Collaborate Disseminate
A worldbuilding technical question!
I am an extremely evil power-mongering country government. There is a company S under my jurisdiction, physically located completely inside the borders. This company provides services worldwide, includin… Continue reading Is it possible to securely use a remote service in a completely hostile network environment
Does the browser pass the name of the camera being used to the website which is accessing our camera like when we use obs virtual cam so is the website able to detect that a virtual camera is being used?
Continue reading Does the browser pass the name of the camera being used to the website [closed]
We have recently engaged an external party to undertake a pen test on a recently implemented API. The API is considered internal although it itself is on AWS and is consumed from on-prem resources, the connectivity between the 2 is using m… Continue reading is mTLS authentication alone considered secure for authentication
I am concerned with digital file loss in two scenarios:
you were clumsy and accidentally deleted it permanently
someone in your household, another family member, accessed your phone, and you don’t understand why, and deleted it (perhaps … Continue reading Service that keeps your files for you and never deletes them [closed]
I’ve been working long time on a web application, consisting of a large amount of data and many services and also communicating with external services.
Now that I’m very happy with the functionality and reliability, before moving from an … Continue reading Planing the security for a public web application, any feedback?
So i’ve been trying to learn cache poisoning for a while and today i thought i finally found a vulnerable instance. Everything seems to be working even tho it doesn’t. Like, 416 response is cached, age is 64. But when i visit it on the bro… Continue reading Is this web cache poisoning attempt correct?
We have a web service to provide dicom modality worklist operations. We have a security concern about sanitizing the user inputs (especially for attributes like Study Description, Requested Procedure Description etc.) to prevent script inj… Continue reading Validation of input in REST endpoint to prevent script injection?
For sending soap messages to a webservice we need to include a client authentication certificate with these messages. Normally we simply created a self signed client auth. certificate (with as a common name the name of that particular clie… Continue reading How do I create a Client Authentication Certificate without a domain signed by a commercial CA?
I understand that nothing is perfectly secured.
If we have a web app where most of the functionality is done inside the browser using WASM, can someone get the binary of that WASM and use most of its functionality?
What do we need to pay a… Continue reading How secure is it to implement most of the applications functionality using WASM on the client side/ in the browser?
I was reading some stuff about HTTP2/HTTP3 and I was trying to understand, where can i see these two types of HTTP in action?
For example, will HTTP2 be more common to see on a simple website like a blog or webpage and HTTP3 will be more c… Continue reading Where can I see HTTP/2 and HTTP/3 in action? [closed]