Collaborate Disseminate
In this question I asked about how to handle situations when SHA-256 hashes are not available for a file downloaded from the internet that contains executable code. Another community member insightfully asked if a hash is really needed to… Continue reading If a file is digitally signed, is posting a hash very useful for security purposes?
When sending a request (POST, PUT, etc). I have a security requirement to ensure that the data in the payload has not been tampered with.
In other words I need to know with certainty that the data entered was entered by the user and has no… Continue reading Tactics to ensure payload has not been modified
Let’s say an online system uses mostly endpoint storage for storing all kinds of private or sensitive data for each of the client/user, this way the server at the least has some post-data-leakage security.
What I am concerned about are the… Continue reading How to prevent endpoint data from being modified and endpoint client application from being modified
NIST stipulates that you shouldn’t pass trusted or untrusted data directly into an event handler, interpreter or compiler.
You should store the value in a separate field and let your handler pull the value out.
Providing validation is perf… Continue reading Validating input in-line or from a seperate field?
I’m trying to implement the putty file format in one of my dart packages. Implementing the actual key loading was ok, but I’m struggeling with the mac validation. I’m not shure what I’m doing wrong here
The putty code is quite clear about … Continue reading Need a test vector for the putty ssh-2 file mac validation
Generalized problem
say there are 2 companies/parties A and B (there may be more) and there is an event E which is recorded by both A and B.
Let’s say the occurrences of event E according to A is ‘E by A’ and according to B is ‘E by B’.
B … Continue reading How to avoid data discrepancy between multiple parties with dependent financial interests?
I’m designing an app (for PC), that is intended to run on users’ machines and generate a file with some data. The user will then upload the file to the server, and I want to verify that this file has been produced by my app and hasn’t been… Continue reading Verify that data submitted by user was produced by my app
I have finally found a HTML validator running on the command line, locally, which actually works and doesn’t want me to pay them money. It appears to work.
It’s this one, apparently made by W3: https://validator.github.io/validator/
Each t… Continue reading The v.Nu HTML validator program does not send anything over the network, does it? [closed]
We have a requirement for Data loading function to Aircraft. There is Avionics standard termed as ARINC 615A and ARINC 665. 615A specifies high speed Ethernet based data load operation; where POINT-TO-POINT Ethernet connection between Data… Continue reading Secured data upload to Aircraft over ARINC 615A
Many companies have some BINs where you can enter a fake credit card and you get a premium account (the Credit card is based on a BIN that just trick or bypass the plateform),
I want to know how this works ?
For example : bin spotify/ne… Continue reading How does BINs vulnerabilities work?