Collaborate Disseminate
Does using a Cloudflare DNS server (1.1.1.1 or 1.0.0.1) enable bypassing Cloudflare CAPTCHAs faster?
Conceivably, a Cloudflare CAPTCHA could ask Cloudflare if my IP address was looked up with 1.1.1.1 or 1.0.0.1. Does it do this?
I noticed … Continue reading Does using Cloudflare DNS (1.1.1.1 or 1.0.0.1) enable bypassing Cloudflare CAPTCHAs faster?
How were WikiLeaks’s leaks (like the Podesta emails) obtained?
Has there been any evidence that ISPs track/log DNS look-ups to the DNS servers they operate and supply for their own users?
Some of OpenNIC’s public servers keep logs, so DNS servers can log (and others support DNSCrypt, which presumably … Continue reading Do ISPs track/log DNS lookups to their DNS servers? [closed]
How could forward secrecy be cracked?
Ferguson, Schneier, & Kohno, Cryptography Engineering: Design Principles and Practical Applications, p. 238:
Even knowing Alice’s authentication key doesn’t let the attacker find the session key k… Continue reading Does cracking forward secrecy only involve finding the session key (in addition to the authentication key)?
Are there 1632 possible MD5 sum hashes, or does MD5 have an error correction, where certain combinations are invalid MD5 hashes?
SimpleX (whitepaper; audited by Trail of Bits) claims to be
The first messenger without user IDs
Other apps have user IDs: Signal, Matrix, Session, Briar, Jami, Cwtch, etc. SimpleX does not, not even random numbers. This radically improve… Continue reading Is SimpleX more secure than Signal?
What are the following headers in an end-to-end ProtonMail email?
X-Pm-Content-Encryption
X-Pm-Origin
X-Pm-Scheduled-Sent-Original-Time
X-Pm-Recipient-Authentication
X-Pm-Recipient-Encryption
It also mentions pgp-pm.
Are they specific to … Continue reading What are ProtonMail’s headers? [closed]
Why is Telegram’s server-side code closed source, but the client code is open source? Does having closed source servers improve its security?
Telegram FAQ page:
Q: Can I get Telegram’s server-side code?
[…]
By contrast [to the client apps… Continue reading Why is Telegram’s server-side code closed source?
Can I convert a PGP key to X.509, using OpenSSL or GNUPG?
Aren’t these only container/wrapper formats?
Can my IP address ever be included in the header of emails I send? Or do email servers never include my IP address in my emails’ headers?