The tag has no usage guidance.

learn more… | top users | synonyms

-4
votes
1answer
116 views

Hacking software development in Java [closed]

Is there a good tutorial about hacking in Java? Is it even possible? And if yes where do i start? I am programming a website with database in hibernate using Java, Struts 2, TomCat. And wondering how ...
6
votes
6answers
847 views

What are the cases where keeping source code secret is justified?

When I worked as a freelancer, I encountered lots of cases where customers were protecting their ideas and source code of their projects (such as web applications) as much as possible, no matter how ...
34
votes
5answers
8k views

How easy is it to hack JavaScript (in a browser)?

My question has to do with JavaScript security. Imagine an authentication system where you're using a JavaScript framework like Backbone or AngularJS, and you need secure endpoints. That's not a ...
-3
votes
2answers
210 views

How the hidden features being find? [closed]

Today I read about this news: http://www.karthikk.net/2013/04/google-glass-has-an-easter-egg-has-pictures-of-the-glass-team/ People found a hidden easter egg in the Google Glass... But how can they ...
106
votes
10answers
29k views

Is Ken Thompson's compiler hack still a threat?

Ken Thompson Hack (1984) Ken Thompson outlined a method for corrupting a compiler binary (and other compiled software, like a login script on a *nix system) in 1984. I was curious to know if modern ...
13
votes
7answers
868 views

Are all security threats triggered by software bugs?

Most security threats that I've heard of have arisen due to a bug in the software (e.g. all input is not properly sanity checked, stack overflows, etc.). So if we exclude all social hacking, are all ...
3
votes
1answer
158 views

Is this possible to re-duplicate the hardware signal on Linux?

Since that every things is a file on the UNIX system. If I have a hardware, for example, a mouse, move from left corner to right corner, it should produce some kinds of file to communicate with the ...
10
votes
5answers
384 views

What are unique aspects of a software Lifecycle of an attack/tool on a software vulnerability?

At my local university, there is a small student computing club of about 20 students. The club has several small teams with specific areas of focus, such as mobile development, robotics, game ...
2
votes
1answer
286 views

Why is iOS “jailbreaking” CPU specific?

Recently, iOS 6 was "jailbroken" but only on the Apple A4 CPU. Why is the "jailbreaking" process specific to a CPU? From Wikipedia: ... "iOS jailbreaking is the process of removing the ...
-1
votes
1answer
1k views

Belkin device runs Linux, how can I create my own custom firmware for it? [closed]

The Belkin N300 F9K1002 firmware is located here. It does not appear to be encrypted. How can I upload my own custom Linux firmware to this device. How would I go about hacking it?
3
votes
6answers
788 views

Is scanning the ports considered harmful? [closed]

If any application is scanning the ports of other machines, to find out whether any particular service/application is running, will it be considered harmful? Is this treated as hacking? How else can ...
141
votes
26answers
14k views

Is constantly looking for code examples a sign of a bad developer?

I am a CS student with several years of experience in C and C++, and for the last few years I've been constantly working with Java/Objective C doing app development and now I have switched to web ...
14
votes
10answers
2k views

If competition is using 'lingua obscura' for development (why) should I be worried? [closed]

I was reading Paul Graham's essay - Beating The Averages (2003) and here's what he had to say: The more of an IT flavor the job descriptions had, the less dangerous the company was. The safest ...
-5
votes
1answer
153 views

Given some code, how can I learn where it loads resources from if the developer failed to document?

According to this tutorial OpenNI does not support custom gestures. However, Youtube has videos of people doing just that. Now, clearly this thing loads gestures from somewhere. How can I find out ...
-1
votes
5answers
210 views

Computer security expert using pre-made tools or own? [closed]

As a digital security consultant when is it 'ok' to use tools someone else made (dumb to reinvent the wheel, right?) and when should I make my own?
3
votes
1answer
206 views

why is it easy to break verification images if they are not distorted to the extent that humans can get them wrong too?

I don't understand why people like to say "Images had to be distorted otherwise they would be easily cracked". I'm talking about those verification images that we had to type to identify that we are ...
5
votes
3answers
290 views

Possible hack aftermath [closed]

After being hacked companies often give numbers and details on how much of their data was compromised e.g "13K user and passwords". After a possible intrusion how do you know what the hacker did in ...
8
votes
2answers
590 views

Contributing to open source software (how to hack) [duplicate]

Possible Duplicate: How do you dive into large code bases? I am currently a student and started programming a few years ago. I am able to write complete working software in many languages. ...
3
votes
6answers
986 views

How does a website become hackable? [closed]

I know websites are hacked because of loose ends but how are they hacked via a form? Is it because the website owners didn't validate the form and the way they structured?
8
votes
3answers
1k views

What is the best way to learn how to develop secure applications?

I would like to get into computer security in my career. What are the best ways to learn how to program securely? It seems to me that, besides textbooks and taking classes in the subject, perhaps ...
7
votes
15answers
736 views

What is the common definition of a Hacker? [closed]

I'm wondering if the term Hacker means different things to different people. When most people hear the word hacker what are the first things that come to mind?
5
votes
4answers
508 views

What kind of things can you learn from a guy who only hacks existing code? [closed]

At my previous job I was the lead programmer and I worked with this guy who was a self-admitted hacker. We respected each other and had a great relationship. The company was much better off because we ...
3
votes
4answers
365 views

Are there laws to protect us from hackers who disclose vulnerabilities prior to alerting the vendor?

Take the example of the recent ASP.NET (and Java Server Faces) vulnerability disclosure at a Hacker conference in Brazil. It's my understanding that the poet tool was demonstrated before Microsoft ...