Collaborate Disseminate
In WPA2 configuration files for a client (e.g., phone, laptop, wifi-connected thermostat, wifi-connected camera) connection to the wifi router, I can save the PSK ("pre-shared key") in either plaintext or hashed form (saved as a … Continue reading WPA3 password storage
Was this recent US Treasury data breach
really caused by the Chinese government?
"Based on available indicators, the incident has been attributed to a China state-sponsored Advanced Persistent Threat (APT) actor."
What are thes… Continue reading Did the Chinese government really just hack the US Treasury Department?
I believe most new Android phones have full encryption enabled by default, so even if I just
download some PDF weather report from the internet, it will sit encrypted on my phone’s SSD.
Now, suppose my phone breaks and loses power, such th… Continue reading When the phone breaks and I regret encryption
When I get within a meter of my car with the key in my pocket, the door unlocks automatically.
A standard 200mAh 3V coin cell powers the key for about two years. To think about this
easily, let me assume the key at least sends out a 1ms R… Continue reading Low-Power Keyless Entry
Suppose a mischievous coffeeshop wifi gateway wants to drain phone batteries.
It is easy to see how it might weaken signals and flip a few bits to wreak NAK havoc at the link level
so wifi chip power consumption is maximal.
But, how could … Continue reading Suppose a mischievous coffeeshop wifi gateway wants to drain phone batteries
My trusted root certificates are below.
As an exercise, I want to be sure that a MITM is not changing the list.
So, can I somehow get this list signed?
In my opinion, the list could be signed by my laptop’s TPM
using a key signed by my lap… Continue reading Who am I really trusting?
The newest Android phones use the Qualcomm Snapdragon 855 chipset with its TrustZone/TEE. The Android OS makes sure that a stolen phone, in its assembled form, is not usable.
Does Trustzone further prevent the CPU from bein… Continue reading Anti-Theft Mobile CPU
I had never thought much about this until the only account on my home PC somehow lost admin
privileges (changing to guest – I suspect this is a Microsoft bug but will probably never know).
So, eventually, I solved this proble… Continue reading Should I change my built-in Administrator password?
When I talk over 3G without a SIM, for which the only example I see is 911 emergency
calling, is any encryption used? In other words, can a 3G eavesdropper understand any
content of my 911 call? I assume the network provide… Continue reading 911 Authentication and Encryption
Do any computer manufacturers sign (DSA, or just publishing a hash) their recovery partitions so that I can be sure that these bits are authentic? I’d like to buy a second-hand computer and reduce the chance of it having any spyware.