The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [programming]

Programming is the act of issuing commands that a computer system executes, via certain interfaces called programming languages.

Filter by
Sorted by
Tagged with
0
votes
0answers
19 views

where can I learn more about data Consistency and how to handle inConsistency

I want to learn about handling data inConsistency. But I dont know where to begin. Can someone please give me a direction.?
0
votes
0answers
52 views

Asymmetric encryption for short strings and files

I need to encrypt some strings in a database, and contents of files, with an asymmetric key (probably RSA), but possibly symmetrically at some point. Many of these are a few dozen bytes, so overhead ...
0
votes
2answers
338 views

Is there a way to safely run untrusted code on a local machine for a videogame

I want to create a simple videogame engine that can run untrusted custom code in order to add functionality to the game. I thought a about using an akka like concurrent actor system, so that the code ...
0
votes
1answer
66 views

Does compiling a program in Visual Studio (Windows Forms, VB.NET) leave a MAC address in the executable?

I am not making an installer. It is just a form as a portable .exe file. Asking because it's generating links to an external Web API (not mine) that is an openload crawler. Although technically legal (...
1
vote
1answer
169 views

Why it is difficult to write an application to protect 100% against keyloggers?

When you press keystrokes, I suppose you can intercept in low level code all applications that listen and record. Why it cannot be designed a software that protects 100% against keyloggers, simply ...
4
votes
2answers
197 views

Why malwares need to be light

I am learning about how malwares work and I read that a lot of them are written in assembly or C to keep the binary size as small as possible. In an example C++ source code, authors decided to remain ...
0
votes
1answer
54 views

print statements

Is it possible for a bad guy to read print statements done in the swift programming language? Ex. If I release an app to the Apple Appstore and it has following print line: print("my-secret-password"...
0
votes
0answers
53 views

is it to possible to programmatically destroy a PC? [duplicate]

is it possible to totally destroy the PC with use of code only, if possible how? i mean like: frying the RAM frying the GPU overclocking the CPU till its dead In a TV series called MR ROBOT there ...
0
votes
1answer
93 views

Cybersecurity Career [closed]

I am considering going into Cybersecurity. I was wondering what is important in a program for getting a bachelor's? The one I am looking at doesn't have any software development in it, which I thought ...
3
votes
0answers
136 views

How is it possible that the Metasploit meterpreter can take pictures without “notifying” the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
0
votes
2answers
97 views

Secure algorithm for transferring data between users via QR Code

I'm building a mobile application that transfers points between users via QRCode. I'm concerned about security and am looking for effective simple yes secure algorithm to use. The scenario should be ...
0
votes
2answers
139 views

Deploy verifiable webapp source code

Recently there have been quite some discussions about the security approach of ProtonMail. Since it do crypto stuff at client-side, loading the javascript code in the user's browser, as far as i know, ...
1
vote
3answers
4k views

Any hints for programming my own password manager? [closed]

I mostly want whatever help & suggestions you can give me about what I should avoid & what I should think about when making this. I'm a reasonable programmer & I want to make my own ...
0
votes
2answers
485 views

How to Verify Integrity of Transferred Files in a Client Server Protocol

How do I implement integrity verification using the checksum of files in a client-server protocol where the client sends multiple files to the server. I am using the following steps: The client ...
2
votes
2answers
192 views

Programming Metasploit

I try to make a Metasploit AutoRunScript for android. The First .rc file has this config use exploit/multi/handler set PAYLOAD android/meterpreter/reverse_tcp set LHOST xxx.xxx.xxx.xxx (my IP) set ...
0
votes
4answers
249 views

Track who leaks your software

I'm releasing some software in python which is impossible to fully encrypt. I was thinking of changing the variable names slightly for every copy that I release. Is this a good way to figure out who ...
121
votes
19answers
35k views

Is it common to allow local desktop admin access and rights for developers in organizations?

I work at a company with a staff of about 1000+. We currently have programming development staff that work on web based projects (approx 50 people). Recently due to security concerns our IT and ...
8
votes
3answers
304 views

Sealed Room Security - Possibility of writing assembled binary code

Assume the existence of a sealed room, containing a network with a single terminal. You are not allowed to bring in any electronic material into the room. The target machine is running default ...
-1
votes
3answers
183 views

While installing Go programming language trace.exe detected as virus by KAV

When I tried to install Go programming language, Kaspersky AV in my system detected a path to file: C:\Go\pkg\tool\windows_amd64\trace.exe as suspicious and triggered a virus alert. Shall I consider ...
0
votes
1answer
70 views

Working from a USB [closed]

I have a Mac for my work laptop and I would like to work on my xCode project, I can't work on the laptop directly and save the file to computer due to fears that it could one day be recovered & be ...
0
votes
0answers
314 views

Pen testing, Windows: Using credentials to impersonate users from SYSTEM

Following simple scenario during pen test: I have remote code execution on a windows box and am SYSTEM (either because of the way I got onto the box or because of the persistence method I chose) I ...
81
votes
19answers
16k views

Good analogy needed: Sec issues due to different coders implementing the same features in different ways for the same app

I have to give a school presentation about vulnerabilities found in the Moodle platform. Of course, they only apply to a legacy version which has since been patched. The catch is that the ...
3
votes
1answer
198 views

What is properly way to manage and remove symmetric key in C#

If I have a symmetric key in a byte[] array in C#, how can I erase it securely? for (int i = 0; i < array.Length; i++) { array[i] = 0; } Is this good enough?
9
votes
1answer
320 views

Is it worth it to fuzz Rust-written software?

If a program is written in C, then it is worth it to fuzz it with something like afl since it might have memory-related bugs. But how about software written in Rust? Would a fuzzer still find bugs? Or ...
0
votes
1answer
2k views

How can hackers get 1 billion passwords per second?

So I'm interested in Brute Force attacks and I have made them with Python 3 and C++. However, those only reached a max of about 20 million passwords per second. I know for a fact that 1 billion ...
2
votes
1answer
1k views

stdin does not wait for next input after ROP chain

I was trying to exploit a vulnerability in a ctf but I can not make fgets() reopen stdin to put my second stage ROP chain. I am using pwntool but the problem is more socket oriented. I recreated ...
-1
votes
1answer
154 views

Iwant to learn programming but i dont know where to start from [closed]

I'm really into hacking and security aspects. But I'm wondering about several things that is stopping me from pursuing this passion for the time being. One of the them is actually Programming language....
1
vote
0answers
190 views

Having trouble installing zxcvbn [closed]

I'm a high school student conducting a science fair project that analyzes the strength of the average person's password. I've decided to use the Java version of zxcvbn, nbvcxz, to estimate password ...
3
votes
1answer
467 views

Does it matter in which programming language you write the shellcode?

I have been searching a lot and I didn't find anything. I still wonder: does it matter in which language you write shellcode? Will shellcode in Assembly, C, etc. work everywhere they can be used and ...
1
vote
0answers
160 views

I want to know if exist a vulnerability in using sp_send_dbmail of SQL Server?

I'm using the next stored procedure sp_send_dbmail in SQL Server 2012, the DBA ask me if it possible make SQL Injection using this SP, or SMTP Injection? In the configuration of the Database ...
1
vote
1answer
146 views

How does the ipv4 option “record route” work? [closed]

As written in the RFC 791 this option is useful to record the addresses of the routers that an ip datagram goes through. I'm sending an ip datagram with an ICMP echo message, i've set the option type ...
-4
votes
1answer
107 views

Capture location over ip? [closed]

I want to ask you is it possible to programm a programm (in python) that can track people over their ip adress. Or do you know a programm that can do it.
1
vote
1answer
390 views

How do I securely store a API key in a PC program? [duplicate]

I have a PC program which uses a API. I have the API key stored in the code, because there is no other way I can think of. Since I have no code/string obfuscator, how do I secure the API key, so no ...
0
votes
1answer
278 views

Are some programming languages more secure than others? [duplicate]

I'm going to write a program that stores passwords and was wondering which language would be good for this. Do languages really have an inherent security? People speak as if they do, for example: .....
0
votes
0answers
159 views

Detecting duplicate encrypted strings without iterating over entire data structure

I have a long list of a specific data structure, each entry contains an encrypted string (uses AES-GCM). I want to be able to detect duplicates efficiently, without iterating over the entire list. ...
-2
votes
2answers
2k views

How to encrypt a file with code? [closed]

How can I encrypt a file using my own programming code? I am a beginner, I want to learn encryption.
3
votes
2answers
243 views

Would the Cloudbleed have been prevented if Rust was used?

Would the Cloudbleed have been prevented if Rust was used? I know it is not the same as Heartbleed, but Rust would probably have prevented Heartbleed.
2
votes
1answer
7k views

Example Seed and Key Algorithm

I am attempting to design a seed and key algorithm for an Engine Control Unit. This is used to secure resources such as the ability to reprogram the ECU. The idea is that I request a seed from the ...
0
votes
0answers
31 views

Retrieve information about “memory protection”

I read in Wikipedia that there were two ways to achieve "memory protection" Access control lists "Traits" where a SUN processor used traits for pointer and the memory. That particular processor had ...
1
vote
1answer
216 views

What are some tactics to overcome the externality problem of developers not getting enough security training? [closed]

What are some 'pitches' to management to overcome security training issues?
0
votes
3answers
207 views

Why is security generally overlooked in application code until it's too late? [closed]

Programmers do not receive security training, is it due to costs? How can we overcome the externality problem?
1
vote
0answers
192 views

Libraries, functions, and tools that help with secure C/C++ programming on Linux [closed]

When writing software in a language such as C/C++, what tools/libraries/functions are available to help make the program more secure from exploitation on Linux? For example: one can use chroot() and ...
3
votes
1answer
174 views

Are there any IoT Systematic Creation Security Checklists?

Are you aware of any publicly available documents that would help IoT/Connected product creators develop a systematic/programmatic approach and/or process to securing such new age devices?
0
votes
1answer
281 views

Learning how to code advanced Windows malware [closed]

I often see advanced malware on Windows platform - rootkits, bootkits, web injection, formgrabbers, injecting into other processes etc... Some of this looks so difficult to understand. If you knew ...
2
votes
1answer
397 views

Dynamic forking of a process in win32 vs modern antiviruses

Most tutorials about crypters assume that popular antiviruses don't scan programs executed directly from memory. However from what I've seen, some of them (e.g. Nod32) are able to scan RAM in search ...
2
votes
3answers
968 views

How to prevent malicious DLL from getting used in LoadLibrary or DllImport (.NET) calls

I have a situation where malicious files are being copied to the installation directory of some software and the software will load those files when making a call to LoadLibrary or DllImport (in .NET ...
0
votes
2answers
765 views

Does Computer Programming and Hacking necessarily involve math? [closed]

Is it possible to study the subfield of Computer Programming and Hacking without being very good in Math? Apart from Cryptography and Computer Programming and Hacking - Are there any subfields of ...
0
votes
2answers
239 views

What is actually happening in the background when using such things as airmon? [closed]

Firstly: Apologies if this is not the relevant place to ask this, if not then some direction would be good (thank you). I have been interested in Information Security for some years now, but have ...
2
votes
2answers
2k views

Do high-level programming languages have more vulnerabilities or security risks than low-level languages? [closed]

Do high-level programming languages have more vulnerabilities or security risks than low-level programming languages and if so, why? Image source: http://a.files.bbci.co.uk/bam/live/content/znmb87h/...
3
votes
3answers
4k views

Is this integer overflow vulnerability exploitable?

Is this integer overflow exploitable and if the answer is yes, how can i exploit it? char buffer[20]; int len = atoi(argv[1]); if(len < 20) memcpy(buffer,argv[2],len); If I set len to -1 the ...