New answers tagged databases
0
Storing encrypted information in the app's database comes at the expense of inability to use power of SQL to retrieve/store information in a convenient way. Encrypted data can not be indexed.
Because of that in order to search for a specific thing the application's server (or the app) needs to retrieve the whole block of data, decrypt it and then find what ...
1
It's probably not a security issue. For context, think about open source software. When you have an open source application, the application source code and database schema are completely public; anybody can take a look and review them in as fine a detail as they care to. Organizations stand up and run instances of that very same open source software all ...
0
Windows Integrated Security allows you to use the account already running the application to login to the database thus avoiding the need to put a password in the connection string inside the configuration file
https://msdn.microsoft.com/en-us/ie/aa984236(v=vs.94)
1
No, it's not useful and I just tested it. Here's what I did.
I tried to find a couple of malicious URLs. I ended up picking one to an exe file from https://malc0de.com/database/ , and one to a js file that was mentioned in the news not long ago (about an ongoing attack to Magento). Here are the links that show VirusTotal clearly detects those files and ...
2
No, from VirusTotal support:
VirusTotal inspects items with over 70 antivirus scanners and URL/domain blacklisting services, in addition to a myriad of tools to extract signals from the studied content.
If the attack you received was a SQL Injection, the best you could do is to fix the vulnerability that let the attacker to inject malicious code in your ...
Top 50 recent answers are included
