Collaborate Disseminate
I need to install a computer in a remote location, so that a specific unique user can remotely connect to it via Wireguard VPN. Performance requirements are very low, but security requirements are very high (needs to be very secure against… Continue reading Use old computer to run outward facing VPN server
I am looking into databases of compromised passwords in order to ensure that passwords on a system I am responsible for are not already compromised.
To have complete peace of mind, I prefer to get access to the data, and check passwords lo… Continue reading Databases for compromised passwords that browsers use
I was thinking of the following scenario :
a network is behind a router (performing NAT) and firewall
this firewall denies all unsollicited incoming packet
a user on a computer of the network opens a browser, types in “http://www.company1… Continue reading Prevent IP session hijacking
I know printers are a security hole. I am trying to get the best setup to minimize risk.
Here’s the risk that I am trying to mitigate : that an attacker remotely access the printer, and use it as a launchpad to infect other computers.
I want to buy a good quality printer, but I want it to be as safe as possible.
All the good printers I see have wireless capabilities unfortunately. I know the safest would be a printer with no networking capabilities.
If I buy a printer… Continue reading Printer security
By running a simple port scan, I have noticed that pycharm is opening three ports on the machines it is installed on.
Pycharm is a great tool for developer, but it seems fairly awful to me on the security side. Opening ports is a known se… Continue reading pycharm opening ports
On a traditional macOS system, what is the exhaustive list of ways that spyware can exfiltrate data?
The only way that I know are to ask the OS to open a socket via the socket system call. There are several types of socket listed on the m… Continue reading Exhaustive list of ways to access the NIC on macOS [closed]
I came across the idea of adding many domain names to an hosts list to prevent “malvertising” (malware hidden in ads). How does this compare to using an adblocker?
Using an host files seems better to me at first sight, but are there perfo… Continue reading Adblocker versus denied hosts list?
I would like to understand how firewalls work in details, and understand the attack surface.
TCP and UDP
I understand that TCP and UDP are easy to filter. Programs on a computer need to ask the OS to open a port and will listen to these … Continue reading Understanding firewalls
From what I can see, most firewalls seem to focus on tcp and udp. Why is that? Is it impossible or at least very unlikely for malware to use other protocols/custom protocols?