Tag Info

New answers tagged


There have since been updates from the Apache Struts Team: http://struts.apache.org/announce.html#a20140424


No, this is not safe and I would certainly not recommend it. However, several methods exist that fulfill your requirements (and more). I suggest having a look at OAuth 2.0. OAuth secured services require a valid access token in the Authorization header of HTTP requests. Such a token must first be obtained from an identity provider, usually a 3rd server. ...


Yes, malware exists in all sorts of languages. Often, though, some of the most critical fiddly bits of many exploits are written not in C or C++, but rather directly in machine code, carefully assembled often by hand. This may be the only want to get the sizing and alignment correct for what you're trying to do. The distance from the "metal" is a matter of ...


You can write a virus in any language. The condition is the OS vulnerability that is being exploited and the language tools that are available to take advantage of it. "High-level" languages are not 'further' from the OS kernel, but rather they are more abstracted from the kernel from the programmer's point of view. Even Python can access network sockets, ...


With Linux if you had a shell you could symlink the paths together however I'm not sure if there's any method of doing this on Windows.. can you execute a file to move it for you? Please define the restraints you are working with and what you have access to


The jre 7 added a lot of new features and a lot of bugs. In Jan 2014 updates to the jre 7 made it radically harder to run applets.


Most encryption schemes are designed so that encrypting the same value twice generates different encrypted values. This is a security property. Encryption schemes such that encrypting the same value twice results in the same ciphertext are said to be deterministic. Deterministic encryption is necessary in some applications, but should be avoided by default. ...


It appears that encryptWithManagedIV () generates random IV each time you use it. Thus, different ciphertexts (which is good BTW). See here: Use the encryptWithManagedIV() function to have Salesforce generate the IV for you in the first 16 bytes of the cipher text.


I think this is a "trend effect" which is also the drive under everything about fashion (in the "clothing" sense). Please allow the local Frenchman to talk about fashion. Fashion is a deeply self-contradictory social behaviour. People who follow fashions seek both: to gain acceptance in a given local group by displaying adherence to perceived agreed upon ...


Excellent infographic! Unless someone were to actually sit-down and read through the various CVE's and understand them in-and-out, it would be difficult to provide any sort of substantial answer. That said, I'm willing to conjecture wildly here. Browser creep -- with three main-stream browsers (IE, Firefox, and Chrome) the plugins have to be developed ...

Top 50 recent answers are included