Hacking / malware tracking

I currently have a .net web application on a cluster-based system (Rackspace cloud). In the web configuration, I installed the following machine key.

<machineKey validationKey='DE0...etc' 
decryptionKey='A97...etc' 
validation='SHA1'/>

Every day we received several of the following errors:

Failed to verify viewstate MAC address. If this application is hosted on an Internet Farm or Cluster, make sure the configuration is validationKey and validation algorithm. AutoGenerate cannot be used in a cluster.

I did a little googling and added the following. This stopped all previous errors. However, he can open the door for various hacker attacks.

<pages enableViewStateMac="false">

However, now I find that I am getting the following errors:

Status information is invalid for this page and may be corrupted.

, . ? -? / ? , ...

- ?

+3
1

, / - .

, , , , - , , , , .

:

MAC- viewstate

+1

Source: https://habr.com/ru/post/1720164/


All Articles