The tag has no wiki summary.

learn more… | top users | synonyms

129
votes
26answers
12k views

Is constantly looking for code examples a sign of a bad developer?

I am a CS student with several years of experience in C and C++, and for the last few years I've been constantly working with Java/Objective C doing app development and now I have switched to web ...
-7
votes
3answers
194 views

Is it possible to find a four-digit Username / Password by chance?

Imagine you have a login-form and it has two field : Username (Maximum length : 4 - digits only) Password (Maximum length : 4 - digits only) Is it possible to write a program to find the username ...
96
votes
10answers
24k views

Is Ken Thompson's compiler hack still a threat?

Ken Thompson Hack (1984) Ken Thompson outlined a method for corrupting a compiler binary (and other compiled software, like a login script on a *nix system) in 1984. I was curious to know if modern ...
6
votes
6answers
597 views

What are the cases where keeping source code secret is justified?

When I worked as a freelancer, I encountered lots of cases where customers were protecting their ideas and source code of their projects (such as web applications) as much as possible, no matter how ...
7
votes
10answers
874 views

What objections do you have to the term “hacker”? [closed]

I've been of the mind that hacker is just another name for programmer. Not one that you'd use when someone asks you what you do but one that could be used between a brother/sisterhood of programmers. ...
7
votes
3answers
1k views

What is the best way to learn how to develop secure applications?

I would like to get into computer security in my career. What are the best ways to learn how to program securely? It seems to me that, besides textbooks and taking classes in the subject, perhaps ...
31
votes
5answers
6k views

How easy is it to hack JavaScript (in a browser)?

My question has to do with JavaScript security. Imagine an authentication system where you're using a JavaScript framework like Backbone or AngularJS, and you need secure endpoints. That's not a ...
0
votes
2answers
178 views

How the hidden features being find?

Today I read about this news: http://www.karthikk.net/2013/04/google-glass-has-an-easter-egg-has-pictures-of-the-glass-team/ People found a hidden easter egg in the Google Glass... But how can they ...
0
votes
1answer
1k views

Why are Wordpress sites so easily hacked? [closed]

I have found that hacker can easily hack wordpress site. I have found this posts related to wordpress site hacking. 1) http://wordpress.org/support/topic/website-hacked-3 2) ...
13
votes
7answers
852 views

Are all security threats triggered by software bugs?

Most security threats that I've heard of have arisen due to a bug in the software (e.g. all input is not properly sanity checked, stack overflows, etc.). So if we exclude all social hacking, are all ...
4
votes
6answers
726 views

Is scanning the ports considered harmful? [closed]

If any application is scanning the ports of other machines, to find out whether any particular service/application is running, will it be considered harmful? Is this treated as hacking? How else can ...
3
votes
1answer
152 views

Is this possible to re-duplicate the hardware signal on Linux?

Since that every things is a file on the UNIX system. If I have a hardware, for example, a mouse, move from left corner to right corner, it should produce some kinds of file to communicate with the ...
10
votes
5answers
370 views

What are unique aspects of a software Lifecycle of an attack/tool on a software vulnerability?

At my local university, there is a small student computing club of about 20 students. The club has several small teams with specific areas of focus, such as mobile development, robotics, game ...
0
votes
5answers
2k views

Black Hat Hackers vs Programmers? [closed]

This came up with another question I had here, I have decided on a programming verification system that requires a hardware verification system, a software key, and a name/password system. Now ...
14
votes
10answers
2k views

If competition is using 'lingua obscura' for development (why) should I be worried?

I was reading Paul Graham's essay - Beating The Averages (2003) and here's what he had to say: The more of an IT flavor the job descriptions had, the less dangerous the company was. The safest ...
2
votes
1answer
277 views

Why is iOS “jailbreaking” CPU specific?

Recently, iOS 6 was "jailbroken" but only on the Apple A4 CPU. Why is the "jailbreaking" process specific to a CPU? From Wikipedia: ... "iOS jailbreaking is the process of removing the ...
1
vote
1answer
830 views

Belkin device runs Linux, how can I create my own custom firmware for it?

The Belkin N300 F9K1002 firmware is located here. It does not appear to be encrypted. How can I upload my own custom Linux firmware to this device. How would I go about hacking it?
0
votes
2answers
3k views

What is Perl's relation to hackers? [closed]

I know Perl is a language revered by many hackers (as in hacker vs cracker) and respected by many good programmers for its expressiveness. I also realize it is useful to know and it's very handy at ...
5
votes
5answers
389 views

How to shift development culture from tech fetish to focusing on simplicity and getting things done? [closed]

Looking for ways to switch team/individual culture from chasing latest fads, patterns, and all kinds of best practices to focusing on finding quickest and simplest solutions and shipping features. My ...
2
votes
2answers
976 views

Resources for C/C++ security (whitehat) hacking

I'm currently working as a C++ developer in a software security department, but not as a researcher or whitehat hacker. Security is an interest of mine, mainly in the areas where I can exploit code or ...
1
vote
5answers
1k views

How much programming skill should I have as a computer security expert?

I have a fairly comprehensive understanding of a program environment (from machine to code), however I have limited experience actually programming anything. Is this something I really need to work ...
-5
votes
1answer
134 views

Given some code, how can I learn where it loads resources from if the developer failed to document?

According to this tutorial OpenNI does not support custom gestures. However, Youtube has videos of people doing just that. Now, clearly this thing loads gestures from somewhere. How can I find out ...
1
vote
5answers
201 views

Computer security expert using pre-made tools or own?

As a digital security consultant when is it 'ok' to use tools someone else made (dumb to reinvent the wheel, right?) and when should I make my own?
2
votes
1answer
198 views

why is it easy to break verification images if they are not distorted to the extent that humans can get them wrong too?

I don't understand why people like to say "Images had to be distorted otherwise they would be easily cracked". I'm talking about those verification images that we had to type to identify that we are ...
6
votes
3answers
267 views

Possible hack aftermath

After being hacked companies often give numbers and details on how much of their data was compromised e.g "13K user and passwords". After a possible intrusion how do you know what the hacker did in ...
8
votes
2answers
523 views

Contributing to open source software (how to hack) [duplicate]

Possible Duplicate: How do you dive into large code bases? I am currently a student and started programming a few years ago. I am able to write complete working software in many languages. ...
4
votes
7answers
842 views

How does a website become hackable?

I know websites are hacked because of loose ends but how are they hacked via a form? Is it because the website owners didn't validate the form and the way they structured?
4
votes
6answers
358 views

Do you find yourself less sociable after a day of hacking? [closed]

I read a hypothesis somewhere, suggesting that maybe the parts of our brain which are exercised when hacking are the same ones which are required for handling basic social interaction, and politics. ...
8
votes
15answers
702 views

What is the common definition of a Hacker?

I'm wondering if the term Hacker means different things to different people. When most people hear the word hacker what are the first things that come to mind?
6
votes
6answers
485 views

How do I convince my boss that it's OK to use an application to access an outside website?

That is, if you agree that it's OK. We have a need to maintain an accurate internal record of bank routing numbers, and my boss wants me to set up a process where once a week someone goes to the ...
5
votes
4answers
476 views

What kind of things can you learn from a guy who only hacks existing code?

At my previous job I was the lead programmer and I worked with this guy who was a self-admitted hacker. We respected each other and had a great relationship. The company was much better off because we ...
3
votes
4answers
352 views

Are there laws to protect us from hackers who disclose vulnerabilities prior to alerting the vendor?

Take the example of the recent ASP.NET (and Java Server Faces) vulnerability disclosure at a Hacker conference in Brazil. It's my understanding that the poet tool was demonstrated before Microsoft ...