Recent questions tagged security

0 votes

930 views

1 answer

security - Securing an existing API with our own solution

I have to design a mobile application that interacts with a provided API to exchange data and info, and I've ... roadmap, not how to implement. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

909 views

1 answer

security - How to use Firebase rules to only give permission to certain leaf nodes

My basic question is how do you setup Firebase rules to only allow access certain leaf nodes from their ... users accomplishing this? Thanks. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

952 views

1 answer

security - How to prevent override the setting using .htaccess or custom php.ini

How to make sure the user cannot override the setting using .htaccess or custom php.ini any tips for configuration i should use See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - PHP protection of GET parameters

OK consider this url: example.com/single.php?id=21424 It's pretty obvious to you and i that the PHP is ... to my application/mysql DB? Thanks See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

865 views

1 answer

security - If MD5 is broken, what is a better solution?

After reading the topic "Is MD5 really that bad", I was thinking about a better solution for generating hashes. ... are they broken as well? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

936 views

1 answer

security - Develop programs for Arm trust zone

How can I develop applications that use Arm's trust zone? Specifically, I want to develop a program that ... greatly appreciated. Thank you! See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Converting md5 password hashes to PHP 5.5 password_hash()

The new password_hash API in PHP 5.5 is nice and I'd like to start using it everywhere. Given an older project ... ) API to "double-hash" it? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

919 views

1 answer

security - How is integer overflow exploitable?

Does anyone have a detailed explanation on how integers can be exploited? I have been reading a lot about the ... than its defined memory.... See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

948 views

1 answer

security - Is there a definitive anti-XSS library for PHP?

I already know how XSS works, but finding out all the many different ways to inject malicious input is not ... share little libraries! Use MIT) See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - Generate key pair on iphone and print to log as NSString

Following Apple example code in: http://developer.apple.com/library/ios/#documentation/Security/Conceptual/CertKeyTrustProgGuide/ ... // 14 } See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

915 views

1 answer

security - How can I use PHP's various XML libraries to get DOM-like functionality and avoid DoS vulnerabilities, like Billion Laughs or Quadratic Blowup?

I'm writing a web application that has an XML API in PHP, and I'm worried about three specific vulnerabilities ... something I'm still missing? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - With contextIsolation = true, is it possible to use ipcRenderer?

Here's my setup: Step 1. Create a preload.js file with the code: window.ipcRenderer = require(' ... use ipcRenderer when contextIsolation=true? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - Rails: How to implement protect_from_forgery in Rails API mode

I have a Rails 5 API app (ApplicationController < ActionController::API). The need came up to add a simple GUI ... cookies of the working app. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.5k views

1 answer

security - Angular 2: sanitizing HTML stripped some content with div id - this is bug or feature?

I use <div [innerHTML]="body"></div> to pass unescaped HTML to my template, and when I pass to body div ... id in div? Could this bug? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - How to secure string in Android Application?

How to secure string in Android Application ? Options: ProGuard: It does not secure string? Does proguard work to ... string in Android SDK/NDK. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Can javascript simulate a button click?

I am designing a site where it would be problematic if macros were allowed to run freely. I have thought of a ... you for any input! ~Andrew See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

976 views

1 answer

security - How to make a machine trust a self-signed Java application

I'm deploying an application using JAWS, and it worked until late 2013 when I got a warning, and then this ... and let the Java application run? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

946 views

1 answer

security - MongoDB database encryption

I'm looking to design a webapp which stores private information securely using MongoDB. I would like to encrypt ... to encrypt my database? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

941 views

1 answer

security - Verify Android apk has not been repackaged?

Looking to improved the security of my Android app to flag if the .apk has been extracted, modified, ... apps and other/non marketplaces. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

838 views

1 answer

security - Does .pem file contain both private and public keys?

I am wondering if PEM-files contain both private and public keys? What does "PEM" stand for? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

913 views

1 answer

security - How are buffer overflows used to exploit computers?

How are buffer overflows used to exploit computers? How is one able to execute arbitrary code simply by ... target processors assembly language? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

970 views

1 answer

security - Developing a secure PHP login and authentication strategy

I'm developing a login and authentication system for a new PHP site and have been reading up on the various ... missing? Many thanks in advance. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

874 views

1 answer

security - How do i secure a web server's image upload directory?

For my web application, people can upload images from a web form to my web server. What should I set the CHMOD ... be? : chmod 744 directory/ See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Securely creating and destroying login sessions in PHP

This is my code to control authentication on a website. I'm not sure if my logic is correct. If the username and ... know what to look out for? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

859 views

1 answer

security - Using HMAC-SHA1 for API authentication - how to store the client password securely?

In a RESTful API that uses S3-style authentication, the API client signs the request with his secret key using ... practices that you can share? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

852 views

1 answer

security - Characters to avoid in automatically generated passwords

I need to generate some passwords, I want to avoid characters that can be confused for each other. Is there a ... algorithm for that? Thanks :) See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

803 views

1 answer

security - Is WebRTC traffic over TURN end-to-end encrypted?

WebRTC traffic is encrypted using DTLS - ok. But what about traffic that's relayed over a TURN server? I'm ... find a definite answer to this. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

950 views

1 answer

security - MongoDB: is it safe to use document's ID "in public"?

I really like MongoDB's automatically generated ids. They are really useful. However, is it save to use them ... is it not secure? Thanks See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

Categories

Just Browsing Browsing

Most popular tags