Questions tagged [library]
A library is a collection of software routines made available to other programs through a well-documented interface.
43 questions
1 vote
0 answers
121 views
What are some reliable and well-maintained Post-Quantum Cryptography (PQC) libraries with Go support? [closed]
I am looking for reputable libraries or solution providers that offer reliable, well-maintained, and well-documented implementations of post-quantum cryptographic (PQC) algorithms. Specifically, I am ...
1 vote
1 answer
657 views
ScyllaHide DLL Injection
When I try to perform a DLL injection with ScyllaHide in x32/x64 dbg, then it crashes for some reason, is this a bug? Both with stealthy injection as with normal injection, the program crashes when I ...
12 votes
2 answers
5k views
Are devDependencies in Node.js exploitable?
I am well aware that the best approach is to update any dependency, no matter whether it is a development dependency or a runtime/production dependency. But from a research prospective, I want to know ...
-2 votes
2 answers
264 views
What to do when you simply cannot trust anyone or anything anymore?
I've found this PHP library for detecting/guessing the language of a given string: https://github.com/patrickschur/language-detection I would have massive use of this. I would really like to use it. ...
2 votes
0 answers
150 views
Cryptographic libraries raising an exception vs. returning a boolean
In several Python libraries, I have seen validation functions that raise exceptions upon failure, instead of returning a boolean result. Examples include: various verify functions in the Cryptography ...
0 votes
2 answers
310 views
Is there any such thing as an independent code vetting project which works for free to vet open source projects?
I'm sure I'm not the only one who is scared to death to blindly trust random strangers with all my data. Which is the case in practice if, for example, I'm to use this library right now, which I'm ...
2 votes
2 answers
208 views
Does removing features from a library increase or reduce security risks?
Software libraries targetting resource constrained environments like embedded systems use conditional compilation to allow consumers to shave space and thus increase performance by removing unused ...
2 votes
1 answer
533 views
How can the validity and safety of a software library be checked?
So beyond looking at the source code for particular software library, is there a way to vet that it does not contain malicious code? As far as I know from my own research, services like pip, npm, and ...