Collaborate Disseminate
I sent some sensitive images from my personal phone to my personal laptop on school WiFi. I have already shredded the files on my laptop and I believe from my iPhone as well (I deleted them on my phone and then went to recent… Continue reading Delete pictures forever?
By travelling outside your home country can it be revealed, somehow, that your emails have been sent through another country?
I am trying to understand how would an application which uses OAuth2 (OIDC) server implement access control to its own resources.
In this case, the application is both ‘Client’ and ‘Resource server’ in terms of OAuth2.
So,… Continue reading Authorization on OAuth2 application that is both Client and Resource Server
I was performing a Hydra attack on my TP-Link router and for that I prepared a passwords.txt file with 288 passwords.
hydra -l webadmin -P test_creds/passwords.txt xxx.xxx.xxx.xxx ftp
A minute after I set Hydra off it showed me the fo… Continue reading How to interpret the attempt information from Hydra
I’m working on a project similar-ish to a budgeting app like mint or ynab. I’ll be using the Plaid api, which abstracts away account/routing numbers, etc. Thus, what I’ll have access to, and be trying to store, would be the a… Continue reading Storing basic financial data
Every type of biometric authentication will have a false acceptance rate, which is the likelihood that the system will incorrectly accept an access attempt by an unauthorized user. Of course, when combining biometric with oth… Continue reading False acceptance rate in biometric authentication for sensitive information
I recently received emails from my Origin account that my email address and security question had been changed (seems to have been someone in Russia since the new security question was in Russian). This was not my doing so I … Continue reading What steps should I take now that my online gaming account was compromised?
I am asking for a very simple “dumbed-down” answer for a newbie.
Using Adobe Acrobat I can create a self-signed certificate and sign a document as anybody. I can use anyone’s name and anyone’s signature image.
So what’s th… Continue reading Self signed signature in PDF
My boss is spying on me. I’m running ubuntu 17.04, the firewall is up, ssh is off, x11 has notcp set. I’m not an expert, but I can’t find how he gets into my computer. Either he has a RAT (he installed the pc) or he is using … Continue reading My boss is spying on me [on hold]
I’m relatively new to security and I’m looking to prevent brute force logins on a web application I’m creating.
After doing some research, I decided to go with requiring a captcha after a user attempts too many logins within… Continue reading Placing IP address in JSON web token or session cookie