Questions tagged [security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
5 votes
1 answer
89 views

Locking cell groups

Imagine I have a notebook divided into multiple groups of code cells which are set as initialization groups. I then have a single cell which evaluates a function ...
user avatar
  • 4,228
9 votes
1 answer
188 views

Generating Google BigQuery API Access Token in Wolfram Language

I'm working on a Wolfram Language Package to connect into Google Bigquery (that I'll make public available). In order to finish It, I need to solve a last step, that is how to get an authentication ...
user avatar
  • 25.3k
6 votes
1 answer
127 views

How do I generate a JSON Web Token?

I want to access a service that uses JWT authentication for its API. Generating a JWT doesn't look too difficult, it is a combination of BASE64URL encoding, and HMAC Signing. However, these things can ...
user avatar
2 votes
0 answers
53 views

Protect a package from removed or altered system commands

I am creating a package and I would like it to be secure, i.e. it loads and runs using Needs but the code stays secret. So I set up the protection using: ...
user avatar
  • 21
4 votes
1 answer
166 views

How to run a wolfram-server safely on a VPS as a backend of a webpage?

If one runs SocketListen on a Virtual Private Server (VPS), in principle one can set up a webpage with the Wolfram Language as a back-end. For instance, with ...
user avatar
  • 1,970
8 votes
1 answer
263 views

Security of SendMail

It's a little bit scary to hand over your credentials like this: I would like to know just how secure this process is. Is any way to ensure that mail sent from Mathematica is encrypted in transit and ...
user avatar
  • 3,679
8 votes
1 answer
224 views

Is it possible to make notebook read-only without using OS file read only setting?

I want to make notebook read-only (protect from modification) for all operating systems (when copied from one OS to another OS read-only should remain). Is there any way to do that?
user avatar
  • 973
14 votes
1 answer
388 views

Safe alternatives to ToExpression

Background Conversion from string/boxes to expression is quite common. Very often the goal would be a simple switch from "1" to ...
user avatar
  • 132k
6 votes
0 answers
92 views

Unsecured Chat when Dynamic Update is Enabled

Mathematica v11.3 has just been released, A new feature, Chat, could be found In File>New>Chat. It is convenient when communicating code with other users, but ...
user avatar
  • 9,188
21 votes
1 answer
286 views

How to uncompress strings safely (without any evaluation)?

Compressed strings are often used to exchange Mathematica expressions on the Internet. It is, however, not easy to see what such expression will do after decompression. Resulting code can perform ...
user avatar
  • 7,666
1 vote
0 answers
234 views

How to *safely* enable automatic initialization cell evaluation for one notebook?

I want to configure this one notebook (let's call it X) so that its initialization cells get automatically evaluated when X is first opened1. To this end, I have applied the settings shown below to ...
user avatar
  • 11.4k
3 votes
2 answers
216 views

Lock .nb cells of a file

I'm working on my research and I defined a few function that I don't want anyone to take from my code. And I must submit the Mathematica file to a public place. Is there any way to lock my nb file by ...
user avatar
  • 168
3 votes
0 answers
61 views

Safely running Import on an unknown URL [closed]

I'm writing a web API that takes as arguments URLS of MIDI files, imports and processes them, and spits a MIDI file back out. I'm nervous just Import[]ing whatever URL the user gives me. How can I be ...
user avatar
1 vote
0 answers
60 views

How to restrict Import & Export functions to a specified path?

We're providing Mathematica computing service to our customers. Now we're decided introducing Import and Export functions, but ...
user avatar
  • 491
4 votes
1 answer
246 views

Why InitializationCellWarning is False and still I get warnings?

I wrote a notebook containing initialization cells: (1) notebook's options related to initialization are set to: ...
user avatar
4 votes
1 answer
81 views

How to adapt MSPToExpression function in $PrePrint?

I am introducing the mathematica Security (MSP module) to our system. The Document suggests use MSPToExpression as followed: ...
user avatar
  • 491
37 votes
3 answers
729 views

How can I evaluate untrusted Mathematica code in a sandbox?

Is there any way to build a sandbox to evaluate untrusted Mathematica expressions in order to prevent them from having (malicious or accidental) harmful side effects? Context: I'm developing a system ...
user avatar
  • 2,483
12 votes
1 answer
2k views

What does the message 'This file contains potentially unsafe ...' mean and how serious is it?

I had some Mathematica files on over which recently I have faced to this message: However, after searching, I have seen some blogs in Mathematica SE or in somewhere else about that, but I could not ...
user avatar
  • 4,647
22 votes
3 answers
534 views

Can't inject EncryptedObject

Bug present from 10.0 to 10.3.1 and fixed in 10.4.0 !! Here are minimal examples: ...
user avatar
  • 132k
3 votes
0 answers
123 views

SocialMediaData related functions don't save authentication data

Is there any way to stop SocialMediaData and ServiceExecute from making me re-authenticate every time? For example, say I have ...
user avatar
  • 30.4k
2 votes
0 answers
97 views

OpenSQLConnection SSPI Library Not Loaded [duplicate]

I am attempting to open a connection to SQL Server with Windows Authentication (SSPI) using OpenSQLConnection and JDBC. ...
user avatar
  • 39.3k
-1 votes
1 answer
330 views

Reading Barcode/QR Code from webcam

I need to make a Barcode/QR code reader from video. It could be captured from an image with a built in code, but I could not figure it out how it could be done by video. Let me tell the big picture. ...
user avatar
  • 497
11 votes
2 answers
305 views

Inconsistent behavior of undocumented Encode->Import->StringToStream->Get on password-locked stream

Let's save a definition. Encode it with password/key and Get it again. We will not use Get ...
user avatar
  • 132k
1 vote
0 answers
298 views

Roadmap for Workbench? [closed]

Workbench 2.0 was an extremely useful tool for Mathematica Developers. I received an early release of Workbench 3.0 to work through debugging issues encountered with Mathematica 10 and Workbench 2.0. ...
user avatar
  • 2,065
7 votes
0 answers
184 views

Guidance for CDF Development, Security and Future of CDF?

We have a number of R&D projects where we would like to show on going results in a distributed CDF application. This would be similar to monthly reports. There are some fairly heavy security ...
user avatar
  • 2,065
36 votes
2 answers
3k views

What information is sent to Wolfram Research when loading or working with Mathematica?

Recently I am told that information unknown to the user is sent to Wolfram Servers. Is there any truth behind it ? I was told that more than just an IP address of the user is sent to them and that ...
user avatar
  • 321
5 votes
1 answer
377 views

Sample of the random times at which the random walk crosses the boundary

I defined a security boundary for a random walk: ...
user avatar
0 votes
0 answers
73 views

How to avoid malicious code when opening & executing notebooks [duplicate]

Is there any way to avoid malicious code when opening and executing entire notebooks automatically? I have written code which opens a large series of notebooks one-by-one, evaluates them in their ...
user avatar
8 votes
0 answers
176 views

What are the possible security breaches in CDF content?

It has been noted on this site before that the free CDF player is notoriously trigger-happy in declaring dynamic content to be "potentially unsafe", and forcing the user to enable dynamic ...
user avatar
0 votes
0 answers
40 views

Read/Write protection of script [duplicate]

I have a script file (.m), which I need to distribute for execution. How can I read/write protect it? thanks
user avatar
  • 131
4 votes
1 answer
388 views

How hide symbolic definition of a function?

How can the actual definition of a function be hidden from a user? I want the user of a notebook to be able to evaluate a real-valued function f of a real variable at any particular numeric input yet ...
user avatar
  • 11.3k
9 votes
1 answer
311 views

OpenSQLConnection problem - password visible

Prerequisites some database (here, it's called sakila (mysql standard test db I think)) a user (with password) that has access to that db (I'll use u:testuser/p:testpass) Setup - minimal (?) working ...
user avatar
  • 6,431
43 votes
1 answer
1k views

Do Mathematica notebooks include personal metadata?

I am about to send a Mathematica notebook to someone and I would like to make sure it does not contain any information that could personally identify me. I would also like to produce pdf files from ...
user avatar
19 votes
2 answers
2k views

Encrypt the password used for SendMail

I want Mathematica to send me an email when the computation is finished. To that end, I have a cell with SendMail[...] which I place behind my computation in the ...
user avatar
  • 333
20 votes
3 answers
2k views

List of dangerous functions

I no longer believe it is a good idea to work with a list of dangerous functions. I have tried to edit the question is such a way that it respects my earlier perspective, but also so that it does not ...
user avatar
9 votes
1 answer
266 views

How secure is J/Link?

Are there security concerns with using J/Link? If so, is there any way to encrypt the data passed between Mathematica and Java? If Mathematica and the JVM are running on the same machine, is there any ...
user avatar
  • 295
5 votes
1 answer
690 views

How to transform a DumpSaved .mx file to .m file conveniently?

I have many DumpSave-d .mx files under a directory. They are generated under Linux. The .mx ...
user avatar
  • 15.6k
8 votes
3 answers
1k views

How to add a trusted path in Mathematica?

I would like to add a trusted a path in the global preferences of Mathematica. When I go to NotebookSecurityOptions, click the tool button for ...
user avatar
  • 5,059
6 votes
1 answer
651 views

Why do Mathematica and MathKernel need "incoming connections"?

My firewall (the "Application Firewall" in OS X 10.8.2) detects that Mathematica (9.0.1.0) and "MathKernel" both request incoming connections. My configuration expects all incoming connections to be ...
user avatar
  • 12.7k
2 votes
0 answers
173 views

How safe are ReadProtected and Locked symbols? [duplicate]

Possible Duplicate: How to distribute proprietary Mathematica code I suspect that there is a way to expose the down values of such symbols with an attack along these lines: ...
user avatar
  • 30.4k