New answers tagged

0

Storing encrypted information in the app's database comes at the expense of inability to use power of SQL to retrieve/store information in a convenient way. Encrypted data can not be indexed. Because of that in order to search for a specific thing the application's server (or the app) needs to retrieve the whole block of data, decrypt it and then find what ...


1

It's probably not a security issue. For context, think about open source software. When you have an open source application, the application source code and database schema are completely public; anybody can take a look and review them in as fine a detail as they care to. Organizations stand up and run instances of that very same open source software all ...


0

Windows Integrated Security allows you to use the account already running the application to login to the database thus avoiding the need to put a password in the connection string inside the configuration file https://msdn.microsoft.com/en-us/ie/aa984236(v=vs.94)


1

No, it's not useful and I just tested it. Here's what I did. I tried to find a couple of malicious URLs. I ended up picking one to an exe file from https://malc0de.com/database/ , and one to a js file that was mentioned in the news not long ago (about an ongoing attack to Magento). Here are the links that show VirusTotal clearly detects those files and ...


2

No, from VirusTotal support: VirusTotal inspects items with over 70 antivirus scanners and URL/domain blacklisting services, in addition to a myriad of tools to extract signals from the studied content. If the attack you received was a SQL Injection, the best you could do is to fix the vulnerability that let the attacker to inject malicious code in your ...


Top 50 recent answers are included