New answers tagged aes
0
I'll add a couple of suggestions. First: you need to understand who is the attacker.
My reasoning is: if someone gets access to the folder, he will not be able to see which file belongs to which member.
That's alright, but how did they acquire access to the folder? If your web application was compromised and the attacker achieved remote code execution – ...
0
I am not good at crypto either so edit or comment below if i get it wrong.
The first and foremost thing you need to get right is APPLICATION LOGIC.
By that i mean the logic should have effective controls such that my image should not accessible by anyone else to begin with.For example if http://example.com/imgid=(GID),Now no matter what the GID is,my image ...
3
If you use multiple password hashing algorithms independent of each other to process the same password, then passwords are protected only as well as the weakest algorithm protects them. PBKDF2 is easier to crack than Argon2. An attacker with only a few bytes of ciphertext can then bruteforce passwords, attacking just PBKDF2 and bypassing Argon2.
If you ...
1
This original answer was to use HTTP/SSL/TLS to encrypt the information between the PHP server and NodeJS client and to use basic authentication in the HTTPS request.
However from the conversation in the comments to this answer the server and clients are already using HTTPS to secure the traffic between the server and the client.
Therefore as long as the ...
Top 50 recent answers are included
