Email Us
+1 (727) 291-0611
Chat Now
Software Security Blog
A Guide to OWASP’s Secure Coding Practices Checklist
In 2022, 33% of newly discovered vulnerabilities were flagged as critical or high. Explore OWASP’s secure coding practice checklist and learn how to leverage its power to boost your threat protection and reduce attack risks Digitalization is both a blessing and a curse for organizations.…
Blogging About Everything Software Security – Threats, Updates, Best Practices, Tips, & More
Software touches the everyday lives of billions of people around the world. They rely on us (the software industry) to deliver dependable, safe applications for them to use. This blog is dedicated to working together to do our part to make the (software) world a better place…one piece of software at a time!
-
Sign Your Code using External Hardware Token Being a developer, you already know the importance of Code Signing Certificate and especially how EV Code Signing Certificate comes with extra benefits like instant Windows SmartScreen recognition, with all the benefits of standard Code Signing Certificate. But, if you’re looking for how it works, then hopefully here you will…
-
The HTML <keygen> element is one of the features, which is used for generating the key material and the submission of the public key, as a part of an HTML form. It’s a mechanism which is designed to use with Web-based certificate management system. Likewise, this element is used within an HTML form with other needed information for…
-
The HTML <keygen> element is one of the features, which is used for generating the key material and the submission of the public key, as a part of an HTML form. It’s a mechanism which is designed to use with Web-based certificate management system. Likewise, this element is used within an HTML form with other needed information for…
-
Distinction- iOS Code Signing Identity & Provisioning Profiles Being an iOS developer, you might be getting annoyed with Code Signing Identity and Provisioning Profiles. And, might even be questioning, what is Code Signing Identity? What’s the need for creating Provisioning Profiles? What’s the difference between the two? Being a developer, why should I even care about it? Well,…
-
Before moving any further, verify that your certificate is installed in the Windows CSP. For that, right-click on your PFX file and select Install or import through Internet Explorer by clicking on: Steps to sign VBA Macro with Timestamp reg add “HKCUSoftwareMicrosoftVBASecurity” /v “TimeStampURL” /f /d”https://timestamp.comodoca.com/authenticode”reg add “HKCUSoftwareMicrosoftVBASecurity” /v “TimeStampRetryCount” /f /t REG_DWORD /d 2reg…
-
First, you need an AIR SDK installed for signing an AIR application. To make it convenient, make sure you’re on the environment variable PATH of the Adobe AIR SDK, i.e., /bin/ directory Open a command prompt and go to the AIR application’s source folder (the source folder is the one that contains the applicaiton.xml file).…
-
If you’re an Individual software developer or a publisher who develops software and applications, then the requirement for code signing is a little different, as Individual Validated Code Signing Certificates are required. And those keep getting harder to find. Here, the identity of a single developer is verified by a Certificate Authority (CA), instead of the legitimacy of an…
-
A Code Signing Certificate is a type of digital certificate that is used across all the major platforms to provide security, authentication, and guaranteed identity for executables, software, code, and scripts. In other words, a Code Signing certificate is used to confirm to users that the application or any other script that they are downloading from the internet…
-
OV Code Signing Vs. EV Code Signing: What’s the Difference? Whether it’s an OV Code Signing Certificate or EV Code Signing Certificate, both offer the same thing – signing software, scripts, drivers or any other executable files using x.509 based certificates which are attached to a trusted root. Even, Microsoft and the CA/B forum keep…
-
Like applications, software, codes and scripts, Kernel-Mode Drivers can also be signed using EV Code Signing Certificates. The benefit of signing Kernel-Mode Drivers is that it helps users verify that this digitally signed kernel-mode driver packages are coming from a trusted organization or company. If it has been tampered with, the user will be notified…
-
If you’re an organization developing or publishing software and you’re looking for an extra edge in the form of instant trust from Microsoft SmartScreen, Extended Validated (EV) Code Signing Certificate will be the perfect choice for you. Here, the validation steps are almost the same compared to EV SSL Certificates, but again as it’s Code Signing Certificate,…
-
If you’re an organization that develops software and applications, you may already know how important it is to sign your software, applications or code with a Code Signing Certificate. So, which documents required for code signing? how to get a Code Signing Certificate? What’s the process? Let’s take a look,For organizational validation Code Signing Certificate, there are…
-
Deliver Your Code More Confidently to Customers of Leading Microsoft Platforms CodeSigningStore.com is one of the leading global providers of Code Signing Certificates from the industry’s best Certificate Authorities, like DigiCert, Comodo/Sectigo, and Thawte. If you’re a publisher or developer who makes software and applications for Microsoft platforms, or you’re seeking a code signing certification…
-
If you’re the organization or web developer who develops Adobe Air based applications, it’s important to sign your applications before publishing to avoid warning messages such as Unknown Publisher.For Example: Unsigned Application Unsigned For signing applications, Adobe Code Signing Certificates are provided by globally known Certificate Authorities, which helps users to figure out that the application they…
-
Discover steps sign your Adobe Air applications using the Flex SDK. Before starting, get the Flex SDK & ADT application adt -package -storetype pkcs12 -keystore -storepass password ExampleApp.air ExampleApp-app.xml ExampleApp.swf Note: Now, go to the directory Flex SDK\bin and run this command:
