Search Results

Search found 25872 results on 1035 pages for 'document security'.

Page 151/1035 | < Previous Page | 147 148 149 150 151 152 153 154 155 156 157 158  | Next Page >

• Process limit for user in Linux

  - by BrainCore

  This is the standard question, "How do I set a process limit for a user account in Linux to prevent fork-bombing," with an additional twist. The running program originates as a root-owned Python process, which then setuids/setgids itself as a regular user. As far as I know, at this point, any limits set in /etc/security/limits.conf do not apply; the setuid-ed process may now fork bomb. Any ideas how to prevent this?

  Read the article

• To HTMLENCODE or not to HTMLENCODE user input on web form (asp.net vb)

  - by Phil

  I have many params making up an insert form for example: x.Parameters.AddWithValue("@city", City.Text) I had a failed xss attack on the site this morning, so I am trying to beef up security measures anyway.... Should I be adding my input params like this? x.Parameters.AddWithValue("@city", HttpUtility.HtmlEncode(City.Text)) Is there anything else I should consider to avoid attacks? Thanks

  Read the article

• How to detect Java agents, JVMTI, etc...

  - by Andrew Westberg

  How does one secure the Java environment when running on a machine you don't control? What is to stop someone from creating a java agent or native JVMTI agent and dumping bytecode or re-writing classes to bypass licensing and/or other security checks? Is there any way to detect if any agents are running from Java code? From JNI? From a JVMTI agent?

  Read the article

• Can i use Spring on GAE?

  - by n002213f

  Can i use Spring Webflow/MVC and Spring Security and Hibernate on Google App Engine? Is there a list/summary of java frameworks that can be used on the GAE?

  Read the article

• Auto-creating User details with Grails and LDAP

  - by Benny Hallett

  I'm using the Acegi Security plugin for Grails, and authentication via LDAP. The application logs show that on login, we can authenticate the user and get their roles via LDAP, but the login fails because the User Details cannot be found in the application's database. Is there a way to auto create and save a basic User Details domain object if one doesn't already exit?

  Read the article

• Solr Multicore Admin Problem

  - by Daniel M

  Im trying to add a url based security constraint to solr deployed in websphere 6.1. If I specify the core name in the url of the constraint then the admin url for that core gives a 404. Has anyone had any success with this or any suggestions? Cheers

  Read the article

• deploying WAMP -> live site - any random tips?

  - by Haroldo

  In the next few weeks I'll be taking my site from the localhost (WAMP) and puting it on a new server. This will be the first site, on my first server, so basically...i'm a noob! This must be an important moment for any independent web developer / small business so i'd love to hear about some experiences, mistakes and system default security holes that one should fix straight away... I'm using php, mysql, cpanel and WHM, and looking for tips like "Turn off error reporting in PHP"

  Read the article

• How to Consume a WebService(created by C#) using Https protocol

  - by Navaneeth A Krishnan

  I'm developing a small project, that is an C# web service, i did that but now i want to run the web service using the protocol HTTPS, for that i have installed web authentication certificate in my system and my IIS 5.1 server is running under HTTPS protocol(i have configured in that directory security) But now i want to invoke the web service using the HTTPS protocol, somebody told that, i need to modify the WSDL file for that web service but i don't know how to do it... now my service url is like this.... http://localhost:2335/SWebService.asmx here i would like to use https instead of http

  Read the article

• GenericIdentity not FormsIdentity

  - by Tony

  H Regarding this URL http://www.codeproject.com/KB/aspnet/FlashUpload.aspx User.Identity as System.Web.Security.FormsIdentity is always null, because the Identity is GenericIdentity, I assumed it will be as in the tutorial FormsIdentity, what is chances. Thanks

  Read the article

• How can I flash the taskbar from a partial trusted .NET application?

  - by Brann

  I'd like to flash the taskbar (as described here for example), but I can't P/Invoke FlashWindowEx (or anything else, for that matter) in the security context my application is running in. Is there another way to get the taskbar to flash? If not, what are my options for getting the user's attention?

  Read the article

• Copy all current system data content in memory

  - by Tom Brito

  I'm studying security, and I would like to know: in Windows or Unix based OS environment, is there a way for a malicious program to copy all the content of the computer's memory? My worry is about a program that can get my decrypted data loaded in memory. And how to avoid it.

  Read the article

• can you hack into my site? 2 [closed]

  - by user296516

  Hi guys, I have build a php authentication for my site http://www.skyeye.cc/ and wanted to make sure I didn't forget any security holes... let see if you can hack into it? Thanks! P.S. Do not close this topic, the site is really mine!

  Read the article

• Heroku powered private restricted beta

  - by Ben Sand

  I'd like to run an app in a restricted private beta on heroku. We're changing the app regularly and haven't done a security audit. To stop anyone exploiting stuff, we'd like to lock down the whole site, so you need a password to access anything. Ideally similar to using .htaccess and .htpasswd files to lock an entire site on an Apache server. Is there a simple one shot way to do this for a heroku hosted app?

  Read the article

• How to make sure elements of HTML form have not been changed in purpose of hacking on client side be

  - by Omid

  I want to know is there any way to prevent elements of HTML form from changing on client side before submit (the elements they have value, like hidden elements)? Lets say I have hidden elements. I want to make sure their values haven't been changed by user in purpose. Or what is HTML FORM Security Best Practice?

  Read the article

• Open source tool to extract ActionScript from FlashMovies

  - by Dinis Cruz

  Is there an Open source tool to extract ActionScript from Flash movies, ideally written in (or consumed by) C# I just did a search and found http://www.nowrap.de/flare.html, but the source code is not available. I need this so that I can allow the security review of Flash & ActionScript using the OWASP O2 Platform

  Read the article

• PAM authentication problem

  - by mdipierro

  I am using this module to authenticate using pam: http://code.google.com/p/web2py/source/browse/gluon/contrib/pam.py I can call authenticate('username','password') and it returns True/ False. It works for any 'username' but 'root'. My guess is that there is a security restriction in PAM that does not allow to check for the root password. I need to be able to check the root password. Is there anything I can change in the pam.conf or somewhere else to remove this restriction?

  Read the article

• Can resources be extracted from a compiled iPhone app? If yes, how can they be secured?

  - by Charles S.

  Can resources be extracted from a compiled iPhone app that is released to the iTunes store? I'm particularly interested in the security of XML files... if I have copyrighted data in an XML document in my resource directory, how likely is it for someone to extract that information and paste it around the internet? If it's as easy as using a resource editor, how can that data be secured?

  Read the article

• Why use only a few webpage AJAX to load content ?

  - by nusbit

  Hey My Question is: Why don't use more webpages AJAX to load the Webpage content? Because of the fact that you can switch off JS or is there a thought about some security problem ?

  Read the article

• CSharpCodeProvider - Is it abusable?

  - by GenericTypeTea

  Apologies for the shortness of the question, however I don't think it needs much elaboration. Any there any security implications caused by using the CSharpCodeProvider and could it open a server up for attack?

  Read the article

• SSL, Certificate

  - by ehab refaat

  i am new to Security. i want a good book that teach me how to create and use certificate , and log in using HTTPS. using jsp/servlet tech.

  Read the article

• can you hack into my site? :)

  - by user296516

  Hi guys, I have build a php authentication for my site http://www.skyeye.cc/ and wanted to make sure I didn't forget any security holes... let see if you can hack into it? Thanks!

  Read the article

• CLR - Protect IL from Reverse Engineering

  - by csharpbaby

  How can i protect my IL from reverse engineering ? Any Obsfuscator tool is available ? will it offer maximum security ?

  Read the article

• Authentication and authorization for RESTfull API (java jersery)

  - by abovesun

  Hi, implementing service something similar with tinyurl or bit.ly, I'm would like to expose service as API, I'm using java and jersey as RESTfull service implementation. I'm looking for simplest way for authentification of users who use API, OAuth is first thing coming in mind, but the problem is I don't need this 3 iteration calls with request token query, than access token query with callback url passing. I just need to give user ability to invoke api with no additional security calls to my server.

  Read the article

• Best way for user authentication on JavaEE 6 using JSF 2.0?

  - by ngeek

  I'm wondering what the current state of art recommendation is regarding user authentication for a web application making use of JSF 2.0 (and if any components do exist) and JEE6 core mechanisms (login/check permissions/logouts) with user information hold in a JPA entity. The Sun tutorial is a bit sparse on this (only handles servlets). This is without making use of a whole other framework, like Spring-Security (acegi), or Seam, but trying to stick hopefully with the new Java EE 6 platform (web profile) if possible. Thanks, Niko

  Read the article

• Whats a valid strategy for a secure image upload from a flash client?

  - by WillyCornbread

  Hi all - I'm creating a flash application that will post images to a url for saving to disk/display later. I was wondering what are some suggested strategies for making this secure enough so that the upload is verified as coming from the application and not just some random form post. Is it reliable enough to check referring location realizing that I don't need bulletproof security, or perhaps setting authentication headers is a better strategy even though it seems unreliable from what I have read. Thanks for any advice - b

  Read the article

< Previous Page | 147 148 149 150 151 152 153 154 155 156 157 158  | Next Page >