Collaborate Disseminate
I’m building a webapp where I want to encrypt user data. I’ve done A LOT of research about this.
The main issue is that I want only users to be able to access their data. After reading countless articles and forums, I’ve come to the conclu… Continue reading Where to store user private keys in a webapp? [duplicate]
I’ve posted this over at Stack Overflow but I think it’s best suited here:
I’m making a web app where users will upload sensitive data (private finances records), so I want to encrypt one column in one table that holds the value.
If I unde… Continue reading How to implement public key encryption for a webapp?
I have an issue where I am using SAML (Sustainsys.Saml2 library) and Username + Password through Auth0. Both these authentication methods are currently not working right because after the user is sent to the SAML/Auth0 authorization pages,… Continue reading User being redirected to Private IP Address instead of staying on the domain/subdomain [closed]
One of the companies we’re working with is sharing their user’s database through a public Sharepoint link. While convenient, I’m worried that anyone on the internet can simply access the link (even though they shouldn’t know about it).
Am … Continue reading Is it safe to share sensitive data in a Sharepoint through a public link with third parties?
I have a domain that properly redirects as expected to protocol https://newhavendisplay.com, except for https://www.newhavendisplay.com, which triggers the "This connection is not private" security warning upon visiting. However,… Continue reading URL redirects properly to all URL protocols except https://www
We own a home in Canada and we own a home in the US. Both homes are connected to high-speed internet.
I would like to set up a VPN (or other) between the homes such that:
From the US home, we can connect to the Canada home for internet tr… Continue reading Route Traffic Through Opposite Home [closed]
If I set up 2FA on my Microsoft account (for example) and I create multiple methods such as SMS, email, and an authenticator app, will I be more vulnerable than if I only set up the authenticator app?
I was wondering this because if my ema… Continue reading Is multiple methods of Two-Factor authentication less secure than a single method of 2FA?
I’m receiving long hexadecimal requests on my webserver, such as: /f588069cda088c9a0fc25509fc4ed8418fe47a447683243395e649753d2d4b87cce9c4b3cc16cb5f44068e6da475dbffa9689b9ad237b5c941bb9ad2aa6759f7e4e39ba3012202cdce328f7eccc7efa48642eec1870e… Continue reading What are these long hexadecimal HTTP requests?
I administer multiple websites operating in very different areas and they all consistently and regularly get submitted spam entries like below:
Bkihvpv
Ykuufwk
some@email_address.com
:
or
Aqmkylu
Bupsrmm
another@email_address.com
:
O… Continue reading What are 7-character giberrish words regularly submitted to website forms?
I would like to bid for contracts where ISO27001 certification is a requirement. I build cloud based bespoke software.
Although I take security extremely seriously – I don’t have any formal processes at present. I just try and follow best … Continue reading Can a business with a single employee gain ISO27001 certification?