The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
70 views

What is the best way to present a portfolio of practice/training security research? [on hold]

I keep a security research blog as a hobby, and finding out about all the ways one shouldn't code has helped me a lot in my career as a software developer. I would like to attribute my blog to a ...
-2
votes
1answer
93 views

How would I go about editing memory in a Process via C++ DLL Injection? [on hold]

How would I go about editing memory in a Process via C++ DLL Injection? More specifically, how could one find the target location of the stored memory, and edit it using a C++ DLL that gets injected ...
0
votes
0answers
14 views

Storing a WCF endpoint in the registry - worried about security

I am storing my wcf endpoint in the registry, and using that whenever my app starts up to instantiate a wcf derived object. The user can change the endpoint location, to another server, and the ...
-7
votes
3answers
230 views

Is it possible to find a four-digit Username / Password by chance?

Imagine you have a login-form and it has two field : Username (Maximum length : 4 - digits only) Password (Maximum length : 4 - digits only) Is it possible to write a program to find the username ...
6
votes
6answers
664 views

What are the cases where keeping source code secret is justified?

When I worked as a freelancer, I encountered lots of cases where customers were protecting their ideas and source code of their projects (such as web applications) as much as possible, no matter how ...
31
votes
5answers
6k views

How easy is it to hack JavaScript (in a browser)?

My question has to do with JavaScript security. Imagine an authentication system where you're using a JavaScript framework like Backbone or AngularJS, and you need secure endpoints. That's not a ...
-3
votes
2answers
200 views

How the hidden features being find? [closed]

Today I read about this news: http://www.karthikk.net/2013/04/google-glass-has-an-easter-egg-has-pictures-of-the-glass-team/ People found a hidden easter egg in the Google Glass... But how can they ...
97
votes
10answers
25k views

Is Ken Thompson's compiler hack still a threat?

Ken Thompson Hack (1984) Ken Thompson outlined a method for corrupting a compiler binary (and other compiled software, like a login script on a *nix system) in 1984. I was curious to know if modern ...
13
votes
7answers
859 views

Are all security threats triggered by software bugs?

Most security threats that I've heard of have arisen due to a bug in the software (e.g. all input is not properly sanity checked, stack overflows, etc.). So if we exclude all social hacking, are all ...
3
votes
1answer
152 views

Is this possible to re-duplicate the hardware signal on Linux?

Since that every things is a file on the UNIX system. If I have a hardware, for example, a mouse, move from left corner to right corner, it should produce some kinds of file to communicate with the ...
10
votes
5answers
375 views

What are unique aspects of a software Lifecycle of an attack/tool on a software vulnerability?

At my local university, there is a small student computing club of about 20 students. The club has several small teams with specific areas of focus, such as mobile development, robotics, game ...
0
votes
5answers
2k views

Black Hat Hackers vs Programmers? [closed]

This came up with another question I had here, I have decided on a programming verification system that requires a hardware verification system, a software key, and a name/password system. Now ...
2
votes
1answer
279 views

Why is iOS “jailbreaking” CPU specific?

Recently, iOS 6 was "jailbroken" but only on the Apple A4 CPU. Why is the "jailbreaking" process specific to a CPU? From Wikipedia: ... "iOS jailbreaking is the process of removing the ...
-1
votes
1answer
963 views

Belkin device runs Linux, how can I create my own custom firmware for it? [closed]

The Belkin N300 F9K1002 firmware is located here. It does not appear to be encrypted. How can I upload my own custom Linux firmware to this device. How would I go about hacking it?
4
votes
6answers
738 views

Is scanning the ports considered harmful? [closed]

If any application is scanning the ports of other machines, to find out whether any particular service/application is running, will it be considered harmful? Is this treated as hacking? How else can ...
134
votes
26answers
13k views

Is constantly looking for code examples a sign of a bad developer?

I am a CS student with several years of experience in C and C++, and for the last few years I've been constantly working with Java/Objective C doing app development and now I have switched to web ...
14
votes
10answers
2k views

If competition is using 'lingua obscura' for development (why) should I be worried? [closed]

I was reading Paul Graham's essay - Beating The Averages (2003) and here's what he had to say: The more of an IT flavor the job descriptions had, the less dangerous the company was. The safest ...
0
votes
2answers
1k views

Resources for C/C++ security (whitehat) hacking [closed]

I'm currently working as a C++ developer in a software security department, but not as a researcher or whitehat hacker. Security is an interest of mine, mainly in the areas where I can exploit code or ...
-5
votes
1answer
141 views

Given some code, how can I learn where it loads resources from if the developer failed to document?

According to this tutorial OpenNI does not support custom gestures. However, Youtube has videos of people doing just that. Now, clearly this thing loads gestures from somewhere. How can I find out ...
-1
votes
5answers
209 views

Computer security expert using pre-made tools or own? [closed]

As a digital security consultant when is it 'ok' to use tools someone else made (dumb to reinvent the wheel, right?) and when should I make my own?
2
votes
1answer
201 views

why is it easy to break verification images if they are not distorted to the extent that humans can get them wrong too?

I don't understand why people like to say "Images had to be distorted otherwise they would be easily cracked". I'm talking about those verification images that we had to type to identify that we are ...
5
votes
3answers
279 views

Possible hack aftermath [closed]

After being hacked companies often give numbers and details on how much of their data was compromised e.g "13K user and passwords". After a possible intrusion how do you know what the hacker did in ...
8
votes
2answers
541 views

Contributing to open source software (how to hack) [duplicate]

Possible Duplicate: How do you dive into large code bases? I am currently a student and started programming a few years ago. I am able to write complete working software in many languages. ...
3
votes
6answers
898 views

How does a website become hackable? [closed]

I know websites are hacked because of loose ends but how are they hacked via a form? Is it because the website owners didn't validate the form and the way they structured?
7
votes
3answers
1k views

What is the best way to learn how to develop secure applications?

I would like to get into computer security in my career. What are the best ways to learn how to program securely? It seems to me that, besides textbooks and taking classes in the subject, perhaps ...
5
votes
6answers
500 views

How do I convince my boss that it's OK to use an application to access an outside website? [closed]

That is, if you agree that it's OK. We have a need to maintain an accurate internal record of bank routing numbers, and my boss wants me to set up a process where once a week someone goes to the ...
7
votes
15answers
721 views

What is the common definition of a Hacker? [closed]

I'm wondering if the term Hacker means different things to different people. When most people hear the word hacker what are the first things that come to mind?
5
votes
4answers
493 views

What kind of things can you learn from a guy who only hacks existing code? [closed]

At my previous job I was the lead programmer and I worked with this guy who was a self-admitted hacker. We respected each other and had a great relationship. The company was much better off because we ...
3
votes
4answers
356 views

Are there laws to protect us from hackers who disclose vulnerabilities prior to alerting the vendor?

Take the example of the recent ASP.NET (and Java Server Faces) vulnerability disclosure at a Hacker conference in Brazil. It's my understanding that the poet tool was demonstrated before Microsoft ...