credentials

CORS in IIS issue with credentials and wildcard in Access-Control-Allow-Origin

我怕爱的太早我们不能终老 提交于 2019-11-28 10:13:37
问题 I inherited a fairly basic site that serves up data and handles some socket connections. It's running NodeJS behind IIS using iisnode as a bridge. That's all working fine from a "serve normal pages" perspective. Part of the problem is that the actual connections to the server are coming from desktop clients where the content is loaded through a different application as a gadget and from potentially changing and varying parts of the network, mobiles devices, etc. etc. i.e. - an unknown number

Accessing Windows Scheduled Task using C#

北城余情 提交于 2019-11-28 09:30:57
How do I change the credentials used by a scheduled task using C#.NET? Someone has written a task scheduler class library on codeproject.com , it might be what your after... :) Instead of using code, you can do it using 'SCHTASKS' command, run it using System.Diagnostic.Process.Start method with the parameters required. It's easy and not much effort required. You must call RegisterTaskDefintion for the task's definition with the new username and password to change just the password. Code fragment // Add COM-Reference to "TaskScheduler 1.1 Type Library" to the project using TaskScheduler; //

Protect string constant against reverse-engineering

妖精的绣舞 提交于 2019-11-28 08:59:58
I have android application that has hard coded (static string constants) credentials (user/pass) for sending emails via SMTP. The problem is that .dex file in .apk can be easily reverse-engineered and everybody can see my password. Is there a way how to secure these credentials, while i will still be able to use them in my classes? We can use "jni module" to keep 'Sensitive Hardcoded Strings' in the app. when we try to reverse engineer APK file we get lib folder and .so files in respective process-folders. which can not decrypt. I guess you can try a code obfuscator, but really that won't make

android fileupload with https and Credentials

喜夏-厌秋 提交于 2019-11-28 08:51:11
i try to make a post request, witch contains a file, the problem is, i have to use ssl and the BasicCredentialprovider. The following code works for me with normal POST requests: (url is the url, nvps is the nameValuePair) DefaultHttpClient http = new DefaultHttpClient(); SSLSocketFactory ssl = (SSLSocketFactory)http.getConnectionManager().getSchemeRegistry().getScheme( "https" ).getSocketFactory(); ssl.setHostnameVerifier( SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER ); final String username = "xxx"; final String password = "xxx"; UsernamePasswordCredentials c = new

Locally reading S3 files through Spark (or better: pyspark)

我只是一个虾纸丫 提交于 2019-11-28 07:24:46
I want to read an S3 file from my (local) machine, through Spark (pyspark, really). Now, I keep getting authentication errors like java.lang.IllegalArgumentException: AWS Access Key ID and Secret Access Key must be specified as the username or password (respectively) of a s3n URL, or by setting the fs.s3n.awsAccessKeyId or fs.s3n.awsSecretAccessKey properties (respectively). I looked everywhere here and on the web, tried many things, but apparently S3 has been changing over the last year or months, and all methods failed but one: pyspark.SparkContext().textFile("s3n://user:password@bucket/key"

How to Specify Eclipse Proxy Authentication Credentials?

我的梦境 提交于 2019-11-28 06:11:47
I'm using the latest version of Eclipse Galileo and I have to access the web from behind a proxy. I see where I can set the internet settings to manual and specify a proxy but there's no way to specify my authentication credentials that I can see and it doesn't prompt me for them either. So I'm not able to hit any plugin update sites etc... Does anyone else have this issue or know a good workaround? Or is there a better version of Eclipse to use? Eli Acherkan In Eclipse, go to Window → Preferences → General → Network Connections. In the Active Provider combo box, choose "Manual". In the proxy

How to get access token from GoogleCredential?

≡放荡痞女 提交于 2019-11-28 05:59:32
I am trying to get an access token to use the Google Play Android Developer API, and I got this far using the Google API Java Client documentation example : HttpTransport HTTP_TRANSPORT = new NetHttpTransport(); JsonFactory JSON_FACTORY = new JacksonFactory(); GoogleCredential credential = new GoogleCredential.Builder() .setTransport(HTTP_TRANSPORT) .setJsonFactory(JSON_FACTORY) .setServiceAccountId("...gserviceaccount.com") .setServiceAccountScopes("https://www.googleapis.com/auth/androidpublisher") .setServiceAccountPrivateKeyFromP12File(keyFile) .build(); But how do I get the access token

Best practices - store Twitter credentials or not?

∥☆過路亽.° 提交于 2019-11-28 05:07:21
问题 I'd like to be able to give my users the ability to display their recent tweets on their profile on my website. I have a PHP twitter wrapper and understand how to make API calls etc, but I'm just wondering how to manage the user information. What is the best practice here? I want them to be able to enter their credentials once, but I would imagine storing everyones username/password myself isn't the best way to go about it. Is there a way to make an authenticated call once, and have twitter

WCF NetTcpBinding Security - how does it work?

佐手、 提交于 2019-11-28 04:57:53
I am encountering the following problems trying to work through the quagmire of settings in WCF... I created a WCF client-server service using a NetTcp binding. I didn't make any changes to the security settings and when running on one machine it works very nicely. However, when I ran my client from another machine it complained that the server didn't like the security credentials that were sent. I understand now that NetTCP is "secured" by default and that my client would have been passing the wrong security details - namely the Windows user name and password (or some form of domain

Secure credential storage in python

时光毁灭记忆、已成空白 提交于 2019-11-28 04:12:01
The attack One possible threat model, in the context of credential storage, is an attacker which has the ability to : inspect any (user) process memory read local (user) files AFAIK, the consensus on this type of attack is that it's impossible to prevent (since the credentials must be stored in memory for the program to actually use them), but there's a couple of techniques to mitigate it: minimize the amount of time the sensitive data is stored in memory overwrite the memory as soon as the data is not needed anymore mangle the data in memory, keep moving it, and other security through