Client-side refers to operations that are performed by the client in a client–server relationship in a computer network.

learn more… | top users | synonyms

3
votes
5answers
456 views

Can web application do anything to prevent risk from client-side malware?

Client side malware (keyloggers, screenscrapers etc.) is a great risk. It can't be effectively stopped from side of ordinary application. Only users themselves can do some measures to prevent risk ...
25
votes
9answers
2k views

Why do some people really hate security via client-side?

For instance, lets look at a common login system for a website HTTPS connection is made User submits credentials via POST Server-side code hashes the password and looks if it matches the user name ...
2
votes
3answers
618 views

Are there any addons that disable only some functionality of scripts?

Tor comes bundled with NoScript. Correct me if I'm wrong but that's because client sided scripts can determine the originating IP address regardless of who the traffic is passed through. But NoScript ...
1
vote
3answers
489 views

Client side scripts through proxies

If you're trying to hide your IP address using VPN/proxies can a website using client side scripting record your real ip? If yes is there any alternative to blocking all scripts as that breaks ...
8
votes
1answer
2k views

How should I protect in-app Android payments when using a separate server?

I am currently implementing Android in-app payments, and am wondering what attack vectors I should look out for. I have a simple application to view server-generated content. I want to allow the user ...
10
votes
3answers
795 views

If I am obliged to store a password/certificate on a client side, how can i make sure that it is protected?

In certain cases we need to establish a key/password/certificate as a first timer and then as a client we need to use this key/password/certificate to get authenticated. Therefore the ...
18
votes
5answers
3k views

How does preventing automatic download of pictures help to protect my privacy?

When viewing some emails in Microsoft Outlook, if the sender has included images, I get the following option appear at the top of the email: "To help protect your privacy, Outlook prevented ...
4
votes
2answers
157 views

Changing windows client form values at runtime

I am performing a code audit of an older VB6 application which uses dynamically constructed SQL to execute against the database. While I see this as a SQL injection point, the developer contends that ...
4
votes
2answers
338 views

What criteria do you use for evaluating Client-Side / Endpoint security products?

What features are important to you in client-side AV and Firewall products? Who benefits from these features? Managment, the end user, helpdesk. Are there features that are being 'sold' by the ...
2
votes
1answer
509 views

Does client certificate authentication demand more server-side entropy?

We have a secure web service running Apache that requires client certificates for access. This service has a problem with running out of entropy. We have several other sites that use TLS that get ...
11
votes
12answers
930 views

How to guarantee that password is hashed on server-side?

I'm worried when I send a password to a server, even with SSL or TLS, that the server stores the password in cleartext. Is this the case? If yes and the server gets hacked, all passwords are available ...
-1
votes
2answers
129 views

What risks is one exposed to by browsing the Internet? [closed]

I which forms can visiting certain sites compromise one's system security, taking into account that browsers keep a sandbox for each opened page? Nowadays, can a malicious -or attacked- site really, ...
4
votes
1answer
616 views

SSL, SSH, OPENVPN, etc which one?

To start with I am not a security professional, in fact I am on the other end of the spectrum. In the opinion of people on this site what would you choose for secure internet browsing. I will be ...
5
votes
4answers
192 views

booting from linux CD and visiting https website only

my friend wants to make sure he visits certain websites very securely. Is booting from linux cd and visiting only https website secure, meaning only he'll have access to data? He'll be on wi-fi of ...
2
votes
0answers
76 views

How to secure all my passwords with Kee Pass 2 or something else? [duplicate]

Possible Duplicate: How to securely store my passwords? I have a lot of passwords to lots of logins across websites, SSH logins, e-mails and what not. Is there one program that can secure ...
-1
votes
1answer
171 views

Theorical question on encryption methods [duplicate]

Possible Duplicate: Encryption strategies for multi users access in production systems I would like to develop a service on wich clients would connect and retrieve informations. These ...
8
votes
6answers
2k views

How to securely store my passwords?

Regarding this: Are passwords in memory? So does someone have a good idea on how to securely store my passwords? The: "passwords.txt" -> ctrl+c; ctrl+v a passw is not very secure. I have passwords ...
1
vote
1answer
958 views

Securing clients side scripts [duplicate]

Most browsers allow users to view the source of a web-page quite easily and modern even provided detailed analysis. Often this code includes critical client side scripts in the form of JS/jQuery, ...