Collaborate Disseminate
I’m trying to figure out what else I should (not) do to reduce the possibility of my web app getting hacked. And like most development efforts, while it would be great to have a security expert on the team, we don’t have it.
My app is writ… Continue reading Will these actions better secure my web app
This is for an app service + database I am pushing up to Azure. I am using Key Vault + Managed Identity for the secrets. I have several connection strings in the secrets to ApplicationInsights, etc.
These connection strings have a key, pas… Continue reading What’s the tradeoff of storing a connection string vs the password as a secret?
I am writing a web app and I want to set up a system where, when a user changes their email, it gives them a link to have the change revert back. The purpose of this is for when a hacker changes an account email. In this case the user can’… Continue reading Enabling a user to revert a hacked change in their email
I am writing an application to manage volunteers for political campaigns. This is a lot more complicated than any past multi-tenant app I’ve written and so am asking for guidance here on how to approach this.
Note: I’m not asking for opini… Continue reading Using claims to handle programmatic logic determining what is displayed
For a web app that will get heavily attacked, I figure one very useful tool will be audit tracking of what occurred for both getting a better picture of attacks and , if the worst happens, learning exactly what went down to both mitigate t… Continue reading Audit tracking for web users [closed]
I’ve read a ton of articles that we need to write applications that are secure. That it’s critical to write defensively from the start and implement all best practice secure suggestions.
What I can’t find is the list of suggestions. I know… Continue reading What are the best practices to create a secure ASP.NET app?
I know there’s no 100% in security. But for business users (yes that is a range of use cases), if they are on Windows 10, they have My Documents pointing to a OneDrive (or GDrive, DropBox, Box, etc.) share, and that share has versioning tu… Continue reading Does using OneDrive, etc. with versioning for documents provide for fast recovery from Ransomware?
We have a licensing system where our software, a commercial product we sell to people, contacts our licensing server when starting to get an OK to run.
It contacts our licensing URL and passes up an XML file signed with our … Continue reading Allow setting both server URL and public key – security hole?
I have a user giving me a password that I need to save for automation they want to have me run. I can’t use their existing credentials as it’s not something Windows talks to.
And I don’t want to store their password in plain… Continue reading Programatically encrypt data on Windows using login
We have a commercial library that uses a public key to sign an XML request that goes up to our license server. The response that comes back is XML that has been signed with our private key, and the library then uses the publi… Continue reading How do we change the public key in our commercial app?