Collaborate Disseminate
I’m selling some stuff on Facebook marketplace, and I always get a bunch of this kind of response, usually within a few moments of the post:
Person: Is this still available?
Me: Yes
Person: Where are you located?
Me: {my location}
Person:… Continue reading What is this marketplace scam? [closed]
In this report on the recent ParkMobile breach, the article has this comment from the company:
“You are correct that bcrypt hashed and salted passwords were obtained,” Perkins said when asked about the screenshot in the database sales thr… Continue reading How can salted passwords work if you don’t "keep the salts in the system"?
My web application is a long sequence of games, which submit progress results back to the server via a web API. These progress messages are how we know how many points the user has earned. The points are used to show rankings and status an… Continue reading How can I prevent API bot automation by a legitimate user?
My application is a (Windows) desktop application that is required to operate fully offline. To enable this, I have a local data cache that keeps a synced copy of server data.
How can I secure this local data from any access… Continue reading How to secure an offline resource using offline software but with occasional server access?
I get emails like this all the time:
Hello dear,
I’m a long time reader. I’m writing to you because I’d love to contribute a guest post on your website.
I’ve been brainstorming some topics that I think your readers would g… Continue reading Why would a stranger offer to write content for a nonexistent blog?
The scenario is that a website has a password recovery feature: you enter your email and if you have an account with that email, it sends you a recovery link.
But then someone writes a script that requests a recovery every 5… Continue reading Is there a name for using a web site email feature to harass someone or the site?
Every few days I get a call on my mobile phone from a number like 370 621 65748, which seems to be a Lithuanian number, but it only rings once and then disconnects. It happens enough to seem intentional, but since they don’t … Continue reading Is this foreign call some kind of scam and what kind is it?
My app is a educational game for elementary schools, involving no money or anything of value, so I am not worried about sophisticated attackers having any interest in this. Still, I would like to follow best practices in case… Continue reading Is a constant pepper at risk if an attacker knows the value and hash?