Tag Info

New answers tagged

1

If you care about the security of someone's password, you should move away from PBDKF2, and at least to BCrypt. Look at the state of the art in cracking hardware. For BCrypt cracking in hardware, look at High-Speed Implementation of bcrypt Password Search using Special-Purpose Hardware. | Algorithm | hashes/sec | hashes/sec/Watt | ...


0

From a security perspective, it's desirable to discard the unwanted traffic further up the chain and typically at the lowest level of the OSI model you can. This is beneficial because it reduces unwanted noise, can save processing cycles on the equipment downstream, and makes the control less likely to be bypassed. In regards to IIS specifically, the ...


2

SecureString doesn't protect you if you already have malware running with high privilege. It's not possible to do so, for SecureString or anything else. You can't protect your software from this kind of attack; if you can't trust your copy of mscorlib or anything else running in your process, you've already lost. What SecureString does is ensure that if a ...


1

As mentioned in a comment above, there are two basic strategies for protecting the IP in your source code: Make your source code more difficult to understand. This is typically done through obfuscation. Obfuscators attempt to make the source code difficult to reverse compile and/or difficult to understand once they've been reverse compiled. I'm no expert ...


1

The structure of a DXF file is somthing like this: You know it so go to the end of answer ASCII versions of DXF can be read with a text-editor. The basic organization of a DXF file is as follows: HEADER section – General information about the drawing. Each parameter has a variable name and an associated value. CLASSES section – Holds the information for ...


2

Yes, there are plenty of examples. MS14-072 is one of the most direct ones. An attacker could hijack a remoting call to elevate privileges to other AppDomains running within the same execution context. Pretty much all the direct code execution bugs work as examples too, because once you escape the type-safe environment, you can make direct API calls on the ...



Top 50 recent answers are included