Questions tagged [security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
0answers
48 views

Protect a package from removed or altered system commands

I am creating a package and I would like it to be secure, i.e. it loads and runs using Needs but the code stays secret. So I set up the protection using: ...
4
votes
1answer
79 views

How to run a wolfram-server safely on a VPS as a backend of a webpage?

If one runs SocketListen on a Virtual Private Server (VPS), in principle one can set up a webpage with the Wolfram Language as a back-end. For instance, with ...
8
votes
1answer
184 views

Security of SendMail

It's a little bit scary to hand over your credentials like this: I would like to know just how secure this process is. Is any way to ensure that mail sent from Mathematica is encrypted in transit and ...
7
votes
1answer
123 views

Is it possible to make notebook read-only without using OS file read only setting?

I want to make notebook read-only (protect from modification) for all operating systems (when copied from one OS to another OS read-only should remain). Is there any way to do that?
13
votes
1answer
222 views

Safe alternatives to ToExpression

Background Conversion from string/boxes to expression is quite common. Very often the goal would be a simple switch from "1" to ...
5
votes
0answers
67 views

Unsecured Chat when Dynamic Update is Enabled

Mathematica v11.3 has just been released, A new feature, Chat, could be found In File>New>Chat. It is convenient when communicating code with other users, but ...
21
votes
1answer
260 views

How to uncompress strings safely (without any evaluation)?

Compressed strings are often used to exchange Mathematica expressions on the Internet. It is, however, not easy to see what such expression will do after decompression. Resulting code can perform ...
1
vote
0answers
169 views

How to *safely* enable automatic initialization cell evaluation for one notebook?

I want to configure this one notebook (let's call it X) so that its initialization cells get automatically evaluated when X is first opened1. To this end, I have applied the settings shown below to ...
3
votes
2answers
158 views

Lock .nb cells of a file

I'm working on my research and I defined a few function that I don't want anyone to take from my code. And I must submit the Mathematica file to a public place. Is there any way to lock my nb file by ...
3
votes
0answers
59 views

Safely running Import on an unknown URL [closed]

I'm writing a web API that takes as arguments URLS of MIDI files, imports and processes them, and spits a MIDI file back out. I'm nervous just Import[]ing whatever URL the user gives me. How can I be ...
1
vote
0answers
58 views

How to restrict Import & Export functions to a specified path?

We're providing Mathematica computing service to our customers. Now we're decided introducing Import and Export functions, but ...
4
votes
1answer
186 views

Why InitializationCellWarning is False and still I get warnings?

I wrote a notebook containing initialization cells: (1) notebook's options related to initialization are set to: ...
4
votes
1answer
76 views

How to adapt MSPToExpression function in $PrePrint?

I am introducing the mathematica Security (MSP module) to our system. The Document suggests use MSPToExpression as followed: ...
37
votes
3answers
621 views

How can I evaluate untrusted Mathematica code in a sandbox?

Is there any way to build a sandbox to evaluate untrusted Mathematica expressions in order to prevent them from having (malicious or accidental) harmful side effects? Context: I'm developing a system ...
12
votes
1answer
2k views

What does the message 'This file contains potentially unsafe …' mean and how serious is it?

I had some Mathematica files on over which recently I have faced to this message: However, after searching, I have seen some blogs in Mathematica SE or in somewhere else about that, but I could not ...
22
votes
3answers
507 views

Can't inject EncryptedObject

Bug present from 10.0 to 10.3.1 and fixed in 10.4.0 !! Here are minimal examples: ...
2
votes
0answers
113 views

SocialMediaData related functions don't save authentication data

Is there any way to stop SocialMediaData and ServiceExecute from making me re-authenticate every time? For example, say I have ...
2
votes
0answers
96 views

OpenSQLConnection SSPI Library Not Loaded [duplicate]

I am attempting to open a connection to SQL Server with Windows Authentication (SSPI) using OpenSQLConnection and JDBC. ...
-1
votes
1answer
271 views

Reading Barcode/QR Code from webcam

I need to make a Barcode/QR code reader from video. It could be captured from an image with a built in code, but I could not figure it out how it could be done by video. Let me tell the big picture. ...
10
votes
2answers
285 views

Inconsistent behavior of undocumented Encode->Import->StringToStream->Get on password-locked stream

Let's save a definition. Encode it with password/key and Get it again. We will not use Get ...
1
vote
0answers
274 views

Roadmap for Workbench? [closed]

Workbench 2.0 was an extremely useful tool for Mathematica Developers. I received an early release of Workbench 3.0 to work through debugging issues encountered with Mathematica 10 and Workbench 2.0. ...
7
votes
0answers
174 views

Guidance for CDF Development, Security and Future of CDF?

We have a number of R&D projects where we would like to show on going results in a distributed CDF application. This would be similar to monthly reports. There are some fairly heavy security ...
36
votes
2answers
2k views

What information is sent to Wolfram Research when loading or working with Mathematica?

Recently I am told that information unknown to the user is sent to Wolfram Servers. Is there any truth behind it ? I was told that more than just an IP address of the user is sent to them and that ...
4
votes
1answer
354 views

Sample of the random times at which the random walk crosses the boundary

I defined a security boundary for a random walk: ...
0
votes
0answers
71 views

How to avoid malicious code when opening & executing notebooks [duplicate]

Is there any way to avoid malicious code when opening and executing entire notebooks automatically? I have written code which opens a large series of notebooks one-by-one, evaluates them in their ...
8
votes
0answers
162 views

What are the possible security breaches in CDF content?

It has been noted on this site before that the free CDF player is notoriously trigger-happy in declaring dynamic content to be "potentially unsafe", and forcing the user to enable dynamic content ...
0
votes
0answers
40 views

Read/Write protection of script [duplicate]

I have a script file (.m), which I need to distribute for execution. How can I read/write protect it? thanks
4
votes
1answer
252 views

How hide symbolic definition of a function?

How can the actual definition of a function be hidden from a user? I want the user of a notebook to be able to evaluate a real-valued function f of a real variable at any particular numeric input yet ...
9
votes
1answer
277 views

OpenSQLConnection problem - password visible

Prerequisites some database (here, it's called sakila (mysql standard test db I think)) a user (with password) that has access to that db (I'll use u:testuser/p:testpass) Setup - minimal (?) working ...
42
votes
1answer
889 views

Do Mathematica notebooks include personal metadata?

I am about to send a Mathematica notebook to someone and I would like to make sure it does not contain any information that could personally identify me. I would also like to produce pdf files from ...
19
votes
2answers
1k views

Encrypt the password used for SendMail

I want Mathematica to send me an email when the computation is finished. To that end, I have a cell with SendMail[...] which I place behind my computation in the ...
20
votes
3answers
2k views

List of dangerous functions

I no longer believe it is a good idea to work with a list of dangerous functions. I have tried to edit the question is such a way that it respects my earlier perspective, but also so that it does not ...
9
votes
1answer
259 views

How secure is J/Link?

Are there security concerns with using J/Link? If so, is there any way to encrypt the data passed between Mathematica and Java? If Mathematica and the JVM are running on the same machine, is there any ...
5
votes
1answer
607 views

How to transform a DumpSaved .mx file to .m file conveniently?

I have many DumpSave-d .mx files under a directory. They are generated under Linux. The .mx ...
8
votes
3answers
895 views

How to add a trusted path in Mathematica?

I would like to add a trusted a path in the global preferences of Mathematica. When I go to NotebookSecurityOptions, click the tool button for ...
5
votes
1answer
601 views

Why do Mathematica and MathKernel need “incoming connections”?

My firewall (the "Application Firewall" in OS X 10.8.2) detects that Mathematica (9.0.1.0) and "MathKernel" both request incoming connections. My configuration expects all incoming connections to be ...
2
votes
0answers
158 views

How safe are ReadProtected and Locked symbols? [duplicate]

Possible Duplicate: How to distribute proprietary Mathematica code I suspect that there is a way to expose the down values of such symbols with an attack along these lines: ...