All Questions
Tagged with confidentiality web-application
15 questions
0
votes
0
answers
1k
views
Passing confidential data to an IFrame
There are two different web applications Host and App which are hosted separatedly, i.e. in particular on different domains. App is not designed to be accessed directly. Rather users are expected to ...
- 198
4
votes
1
answer
376
views
Gravatar - Is it a security risk for medical forums?
If site forums use Gravatar, and the users are predominantly posting personal information about mental health issues, is this a security risk? Should the site consider turning off, or allowing opt ...
- 153
1
vote
1
answer
2k
views
Should I trust zxcvbn with my password?
I want to measure current and future password entropy with the zxcvbn formula.
Is there any way to test and detect if the input on this website is truly confidential?
EDIT:
1. I found an ...
- 599
1
vote
1
answer
459
views
Does Google Analytics collect any information about the contents of the web page?
If I enable Google Analytics on my web application, does the Google Analytics Javascript collect any information on the web page (any of the content on the page)? Does it collect any information ...
- 100k
1
vote
1
answer
278
views
Security Standards for storing private customer data
A certain government regulation in my country mandates all non-resident donors to provide a copy of their identification (usually, the passport).
So, we ask the donors to upload a copy of their ...
- 111
7
votes
2
answers
3k
views
If encrypted data in a database are accessed by application, does that mean that the application has the decryption key?
I'm using an application linked to a database which holds confidential data (numbers). According to the developer, this data is encrypted. However, i can easily generate a report that will show the ...
- 298
6
votes
2
answers
733
views
Can a web application administrator access the database of that application?
We have a web application linked to a database. The database is secured but contains unmasked confidential numbers. Can a normal administrator who can access the application, access those numbers in ...
- 298
2
votes
1
answer
854
views
Securely notify users about account changes
I am developing a web application (using PHP) and I am wondering what the best way is to notify users that someone updated their account information? The information that can be updated includes:
...
- 801
3
votes
2
answers
1k
views
Sharing encrypted data
I have a web app that is storing information related to a organization that I would like to encrypt but share amongst organization members. I would only like the members of the organization to be able ...
- 133
-1
votes
2
answers
2k
views
Secure risks of online chat for customer service
Some merchants provide the ability to chat over the web for customer service or help.
Are there any risks in using these online chat channels? If so, what are the primary risks? Can the chat ...
- 101
0
votes
2
answers
272
views
API - How can I make sure data sent by the user is only sent to my application?
I have an API and a web application where users can login through another system and then post text messages to my application, for example.
How can I assure that when this data is only posted to my ...
- 131
3
votes
3
answers
287
views
In what situations are web services required to protect confidentiality of user information?
I know that if a web application needs to be PCI-DSS or HIPAA compliant the user personal identifiable information (e.g. user password, etc) needs to be kept confidential.
Under what other situations ...
- 2,053
4
votes
3
answers
3k
views
Google App Engine Security
I am writing a master thesis concerning security of certain applications, and as a part of it I want to write a web app on Google App Engine and test how secure it is.
Does anyone know if there was ...
- 365
0
votes
0
answers
108
views
Google App Engine Security [duplicate]
Possible Duplicate:
Google App Engine Security
I am writing a master thesis concerning security of certain applications, and as a part of it I want to write a web app on Google App Engine and ...
- 365
12
votes
6
answers
13k
views
when is it safe to click through an SSL warning message?
How does a user know if it's safe to click through scary browser warnings about SSL certificates?
Ideally, a user should never need to click through these warning messages, but sometimes honest ...
- 2,084