security | 易学教程

run native(unmanaged) exe from memory in C#

阅读更多关于 run native(unmanaged) exe from memory in C#

问题 hello i have some c program that use from those in my c# program. i dont want send those c exe to client. that mean i dont want user can see those exe. i want to load those byte to memory and run its from memory. how i can do that. thanks a lot. 回答1: If the program is unmanaged code, which a C program is, you cannot launch it directly from within .Net memory. What you can do is pack it as a resource, stream it to disk (a temp folder) and then start it with the System.Diagnostics.Process class

What is the security of javascript minification

阅读更多关于 What is the security of javascript minification

问题 So for a long time now I have been under the assumption that, while it does performance gains, one of the primary reasons we minify javascript/css is to give a modicum of obfuscation to it so that it is harder to reverse engineer. However a friend of mine just showed me how it is not only possible; but extremely simple to just reverse minification on minified javascript and css. So my question is - other than performance gains, what is the point? Is there any other actual way to protect

Usage of software/hardware-backed Android Keystore and possible security/usability drawbacks

阅读更多关于 Usage of software/hardware-backed Android Keystore and possible security/usability drawbacks

问题 I'm currently looking at the possibilities of storing/using secrets keys in an Android application. I've found Nikolay Elenkov's blog very helpful regarding this topic and I've learnt a lot of things about the Android keystore and some hardware-based implementations. Still I've got some questions about security and user experience aspects. Software keystore For what I understood, in this configuration a masterkey is derived (using PBKDF2) from a user password (plus a salt to prevent rainbow

Use screen lock in my app

阅读更多关于 Use screen lock in my app

问题 Is it possible to use the default security settings, which user has set to the phone, as a locking or login mechanism for my app too? I mean like when we reset the phone, it asks for phone password or pattern. Is it possible the same way that I can use the default android password or pattern set by user to login to my app? My goal is to bypass the developing effort and use some standard way of authentication without making user to remember another new password. NOTE: I'm aware that I can lock

关于iOS9中的App Transport Security相关说明及适配(更新于2016.7.1)

阅读更多关于关于iOS9中的App Transport Security相关说明及适配(更新于2016.7.1)

2016.7.1 根据苹果官方文档的修改做出文档的调整，并加入对诊断ATS的命令行工具nscurl进行说明。 2015.8.19 解决在iOS9下基于ATS对HTTP的请求的说明及适配进行说明 iOS9中新增App Transport Security（简称ATS）特性, 主要使到原来请求的时候用到的HTTP，都转向TLS1.2协议进行传输。这也意味着所有的HTTP协议都强制使用了HTTPS协议进行传输。原文如下： App Transport Security App Transport Security (ATS) enforces best practices in the secure connections between an app and its back end. ATS prevents accidental disclosure, provides secure default behavior, and is easy to adopt; it is also on by default in iOS 9 and OS X v10.11. You should adopt ATS as soon as possible, regardless of whether you’re creating a new app or updating an

how can I get the String from hashCode

阅读更多关于 how can I get the String from hashCode

问题 I am working on a project where I had got my password field value's hashCode and stored that hashCode in DB for security purposes.Now I want to recover the password from the hashCode.How can I do it? Is it possible to get the String value back from the hashCode ?If it is not, can anyone suggest me a better way to store my password in anyother format? 回答1: You know that several objects can have same hash(), as it mentioned in java doc for Object.hashCode() It is not required that if two

how can I get the String from hashCode

阅读更多关于 how can I get the String from hashCode

How can I get information about the users network when he tries to authenticate towards my IIS?

阅读更多关于 How can I get information about the users network when he tries to authenticate towards my IIS?

问题 I want users, when they are in the workplace (e.g. on the LAN), to authenticate themselves with their regular username and password. Auto-login is disabled. However - logging in from outside the LAN should trigger a 2-level authentication (like SMS, mail or similar). How can we get information about the users network when they try to log in to the application from outside the LAN? NB - it does not matter if you have AD user and pwd. If you are on the outside you have to trigger the 2 level

How can I prevent an iframe displaying an email to load images and other email trackers?

阅读更多关于 How can I prevent an iframe displaying an email to load images and other email trackers?

问题 We have a web admin panel in which the agents can see conversations with customers. Those conversations are the result of importing normal emails thru an IMAP connection. We grab the "untouched" mailbox files and we store them in a database. Then we post-process the files to index by "from", "to", "date" and so on and so forth. Up to here, okey. We can seek all the emails involved with a client and render them at will. Then when the agent looks for a customer in the web admin panel and opens

How can I prevent an iframe displaying an email to load images and other email trackers?

阅读更多关于 How can I prevent an iframe displaying an email to load images and other email trackers?