Tag Info

New answers tagged

1

You can encrypt by using the open source Truecrypt software to create an encrypted container. An encrypted container is a file that Truecrypt uses and sort of pretends is a disk drive. It is formatted like a drive, and everything that is written to it is totally encrypted. When you mount it in Truecrypt, you get a drive letter on your computer and ...


-1

No it's not broken. No fix is required as the 'fix' is in (so to speak) with later versions of Bluetooth. But that's also the problem and the criticism. Just like a password is only as good as who knows your password, Bluetooth is only as good as the implementation that you're using. You're right... it very handy and that very handiness is what makes ...


0

The following logic would typically protect against directory traversal: the directory/filename should be expanded to its absolute+canonical path which resolves ../ and so on, see getCanonicalPath compare the path with a whitelist of allowed paths No blacklisting involved. Not sure if I fully understand your case scenario or your specific concern but ...


0

chroot jails. Each client should connect to a directory hierarchy that cannot be traversed to a) the system or b) other clients. Input validation. Yeah, you should blacklist things like ../, $, *, etc. If you've got control over the API, you can do even better, such as test for directory existence before trying to pass it to cd. As defensive programming ...



Top 50 recent answers are included