Tag Info

New answers tagged

0

I'm not a programmer but i think that if you don't want people having access to your code then you need to make it server-side, code executed in the client side, must be available not-encrypted on the client side at some point. This is exactly like DRM: you're giving the user a lock, and also the key to it, and expecting to be able to say what they can do ...


1

is it really necessary worrying about superusers? My gut feeling says no: in princible whathever the encryption method a superuser can read all the files and ultimately any kind of keys of the users; Kind of. Even if the file is encrypted and the decryption is only done within the process the superuser has on most systems access to the process memory ...


2

In many cases the merchant can check the amount before shipping the item. However many payment gateways implement a checksum value that is hashed with a secret key and if the hash don't match the value the transaction is aborted. There are several flaws with this approach, I gave a presentation at blackhat asia last year that illustrate some of them. You can ...



Top 50 recent answers are included