Top "Security" questions

Topics relating to application security and attacks against software.

java.security.AccessControlException: Access denied (java.io.FilePermission

final File parentDir = new File("S:\\PDSPopulatingProgram"); parentDir.mkdir(); final String hash = "popupateData"; final String fileName = hash + ".txt"; final File …

java security file-io file-permissions accesscontrolexception
How to securely save username/password (local)?

I'm making a Windows application, which you need to log into first. The account details consist of username and password, …

c# security local
What is the App_Data folder used for in Visual Studio?

When creating a new ASP.NET application in Visual Studio, a couple of files and folders are created automatically. One …

asp.net .net visual-studio security app-data
Why would one omit the close tag?

I keep reading it is poor practice to use the PHP close tag ?> at the end of the file. …

php security http-headers
Are HTTP cookies port specific?

I have two HTTP services running on one machine. I just want to know if they share their cookies or …

security http cookies
If you can decode JWT, how are they secure?

If I get a JWT and I can decode the payload, how is that secure? Couldn't I just grab the …

security jwt express-jwt
SPA best practices for authentication and session management

When building SPA style applications using frameworks like Angular, Ember, React, etc. what do people believe to be some best …

security angularjs authentication ember.js single-page-application
How to convert SecureString to System.String?

All reservations about unsecuring your SecureString by creating a System.String out of it aside, how can it be done? …

c# .net security encryption
How are ssl certificates verified?

What is the series of steps needed to securely verify a ssl certificate? My (very limited) understanding is that when …

algorithm security ssl certificate
How to remove ASP.Net MVC Default HTTP Headers?

Each page in an MVC application I'm working with sets these HTTP headers in responses: X-Powered-By: ASP.NET X-AspNet-Version: 2.0.50727 X-AspNetMvc-Version: 2.0 …

asp.net-mvc security http-headers