Collaborate Disseminate
Background
In a standard 48-bit MAC address, the 7th (most significant) bit specifies whether it is a universally-administered address (UAA) or a locally-administered address (LAA).
If it is 0, then the MAC address is a UAA and the first 2… Continue reading Are there security reasons for prohibiting universal mac address modification?
Background
Comcast/Xfinity operates various wireless hotspots across the US, accessed via the SSID xfinitywifi through the many wireless access points shown on https://hotspots.wifi.xfinity.com/
xfinitywifi hotspots are all open/unsecure… Continue reading Is it possible to mac-spoof Xfinity Wireless?
To protect against CSRF, couldn’t my page javascript just dynamically insert the session id from the cookie into the body of each HTTP request right before it’s sent?
The server would then just validate that (value received from cookie) =… Continue reading CSRF protection with Session Id
To protect against CSRF, couldn’t my page javascript just dynamically insert the session id from the cookie into the body of each HTTP request right before it’s sent?
The server would then just validate that (value received from cookie) =… Continue reading CSRF protection with Session Id