Collaborate Disseminate
We use a predefined admin user in our web application.
The configured password is very long and different for each installation and we have implemented brute force mitigations.
What are the security concerns of having a predefined user?
… Continue reading What are security concerns of the predefined user in Web Application?
PCI DSS requirement 3.5.3
3.5.3 Store secret and private keys used to encrypt/decrypt cardholder data in one (or more) of the following forms at all times:
…………
As at least two full-length key components or key s… Continue reading What is two full-length key components PCI DSS requirement 3.5.3
I have data saved on old NTFS-format hard disks which were encrypted on Windows machines, using EFS (the native file encryption system built into Windows). I encrypted selected files/folders, only, not the entire drive.
Is t… Continue reading Read NTFS / EFS encrypted files on iOS with saved certificate
Currently the router/modem provides the wifi and ethernet. I have no way of sshing into it and I am not sure if it even support port mirroring.
Is there a good wifi router that I can setup after the xfinity router and have a… Continue reading Xfinity Router, wanting to set netflow and IDS
Google has now released their “Titan” keys to the general store (albeit via a waitlist). When they first announced their product, Yubico, their chief competitor, decried the use of Bluetooth:
Google’s offering includes a … Continue reading What could MitM’ed U2F do?
I downloaded an APK and it’s and randomly websites keep popping up and I downloaded a couple antivirus and malware protection apps and they send all them said that I was protected but I keep getting the website so what should… Continue reading I think the split I downloaded it a virus
Assume I have a clean system, network, and up-to-date browser.
Let’s say someone sends a malicious email to my Outlook inbox. I do not open it, preview it, or download and run any attachments.
My question is: if I receive a… Continue reading Can your Outlook email (Outlook Web Access or OWA) get compromised just by receiving an email?
When WPA3 has a reasonable level of market penetration, one of its key selling points is Opportunistic Wireless Encryption (OWE). In other words, a coffee shop can have a network without a password, and each WPA3 device that connects to it… Continue reading Does WPA3 OWE mean the return of Evil Twins?
Can the police track my cell phone if I left the country and went to another one and the SIM card is not supported by the country I went to?
Continue reading Tracking phone in country when SIM is not supported
I want to increase the security of my Tomcat and to configure diffie-hellman module size 2048.
I want to add to my CATALINA_OPTS -Djdk.tls.ephemeralDHKeySize=2048
What happens if I have configured it 2048 but the Tomcat SSL k… Continue reading diffie-hellman size 2048 and key with size 1024