In a bunch of APIs, there are several possible query parameters. Some of these may be PHI. So even if we are using HTTPS, they could go to a logfile or somewhere else and hence violate PHI.
Was thinking of an approach where the paramete…
I have a piece of software that monitors C:\Folder1. It keeps it in sync with C:\Folder2. It encrypts everything in C:\Folder2.
I want to sync Folder2 to my Google Drive. But this additional encryption step is silly if they could scan my …
I’m modifying an ASPNET MVC 5 web site and a requirement is to allow users to upload an XML and PDF file.
The XML file will be used to layout text on the PDF based on variables coming from within the system.
I have a schema for the XML …
Type: Threat AnalysisResurgent Iron Liberty Targeting Energy SectorSince at least 2010, the IRON LIBERTY threat group has targeted the energy sector with a particular focus on industrial control systems (ICS).
Type: Threat AnalysisMCMD Malware AnalysisMCMD’s primary function is to provide a remote command shell capability to support existing tools such as Karagany that do not provide it natively. Learn more about MCMD.
Type: Threat AnalysisUpdated Karagany Malware Targets Energy SectorSee how the Karagany malware is still under active development as of July 2018, including updates to the core RAT component, as well as changes to the number of plugins commonly used in…
I need to send verification emails for things like
email verification
password reset
email change
password change
In the past most webapps would send an email with a clickable verification link that I’d click to go back to the site an…
In this series, we have explored the need for proactive measures to eliminate a class of vulnerabilities and walked through some examples of memory safety issues we’ve found in Microsoft code that could have been avoided with a different language. Now …
In our first post in this series, we discussed the need for proactively addressing memory safety issues. Tools and guidance are demonstrably not preventing this class of vulnerabilities; memory safety issues have represented almost the same proportion …
Let’s say I want to allow the customers of my website to upload PDF documents. What would be more safe to:
Convert the PDF to image using a library and store it in my file server as an image? Can the process of converting a potentially ma…
