Recent questions tagged security

0 votes

786 views

1 answer

security - A potentially dangerous Request.Path value was detected from the client (&)

I understand why this is happening but I need a work-around. I looked into some other questions on StackOverflow ... in them... Any solutions? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

799 views

1 answer

security - How can I securely wipe a confidential data in memory in java with guarantee it will not be 'optimized'?

String secret="foo"; WhatILookFor.securelyWipe(secret); And I need to know that it will not be removed by java optimizer. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

985 views

1 answer

security - How to get access to iOS Developer Certificate from code

Is there a way to know with which certificate app was signed? I want to protect app from resigning with ... way to protect from resigning? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

895 views

1 answer

security - Ways to insert javascript into URL?

Duplicate of: What common web exploits should I know about? This is a security question. What should I look for ... good posts on this stuff? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

810 views

1 answer

security - Breaking Data.Set integrity without GeneralizedNewtypeDeriving

The code below uses an unsafe GeneralizedNewtypeDeriving extension to break Data.Set by inserting different elements with ... to such attacks? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

833 views

1 answer

security - Ways to insert javascript into URL?

Duplicate of: What common web exploits should I know about? This is a security question. What should I look for ... good posts on this stuff? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

919 views

1 answer

security - Breaking Data.Set integrity without GeneralizedNewtypeDeriving

The code below uses an unsafe GeneralizedNewtypeDeriving extension to break Data.Set by inserting different elements with ... to such attacks? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

838 views

1 answer

security - Unable to connect to queue manager in WebSphere MQ 7.1

I've installed WebSphere MQ 7.1 on Linux platform, after which I installed WebSphere Message Broker 8.0.0.1. Now ... can I do so? Please advise. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

795 views

1 answer

security - Why running a service as Local System is bad on windows?

I am trying to find out the difference between difference service account types. I tumbled upon this question. The ... ? Thanks in advance. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

817 views

1 answer

security - PHP Source Encryption - Effectiveness and Disadvantages

I have some PHP source code that I'm hosting with hosting company XYZ. I'm using a PHP encryption software ... to anyone who gets the point See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

842 views

1 answer

security - How to store cookies containing sensitive data securely in PHP?

I would like for my users to have the capability of "Keep me logged in" when they log in to my website. At the ... now, so how would they do it? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

769 views

1 answer

security - Password complexity strategies - any evidence for them?

On more than one occasion I've been asked to implement rules for password selection for software I'm developing ... passwords are more secure? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

840 views

1 answer

security - Restrict HTTP Access to Elastic Beanstalk

Is it possible to restrict HTTP access to an Elastic Beanstalk application to only certain IP addresses? I"ve ... t within the security group? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - How to generate a Google ReCaptcha V2 secure token with PHP?

I'm trying to generate a secure token for ReCaptcha V2, as described here: https://developers.google.com/ ... obvious mistakes in my code? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

902 views

1 answer

security - Reproducing the blocked exe "unblock" option in file properties in windows 2003

When I download my program from my website to my windows 2003 machine, it has a block on it and you have ... so I can test this functionality? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

816 views

1 answer

security - Is there any reason not to serve https content on a page served over http?

I currently have image content being served on a domain that is only accessible over https. What is the ... the image content over http? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

781 views

1 answer

security - How can you prevent bogus high scores from appearing on a global high score list?

Suppose you are designing a PC game that keeps track of high scores. In addition to keeping local scores, ... unauthorized code from running? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

952 views

1 answer

security - Will ASP.Net MVC's AntiForgeryToken Method work with Load Balancers?

Using ASP.Net MVC v2.0, I am starting to research the use of the Html.AntiForgeryToken() method when ... experience with this? Thanks, Paul See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

827 views

1 answer

security - Is it possible to restrict the scope of a javascript function?

Suppose I have a variables in the global scope. Suppose I wish to define a function which I can guarantee will ... them on my own site. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.4k views

1 answer

security - Should Nonces Be Used During Log-In?

Wikipedia presents the following example of nonce-based authentication: Client requests nonce from server. Server ... passwords themselves? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - what is the vulnerability of having Jsessionid on first request only

Recently we removed jsessionid from URL did cookies based session management to prevent "session hijacking attack" But ... . Thanks for replies. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Sanitize file path in PHP without realpath()

Is there a way to safely sanitize path input, without using realpath()? Aim is to prevent malicious inputs like ../.. ... '/' . $filename, 'r'); See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

861 views

1 answer

security - How should I restrict load balanced Web traffic to my Elastic Beanstalk environments?

I'm trying to configure access to my EB environments, and would like to restrict HTTP access (through ... my Elastic Beanstalk environments? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Prevent direct access to mp3/wav files while allowing a flash player to access them with .htaccess (or PHP)

How do I prevent direct access/download to mp3/wav files while allowing a flash player to access them ... hackers/crackers/internet wizards. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.1k views

1 answer

security - is it bad to pass jwt token as part of url?

Hi currently i have an angular application and java backend. in my angular component html i have some image such ... . any help is appreciated. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

1.0k views

1 answer

security - Make PHPmailer a "more secure app" for Gmail

What security can we implement in PHPmailer to make it a more secure app for Gmail? https://support.google.com/ ... to make the app more secure. See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

962 views

1 answer

security - SSL Java java.io.IOException: Invalid keystore format

I am testing SSL in java with SSLServerSocket and other classes in the java.ssl package. When I run the following ... .printStackTrace(); } } } See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

0 votes

862 views

1 answer

security - Why is a refresh_token not provided by OAuth2 servers responding to a "client_credentials" grant?

I'm reading the OAuth2 spec: https://www.rfc-editor.org/rfc/rfc6749#section-4.4.2 Specially the ... revocation becomes much more difficult? See Question&Answers more detail:os...

asked Oct 24, 2021 in Technique[技术] by 深蓝 (71.8m points)

Categories

Just Browsing Browsing

Most popular tags