Collaborate Disseminate
My ideal bank would offer online banking from a browser with user/pwd and WebAuthn, for example with a NFC or USB key. No OTP or SMS or apps on the smartphone or physical devices required. (It goes without saying, no recovery… Continue reading Why don’t online banks use WebAuthn? [on hold]
The title says it all: has anything been tried? In view of recent discoveries, this is a huge privacy concern. I’m interested in reference to specific projects or ideas that could work for my laptop, rather than philosophical… Continue reading libreboot/coreboot/anything similar for modern Thinkpad laptops (T460s)
Suppose I have a certificate sha-256 fingerprint, which I can obtain say visiting the relevant domain in firefox or from a shell script using openssl, and i want to verify this fingerprint. one option is to look up the domain… Continue reading ways to check a certificate fingerprint against known logs
Say that I want to check an https certificate. Suppose I know its SHA-256 fingerprint, how do I compare it to this service search tool, which apparently only gives me the serial number?
edit1: can https://crt.sh be considere… Continue reading compare sha-256 fingerpirnt of certificate with google transparency report
What can I do if I think that my online banking service is not secure enough? the bank I’m considering is hsbc us (but I believe such issues are common to many) and here’s two items that I believe prove low security standards… Continue reading what to do if your online banking has low security standards
I have a basic question regarding fingerprints of https certificates, the specific case I wanted to check being my online banking service. With firefox on linux, I can visit the specific web page and then click on the green l… Continue reading methods to check https certificates
I could use two wifi connections, both with WPA & WPA2 Enterprise security, automatic PEAP and MSCHAPv2, one of them with certificate, the other without; both require user/pwd and are on a university campus.
Would any on… Continue reading Online banking on wpa & wpa2 enterprise
When I buy an U2F device, say a Yubikey smart-card, does the vendor hardcode on it a private key that will be later used in a challenge-response mechanism by the user, or do they only put in there some kind of ‘seed’, which i… Continue reading generation of keys for U2F
Today a Skype contact of mine sent me a link in the chat. This link I believe was sent without the person knowing it, and it contains a reference in the URL to my Skype ID, in the form …tumblr…#my_skype_id
Unfortunately … Continue reading Skype for iPhone image/link preview
Today a Skype contact of mine sent me a link in the chat. This link I believe was sent without the person knowing it, and it contains a reference in the URL to my Skype ID, in the form …tumblr…#my_skype_id
Unfortunately … Continue reading skype for iphone image/link preview