New answers tagged


The solution is actually to hire software developers who have been doing that kind of work before, and to prepare for an enormous bill. If you are asking for help here, then frankly you don’t have a chance.


The solution is formal verification. This involves writing not only the software, but also a formal specification. Most importantly, one then writes a machine-checked proof that the program one has written is correct against the specification. Formal verification is difficult and expensive. However, it can be justified in extremely critical code, and ...


What is the difference between buffer overflows and out-of-bounds writes? A buffer overflow usually refers to an exploit targeting a program written in a language like C that doesn't automatically do array bounds checking, where the point is to overwrite the portion of the stack frame that holds a return address, because by putting something special there ...


The question is how to define and share hash calculation logic between service and client? Please note that client can be implemented using different framework or programming language. As the client and server can be written using completely different technologies, you can not assume that any code sharing will be possible. As a consequence, the best way to ...

Top 50 recent answers are included