Questions tagged [security]
The security tag has no usage guidance.
40
questions
5
votes
1
answer
111
views
Locking cell groups
Imagine I have a notebook divided into multiple groups of code cells which are set as initialization groups. I then have a single cell which evaluates a function ...
- 4,933
9
votes
1
answer
265
views
Generating Google BigQuery API Access Token in Wolfram Language
I'm working on a Wolfram Language Package to connect into Google Bigquery (that I'll make public available). In order to finish It, I need to solve a last step, that is how to get an authentication ...
- 26.3k
6
votes
1
answer
146
views
How do I generate a JSON Web Token?
I want to access a service that uses JWT authentication for its API. Generating a JWT doesn't look too difficult, it is a combination of BASE64URL encoding, and HMAC Signing. However, these things can ...
- 257
2
votes
0
answers
62
views
Protect a package from removed or altered system commands
I am creating a package and I would like it to be secure, i.e. it loads and runs using Needs but the code stays secret. So I set up the protection using:
...
- 21
5
votes
1
answer
247
views
How to run a wolfram-server safely on a VPS as a backend of a webpage?
If one runs SocketListen on a Virtual Private Server (VPS), in principle one can set up a webpage with the Wolfram Language as a back-end.
For instance, with ...
- 2,060
8
votes
1
answer
340
views
Security of SendMail
It's a little bit scary to hand over your credentials like this:
I would like to know just how secure this process is. Is any way to ensure that mail sent from Mathematica is encrypted in transit and ...
- 3,780
8
votes
1
answer
363
views
Is it possible to make notebook read-only without using OS file read only setting?
I want to make notebook read-only (protect from modification) for all operating systems (when copied from one OS to another OS read-only should remain). Is there any way to do that?
- 1,235
17
votes
2
answers
463
views
Safe alternatives to ToExpression
Background
Conversion from string/boxes to expression is quite common. Very often the goal would be a simple switch from "1" to ...
- 137k
7
votes
0
answers
98
views
Unsecured Chat when Dynamic Update is Enabled
Mathematica v11.3 has just been released, A new feature, Chat, could be found In File>New>Chat. It is convenient when communicating code with other users, but ...
- 9,640
22
votes
1
answer
308
views
How to uncompress strings safely (without any evaluation)?
Compressed strings are often used to exchange Mathematica expressions on the Internet.
It is, however, not easy to see what such expression will do after decompression.
Resulting code can perform ...
- 7,876
1
vote
0
answers
269
views
How to *safely* enable automatic initialization cell evaluation for one notebook?
I want to configure this one notebook (let's call it X) so that its initialization cells get automatically evaluated when X is first opened1.
To this end, I have applied the settings shown below to ...
- 11.7k
3
votes
2
answers
291
views
Lock .nb cells of a file
I'm working on my research and I defined a few function that I don't want anyone to take from my code. And I must submit the Mathematica file to a public place.
Is there any way to lock my nb file by ...
- 168
3
votes
0
answers
64
views
Safely running Import on an unknown URL [closed]
I'm writing a web API that takes as arguments URLS of MIDI files, imports and processes them, and spits a MIDI file back out. I'm nervous just Import[]ing whatever URL the user gives me. How can I be ...
- 542
1
vote
0
answers
63
views
How to restrict Import & Export functions to a specified path?
We're providing Mathematica computing service to our customers. Now we're decided introducing Import and Export functions, but ...
- 491
4
votes
1
answer
270
views
Why InitializationCellWarning is False and still I get warnings?
I wrote a notebook containing initialization cells:
(1)
notebook's options related to initialization are set to:
...
- 1,843
4
votes
1
answer
83
views
How to adapt MSPToExpression function in $PrePrint?
I am introducing the mathematica Security (MSP module) to our system. The Document suggests use MSPToExpression as followed:
...
- 491
38
votes
3
answers
812
views
How can I evaluate untrusted Mathematica code in a sandbox?
Is there any way to build a sandbox to evaluate untrusted Mathematica expressions in order to prevent them from having (malicious or accidental) harmful side effects?
Context: I'm developing a system ...
- 2,563
12
votes
1
answer
3k
views
What does the message 'This file contains potentially unsafe ...' mean and how serious is it?
I had some Mathematica files on over which recently I have faced to this message:
However, after searching, I have seen some blogs in Mathematica SE or in somewhere else about that, but I could not ...
- 4,897
22
votes
3
answers
544
views
Can't inject EncryptedObject
Bug present from 10.0 to 10.3.1 and fixed in 10.4.0
!!
Here are minimal examples:
...
- 137k
3
votes
0
answers
126
views
SocialMediaData related functions don't save authentication data
Is there any way to stop SocialMediaData and ServiceExecute from making me re-authenticate every time?
For example, say I have ...
- 31.7k
2
votes
0
answers
97
views
OpenSQLConnection SSPI Library Not Loaded [duplicate]
I am attempting to open a connection to SQL Server with Windows Authentication (SSPI) using OpenSQLConnection and JDBC.
...
- 43.1k
1
vote
1
answer
381
views
Reading Barcode/QR Code from webcam
I need to make a Barcode/QR code reader from video.
It could be captured from an image with a built in code, but I could not figure it out how it could be done by video.
Let me tell the big picture. ...
- 557
12
votes
2
answers
320
views
Inconsistent behavior of undocumented Encode->Import->StringToStream->Get on password-locked stream
Let's save a definition. Encode it with password/key and Get it again.
We will not use Get ...
- 137k
1
vote
0
answers
307
views
Roadmap for Workbench? [closed]
Workbench 2.0 was an extremely useful tool for Mathematica Developers. I received an early release of Workbench 3.0 to work through debugging issues encountered with Mathematica 10 and Workbench 2.0.
...
- 2,279
7
votes
0
answers
188
views
Guidance for CDF Development, Security and Future of CDF?
We have a number of R&D projects where we would like to show on going results in a distributed CDF application. This would be similar to monthly reports.
There are some fairly heavy security ...
- 2,279
38
votes
2
answers
3k
views
What information is sent to Wolfram Research when loading or working with Mathematica?
Recently I am told that information unknown to the user is sent to Wolfram Servers. Is there any truth behind it ? I was told that more than just an IP address of the user is sent to them and that ...
- 341
5
votes
1
answer
406
views
Sample of the random times at which the random walk crosses the boundary
I defined a security boundary for a random walk:
...
- 493
0
votes
0
answers
75
views
How to avoid malicious code when opening & executing notebooks [duplicate]
Is there any way to avoid malicious code when opening and executing entire notebooks automatically?
I have written code which opens a large series of notebooks one-by-one, evaluates them in their ...
- 3,537
8
votes
0
answers
188
views
What are the possible security breaches in CDF content?
It has been noted on this site before that the free CDF player is notoriously trigger-happy in declaring dynamic content to be "potentially unsafe", and forcing the user to enable dynamic ...
- 10.3k
0
votes
0
answers
40
views
Read/Write protection of script [duplicate]
I have a script file (.m), which I need to distribute for execution. How can I read/write protect it? thanks
- 131
4
votes
1
answer
463
views
How hide symbolic definition of a function?
How can the actual definition of a function be hidden from a user?
I want the user of a notebook to be able to evaluate a real-valued function f of a real variable at any particular numeric input yet ...
- 12k
9
votes
1
answer
317
views
OpenSQLConnection problem - password visible
Prerequisites
some database (here, it's called sakila (mysql standard test db I think))
a user (with password) that has access to that db (I'll use u:testuser/p:testpass)
Setup - minimal (?) working ...
- 6,529
43
votes
1
answer
1k
views
Do Mathematica notebooks include personal metadata?
I am about to send a Mathematica notebook to someone and I would like to make sure it does not contain any information that could personally identify me. I would also like to produce pdf files from ...
- 10.3k
19
votes
2
answers
2k
views
Encrypt the password used for SendMail
I want Mathematica to send me an email when the computation is finished. To that end, I have a cell with SendMail[...] which I place behind my computation in the ...
- 333
20
votes
3
answers
2k
views
List of dangerous functions
I no longer believe it is a good idea to work with a list of dangerous functions. I have tried to edit the question is such a way that it respects my earlier perspective, but also so that it does not ...
- 12.2k
10
votes
1
answer
282
views
How secure is J/Link?
Are there security concerns with using J/Link? If so, is there any way to encrypt the data passed between Mathematica and Java? If Mathematica and the JVM are running on the same machine, is there any ...
- 305
5
votes
1
answer
737
views
How to transform a DumpSaved .mx file to .m file conveniently?
I have many DumpSave-d .mx files under a directory. They are generated under Linux. The .mx ...
- 17.3k
8
votes
3
answers
1k
views
How to add a trusted path in Mathematica?
I would like to add a trusted a path in the global preferences of Mathematica. When I go to NotebookSecurityOptions, click the tool button for ...
- 5,279
6
votes
1
answer
690
views
Why do Mathematica and MathKernel need "incoming connections"?
My firewall (the "Application Firewall" in OS X 10.8.2) detects that Mathematica (9.0.1.0) and "MathKernel" both request incoming connections. My configuration expects all incoming connections to be ...
- 12.9k
2
votes
0
answers
182
views
How safe are ReadProtected and Locked symbols? [duplicate]
Possible Duplicate:
How to distribute proprietary Mathematica code
I suspect that there is a way to expose the down values of such symbols with an attack along these lines:
...
- 31.7k