I travel a bit and I'm looking for a hosted vcs with good support for Visual Studio. My projects aren't open source so I need security as well. Any recommendations or suggestions? Thanks
with "file upload" HTML like this:
<input name="input_name" type="file" size="40" />
...there is no way for users to directly enter text into input area for security reasons, correct? file selection window pops up instead.
In Watin automation project, we are wanting to bypass the file selection window and place filename directly in text entry area - but we are not finding a way to do this.
How can this be accomplished? ...or perhaps it cannot be done?
I am trying to rewrite the sha-1 algorithm for parallelization in a personal project of mine. Just wondering if anyone knows where I can find a C# implementation of the actual mathematical operations to perform the hash, not just the System.Security.Cryptography function.
Is is possible to write a browser plugin (one that requires the user to install something is OK) that would allow interprocess communication between the browser and a running instance of Excel (on Windows)? For example, suppose I want the user to be able to click something within their browser, and then have a piece of text drop into the selected cell in Excel as a result. This is certainly possible to do with a regular desktop application and Excel, but I'm not sure if it is possible with a browser, for security reasons.
Is it possible for an Adobe AIR application to connect to a remove webservice that does not expose a cross-domain.xml file? If so, how do you configure the security sandbox within Air to allow this?
I am retrieving a WindowsIdentity object by calling:
win_id = System.Security.Principal.WindowsIdentity.GetCurrent();
with the intention of getting the currently logged on user name, which works fine.
WindowsIdentity implements IDisposable, but since I din't create the object myself, do I still need to call .Dispose() on it when I am finished with it or not?
Thanks.
Hi,
I am using Mac OS X 10.6. I wrote a program which will add and remove printers to a CUPS server using libcups. It works, but now I am considering the security aspects. This program takes a user name and password to authenticate on the CUPS server. Whatever user name and password I use, it works as long as it is valid on the system. How do I restrict access to only a specific user ?
Regards
Alan
Getting to grips with Visual Studio 2010,
This compiles:
var x = System.Web.Security.Membership.GetUser();
And runs, however VS2010 gives no intellisense for x and reports it just as a 'local variable'.
Has anyone got any ideas?
By security I mean that encoded string is indistinguishable from random noise and is different on every encryption of the same text so it is impossible to make a guess on encryption algorithm used or do any dictionary attack on the encoded text.
Second: output string length does not correspond to the input string length in easy way, so it is not possible of make guessing on that account.
Third: it is possible to verify that the provided password is incorrect so the decoding function could return false instead of supposedly decoded random string.
Just had a discussion at work about the merits of using PostgreSQL over MySQL and vice-versa. Does anyone have any practical experience where there is a valid reason to use one over the other?
Some people were saying that Postgre is better for security purposes whereas MySQL is becoming more feature rich... I'm not sure what to make of it.
firefox wont allow the javascript to save a file in client machine is the browser security policy
https://addons.mozilla.org/en-US/firefox/addon/1046
the above linked addon can save a file then why cant we save a file in the filesystem using javascript
I am wondering how I can add DATA LINK form to my WIN application.
You know those forms where Users can choose on witch SQL server they going to connect
and what type of security they going to use and on wht database.
Something like on this picture
I need to use a serializable type in hibernate (to store a Subject (security)) All this works fine.
I just need to know what the underlying database types are for the following databases:
MSSQL - I used 'image'
db2 -
postgre -
mysql -
Thanks..
I've got a Flex Web project and a Flex AIR project that use a common code-base. The common code defines several run-time loaded Flex Modules. I want the Flex Modules to behave differently depending on whether the running base application is WEB or AIR. What is the proper method for determining from the module code whether the module is running in a WEB or AIR application?
(I found that Security.sandboxType.toString() returns "application", but I haven't found anything better in the documentation, yet.)
I'm looking at the pros and cons of these three primary methods of coming up with primary keys for database rows.
So assuming I am using a database that supports more than one of these methods, is there a simple heuristic to determine what the best option would be for me?
How do considerations such a distributed/multiple masters, performance requirements, ORM use, security and testing have on the choice?
Any unexpected drawbacks that one might run into?
Hi! I'm writing a little website (webapp) in php+codeigniter, I'd really like to make it open source (to attract collaborators and to have a free VCS hosting).
Is that a good practice?
This mine security?
Which are the best tools to change important data before uploading? (like config files with db names and passwords used for testing etc..)
If I have a packet of data that is encrypted yet also includes a sha-224 checksum that is not encrypted, am I creating a security vulnerability?
Or perhaps the checksum should be produced after encryption?
With respect to an application that has both a web and desktop client version:
What is the best practice for the desktop client which needs access to a SQL Server?
What are the benefits of connecting to the database from the application vs using a web service?
Which one provides better security?
What type of scope would call for one vs the other (enterprise intranet vs. web app, etc)
Are there any other considerations that are necessary when choosing on platform?
In .NET you can deny the security permission 'Assertion' for callers higher on the stack, but would this actually work since Assert() ignores permissions lower on the stack? Since it's the end of the working day I don't presently have time to experiment. Guidance appreciated!
Here is a scenario: User installs .NET application that you have made. After some time, you find a security issue in it and create a patch for it. When patch is ready, you post it "somewhere", and when next Windows update is run on user's machine (automatically or manually), that application is updated, too. I'm wondering if this is possible...and how? Searching on MSDN about it, didn't give any results.
I'm interested in improving security of my TurboGears 2.2 application so that when user changes his password, it logs him out from all sessions and he must login again. When user changes password on browser 1, he must relogin on browser 2, too. Experiments show that this is not the case, especially if browser 2 had "remember me" enabled.
It's standard quickstarted app using repoze.who. It seems maybe I need to change AuthTktCookiePlugin, but don't see a way to do it without much rewiring.
Hi everyone,
I'm trying to make a jQuery $.getJSON call to the Google Maps Geocoding webservice, but this doesn't work because of cross-domain security issues.
I haven't been able to figure it out online, but I've read a bit about Google Javascript API or JSONP, but so far no clear answer...
Could anyone enlight me?
Thanks!
Hi,
is it possible to let clicks on a HTML element that's overlaying a Flash or Silverlight object bubble through to the Flash / Silverlight object? I've been experimenting with this, but i can't figure out if it is even possible because of possible security restrictions.
Getting the following error when trying to open a word document with macros to fill in the form fields:
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Word\Security\AccessVBOM.
The user opening the word document does not have admin rights and the AccessVBOM flag is either not available or set to zero.
I can set the flag for the HKCU (Current user) programmaticallybut cannot change setting for inunder HKLM .
Please advise how can we enable the trust for the VBA project programmatically.
Thx
Kumar
Hi,
I have received the following video file from a camera (from security camera)
http://dl.dropbox.com/u/1369478/tmw/recording.264
How can i view the content? Based on extension i think that is a H264 file. Is there a way to play this on the browser with HTML5?
Regards