Bypass authorization of FileMaker Server or “there is no such category” Source: https://fm-security.com/posts/bypass_auth/ CVE FileMaker Server CVE-2024-27790 Menu Introduction In the summer of 2023, I decided to investigate the internal communication protocol between FileMaker clients and the server. This led to the discovery of perhaps the most significant vulnerability in the platform’s history. I discovered that it
Decoding the fmp12 File Format: A Deep Dive into Passwords and Account Security Source: https://davidhamann.de/2024/06/17/how-does-filemaker-store-passwords/ Introduction On This Page I had been planning for a while to dive deeper into the fmp12 file format to explore how data is organized and how accounts and passwords are stored. A few months ago, I finally found the
Wim Decorte, Jacob Taylor, Jun 11, 2024, In this blog post, we take a deep dive into the FileMaker 2024 Server (also known as FileMaker 21) Q&A session featuring experts Wim Decorte from Soliant Consulting and Jacob Taylor from RCC. This session provided a comprehensive look at FileMaker Server’s latest features, performance optimizations, and essential
Source: https://support.claris.com/s/article/FileMaker-Server-Version-Comparison?language=en_US See features added in: FileMaker Server 2024 Features Description x FileMaker Server administrators now have clearer visibility on schedules and better tools to manage teams and users. FileMaker Server Admin Console consolidates all schedules in one view so administrators can better avoid automation conflicts Administrators can block new user connections to ensure maintenance integrity Administrator roles allow more
Weihao Ding, Jun 16, 2023, Direct Impact Solutions Blog Source: https://www.directimpactsolutions.com/en/modernizing-a-fm-legacy-app/ Why should I modernize my apps? Why should I modernize my apps? What is a legacy app? There are a few factors that, when combined, constitute a legacy app. Apps carrying technical debt and using outdated technologies that are critical for day-to-day operations are
Keycloak 17 & FileMaker: Installation & Configuration Tutorial Duncan Baker, Sounds Essential Blog Source: https://www.soundsessential.com/support/tutorials/212-keycloak-17-filemaker-installation-configuration-tutorial-part-1-ubuntu-mysql Part 1: Ubuntu & MySQL Introduction As we have before, we need to acknowledge the excellent work from Wim Decorte and Steven Blackwell who have and continue to push the subject of security in the FileMaker platform. Our forays into
Heidi Porter, Chris Moyer, EngageU 2022 Table of Contents Introduction: Understanding the Cyber Threat Landscape Heidi Porter and Chris Moyer emphasize the critical need for organizations and individuals to understand the evolving cybersecurity landscape. Over the past decade, attacks have become more sophisticated, targeting personal devices, organizational networks, and even public infrastructure. As more services
by Nicolás Franco, Rome FileMaker Week 2022 Menu 1. Introduction The presentation, held at Rome FileMaker Week 2022, featured Nicolás Franco discussing how to enhance FileMaker’s security through layered measures. His session aimed to demonstrate practical, easily implementable steps for safeguarding FileMaker databases against potential breaches. He also touched on some common security issues and
Richard Carlton, Jun 2, 2020, FileMaker Training Videos Introduction to FileMaker Workflow Security Overview of Workflow vs. Bad Guy Security Workflow security involves creating a controlled environment where users follow established procedures to maintain data integrity. However, “Bad Guy” security is about safeguarding against intentional breaches and attacks. By focusing on workflow security, organizations ensure
Interpreting MacOS Crash Reports: Diagnosing Issues in FileMaker Server Source: https://www.mbsplugins.de/archive/2019-10-15/Reading_crash_reports_on_MacOS/monkeybreadsoftware_blog_filemaker After the Windows crash report from earlier today where we couldn’t do much, here is an example for one where we could help on MacOS. When you find a crash report in /Library/Logs/DiagnosticReports folder (for server software) or ~/Library/Logs/DiagnosticReports (for user software), you can
Tim Neudecker, FileMaker DevCon 2019 Session OverviewWhy Security MattersFileMaker Security Tools Session Overview Tim Neudecker’s session at FileMaker DevCon 2019, titled “How Not to Worry About Security”, emphasized the importance of integrating security into FileMaker applications from the ground up. Security, often considered an afterthought in many development processes, should be the first concern, given