Collaborate Disseminate
Is there any way I could inspect the traffic from an untrusted device connected to my network? I would like to get a router that has ssl inspection capabilities, where I could check the https packets sent through it, to check if cheap devi… Continue reading Router level SSL Inspection
I’ve been battling with one school task for a couple of days and can’t seem to find any idea how to solve it. The task is pretty simple:
On the server there is a secret.txt file in the /root folder, which is
owned by root. The task is to … Continue reading Escalating user privileges on Linux
I’ve been battling with one school task for couple days and can’t seem to find any idea how to solve it. The task is pretty simple:
Log in to the server using SSH. The answer to the task is in encrypted network traffic, which you have the… Continue reading Decrypting network traffic and finding HTTPS private key
When referring to key types and lengths, is there a correct order to stating the type and length?
For example, would I use "2048-bit RSA key" or "RSA 2048-bit key" in documentation? Or just simply be consistent with wha… Continue reading When referring to key types and lengths, is there a correct order to stating the type and length?
After seeing the many articles and talks stating that JWTs are not a good choice for user auth, I have create a proxy service which uses a simple session cookie to authenticate a user’s request, exchange it for a JWT bearer token (currentl… Continue reading Using JWTs for internal service authentication
In MacOS, each folder has a hidden .DS_Store file. If I compress a folder on MacOS, the zip file will contain those .DS_Store files. What information is contained in those files, and does it expose any information about me, my device, my o… Continue reading Are there privacy risks in sharing the MacOS .DS_Store files? [migrated]
I had a debate with a friend about the security model in new OS X versions. OS X El Capitan and newer have the System Integrity Protection security feature which protects aspects of the OS even from root users.
My friend claimed that it’s … Continue reading Read files protected with System Integrity Protection with sudo
I am trying to understand the security concerns related to using the private network provided by my hosting ISPs.
The ISPs offer a private network feature that only my VPS instances are connected to. The private networks only support IPv4 … Continue reading How to understand risk of a hosting ISP private network?
I was recently using my personal google account on my work computer and some of my previous google searches appeared from my personal phone. I used Safari on my personal iPhone and I guess google.
So can work see that search history on my … Continue reading Personal Google search history appeared on work computer. Does this mean work can see my private search history from my personal iPhone?
I got a mail from my professor this morning with a request.zip file attached and a password in the mail to open it. Since the mail was from my professor and he already did send me zip attachments I didn’t think about it and opened it, but … Continue reading My computer was probably infected by a virus from a professor [duplicate]