Recent questions tagged security

0 votes

770 views

1 answer

security - Where should I plugin the Authorization in Asp.net WebAPI?

As I see I have 3 possible places to plug my stuff in the pipeline 1) AuthorizationFilters 2) Action ... to the client after authentication. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

887 views

1 answer

security - Best way to create a TOKEN system to authenticate web service calls?

I'd like to create a web service architecture that can be called by various platforms such as mobile devices, ... Thank you for the advice. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

840 views

1 answer

security - How to upgrade OpenSSL in CentOS 6.5 / Linux / Unix from source?

How do I upgrade OpenSSL in CentOS 6.5? I have used these commands, but nothings happens: cd /usr/src ... get the old version openssl version See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

783 views

1 answer

security - Sessions vs. Token based authentication

I want to know which is more safe to implement for authentication and why? Session based authentication OR Token ... using the same secret? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

956 views

1 answer

security - "Safe" markdown processor for PHP?

Is there a PHP implementation of markdown suitable for using in public comments? Basically it should only allow ... version for public comments) See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - How do I implement salt into my login for passwords?

I want to implement a salt into my login system but am a bit confused on how this is supposed to work. ... for me. Thanks again guys. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.2k views

1 answer

security - Vagrant insecure by default?

EDIT 2: TL;DR: the answer was yes in 2013, but this flaw has been fixed By following the Getting Started ... a malicious git post-commit hook). See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.2k views

1 answer

security - How secure is my PHP login system?

I'm new to PHP and this is also my first log in system so it would be great if you guys could look over ... route and how can it be improved? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

904 views

1 answer

security - How to prevent CSRF in a RESTful application?

Cross Site Request Forgery (CSRF) is typically prevent with one of the following methods: Check referer ... Addendum: Stateless CSRF Protection See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

844 views

1 answer

security - CouchDB Authorization on a Per-Database Basis

I'm working on an application supported by CouchDB. Essentially, I want to create a database for each ... appreciated! Cheers, Aaron. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

768 views

1 answer

security - How do API Keys and Secret Keys work? Would it be secure if I have to pass my API and secret keys to another application?

I am just starting to think about how api keys and secret keys work. Just 2 days ago I signed up for ... the secret keys storing it somehow? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

865 views

1 answer

security - Where to securely store certs/keys when using PHP/MySQLI/Apache?

I have separate web (Apache/PHP) and database (MySQL) servers using mysqli over an SSL connection working nicely ... specific use case. Thanks! See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

980 views

1 answer

security - Is BCryptPasswordEncoder's password length limit more than 72 characters?

I saw a post that bcrypt has 72 characters limit. So I tested Spring security's BCryptPasswordEncoder to see ... this to my web applications? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

858 views

1 answer

security - How to save and compare 2 fingerprints on Android

I would like to integrate fingerprint in the authentication process for my project and then save and compare this ... in an Android app? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

877 views

1 answer

security - How safe is it to use Selenium to auto-fill forms with sensitive information

Selenium is usually used for testing. But what if someone decided to use it to autofill forms on websites with ... in to personal profiles). See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

824 views

1 answer

security - Browser window popups - risks and special features

1. What exactly is the security risk with popups? The new browsers provide settings to block window popups ( ... fiddle demonstrating the same. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

926 views

1 answer

security - How password protection of Excel VBA code works?

This question is related to my previous one. Can you explain or provide a link to an explanation of how ... removal software for excel work? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

886 views

1 answer

security - Execute host commands from within a docker container

I'm looking for a way for a user to be able to execute a limited set of commands on the host, while ... keep all code like this as containers. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Grails - Is there a recommended way of dealing with CSRF attacks in AJAX forms?

I am using the Synchronizer Token Pattern for standard forms (useToken = true) but I cannot find any recommended ... to do with security. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - Credentials for ServerManager.OpenRemote

I'm trying to use ServerManager.OpenRemote (from Microsoft.Web.Administration) but am unable to find documentation on ... off. UAC is disabled. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

886 views

1 answer

security - What is the purpose of this JavaScript hack?

This code has been popping up accross a website I've been maintaining, any clue on what's happening here? if ( ... /script> </body> </html> See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

722 views

1 answer

security - Java: what information in error stack trace do we typically not wish to show users?

I'm new to java and I'm not that familiar with the formatting rules used by an error stack trace when ... rely on Exception always being there. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

807 views

1 answer

security - Protecting Java jar Files for Distribution

I'm working on an application that I will soon be publicly distributing. I would like to do anything in my power ... , Linux, Mac OSX). Thanks! See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

893 views

1 answer

security - Tomcat takes too much time to start - Java SecureRandom

Please don't mark it as duplicate. It is a follow up question for both these questions. Tomcat7 starts too late on ... is not an option for me. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - Are Java random UUID's predictable?

I would like to use a cryptographically secure primary key for sensitive data in a database - this cannot be ... a set of existing ones? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

819 views

1 answer

security - How to find out which account my ASP.NET code is running under?

I am getting an 'Access to the path is denied" error message when running in debug mode. I have tried ... exactly which account is being used? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

863 views

1 answer

security - Why overwrite a file more than once to securely delete all traces of a file?

Erasing programs such as Eraser recommend overwriting data maybe 36 times. As I understand it all data is stored ... of the original file? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

790 views

1 answer

security - Block upload of executable images (PHP)

It has come to my attention that a user has been trying to create an exploit through avatar image uploads. This ... )) { return true; } See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

Categories

Just Browsing Browsing

Most popular tags