Collaborate Disseminate
I’m designing a password vault that’s accessible to clients through an existing web application. The clients are small, (and mostly non-technical) businesses that aren’t using password managers, but are using this existing application that… Continue reading Design of a web based password vault
First, a bit of background:
I’m running a web application that is heading in the direction of wanting to add "secret management" to the list of features. The clients are very small businesses that typically have multiple people o… Continue reading Taking a naive approach to storing secrets for businesses: what could go wrong?
For personal and corona politics reasons I have been in Egypt for the last 2 weeks. I am starting a new full time job next week, and I’ve been unsuccessfully trying to install some proprietary company VPN software (for Citrix SSO) on a new… Continue reading How can I get (censorship) free internet access for my laptop from a restrictive country like Egypt without installing a VPN software on my laptop? [closed]
I’m looking to implement a multi user authentication environment for a small (11) but growing team, to a reasonable number (currently 500+) of managed devices/services (routers, firewalls, linux cloud instances and on prem physical servers… Continue reading Mutli user/mutli service authentication + HSM as a key signing/encrypting key?
I’m trying to learn a bit about authentication and security protocols at a 10,000 foot level. I was reading about WebAuthn here: https://webauthn.guide/ and here:
https://webauthn.io/
I’m sure what I’m about to ask has obvious answers, bec… Continue reading WebAuthn – What am I missing?
This is about a old Bluetooth device, so no Bluetooth Low Energy.
I have the link key and MAC address of the slave.
How can I listen to the RFCOMM between slave and master so I can reverse engineer or replace the slave, without interupting… Continue reading Listen to Bluetooth RFCOMM communication between two devices
I came across this statement today and am curious:
Audible AAXC files can’t be converted to MP3 since now Audible added an address copyright protection to them
I cannot find anything online as to what “address copyright protection” i… Continue reading What is "address copyright protection"? [closed]
I entered my macOS admin details (root password) into an application I think was malicious. Suspicious, I checked the keychain and my tokens had modified passwords.
What else could have this software done? Where would I look? More import… Continue reading macOS + malware + root password
I configured a Windows CA and created a certificate template to issue certificates with ECDH_P384 keys:
Then I noticed that it’s not possible to set the “Key Encipherment” key usage in the “Extensions” tab:
What is the reason behind … Continue reading Does the "Key Encipherment" key usage make sense when using ECDH P384?
I know this question has been asked before – or similar. I really don’t understand Google Authenticator. If I have set up 2FA on my old phone and can no longer use my old phone – how do I login to these various websites (e.g…. Continue reading How to login to websites with Google Authenticator using new phone?