|
dear mav,
thanx for replying so fast.
i can't disable the web server yaar. i have to use the 80 port while enable the web server.
if i will select other port than 80 then what about the security of that port. suppose i select the port 10800 then if firewall has disabled this port then user has to enable it.
because of this there can be chance of hacking too. because anybody can get in with the help of that port which is enabled.
please tell me what should i say to my seniors regarding this problem.
they dont want to open the special port for the application.
ok, tell me one thing if u can that how much chance of hacking is there, if any port is opened by any company. because on 80 port there is no chance of hacking.
please give me some solution for this.
thanx again for replying.
Gagan Deep Singla
Chandigarh - INDIA
|
|
|
|
|
Gagan Deep Singla wrote:
ok, tell me one thing if u can that how much chance of hacking is there, if any port is opened by any company. because on 80 port there is no chance of hacking.
Why can’t port 80 be hacked like any other port? Most web servers have been written with security in mind. When you create your server you’re going to need to put the same thought in to security as everyone else. There are no shortcuts here.
So use another port, if your customers really want this app they will open that port for your application. Just do your home work about what’s needed to keep your data safe.
-------------------------------
DEBUGGING : Removing the needles from the haystack.
|
|
|
|
|
thanx sir,
thanx for giving me response.
now i am using some other port like 10800.
thanx a lot.
bye
Gagan Deep Singla
Chandigarh - INDIA
|
|
|
|
|
Rehi!
I guess you're not really familiar with what's neccessary to "hack a port" (and neither are your seniors it seems...)
A port is just a communication facility, regardless of its port number.
A port itself cannot be "hacked", it's the application that's listening on that port that can be hacked, for example by sending especially prepared malicious network packets over this port. The application receives the packets and freaks out, performing actions it's not designed to do.
When your webserver is running on port 80, it can be hacked as easily or as hard as it can be hacked when it's running on port 8080.
When your application wants to communicate via a certain port, this port has to be accessable from outside and a firewall has to allow access to this port, but this doesn't mean whatever is running over this port is secure. It just means that the firewall is trusting your application not to perform malicious tasks that can be controlled or triggered by receiving network traffic via the open port.
Hope this cleared things up a bit.
Regards,
mav
|
|
|
|
|
thanx sir,
thanx for giving me response.
now i am using some other port like 10800.
thanx a lot.
bye
Gagan Deep Singla
Chandigarh - INDIA
|
|
|
|
|
Gagan Deep Singla wrote:
ok, tell me one thing if u can that how much chance of hacking is there, if any port is opened by any company. because on 80 port there is no chance of hacking.
That is totally incorrect. I do security demonstrations that include a live demo of a hack attempt on a badly written application* that runs on port 80. It amazes the audience that in only 2 minutes I can have the application that was supposed to be a simple ecommerce thing displaying the contents of the hard disk rather than the inventory of items for sale. Port 80 can be hacked just like any other port. As others have said, it is your responsiblity that the application you write is secure, whether it is running through your web server or whether you are creating sockets directly for it.
* I should note that I wrote the application for the purposes of this demonstration - It is illegal to hack into another person's application without permission. My security presentations always open with two slide summarising the relevant sections of the 1990 Misuse of Computers Act
My: Blog | Photos
WDevs.com - Open Source Code Hosting, Blogs, FTP, Mail and More
|
|
|
|
|
thanx sir,
thanx for giving me response.
now i am using some other port like 10800.
thanx a lot.
bye
Gagan Deep Singla
Chandigarh - INDIA
|
|
|
|
|
I have downloaded a .net control( tabPage ) as dll file but trial version;
Then i found a crack for it that generates a key for software.
But i dont know where apply this generated key??????????
|
|
|
|
|
What you do is call the people who wrote it, people who are trying to make a living writing software, people with families to feed and mortgages to pay, and you say 'I want to let you know that I am a scumbag, but because I tried to steal from you, you can have the keys to my car'.
Then slam your head in a door over and over until you wake up to yourself.
Christian Graus - Microsoft MVP - C++
|
|
|
|
|
Christian Graus wrote:
Then slam your head in a door over and over until you wake up to yourself.
My Five! 
-------------------------------
DEBUGGING : Removing the needles from the haystack.
|
|
|
|
|
|
Wow!! This must be one of the best questions ever! 
Go to their web page, click on the "Buy Now" link and after providing your credit card number, you'll get instructions on how to apply the key.
-- LuisR
Luis Alonso Ramos
Intelectix - Chihuahua, Mexico
Not much here: My CP Blog!
The amount of sleep the average person needs is five more minutes. -- Vikram A Punathambekar, Aug. 11, 2005
|
|
|
|
|
Yeah, what a moron. I love that he stole the key, but is too stupid to work out what to do with it...
BTW, I'm still in linker hell, I'd appreciate your comments to my post in the C++ forum. I'm thinking that the DICOM library may be linking to the old string.h, etc, headers, but I'm really not sure what is going on....
Christian Graus - Microsoft MVP - C++
|
|
|
|
|
Christian Graus wrote:
I'd appreciate your comments to my post in the C++ forum.
Are you *that* desperate? I haven't worked with C++ in over three years... But I'll go take a look anyway...
-- LuisR
Luis Alonso Ramos
Intelectix - Chihuahua, Mexico
Not much here: My CP Blog!
The amount of sleep the average person needs is five more minutes. -- Vikram A Punathambekar, Aug. 11, 2005
|
|
|
|
|
LOL - it's been 2 years for me, but I'm feeling pretty desperate.
Christian Graus - Microsoft MVP - C++
|
|
|
|
|
how can i build a simple sms server.
|
|
|
|
|
How can i send sms through a mobile phone that will be connected in the usb port...
|
|
|
|
|
See here[^] for web services that will let you send SMS without needing a USB phone.
Not exactly what you are asking for, but it might help.
-- LuisR
Luis Alonso Ramos
Intelectix - Chihuahua, Mexico
Not much here: My CP Blog!
The amount of sleep the average person needs is five more minutes. -- Vikram A Punathambekar, Aug. 11, 2005
|
|
|
|
|
Is there a way to dynamically create controls using a For loop?
So for instance if you wanted 4 RichTextBox controls instead of writing lines a code for each control can you not use a loop to create them?
Something like:
for (int i = 1; i < 5; i++)
{
((richbox)i) = new System.Windows.Forms.RichTextBox();
}
So that you end up with 4 RichTextBoxes:
richbox1
richbox2
richbox3
richbox4
Any help appreciated..
|
|
|
|
|
Only if you want to keep your reference to them in an array, or you want to write ugly reflection code. If you create an ArrayList to hold them, then it's easy.
Christian Graus - Microsoft MVP - C++
|
|
|
|
|
The best you can do is this:
RichTextBox[] richBoxes = new RichTextBox[4];
for(int i = 0; i < 4; i++)
{
richBoxes[i] = new RichTextBox();
}And you'll end up with 4 RichTextBoxes: richBoxes[0], richBoxes[1], richBoxes[2], and richBoxes[3].
I hope this helps.
-- LuisR
Luis Alonso Ramos
Intelectix - Chihuahua, Mexico
Not much here: My CP Blog!
The amount of sleep the average person needs is five more minutes. -- Vikram A Punathambekar, Aug. 11, 2005
|
|
|
|
|
how to develop the calendar that can be add/edit message/data inside the calendar itself?
|
|
|
|
|
Hi,
I have multiple accounts setup in Outlook. I would like to retrieve and change them. Does any know how to do this?
Regards, nidkil
|
|
|
|
|
Hi guys
thankx in advance
I am trying to craete a user control which has datagrid in it, I want to pass datareader to this control and load it accordingly and then hide the columns (by passing params again) which i dont want user to see.
I can see that my datareader is available in my User control but it doesnt load the data grid or throw any exception. I am using C# and ASP.NET for this.
Help is urgently required
.... this is the user control code behind.......
public partial class Data : System.Web.UI.UserControl
{
public SqlDataReader drVal = null;
protected void Page_Load(object sender, EventArgs e)
{
setGrid();
}
public Boolean setGrid()
{
try
{
if (drVal.HasRows)
{
dgDataGrid.DataSource = drVal;
dgDataGrid.DataBind();
drVal.Close();
return true;
}
else
{
return false;
}
}
catch (Exception ex)
{
Response.Write(ex.ToString());
return false;
}
}
}
|
|
|
|
|
Hi,
Just out of curiosity, is your datareader having data at the time you are trying to bind the reader to the grid.
If it doesnt have any data it may not throw an error as well as you wont see anything.
Let me know
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
