The tag has no wiki summary.

learn more… | top users | synonyms

41
votes
11answers
7k views

Are there “secure” languages? [closed]

Are there any programming languages that were designed to be robust to hacking? For instance, Heartbleed would not have happened if the language used could guard against a Buffer Over-Read. Edit: A ...
60
votes
10answers
8k views

Would it be good secure programming practice to overwrite a “sensitive” variable before deleting it?

Is it good secure programming practice to overwrite sensitive data stored in a variable before it is deleted (or goes out of scope)? My thought is that it would prevent a hacker from being able to ...
2
votes
3answers
146 views

Which Secure Development Lifecycle model to choose? [closed]

We are going to secure our software development life cycle and have been researching for a good model to start with. I have found 3 major models (methodologies?) which are : Cigital SDLC (7 touch ...
5
votes
3answers
562 views

is it safe to allow external images to be attached to Blog or any Web content?

I am filtering all images that attached to any content of my blog: Check for file extension. Check content type using $finfo = finfo_open(FILEINFO_MIME_TYPE); I also save the image temporary on my ...