Software Development & Java in general

Selected topics in the areas of custom software development, Web services, Java, databases, and digitalization

Understanding CSV Files: What they are and how to use (How-to)

Added at 02/04/2023

Using CSV files is a daily routine for many people who have to accomplish a - fully automatic or semiautomatic - data exchange between different IT systems. CSV files are not the only solution path, but are very common. This concerns for instance online and e-commerce businesses which import the current orders from eBay into their own ERP system (Enterprise Resource Planning) or the accounting when exporting tax data to the tax office.

Windows 11 Certificate-based File Encryption (CrococryptFile with Hardware/Software Token)

Added at 09/20/2022

HissenIT's CrococryptFile fully supports Windows 11 including crypto suites. Besides classical end-user password-based encryption of files and folders, also the Windows Keystore using certificate tokens can be used. Hence, existing PKI infrastructure components can be used to encrypt file archives quickly also in business groups.

Secure Programming of Web Applications: Authentication

Added at 12/28/2020

We can read about numerous successful attacks on well-known web applications on a weekly basis. Reason enough to study the background of "Web Application Security" of custom-made / self-developed applications - no matter if these are used only internally or with public access.

Secure Programming of Web Applications: Session-Hijacking

Added at 12/21/2020

We can read about numerous successful attacks on well-known web applications on a weekly basis. Reason enough to study the background of "Web Application Security" of custom-made / self-developed applications - no matter if these are used only internally or with public access.

Secure Programming of Web Applications: Clickjacking

Added at 12/15/2020

We can read about numerous successful attacks on well-known web applications on a weekly basis. Reason enough to study the background of "Web Application Security" of custom-made / self-developed applications - no matter if these are used only internally or with public access.

Secure Programming of Web Applications: Remote File Inclusion (RFI) and Local File Inclusion (LFI) resp. Directory/Path Traversal

Added at 12/08/2020

We can read about numerous successful attacks on well-known web applications on a weekly basis. Reason enough to study the background of "Web Application Security" of custom-made / self-developed applications - no matter if these are used only internally or with public access.

Secure Programming of Web Applications: Open Redirection

Added at 12/01/2020

We can read about numerous successful attacks on well-known web applications on a weekly basis. Reason enough to study the background of "Web Application Security" of custom-made / self-developed applications - no matter if these are used only internally or with public access.

Secure Programming of Web Applications: Cross-Site Scripting (XSS)

Added at 11/27/2020

We can read about numerous successful attacks on well-known web applications on a weekly basis. Reason enough to study the background of "Web Application Security" of custom-made / self-developed applications - no matter if these are used only internally or with public access.

Secure Programming of Web Applications: Cross-Site Request Forgery (CSRF)

Added at 11/20/2020

We can read about numerous successful attacks on well-known web applications on a weekly basis. Reason enough to study the background of "Web Application Security" of custom-made / self-developed applications - no matter if these are used only internally or with public access.

Secure Programming of Web Applications: SQL Code Injection

Added at 11/14/2020

We can read about numerous successful attacks on well-known web applications on a weekly basis. Reason enough to study the background of "Web Application Security" of custom-made / self-developed applications - no matter if these are used only internally or with public access.

JavaFX WebView / WebKit error at JavaScript to Java communication (Java 8)

Added at 12/04/2017

We are using Java for nearly two decades to build products. When an integrated WebKit was finally introduced to the Java platform - coming with JavaFX - development opportunities were boosted tremendously, because now you are able to integrate HTML5 web technologies into your desktop application easily.

Say no to plain passwords: Secure Password Hashing

Added at 11/02/2015

Plaintext passwords should not be used anymore. You are probably using a web shop software framework that takes already care of this. Most application frameworks in the world do not use plain passwords anymore but password hashes instead.

Encryption background: What is key wrapping?

Added at 10/07/2015

Key wrapping is a simple technique in cryptography that is used in almost all common encryption technologies.

Open-Source and Security: Why Open-Source is not insecure

Added at 10/06/2015

Recently, I received the question if it would not be dangerous, when the source code for an encryption software is publicly available. An answer...

Password-based Encryption made easy

Added at 09/28/2015

Here is a simple example for using strong password-based encryption for non-cryptographers with CrococryptLib.

Easy encryption for Android apps – CrococryptLib 1.4 released

Added at 09/25/2015

CrococryptLib 1.4 for Android released: A library for mobile apps that allows the most easiest integration of password-based encryption, hashes and other cryptography operations. No in-depth cryptography knowledge is required to integrate encryption into Android apps.

The easiest way to integrate encryption into enterprise applications – HissenIT released CrococryptLib

Added at 08/24/2015, last update at 09/02/2015

HissenIT recently released CrococryptLib for Java: A library for Java back-end, desktop and mobile applications that allows the most easiest integration of encryption and other cryptography operations. No in-depth cryptography knowledge is required to integrate encryption into enterprise applications or software products.