Collaborate Disseminate
I just recovered from a headache after realizing the code given by Google Authenticator on my new phone is different than the one on my old phone. Given how it works I thought they would be the same on both phones. How is it … Continue reading Why does Google Authenticator have different codes on different devices?
My school supplies an email address for its students. To connect to their email server, no authentication is needed for the outgoing mail server. So no user name, or password is needed and no SSL/TLS is used (and it’s port 25… Continue reading How does lack of SMTP authentication impact users?
I know some websites say in their terms and services that the website can only be accessed by humans and not bots or scripts. How do they tell who is accessing? Especially with tools such as AutoScript that just record the mo… Continue reading How to tell if human is using website or automated script?
Today I heard of a call centre that you are not allowed to bring cellphones into or take paper out of. This is allegedly to be PCI complaint. Is this true? What is the reasoning? This seems like overkill. They said it’s to protect credit c… Continue reading Do you have to ban cellphones and paper to be PCI compliant?
If the goal is to make data no longer retrievable, how secure is it to format the disk?
I assumed formatting the disk overwrites free space (thus making it a safe bet no one’s going to be able to retrieve the data) but according to Weboped… Continue reading To what extent does formatting a disk (securely) remove its data?
I’m studying for CISSP. Is least privilege, need to know and confidentiality all the same thing?
In my book it says “confidentiality is sometimes referred to as the principle of least privilege” and also in the index it has in parenthesis… Continue reading difference between need to know, least privilege and confidential
Does it defeat the purpose of a key file to store it in the same location as the password database? What if a master password is needed also?
For example I save my .kdbx to dropbox as a means to backup and was wondering if I… Continue reading Password manager: should key file be stored on a different device than password db file (even if master pw used)?
I was studying for CISSP certification when I came across the question “what type of virus attaches itself to an executable?” The answer was “parasitic”. I find terms relating to viruses and malware to be a bit confusing.
I … Continue reading Confusing definitions of "parasitic virus" and "worm"
I am practicing reversing md5 hashed passwords using John the Riper and was curious about some behaviour. I added the md5 hash of zaa to the top of the file with the hashes and when I ran john passwordFile.txt it reversed the hash to find … Continue reading what order does the incremental mode of john the ripper, brute force passwords in?
I just learned about Kon Boot (from this YouTube video) and am wondering, how is such a hack tool guarded against? In the video the presenter claimed he had full disk encryption but was still able to by pass the password from booting to th… Continue reading What is susceptible to Kon Boot hack tool?