Collaborate Disseminate
I am searching for the best way to merge two parts of software together, so it would be as hard as possible to separate them again through reverse engineering.
At the moment are both parts python, but open minded for anything else.
Continue reading Recommended way to merge a security feature with the rest of the software? [closed]
Good day, we deployed our app that has payment on it with a wallet system. We tried as much as possible to follow every security rule from server to code design. But yesterday we experienced a bridge with javascript logic that made us temp… Continue reading Busines logic bypass issue
Ofrece servicios de emisión de certificados para firma electrónica, es una obligación para pago de impuestos.
El usuario común no conoce la tecnología detrás, pero percibe la velocidad de respuesta.
Entonces, cómo elegir el tamaño adecuado… Continue reading Qué longitud de certificado es más seguro y fácil de manejar, 2048, 3072 ó 4096 para usuarios no expertos?
What is the official definition of code review or source code review?
Does it only mean that another developer reads the code after changes done by another developer?
or it can be done by an automated tool? like lgtm for example which is a… Continue reading What is code review? [closed]
As far as I know, JWT tokens are used for implementing ‘stateless server’. But as I try to apply Jwt to my website that uses sessions and cookies for authentication, I found that most people store refresh tokens in their db and compare the… Continue reading Why do I have to store a refresh token in db
I know this question has been asked several times, but I have never found a clear solution. How does one protect a web application against a CSRF attack?
I currently have two domains, frontend.com and backend.com. The backend uses flask-wt… Continue reading CSRF Protection Across Cross-Domain
I recently came across this article: https://blog.sonarsource.com/10-unknown-security-pitfalls-for-python, which describes security pitfalls in the python programming language that are less well known to developers.
Do you have examples of… Continue reading Lesser known security pitfalls in Python
Looking through descriptions of Spectre and Meltdown it seems that speculative execution – the basis for these attacks – occurs only with branched code. Therefore, it seems logical to conclude that having no if statements would preclude sp… Continue reading Does having no ‘if’ blocks in code mitigate side-channel attacks?
Suppose there is an application which contained preview functionality, that means whatever the code (if it is PHP, HTML Python) the user writes, the user can preview the code.
For ex:
<?php echo "hello this is test"?>
When… Continue reading How to secure a code preview function?
I am searching for API Authentication Security Guidelines, but I can not find what I am searching for and I am confused.
Actually, I want more details regarding the API Authentication.
Authentication using API Keys. API keys can’t authent… Continue reading API Authentication Security