Questions tagged [security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
8
votes
1answer
156 views

Security of SendMail

It's a little bit scary to hand over your credentials like this: I would like to know just how secure this process is. Is any way to ensure that mail sent from Mathematica is encrypted in transit and ...
7
votes
1answer
94 views

Is it possible to make notebook read-only without using OS file read only setting?

I want to make notebook read-only (protect from modification) for all operating systems (when copied from one OS to another OS read-only should remain). Is there any way to do that?
12
votes
1answer
181 views

Safe alternatives to ToExpression

Background Conversion from string/boxes to expression is quite common. Very often the goal would be a simple switch from "1" to ...
5
votes
0answers
63 views

Unsecured Chat when Dynamic Update is Enabled

Mathematica v11.3 has just been released, A new feature, Chat, could be found In File>New>Chat. It is convenient when communicating code with other users, but ...
19
votes
1answer
244 views

How to uncompress strings safely (without any evaluation)?

Compressed strings are often used to exchange Mathematica expressions on the Internet. It is, however, not easy to see what such expression will do after decompression. Resulting code can perform ...
1
vote
0answers
149 views

How to *safely* enable automatic initialization cell evaluation for one notebook?

I want to configure this one notebook (let's call it X) so that its initialization cells get automatically evaluated when X is first opened1. To this end, I have applied the settings shown below to ...
3
votes
2answers
144 views

Lock .nb cells of a file

I'm working on my research and I defined a few function that I don't want anyone to take from my code. And I must submit the Mathematica file to a public place. Is there any way to lock my nb file by ...
3
votes
0answers
56 views

Safely running Import on an unknown URL [closed]

I'm writing a web API that takes as arguments URLS of MIDI files, imports and processes them, and spits a MIDI file back out. I'm nervous just Import[]ing whatever URL the user gives me. How can I be ...
1
vote
0answers
57 views

How to restrict Import & Export functions to a specified path?

We're providing Mathematica computing service to our customers. Now we're decided introducing Import and Export functions, but ...
4
votes
1answer
174 views

Why InitializationCellWarning is False and still I get warnings?

I wrote a notebook containing initialization cells: (1) notebook's options related to initialization are set to: ...
4
votes
1answer
74 views

How to adapt MSPToExpression function in $PrePrint?

I am introducing the mathematica Security (MSP module) to our system. The Document suggests use MSPToExpression as followed: ...
36
votes
3answers
578 views

How can I evaluate untrusted Mathematica code in a sandbox?

Is there any way to build a sandbox to evaluate untrusted Mathematica expressions in order to prevent them from having (malicious or accidental) harmful side effects? Context: I'm developing a system ...
12
votes
1answer
2k views

What does the message 'This file contains potentially unsafe …' mean and how serious is it?

I had some Mathematica files on over which recently I have faced to this message: However, after searching, I have seen some blogs in Mathematica SE or in somewhere else about that, but I could not ...
22
votes
3answers
497 views

Can't inject EncryptedObject

Bug present from 10.0 to 10.3.1 and fixed in 10.4.0 !! Here are minimal examples: ...
2
votes
0answers
112 views

SocialMediaData related functions don't save authentication data

Is there any way to stop SocialMediaData and ServiceExecute from making me re-authenticate every time? For example, say I have ...
2
votes
0answers
89 views

OpenSQLConnection SSPI Library Not Loaded [duplicate]

I am attempting to open a connection to SQL Server with Windows Authentication (SSPI) using OpenSQLConnection and JDBC. ...
-1
votes
1answer
267 views

Reading Barcode/QR Code from webcam

I need to make a Barcode/QR code reader from video. It could be captured from an image with a built in code, but I could not figure it out how it could be done by video. Let me tell the big picture. ...
10
votes
2answers
282 views

Inconsistent behavior of undocumented Encode->Import->StringToStream->Get on password-locked stream

Let's save a definition. Encode it with password/key and Get it again. We will not use Get ...
1
vote
0answers
261 views

Roadmap for Workbench? [closed]

Workbench 2.0 was an extremely useful tool for Mathematica Developers. I received an early release of Workbench 3.0 to work through debugging issues encountered with Mathematica 10 and Workbench 2.0. ...
7
votes
0answers
172 views

Guidance for CDF Development, Security and Future of CDF?

We have a number of R&D projects where we would like to show on going results in a distributed CDF application. This would be similar to monthly reports. There are some fairly heavy security ...
35
votes
2answers
2k views

What information is sent to Wolfram Research when loading or working with Mathematica?

Recently I am told that information unknown to the user is sent to Wolfram Servers. Is there any truth behind it ? I was told that more than just an IP address of the user is sent to them and that ...
4
votes
1answer
343 views

Sample of the random times at which the random walk crosses the boundary

I defined a security boundary for a random walk: ...
0
votes
0answers
71 views

How to avoid malicious code when opening & executing notebooks [duplicate]

Is there any way to avoid malicious code when opening and executing entire notebooks automatically? I have written code which opens a large series of notebooks one-by-one, evaluates them in their ...
8
votes
0answers
160 views

What are the possible security breaches in CDF content?

It has been noted on this site before that the free CDF player is notoriously trigger-happy in declaring dynamic content to be "potentially unsafe", and forcing the user to enable dynamic content ...
0
votes
0answers
37 views

Read/Write protection of script [duplicate]

I have a script file (.m), which I need to distribute for execution. How can I read/write protect it? thanks
4
votes
1answer
228 views

How hide symbolic definition of a function?

How can the actual definition of a function be hidden from a user? I want the user of a notebook to be able to evaluate a real-valued function f of a real variable at any particular numeric input yet ...
9
votes
1answer
268 views

OpenSQLConnection problem - password visible

Prerequisites some database (here, it's called sakila (mysql standard test db I think)) a user (with password) that has access to that db (I'll use u:testuser/p:testpass) Setup - minimal (?) working ...
42
votes
1answer
841 views

Do Mathematica notebooks include personal metadata?

I am about to send a Mathematica notebook to someone and I would like to make sure it does not contain any information that could personally identify me. I would also like to produce pdf files from ...
19
votes
2answers
1k views

Encrypt the password used for SendMail

I want Mathematica to send me an email when the computation is finished. To that end, I have a cell with SendMail[...] which I place behind my computation in the ...
20
votes
3answers
2k views

List of dangerous functions

I no longer believe it is a good idea to work with a list of dangerous functions. I have tried to edit the question is such a way that it respects my earlier perspective, but also so that it does not ...
9
votes
1answer
253 views

How secure is J/Link?

Are there security concerns with using J/Link? If so, is there any way to encrypt the data passed between Mathematica and Java? If Mathematica and the JVM are running on the same machine, is there any ...
5
votes
1answer
592 views

How to transform a DumpSaved .mx file to .m file conveniently?

I have many DumpSave-d .mx files under a directory. They are generated under Linux. The .mx ...
8
votes
3answers
841 views

How to add a trusted path in Mathematica?

I would like to add a trusted a path in the global preferences of Mathematica. When I go to NotebookSecurityOptions, click the tool button for ...
5
votes
1answer
576 views

Why do Mathematica and MathKernel need “incoming connections”?

My firewall (the "Application Firewall" in OS X 10.8.2) detects that Mathematica (9.0.1.0) and "MathKernel" both request incoming connections. My configuration expects all incoming connections to be ...
2
votes
0answers
154 views

How safe are ReadProtected and Locked symbols? [duplicate]

Possible Duplicate: How to distribute proprietary Mathematica code I suspect that there is a way to expose the down values of such symbols with an attack along these lines: ...