Collaborate Disseminate
A few days ago from my Mom’s gmail account sent phishing email to all her contacts (with subject: "Dear Friends & Family join me for a joyful gathering…"), she immediately changed her password.
Today my Dad’s email sent out… Continue reading Investigating Parents Compromised Accounts [closed]
Is it possible to use TPM for SSL Client Authentication (with a client certificate) and thereby ensure on the server/backend side knows, that the request comes from the specific client machine (even the key cannot be stolen) when I have an… Continue reading Can TPM be used for SSL Client Certificates for an existing applications?
Less than a year ago a hacker was able to steal my personal information through my bank’s database. Is it possible for this hacker to steal my IP?
Continue reading Can a hacker steal my IP from a stolen bank database? [closed]
Setup:
Some service (SAS, HTTP, mongodb) running on a Linux server and using Windows AD/Kerberos for SSO.
On Linux, httpd is running as the http (Unix) account, and mariadb is running as "mariadb" (Unix) account.
Understanding:… Continue reading kerberoasting: Usefulness of hacking a SSO (GSSAPI/SPNEGO) service on Linux
I got a HyperX Cloud Stinger headset, wired and 3.5mm connector.
Is it possible to infect my headset with some kind of malware?
If my headset is infected with any kind of malware, it would transfer some malware to another computer that I p… Continue reading Is it possible to infect a wired headset with any kind of malware?
I know there are multiple places to put a csrf token and the most common one is to put in a hidden input field in a form. Second is in a cookie with the httpOnly flag. What I want to know is, is there an opposition to placing… Continue reading csrf token placement
Disclaimer The following links are phishing links, please do not sign in to them
Today, a friend of mine came across a link which is a phishing link but I have no idea how it works.
This is the link which a friend was sent:… Continue reading Phishing domain converting text due to special character?
I am using libsodium for cryptography and I want to use SRP for key exchange. The wikipedia page lists a python example, but I am not sure if and how I could convert this to libsodium function calls.
Is it possible or would I need to impl… Continue reading Can SRP be implemented using libsodium
Is this possible, and how?
Here’s the scenario:
Public Web Server hosts basic content for general public.
Private server inside a VPN hosts special subscriber content and services.
The two servers may not be on the same h… Continue reading Server side Client VPN management?
As I understand it, this is how an attacker would exploit clickjacking:
Create a new website malicioussite.com which includes my site in a frame, but overlays malicious input fields or buttons over the HTML elements of my site.
Send out … Continue reading Is Clickjacking a real security vulnerability?