Collaborate Disseminate
I have a number of external USB HDDs (nearly all of them 2.5") in my fireproof safe. They are between 7 and 9 years old. (For a period of two years, I bought one almost every month until I had enough for me to feel as if it was not lo… Continue reading How long can I reasonably expect my external USB HDDs and memory sticks to last?
I have been reading a lot about where you should store your JWT tokens for web applications. Local storage and cookies has its pros and cons.
So I thought that maybe it could be a good idea to instead create 4 tokens? 2 access tokens and 2… Continue reading Security idea for storing JWT tokens, is this a good idea?
I have a website which is using flash media server to communicate. Since my users often register new usernames, I’m using flash local storage to "identify" all usernames as a single computer regardless of browser they open.
Since… Continue reading How to share the same data between multiple browsers for same web site? [closed]
Hello I am currently working in an e-commerce website and I am working in Authentication I read a lot of articles about how to secure the API and this the recap of what I did
when I log in or register I create 3 tokens (access-token, refr… Continue reading Confused about Authentication with JWT
I have a python bot that runs in Windows 10 and accesses Keepass with a password.
I’m wondering what would be the correct way to store and access this Keepass password.
Currently, the Keepass password is encrypted and decrypted with a key…. Continue reading How to best store the password for Keepass for a python bot that runs in Windows?
I read a comment on here that goes something like "trying to hide user authentication from an XSS attack is like reinforcing your fridge against a nuclear bomb; at that point, you’ve got much bigger problems to worry about, and nothin… Continue reading Should you even bother trying to hide authentication from XSS?
I was reading this question and still have doubts about my use case.
I know it’s unsafe to store a JWT in local/session storage due to XSS attacks. But what if it’s for a JWT that only lasts 1 min when they first login? The client would th… Continue reading Is storing a short lived JWT on initial login in LocalStorage safe?
I’m working on a legacy application that issues JWTs with a short expiry time.
They do not have refresh token functionality implemented.
So obviously while using refresh tokens would be the right solution, for the sake of argument assume t… Continue reading What’s wrong with storing a username and password as a cookie?
I’m wondering if using Javascript closures is a useful technique to limit exposing data to XSS? I realize it wouldn’t prevent an attack, but would it reliably make an attack more difficult to execute, or would it only make my code more irr… Continue reading Are Javascript closures a useful technique to limit exposing data to XSS?
I’m new to the ionic framework and have some basics of it and currently I’m developing a private app for my family only that store some sensitive information in the localstorage. I used some crypto libraries to encrypt the whole data to pr… Continue reading Ionic local storage store sensitive data for private app