Tag Info

New answers tagged

0

I believe your mixing several separated technologies together. First BD-J => this is a special subset of "java" which is used for the menu's and interactive elements, it runs inside its own VM-container and does NOTHING on the host without the player software (so it works with the same permissions as your player or lower... meaning your user or none at all) ...


2

The point of RFD is abusing the trust of certain sites and if I can make arbitrary files look like they are coming from a trusted site, I get to bypass certain warnings. (Is it my browser that already trusts certain sites or is it the user or both?) I think it is only meant as in the user will look at the downloaded file and think "Oh, it did come from ...


1

When you want one applicaton to prove that it has the right to talk to another (the web service) we are no longer talking about CSRF but about authentication. Usually this is done by secure token sent from web application to web service via a POST request. Check out the first answer to this ...


4

By fiddling with the internal contents of String instances, you incur the risk of severely breaking your application. The first reason is that String instances are supposed to be immutable, which means that instances may be reused; when you modify "your" string you may actually modify other strings that are conceptually distinct but happen to have the same ...


3

Don't do it. Reason: general principles. ("Don't roll your own crypto.") You're deriving a key (something secret) from something else secret. You don't need to invent a procedure for yourself. Go with an established key derivation function. Something like PBKDF2.


0

It depends on your Java implementation, but none of them are known to be vulnerable at this time. POODLE over TLS requires that the server has a defective TLS parser that fails to reject certain types of invalid TLS padding. Currently, only hardware SSL endpoints from A10 Networks and F5 Networks are known to be vulnerable (well, and servers using the NSS ...


1

I'm no expert but I believe to suppliment what user2316037 stated I believe javax.xml.crypto.dsig which allows you to sign and validate an XML digital signature.I believe that is what you are looking to use. Retrieved from: http://www.oracle.com/technetwork/java/javamail/dig-signature-api-140772.html



Top 50 recent answers are included