Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.java.programmer > #27471 > unrolled thread
| Started by | Daniel Pitts <newsgroup.nospam@virtualinfinity.net> |
|---|---|
| First post | 2014-02-06 11:01 -0800 |
| Last post | 2014-02-08 10:16 -0800 |
| Articles | 4 — 2 participants |
Back to article view | Back to comp.lang.java.programmer
This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by
below is the oldest one visible, not the original post.
Re: Help with Security Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2014-02-06 11:01 -0800
Re: Help with Security Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2014-02-06 11:56 -0800
Re: Help with Security Roedy Green <see_website@mindprod.com.invalid> - 2014-02-07 01:56 -0800
Re: Help with Security Roedy Green <see_website@mindprod.com.invalid> - 2014-02-08 10:16 -0800
| From | Daniel Pitts <newsgroup.nospam@virtualinfinity.net> |
|---|---|
| Date | 2014-02-06 11:01 -0800 |
| Subject | Re: Help with Security |
| Message-ID | <4_QIu.388098$Wm1.175556@fx17.iad> |
On 2/6/14 12:10 AM, Chirag Sharma wrote: > "Hi > I have created a real time java code compiler at http://www.guru99.com/try-java-editor.html Although I have checked all security loopholes ... do you experts see any major security leak that I need to care of?" > Nope, you still fail. You are approaching this entirely wrong. If you try to black-list things you will miss something and open a serious vulnerability.
[toc] | [next] | [standalone]
| From | Daniel Pitts <newsgroup.nospam@virtualinfinity.net> |
|---|---|
| Date | 2014-02-06 11:56 -0800 |
| Message-ID | <aORIu.418536$_n7.225783@fx20.iad> |
| In reply to | #27471 |
On 2/6/14 11:01 AM, Daniel Pitts wrote: > On 2/6/14 12:10 AM, Chirag Sharma wrote: >> "Hi >> I have created a real time java code compiler at >> http://www.guru99.com/try-java-editor.html Although I have checked all >> security loopholes ... do you experts see any major security leak that >> I need to care of?" >> > > Nope, you still fail. You are approaching this entirely wrong. If you > try to black-list things you will miss something and open a serious > vulnerability. To clarify. I am still able to access any and all classes you thought you blocked. A string filter will not save you ever, because I can bypass it easily.
[toc] | [prev] | [next] | [standalone]
| From | Roedy Green <see_website@mindprod.com.invalid> |
|---|---|
| Date | 2014-02-07 01:56 -0800 |
| Message-ID | <ucb9f9hptt1nb331q2vnbsr12ni3hp47d2@4ax.com> |
| In reply to | #27471 |
On Thu, 06 Feb 2014 11:01:17 -0800, Daniel Pitts <newsgroup.nospam@virtualinfinity.net> wrote, quoted or indirectly quoted someone who said : >On 2/6/14 12:10 AM, Chirag Sharma wrote: >> "Hi >> I have created a real time java code compiler at http://www.guru99.com/try-java-editor.html Nit pick. Check spelling of separate. -- Roedy Green Canadian Mind Products http://mindprod.com Because a thing seems difficult for you, do not think it impossible for anyone to accomplish. ~ Marcus Aurelius 121-04-26 180-03-17
[toc] | [prev] | [next] | [standalone]
| From | Roedy Green <see_website@mindprod.com.invalid> |
|---|---|
| Date | 2014-02-08 10:16 -0800 |
| Message-ID | <k2tcf9tfvtg08ucb5mt5782s4e3hlkpqog@4ax.com> |
| In reply to | #27471 |
On Thu, 06 Feb 2014 11:01:17 -0800, Daniel Pitts <newsgroup.nospam@virtualinfinity.net> wrote, quoted or indirectly quoted someone who said : >Nope, you still fail. You are approaching this entirely wrong. If you >try to black-list things you will miss something and open a serious >vulnerability. Could you handle this with a policy file and the usual java security? -- Roedy Green Canadian Mind Products http://mindprod.com Because a thing seems difficult for you, do not think it impossible for anyone to accomplish. ~ Marcus Aurelius 121-04-26 180-03-17
[toc] | [prev] | [standalone]
Back to top | Article view | comp.lang.java.programmer
csiph-web