Collaborate Disseminate
An application generates codes using digits. The code is between 10.000 and 999.999
If I generate 1000 codes, ~9,09% of the codes have 5 digits. That means the codes are generated random, but are not cryptographically secure.
My question i… Continue reading Predicting the next code
I’m participating to some bug bounty programs and I found some interest thinks in a javascript file. The problem is that the code is obfuscated.
What do you do when you see this ? Do you skip it, or clean it ?
Continue reading As an attacker, what do you do when you see an obfuscated js?
I have a map (openlayers) which is integrated in a website made on wordpress. So, the wordpress has almost nothing to do with the map. The map is only included in an article.
The wordpress site is on www.example.com. The map is on mymap.ex… Continue reading Is my website vulnerable if I use Access-Control-Allow-Origin * for a section?
Yesterday I was on a call with some friends on the discord when suddenly the sound of the windows was silenced and my cursor started to move robotically, as if I was fighting a tug of war with someone who moved the mouse in the opposite di… Continue reading Did I just get hacked? [duplicate]
It happened to me a few times that I installed a Windows PC after the CMOS battery has been replaced and all sorts of things stopped working or threw security warnings, only to realize that I just need to set the clock, or click on the syn… Continue reading How can wrong time synchronization be exploited?
Not just electronic voting, but in election security general.
I think it part is because there are many components to it, and it has many components that could be compromised.
What are some of the top 3 reasons why this problem is a partic… Continue reading Election security is considered one of the most difficult problems in computer security [closed]
I was looking through my spam folder, and there’s a 100% sure spam email, that asks me to confirm that I want to unsubscribe by clicking some big unsubscribe button. That button is simply a mailto: link, similar to the one below
mailto:use… Continue reading What are the dangers of a mailto link?
I received an email pretending to be from DHL about some package.
Given that it was in my native language, and that it genuinely appears to come from DHL, the email seems legit.
What gives that the email is 100% not legit is that it has a … Continue reading How to figure out what this email attack does? [closed]
I’m by no means a security expert. I own a very small personal site which I wrote in php mostly for practice and all that.
I noticed a weird url call in my logs
process.php?d=MV0f+F6R+6Nn/B4VDh1FRJ9fSEjpPw==&b=1
I tri… Continue reading I saw a weird url in my logs, dunno how to proceed
I am only using digital certificates to sign documents, and my understanding is that the correct flow is the following:
create a private key (e.g. using openssl)
create CSR using the previously created private key
use the C… Continue reading What’s the point of a digital certificate for which no private key exists?