New answers tagged

0

I'm writing an answer based on assumption as below. You are responsible for LAMP and the application, volunteers are allowed for BYOD, you seek inputs on hardening the security. My responses will be Assume this as a normal application which is live and anyone with Internet has access to it. Authentication, authorization and auditing are the key aspects ...


0

Are end-user devices provided to the volunteers by the charity? If not, are you really sure that you want to personally take in charge the hardening and ensuring support of all volunteers' devices of all kind? Unless you are in a corporate-like environment where devices are provided and managed by the company, you would rather consider that end-user devices ...


0

Download the Signal app for private and encrypted end to end conversation Those who are using Redphone and TextSecure RedPhone users will be prompted to download the new Signal app, while TextSecure users will simply need to install an update that keeps the same private chat capabilities as the previous app, also adding RedPhone's ability to make ...


2

This is not Javascript breaking out of a browser's vm/sandbox but rather an executable that runs with full local user privileges that happened to be written in Javascript... There's nothing to harden as local Javascript app platforms like NW.js are designed to allow exactly that and like all other platform/frameworks they can be used for good as well as for ...


3

The most important thing to consider here is that this type of JavaScript malware does not run in a browser. It runs in a special runtime called NW.js which gives powerful NodeJS API's not found in a browser. While NW.js shares many technologies with the Chromium browser, it is not a browser but a type of native wrapper for making desktop apps, and this ...



Top 50 recent answers are included