Questions tagged [whitelist]
A whitelist shows data that specifically is allowed. All other data (not on the whitelist) will be filtered out or ignored. A whitelist is the opposite of a blacklist. - Whitelist - only these things. - Blacklist - everything but these things.
70
questions
2
votes
2
answers
359
views
Vulnerability scanning: White list pentester or not?
If your company engages a third party pentester to do vulnerability scanning, do you
whitelist the pentester so that they can thoroughly scan the machines on the internet, or
do not whitelist them ...
- 1,931
0
votes
1
answer
4k
views
WiFi Network Whitelisting?
At school we have a school-wide LAN network. It connects all the wireless devices to the internet. I've gotten the wireless pass code and have successfully connected to the network, yet I can't use ...
- 121
2
votes
1
answer
5k
views
How to handle a remote office and a client requiring IP Whitelisting?
.NET Developer here, out of my comfort zone on this one.
My software company is going remote, where employees can work from home, Starbucks, a Regus office, Spain, anywhere really. One of our ...
- 123
3
votes
1
answer
4k
views
Is it safe to whitelist CDN domains?
I am trying to whitelist URLs for my PC but I want to eventually roll out the rules to my small company's firewall.
But I'm having trouble with CDNs since a page may load content from many distinct ...
- 133
5
votes
2
answers
1k
views
How practicable is application whitelisting
I understand that application whitelisting is better and more accurate than black listing. However, my question is, if you whitelist a directory, won't the malware also be able execute in that ...
- 1,931
2
votes
1
answer
1k
views
Whitelist for HTTP request
Malicious request can come in the form of user agent string, referrer or cookie. To prevent being pawned by zero day attacks such as Shellshock, I have created a whitelist of characters for user agent ...
- 21
44
votes
5
answers
11k
views
Is blocking a country's access to a website a good measure to avoid hackers from that country?
I am located in Venezuela right now, and for the whole weekend have been unable to access grubhub.com and seamless.com.
Finally, I tried using the Tor Browser and got access. The same thing happened ...
- 548
1
vote
2
answers
2k
views
Shellshock plus sudo/su environment whitelist bypass - big problem?
The question is: How big a problem is this? Looks pretty big to me.
With the shellshock bug it is possible to bypass the whitelist of known-harmless environment variables in sudo, as well as other ...
- 3,717
-1
votes
1
answer
2k
views
Open list of adult websites for child internet [closed]
Looking for any open and dynamic list(blacklist) of
adult,dangerous,+18,sucide,drugs etc web resources
to filter it in intranet for children security in internet
- 11
4
votes
2
answers
5k
views
Is IP whitelist sufficient to protect a server? [closed]
I am currently using a server 1 managing incoming traffic from users and a server 2 managing database requests from server 2. Both servers are accesible via Internet. Would IP whitelisting be a ...
- 141
2
votes
1
answer
2k
views
Is htaccess secure enought to whitelist clients IPs?
I'm using .htaccess to control source IP of connections to my web application. My configuration looks more or less like this:
order deny,allow
deny from all
allow from X.Y.Z.Q
These days we can ...
- 1,625
8
votes
4
answers
4k
views
Outbound proxy which whitelists by server certificate?
Short version:
Are you aware of any proxy or firewall device which will permit outbound SSL connections to hosts with approved* SSL certificates only?
Long version:
Consider the following scenario....
- 72.5k
1
vote
2
answers
1k
views
How to uniquely identify / tag client devices to whitelist VPN access?
I'm just wondering if there is any way to uniquely identify or tag client devices like laptops and towers in order to whitelist them for vpn access.
(Note: This is a thought-experiment at the moment, ...
- 280
4
votes
3
answers
2k
views
Lua loadstring, whitelisting against injection
I need to take input from the user of a simple bit of math, they want to solve.
Rather than parse there input myself, I want to just use the lua, loadstring function to load their input and evaluate ...
3
votes
2
answers
389
views
It it a good idea to whitelist inbound email using a Hash on the address? (Similar to BATV, but with DKIM)
Problem Statement
I'm looking at ways to ensure that business partners, or emails from trusted senders, never get quarantined; ....in other words prevent "ham being seen as spam". Ideally this ...
- 50.6k
11
votes
1
answer
11k
views
How to whitelist an Amazon ELB in a(ny) firewall?
We have a customer with a very locked-down network. Any outbound connections require whitelisting of the port and IP address.
However, we are running our system behind an Amazon Elastic Load Balancer ...
- 283
2
votes
3
answers
248
views
State before getting whitelisted?
There is a data flow of incoming files (from untrusted, external sources), that get whitelisted by a kind of application layer firewall.
Is there a common name for the state of the files before they ...
- 326
6
votes
5
answers
19k
views
Blacklisting vs. whitelisting characters to prevent XSS?
I've been reading about XSS prevention on OWASP and other security channels. They all say that I should use ESAPI or a similar library and do input filtering through a whitelist approach.
However, I ...
- 2,088
11
votes
3
answers
3k
views
White list or black list sanitation for international input?
There seem to be so many ways to create nefarious input that white-listing what input is good usually feels like the safer, simpler option.
For instance, one can fairly easily craft a white list ...
- 213
2
votes
2
answers
533
views
Protecting websites from outdated browsers and plugins via a whitelist/blacklist combination?
Aside from using browser headers, I want to blacklist/whitelist browser and plugins from my site so that I can prevent these older unpatched systems from (1) being a general user of my site (2) ...
- 50.6k