Collaborate Disseminate
U2F is touted as a new 2 factor authentication standard that has built in defense against phishing attacks. As I understand it, this works by registering the device with each service, thereby creating a unique keypair. If a p… Continue reading Does U2F prevent phishing of passwords?
Subresource integrity basically lets me know that a resource I’m about to download is valid, because the hash of its contents matches what I expect.
But this assumes that I’m already running on some trusted and verified code… Continue reading How does subresource integrity actually help?
Let’s say I have some USB stick that I know and trust. I can examine the firmware and generate a checksum for it.
Can I use this checksem to ensure that when the USB is next plugged in the firmware was not modified? Would i… Continue reading Is it possible to check if a USB’s firmware is unmodified when plugged in?
I have an existing system that signs an arbitrary binary blob with an ECDSA key. The output of this is an r and s value. I now need to verify this signature on another system. On this other system though we are using BouncyCa… Continue reading How do I convert an elliptic key signature r and s value into a signature byte array?
I recently noticed that when logged into my ISPs (Spectrum) public, external site that can be accessed outside my network, I can see my home network’s WPA2 password in plain text.
This clearly means they at least aren’t hashing passwords… Continue reading My ISP shows my WiFi password on their public site in plain text. Should I be worried?
A CNN article on the recent US Election hacks claims that
…the administration has traced the hack to the specific keyboards — which featured Cyrillic characters — that were used to construct the malware code, adding … Continue reading Can you trace malware back to a specific keyboard?