Collaborate Disseminate
I’ve been working in IT security since more than 15 years, I’m involved in all related technologies/topics (Firewall, VPN, Proxy, AV, email, Windows/Linux clients, etc.). I’ve worked with these for many years now, adding (log… Continue reading Side jobs for IT security experts? [on hold]
As stated in the title, are there any existing best practices to install Debian on a remote server, without sending clear text passwords over the link?
For example – a lot of dedicated server providers will give their custom… Continue reading Install Debian on a dedicated server remotely without sending any clear-text credentials
I am working in React, and I have an image which has an src attribute of https://s3.amazonaws.com/sample_endpoint. My website domain is https://sample-website.com.
I am using a library, dom-to-image, https://www.npmjs.com/pa… Continue reading Does changing an image src attribute to call a PHP function on my server to retrieve an image from another server eliminate CORS policy issues?
Lets say there is an industrial device communicating with a central system. Secure communication is required from an end to end point of view. From time to time keys of the devices must be renewed by receiving encrypted keys … Continue reading Does encapsulation of encryption within a library provide some kind of additional security?
I am curious as to when a VPN should be implemented in a workplace. VPNs of course provide privacy/security in general, but is there really a point in setting one up for a workplace if there are no services running on interna… Continue reading Is it best practice to setup a VPN for remote users to use even if there are no services hosted internally?
Simply: For my domain (say example.com), I want my computer to only trust HTTPS certs signed by my personal CA, and ONLY my personal CA.
Otherwise any one of the CAs I have on my computer could create a valid cert for my personal domain a… Continue reading Can you whitelist a single CA for a domain?
I am looking for a solution to storing SSNs in a secure way in a database.
The following references are related:
How to safely store sensitive data like a social security number?
https://paragonie.com/blog/2017/05/building… Continue reading Using HMAC for storing low-entropy input data (e.g. SSN)
Is anyone know the valid web that you can buy a valid credit card on the dark web that you will be able to clone them?
Would you be able to clone someone debit card if you only have the picture of the card with the security code and the PIN?
Recently most browser have added support to the SameSite cookie attribute to prevent CSRF attacks: https://www.owasp.org/index.php/SameSite
Question if it is supported should we implement Synchronizer Token Pattern to prevent CSRF attack… Continue reading SameSite cookie attribute and Synchronizer Token Pattern