Questions tagged [network-security]

For questions relating to network security, local or internet, with respect to programming. Not a stand alone tag. To be used with other tags indicating language and technologies used.

For questions relating to network security, local or internet, with respect to programming. Not a stand alone tag. To be used with other tags indicating language and technologies used.

Some examples: , , ,

183 questions
76
votes
9 answers

Sniffing an Android app to find API URL

I'm curious as to how I could figure out the API URL an Android application (any app I have installed) uses if it makes API calls to some online server (a RESTful service for example). I presume I have to capture packets on the device and maybe…
27
votes
3 answers

How to install Atom packages offline or when the atom package manager doesn't work?

I have a computer behind a very restrictive proxy server it only allows me to surf the web and download programs it does not allow programs like the Atom text editor to download it's packages. My question is how do I install them using only browser…
Lendion
  • 307
  • 1
  • 3
  • 9
21
votes
4 answers

Why can't torrent traffic be encrypted?

The goal of this question is that I am just trying to better understand the nature of P2P and networking and security / encryption. I am a front-end web developer and my knowledge of the networking stack is not great if we go lower than HTTP…
8
votes
2 answers

Impersonate user over a VPN in a desktop application

I'm having problems trying to impersonate an active directory user in a desktop application. Every time I use the LogOn API the result is false. The user and domain do exist since I can also authenticate the user over the…
8
votes
1 answer

NGINX bind to a specific network interface, regardless of IP address

Is there a way to make Nginx 1.11 bind to a specific interface regardless of the IP address? I've got a home gateway to an ISP provider; it uses DHCP client to obtain its dynamic IP address. I do not know what that IP address is at NGINX…
John Greene
  • 2,239
  • 3
  • 26
  • 37
6
votes
1 answer

Enable forwarding from Docker containers to the outside world

I've been wondering why docker installation does not enable by default port forwarding to containers. To save you a click, what I mean is: $ sysctl net.ipv4.conf.all.forwarding=1 $ sudo iptables -P FORWARD ACCEPT I assume it is some sort of…
6
votes
6 answers

How to detect inbound HTTP requests sent anonymously via Tor?

I'm developing a website and am sensitive to people screen scraping my data. I'm not worried about scraping one or two pages -- I'm more concerned about someone scraping thousands of pages as the aggregate of that data is much more valuable than a…
Drew Noakes
  • 300,895
  • 165
  • 679
  • 742
6
votes
0 answers

NogotoFail Android

Nogotofail was recently released by Google and I want to use it to test an Android App I created that connects to a C# server. I read through the documentation and I'm confused on how to use it. I have ubuntu running as a virtualbox machine on my…
Bnaffy
  • 129
  • 3
  • 14
5
votes
2 answers

Securing parts of an HTTP request?

How does one go about securing parts of an HTTP request, say their Session ID? I know you can use HTTPS, but then your servers must decrypt all of the request. Wouldn't it be ideal to only encrypt the required parts of a request? Are there any…
Brian DiCasa
  • 9,369
  • 18
  • 65
  • 97
5
votes
2 answers

Eliminate: ISP Injects Pages with Iframe Script for Ads

So my ISP (Smartfren; Indonesia) has decided to start injecting all non-SSL pages with an iframing script that allows them to insert ads into pages. Here's what's happening: My browser sends a request to the server. ISP intercepts it and instead…
Markus AO
  • 4,771
  • 2
  • 18
  • 29
4
votes
2 answers

Phantomjs not able to open certain URLs

I am using the following code to take screenshot of a page using phantomjs. It works perfectly for most of the pages but shows a "Operation canceled" error for some URLs. var page = require('webpage').create(), system =…
Surender Thakran
  • 3,958
  • 11
  • 47
  • 81
3
votes
2 answers

Best way to prevent denial of service attacks on a website

I have a web app and I would like to prevent DOS attacks by blocking an IP address if it make many request in a short period of time. For example, if the same IP address makes 100 request in a second, I can assume that it's some kind of attack and I…
Martin Zugnoni
  • 1,439
  • 2
  • 14
  • 21
3
votes
2 answers

How can I ensure that TCP traffic is proxied by the Envoy sidecar when using Istio on Kubernetes?

Istio on Kubernetes injects an Envoy sidecar to run alongside Pods and implement a service mesh, however Istio itself cannot ensure traffic does not bypass this proxy; if that happens Istio security policy is no longer applied. Therefore, I am…
3
votes
1 answer

Should I be concerned about python 3.6 having no code signature?

I recently downloaded a program that monitors all incoming and outgoing connections and let's me assign firewall rules on the fly. It also conveniently checks the code signature of programs to verify I am not unknowingly running a modified program.…
3
votes
2 answers

SID in Active Directory

I am working with a Windows Active directory environment. The SID is the combination of Domain ID and RID. I found that there can be a maximum of 2^32 RID for a domain. However, the Domain ID can be even more than 32 bits. Also it seems that domain…
Anand
  • 693
  • 1
  • 8
  • 26
1
2 3
12 13