The Question When calling InitializeSecurityContext, what value do i pass to the TargetName parameter? Revised Background I'm ... a random username and password: i'm going t...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

750 views

1 answer

security - SECURITY_ERR: DOM Exception 18 on using getImageData in a Chrome Extension

I'm writing my first Chrome extension. I'm trying to use jQuery and the jQuery Image Desaturate plugin to ... and get my code working? See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

841 views

1 answer

security - Java http clients and POODLE

Regarding the POODLE vulnerability, if I understand it correctly, it requires a client that automatically downgrades TLS ... for Java clients. See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

959 views

1 answer

security - Where to store database login credentials for a PHP application

We have a development server and a live server with different database connection details (username, password, etc). ... s a bit risky... See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

753 views

1 answer

security - Which PHP mcrypt cipher is safest?

So guys, there's plenty of different ciphers available - but which one is the safest to use nowadays? List: ... net/manual/en/mcrypt.ciphers.php See Question&Answers more detail:os...

asked Oct 17, 2021 in Technique[技术] by 深蓝 (71.8m points)

Page:

« prev
1
...
4
5
6
7
8
9
10
11
12
13
14
...
24
next »

...