Questions tagged [code-access-security]

Code-access security is security specific to limiting access to or protecting source code, through the use of processes such as encryption, obfuscation, and more.

Code-access security is security specific to limiting access to or protecting source code, through the use of processes such as , , and more. The goal of code-access security is most often to protect functionality from competitors, to prevent reverse-engineering, or to preserve integrity of program communication protocols.

For more on obfuscation:

Note that security questions which are not about a specific programming problem may be better suited to our sister site, IT Security Stack Exchange.

337 questions
0
votes
0 answers

Claims permission check fails when ClaimsPrincipalPermission is applied to class & method within it

I have the following class: [ClaimsPrincipalPermission(SecurityAction.Demand, Operation = "view", Resource = "agreement")] public class AgreementViewModel : Screen { [ClaimsPrincipalPermission(SecurityAction.Assert, Operation = "save", Resource…
Andrew Stakhov
  • 1,105
  • 8
  • 26
0
votes
2 answers

How safe are "secret" keys in Windows 8 (WinJs) apps?

I'm doing a hobby project Windows 8 app in WinJS. As I'm calling an external api, which requires an api key and oauth authentication, I've got a number of keys that I need to keep "secret". I've seen places around the web with detailed descriptions…
Ola Karlsson
  • 9,011
  • 7
  • 27
  • 37
0
votes
1 answer

Generating serial or hex code for product licensing

Is there way to generate serial/hex code something like: xxxx-xxxx-xxxx-xxxx-xxxx-xxxx using java api? when product decipher the code it should able to extract Name Validity Mac Address Additional information Code will be generated based on…
gpa
  • 2,411
  • 6
  • 38
  • 68
0
votes
0 answers

Two errors with conflict solutions

I am not good at GWT. I connected my eclipse to hosting server database through Database development perspective successfully. I am able to see tables of my hosting database from the eclipse window. I then tried to run Blob Example program in…
siri
  • 71
  • 5
0
votes
1 answer

RMI codebase setting issue

Every thing works just fine as both the Client and server runs on the same system,, but as i run one of them on a remote m/c,well i am using vmware for that, Client is not able to locate server's stub and server is not able to locate clients classes…
pcc
  • 81
  • 1
  • 1
  • 8
0
votes
1 answer

Can I get APP_KEY and SECURE_KEY from Dropbox API directly, e.t.c. keep user blind?

I need to create application with single file storage. But I need to upload/download files with simple functionality, in way something like that: user install application, simply enter login and password and he gets immediately operations to upload…
Alex P
  • 17
  • 3
0
votes
1 answer

I need to prevent the use of reflection to get a private Properties field from a superclass. How can I use the Java security manager to do this

I have an unusual super class. it instantiates the subclass using reflection, and calls a subclass method in the main method ie, String processor= System.getProperty(PROCESSOR_CLASS); sub = (ClassName)…
user1741202
  • 121
  • 1
  • 1
  • 6
0
votes
1 answer

Access Rights for Page In openerp 7

I want to give readonly permission to "Contacts" page which is inside res_partner I inherited that view and in my new xml I mentioned grp_partner -> my module name group_readonly_supplier -> I created one group inside that module having only read…
0
votes
0 answers

Disable Java applet protection

I am building an applet for my online reservation system. The staff members can add money and do transactions at the back end of my system. They communicate with the system via a secured website. When they do a transaction, they are asked to input…
Joël Craenhals
  • 475
  • 7
  • 19
0
votes
1 answer

edit & compile source without a copy being stored in disk memory

I want to keep only a few copies of source of password hashing and logins for the database & other sites physically with me for maximum security. How can I edit and compile the source without a copy ever making it onto disk. In other words, is…
user1382306
0
votes
1 answer

Why CAS 2.0 Framework doesn't work?

I'm playing with CAS in Framework 2.0 (I know that it's obsolete). I have following code, that I'm trying hard to crash. I've compiled project in 2.0 framework: using System; using System.Security; using System.Security.Permissions; namespace…
nikita
  • 2,737
  • 2
  • 20
  • 26
0
votes
1 answer

How to prevent a change to a Java system property (in Java EE)?

An application I maintain uses a third-party commercial EJB implementation. I do not have the ability to change the source code, but I can read it. I have determined that the source code of the EJB is setting a specific implementation of…
Brian
  • 13,412
  • 10
  • 56
  • 82
0
votes
1 answer

Security Transparent alternative for RuntimeHelpers.PrepareDelegate

I need to pre-JIT some emitted delegates ahead of time and tried using the RuntimeHelpers.PrepareDelegate for this, but this method is marked with the SecurityCritical attribute. My assembly is marked with the AllowPartiallyTrustedCallers attribute…
Steven
  • 166,672
  • 24
  • 332
  • 435
0
votes
1 answer

C# webservice and Android app: how prevent illegal accesses

I'm using (with satisfaction) some web services from an Android application. I use https (I bought a SSL certificate). I want to prevent unwanted accesses from others that know the urls of my web services. I use a "secret key" that the app must…
Seraphim's
  • 12,559
  • 20
  • 88
  • 129
0
votes
1 answer

Securing uploaded files in PHP

I have a site with user logins and sessions. I'd like to allow my users to upload files to the webserver, but only have them available for their login. I understand if I upload to some sort of public web directory that the file would be still…
916 Networks
  • 545
  • 3
  • 10
  • 18