Tag Info

New answers tagged

0

Based on the information which I've found on-line so far, the following statements are true: Passwords are always encrypted source. Chrome uses your Google Account to encrypt your synced passwords source. Whether or not you use a passphrase, your synced data is protected by encryption in transit. Your Chrome sync passphrase is stored on your computer and ...


1

First, there is a problem with your assumption: "My Javascript and PHP validation are pretty good". You can't make such a statement, because you don't know of all the places you missed. Also, client-side valiation (i.e., Javascript) is useless, security-wise. An attacker can simply bypass it by sending you the corresponding HTTP request directly. Now for ...


0

Defense in depth principles ask to disallow directory listing: why ? Because at least it will lead the nefarious person to waste his time and efforts in getting some valuable information that would probably push him to go away. For the sake of one of our clients, we actually succeeded to have full control on his website after getting a precious information ...


4

Having directory listing enabled is not a security vulnerability just by itself. When you don't want the users to look at the content of a file, the webserver should simply not allow them to access it. When your security depends on the attacker not knowing the exact URL of a file, your security concept is flawed ("security through obscurity"). As long as the ...



Top 50 recent answers are included