Collaborate Disseminate
Google Tensor is one example of a chip being designed around "AI" features, though it is not the only such chip. While these technologies are being placed on consumer devices, consumer-friendly explanations of the technologies se… Continue reading Is there any reasonable justification to be concerned with hardware-based "AI" processors?
I am currently developing a web application where I need to ensure that retrieved data (stored in database) have been generated by one or multiple (in the case of clustered applications) application. The idea would be to store a hash of th… Continue reading Authenticate web application generated data
Is there any way I could inspect the traffic from an untrusted device connected to my network? I would like to get a router that has ssl inspection capabilities, where I could check the https packets sent through it, to check if cheap devi… Continue reading Router level SSL Inspection
I’ve been battling with one school task for a couple of days and can’t seem to find any idea how to solve it. The task is pretty simple:
On the server there is a secret.txt file in the /root folder, which is
owned by root. The task is to … Continue reading Escalating user privileges on Linux
I’ve been battling with one school task for couple days and can’t seem to find any idea how to solve it. The task is pretty simple:
Log in to the server using SSH. The answer to the task is in encrypted network traffic, which you have the… Continue reading Decrypting network traffic and finding HTTPS private key
When referring to key types and lengths, is there a correct order to stating the type and length?
For example, would I use "2048-bit RSA key" or "RSA 2048-bit key" in documentation? Or just simply be consistent with wha… Continue reading When referring to key types and lengths, is there a correct order to stating the type and length?
After seeing the many articles and talks stating that JWTs are not a good choice for user auth, I have create a proxy service which uses a simple session cookie to authenticate a user’s request, exchange it for a JWT bearer token (currentl… Continue reading Using JWTs for internal service authentication
In MacOS, each folder has a hidden .DS_Store file. If I compress a folder on MacOS, the zip file will contain those .DS_Store files. What information is contained in those files, and does it expose any information about me, my device, my o… Continue reading Are there privacy risks in sharing the MacOS .DS_Store files? [migrated]
I had a debate with a friend about the security model in new OS X versions. OS X El Capitan and newer have the System Integrity Protection security feature which protects aspects of the OS even from root users.
My friend claimed that it’s … Continue reading Read files protected with System Integrity Protection with sudo
I am trying to understand the security concerns related to using the private network provided by my hosting ISPs.
The ISPs offer a private network feature that only my VPS instances are connected to. The private networks only support IPv4 … Continue reading How to understand risk of a hosting ISP private network?