New answers tagged

1

Ethereum-style smart contracts are entirely public and immutable, whereas classic web APIs can have private data, private logic, and can be updated at any time by the server operator. Thus, we have different security goals in each setting. The important property of a smart contract is that it works exactly as expected. Since smart contracts might control ...


0

A smart contract is much more attractive to an attacker than most other forms of software. Their motivations are higher, because of the potential of acquiring something of high financial value. The potential scale of the reward is high as the contract automates financial transactions - the bug can be exploited multiple times, earning value each time. ...


1

Is this a secure model for a sever to server communication? Should I be considering other items? It's not. You are inventing a very complicated wheel after someone invented a better and simpler one decades ago. You must just use HTTPS as it is, nothing else is needed. Do I need to be worried about the security of accepting post data from php curl? For ...


1

Let's go through this step by step: Step 1.) User Registration This step seems perfectly fine. There are guidelines out there on what to keep in mind during user registration, but since that's not the focus of the question, let's just say you're doing fine. Step 2.) Login You say you use the PHP function password_hash() during login, but it should actually ...


Top 50 recent answers are included