Tagged Questions

This tag is used for topics relating to application security and attacks against software. If your question is not about a specific programming problem, please consider asking it at security.stackexchange.com instead.

learn more… | top users | synonyms (3)

0
votes
0answers
25 views

Secure way to store sensitive information in Android

Does anyone knows what is the most secure way to store sensitive information in application? Because using internal storage and shared preferences is vulnerable if person who want that information ...
1
vote
0answers
4 views

WSO2 ESB Get Authentification Name

I'm using a ESB-Proxy with https Authentification. If I send a message to this proxy with curl i get this log: [2013-06-14 13:56:05,138] INFO - LogMediator To: /services/Username, From: 127.0.0.1, ...
1
vote
2answers
43 views

Security against sharing my app

I have a simple question as to how can we prevent the user to share an apk file from his/her device to others.Like if i put a paid application in the market and a user downloads it . If its ...
0
votes
1answer
18 views

Is it possible to determine if another process has read your memory?

It isn't so complicated to read another process's memory, and I'm skeptical there is any reliable way of protecting your process's memory from being read by memory inspection tools or developers with ...
0
votes
1answer
10 views

Wordpress compilation of a “complete” .htaccess file

I was cleaning up some stuff and making some files generic so I can take them of the shelve when I need them. But I have a .htaccess questions. Question #1 At the start of the file I have: # BEGIN ...
1
vote
0answers
31 views

Sensitive Client Details

I have a security related question about storing some client information - specifically their database login credentials. My app works based on the client and so the database details need to be set ...
0
votes
1answer
17 views

Should I go with MongoDB auth support or simply bolt on a more application-specific approach?

New to Node, new to Mongo. Etc Etc... I'm itching to get started on a project with these two technologies but one of the concerns is security. It seems more terrifying with Node because the server ...
0
votes
0answers
10 views

Secure netzke rails components

I have a components, cruid for my app, with Netzke class Services < Netzke::Basepack::Grid and view where i run them <%= netzke services %> i secured a controller for this view with ...
0
votes
0answers
18 views

Start/Stop Window Service from ASP.NET page

Is there a way to start / stop a windows service of a server in a different network (not \\<server name>) from an asp.net page? I tried using ServiceController but it's only work if it's in ...
-1
votes
0answers
21 views

Android HTML5 application and data security [closed]

Androids apps can't communicate directly due to the user-rights. The question is: if I write a android HTML application, will the data (offline-storage, db) go into the memory of the application, or ...
0
votes
1answer
12 views

Load service from APK with android:exported=false

I'm tying to load a Service from an APK, which is located at /system/app/LALA. The thing is, i'm getting the error below, because in the APP AndroidManifest, the Services has android:exported = false. ...
0
votes
3answers
19 views

Secure user-provided filename

Part of my app requires the client to request files. Now, a well-behaved client will only request files that are safe to give, but I don't want a user to go about supplying ...
-3
votes
1answer
23 views

Virus signature extraction form malware

I'm writing a simple antivirus in C. I've got some malware samples and I want to extract signatures form them. Any idea how to extract them?
0
votes
0answers
13 views

javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown

I want to establish a secure channel between a client and server using Java SSL session. I followed the following link http://www.herongyang.com/JDK/ssl_https.html to establish the connection after I ...
0
votes
0answers
11 views

Objective-C: NSStrings dump, restricting debuggers & trace checking

I've been developing for Objective-C for some time now and one thing that really scares me is how easy it is to mess around with a compiled App and get information out using standard tools like the ...

1 2 3 4 5 … 1409
15 30 50 per page