Questions tagged [security]
Topics relating to application security and attacks against software. Please don't use this tag alone, that results in ambiguity.
If your question is not about a specific programming problem, please consider instead asking it at Information Security SE: https://security.stackexchange.com
one of my colleagues has recently passed away and I am left with a task to retrieve data (especially pictures) from his phone - Samsung Galaxy A3 (2017).
Unfortunately, he set a numerical code to lock ...
I found this piece of code while viewing page source of a website.
ga('create', 'UA-XXXXXX-Y', 'domain-name', {'allowLinker': true});
"UA-XXXXXX-Y" is the google analytics tracking id. I ...
If I save API keys to Flutter_secure_storage, they must be exposed in the first place. How could they be pre-encrypted or saved to secure storage without exposing them initially?
I want to add a ...
asked 1 hour ago
RobbB
44633 silver badges1717 bronze badges
I have read dozens of articles and inspect lots of projects on Github about OAuth2 with authorization code grant type but still think that I have some mistakes about it.
I have the following scenario ...
Any suggestions on how to get a snapshot to only return certain documents in a collection?
db.collection('locations-data').get().then(snapshot => {
setupLocations(snapshot.docs);
...
Recent Pegasus snooping software got me thinking on how to create such a zero click app. Where should I start? I searched a lot on Google, but could not find any tutorial. I would like to know how can ...
asked 9 hours ago
ABN
39466 silver badges1616 bronze badges
I want to do an iot based project. it goes like this in my project I will have a android application that will detect his/her biometric data(finger print) and send it over to my wifi router and the ...
Currently google started analyzing apks before releasing and block new releases if your apk has some of the following vulnerabilities / bad practices which could end in a vulnerability. https://...
I have web server hosting a site with bindings to HTTP 80 and HTTPS 443.
Some user can't access the HTTPS site and get stuck in the credentials screen, This sames users can access the HTTP site ...
asked 12 hours ago
Joseleg
28366 silver badges3030 bronze badges
I've given temporary access to my Paypal to another person,
I changed password afterward.
Money is ok. Any other harm possible?
I mean, possibly some subscription to a payed site.
I think that's ...
I am building a website for a masseur with VueJS + Strapi, and clients can buy a gift voucher.
Right now I have the VueJS part set-up with a Paypal payment gateway.
I am wondering how to set-up the ...
My company would like to secure their outgoing files being written to external drives. I'm not sure the best way to achieve this on a Mac and hoping someones done this before. We do not use FileVault ...
asked 14 hours ago
Jason
66222 gold badges1010 silver badges3232 bronze badges
Apologies in advance if this is off topic or posted in the wrong place
Just started hosting my own media server (CentOS Stream 8) and I'm trying to learn how to secure it. How would you apply changes ...
I'm totally new if it comes to the NGINX thing. In my staging app I've got NGINX implementation of password protection (user must log in to access staging) but now I added a new endpoint that accepts ...
asked 16 hours ago
mr_muscle
1,37944 silver badges1717 bronze badges
In my Symfony 4.4 application i create the UserLocaleSubscriber which works fine but when user change your locale must logout ang login for change transaltion language. I try to use EqutableInterface ...
asked 17 hours ago
mardon
1,04111 gold badge1111 silver badges2525 bronze badges
I have a laptop1 with limited sharing. google drive is blocked. Mail is blocked. USB access is read only. No network sharing access either. Only think I could do was add a printers and print ...
asked yesterday
user418836
71533 gold badges77 silver badges1717 bronze badges
I have set up a secured Azure Function with AD authentication to be consume in the React app.
This involves sending the following GET request with the an API key as the parameter.
https://{domain_name}...
I want to make an Application where Users can write VBS function in a Textbox and retrive the Results. For this purpose I will use the Eval function in VBS. Now I want to Limit the Number of Functions ...
asked yesterday
B.Germ
8311 silver badge77 bronze badges
The hash is an SHA1 hash that i need to append 2020 to the end of each password:
The rule.txt file input is: "$2 $0 $2 $0"
The command:
hashcat -a 0 -m 100 hash.txt /opt/useful/SecLists/...
I am using Amazon Cognito User Pools as Identity Provider and access management in Web Application (react) and have no plans to use Social IDP or other external IDP.
Amazon Cognito User pools will ...
asked yesterday
Sun
1,86122 gold badges2020 silver badges2626 bronze badges
Can anyone tell me what is the mistake in following approach get api is working but not post api.
I have added the code snippet and screen shot for the code.
Can anyone tell me what is the mistake in ...
I know how to define .env variables in react, etc.. and then use them with process.env.someVar in the frontend (e.g to configure your database and so on..).
Now, my question is, when I put those ...
asked yesterday
ChillaBee
2,34655 gold badges2929 silver badges5757 bronze badges
There is a program that has its own scripting language that can call external .dll files (.NET) for extra functionality and algorithms.
The program connects back to its server for DRM on a regular ...
I need to allow my website users to use html to format the input posts they send to me. Off course such data needs validation and security checks before being shown online to other users. I think I ...
One function of my webpage has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
What should I do with this error, thanks?
Webpage code:
<...
how can i fix fail2ban please
this is my settings.
systemctl status fail2ban
â fail2ban.service - Fail2Ban Service
Loaded: loaded (/usr/lib/systemd/system/fail2ban.service; enabled; vendor preset: ...
Hi I've been trying to add password protection to my code, first time using PHP but tutorials I've found online doesn't work, here's the login part :
<?php
$conn = mysqli_connect('localhost', '...
I have a NODEJS+i18n website and I have my website in english (/en/).
My language parameter is in url so if you access :
mydomain.com/en/
You will get language from
./locales/en.json
But there are ...
I have allowed three types of extensions csv, txt and xlsx. Now if I modify the name of my file from 'something.html' to 'something.csv', my code is allowing this. How to apply validation for this?
Can anyone post an example of using accesschk with \pipe.
I'm running process with -s param and getting a lot of files listed, but only folders are needed.
Tried to run with *findstr /vi ".[a-z]$&...
asked Jul 16 at 16:43
Yuri
2,65444 gold badges2525 silver badges3737 bronze badges
I would like to access a the server sustainabilitychain.ch that runs an ethereum node using a geth client with secure websockets like so::
wscat -c wss://rpc.sustainabilitychain.ch:8546/ws/ but I get ...
I created an app that encrypts and decrypts a jar file. I would like that this application decrypt the file, and without having to write the file to disk, run the application. It is possible?
I ...
I want to use a method reference instead of lamda expression for creating new instance e.g in
return new org.springframework.security.core.userdetails.User(
username,
employee.getPassword(),
...
I'm developing a Windows Forms app (C++) in order to collect data (and other functionalities) from machines which are installed in customers' warehouses. The app displays the information that is been ...
I always wondered: Why does AWS provide both an ACCESS_KEY_ID and a AWS_SECRET_KEY ?
I could never see any usecase where we could use one key without the other, so why keeping them separate, as ...
asked Jul 15 at 21:21
aherve
2,41233 gold badges2222 silver badges3636 bronze badges
This question is more on the architecture side than programming. The example is as follows:
Let's say john smith is part of the procurement role, who can initiate sales orders however john can only ...
I want to restrict access for authorized users to the registration page.
But so far all that I have found on this topic is the ability to restrict access to some controller for unregistered users.
$...
So, I created a little note taking app which is secured by JWTs (The user logs in, receives a token which is then used to authenticate the user on every request to the api)
In order to allow access to ...
The keycloak-js client no longer supports the ability to add a keycloak clientSecret, this means for Front End JS Apps, you can only use a Public keycloak client.
Public keycloak clients do not allow ...
asked Jul 15 at 13:36
PrestonDocks
3,77988 gold badges3434 silver badges6060 bronze badges
im using frida , and would like to know how to change the (implementation) of sayHi method if the banana class is loaded dynamically
Class banan_dynamically_loaded
{
Public void sayHi()
{
...
React solution is showing one high vulnerability in npm-audit due to Denial of Service in react-svg-loader version 3.03 due to css-what.
What is the possbile solution of the issue?
Issue is as shown ...
Is it possible to implement passwordless register/signup without using auth0 or any other third party services, if it is possible then how can i implement it? Also is it safe and secure?
My tech stack ...
I have a web application where I want to obtain in a dynamic way the permissions and accesses of the role-based application, the API has its respective validations but I would like to know what are ...
asked Jul 15 at 5:08
ccordon
90477 silver badges1919 bronze badges
In Wikipedia I found out, that a Call Graph can obvisiously detect malicious code.
Could someone explain how this exactly works? In Wikipedia only the following is written:
"Call graphs can also ...
In my iOS app i'm using a web service that have some username and password for accessing the endpoints. For now I've kept the username and password of the web service inside my swift file and when i ...
I have a jwt filter. For the time being i have three end points:
/profile, /signup, signin. The jwt filter checks for a token in the request's header and if something is wrong (no token, expired, ...
I have read several threads here on stackoverflow and other articles through google. I tried everything suggested but CSRF things are not working for me when I hit an AJAX request via Jquery.
...
asked Jul 14 at 14:55
ITSagar
62166 silver badges1919 bronze badges
I am a beginner in cybersecurity. I have a huge firewall log file(14GB). I have to find out which are all the source IP have sent maximum bytes (accumulated) to (destination IP) and tabulate the top ...
I have this formula for encryption phase of a block cipher mode of operation using AES or DES encoder:
So the question is how can find decryption formula for this.
And what is the general workflow to ...
asked Jul 14 at 12:56
ARZ
2,40133 gold badges3131 silver badges5050 bronze badges
I have checked thoroughly for the answer for this question but haven't had much luck. It appears it isn't possible to get the file hash of any algorithm from OfficeActivity schema. Although, I am ...