Recent questions tagged security

0 votes

847 views

1 answer

security - Recommended hash for passwords in ASP Classic

What is the slowest (therefore best) hash algorithm for passwords in ASP Classic? EDIT: For those unaware, when ... use on passwords. Thanks! See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

755 views

1 answer

security - Parse PHP code to extract function names?

I have to make a script in PHP that will scan other PHP files to check for dangerous function calls like eval, ... something that i have to do. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

768 views

1 answer

security - Generate secure random number uniformly over a range in Java

How do I generate a secure uniform random number within a range? The range could be between 0 to 100. (The upper ... provide the range 0..2^n. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

715 views

1 answer

security - How To Tell What Files IE Thinks Are "nonsecure"?

We have a CMS system whose web interface gets served over HTTPS. This works beautifully for Firefox, but ... this apparently spurious error? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

922 views

1 answer

security - Javascript XSS Prevention

There is a Node.js project that sanitizes data and there is an OWASP library for JavaScript that handles sanitization ... and we should be fine. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

969 views

1 answer

security - what is an alternative to password_hash() for (PHP 5 < 5.5.0)?

According to manual: password_hash this function can be used for (PHP 5 >= 5.5.0) After searching for an ... in older versions of PHP? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - Anti XSS and Classic ASP

I'm currently trying to secure my classic ASP application from XSS. I came across the AntiXSS from Microsoft ... about sanitizing the strings? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

715 views

1 answer

security - Android Keystore in kotlin

I'm working on an app that needs to be quite secure, so we want to use the Android Keystore to help make ... path here. Any help is appreciated! See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

723 views

1 answer

security - What hashing algorithm should I use for storing passwords?

I'm not really up to date with the most recent developments regarding hashing algorithms strengths; what is ... key stretching offer me? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

724 views

1 answer

security - So is it safe to validate form on client-side only?

Of course, I know that server-side validation is a MUST. I'm using jQuery to validate form inputs and using jquery ... , hope you don't mind. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

847 views

1 answer

security - TrustZone versus Hypervisor

I am just reading this document from ARM on TrustZone and some things are unclear to me. The fact that a ... more secure than a Hypervisor?? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

727 views

1 answer

security - Securly download file inside browser with correct filename

I am doing some work on a web site that has a secure area which is available to users only after they ... the correct default filename to save? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

746 views

1 answer

security - placing php script outside website root

how would i a)include a php script that is outside the web root (would it really be just a simple ../file ... is a corner stone to php security. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

703 views

1 answer

security - Restrictions on what an unsigned Java applet can do?

I'm trying to compile a complete list of all restrictions placed on unsigned Java applets (defined as things a ... is missing from the list. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

654 views

1 answer

security - Performance-oriented way to protect files on PHP level?

I am looking for some input on something I have been thinking about for a long time. It is a very ... to run on most shared environments. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

822 views

1 answer

security - Irretrievably destroying data in Java

Is there anyway in Java to delete data (e.g., a variable value, object) and be sure it can't be ... to other languages are also acceptable. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

678 views

1 answer

security - In Java, how do I extract a password from a HttpServletRequest header without generating a String object?

A common Java security guideline for handling sensitive data (== passwords) recommends never using a String ... security problem here. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

665 views

1 answer

security - .NET: Strong naming vs. Authenticode

Having read about strong names in .NET here, for example, I have the following question: We have an ... Authenticode signing is already used? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

766 views

1 answer

security - Is checking the referrer enough to protect against a CSRF attack?

Is checking the referrer enough to protect against a cross site request forgery attack? I know the referrer can be ... , but would this work? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.3k views

1 answer

security - Decode/Read a CSR (Certificate Signing Request) Using Java or BouncyCastle

I am generating a CSR (certificate signing request) using code without an issue with the appropriate information. ... or ideas are appreciated. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

738 views

1 answer

security - Protect API URL access via hash in Android app

In my Android application, the user can submit content to the database which can then be seen by all the other ... you very much in advance! See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

974 views

1 answer

security - How JSF 2.0 prevents CSRF

I am researching stuff I hear regularly that when doing a webapp in JSF 2.0 you are already protected from ... value prevent CSRF? Thanks! See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

737 views

1 answer

security - Is there some sort of secure local storage on Windows?

I was thinking of making a small tool. It is not important what the tool will do. The important thing, is ... C++) solutions to this problem. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.2k views

1 answer

security - What is the non-standard HTTP verb "DEBUG" used for in ASP.NET/IIS?

I am reading a report from a "web application security" company, whom have been scanning a few websites ... /references will be appreciated. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

791 views

1 answer

security - HttpPostedFile.FileName - Different from IE

When I upload a file to a site using the ASP:File control the FileName property is different in IE and Firefox ... the reason for this? Thanks. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

721 views

1 answer

security - Android permissions: How can I learn which are dangerous vs normal?

Android defines a set of permissions that third-party apps can request. Permissions are categorized by sensitivity; most ... a complete list). See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

883 views

1 answer

security - Can people write a .php file to my chmod 777 folder

Is it possible for hackers ( or other ) to upload/write a php file to a folder on my site that has chmod ... .. , just asking it hypotheticaly ) See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

843 views

1 answer

security - Unlock Windows workstation programmatically

I would like to write a small application that unlocks the workstation. To put the specs of what I need ... to avoid the integration details. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

Categories

Just Browsing Browsing

Most popular tags