Collaborate Disseminate
I came across a site that had the password strength meter. I tried using ‘password’ and the meter did not like my password. Then I happened to try ‘password’ but I used the arabic translation for ‘a’ for the ‘a’ in ‘password’… Continue reading Are there bruteforce programs that use letters of other languages? Arabic? Greek?
If I don’t have Administrator or root privileges on a Desktop machine and I am running a password manager, can I see the memory contents of that password manager, or higher permissions needed?
So I am running a process (“fo… Continue reading Using ex.: Ubuntu or Windows: Can I see the memory of a process that I am running?
I read previous posts about the topic of how to encrypt data and login with the same password/key (e.g. Here, Here), however the concept still seems unclear to me, especially which data it is safe to store in the database.
… Continue reading How to encrypt data and login with same password – revisited
This question already has an answer here:
Can my employer see what I do on the internet when I am connected to the company network?
13 answers
… Continue reading Can employer retrieve file emailed over https from months previous? [duplicate]
How do you assess if your computer has a hardware rootkit? There was another question about Chipsec with no answers, I assume no one knows the answer. Any other way to assess?
Continue reading How do you assess if your computer has a hardware rootkit?
Securely authenticate SSH hosts
I have successfully used both OpenSSH Certificates and SSHFP to authenticate hosts when connecting to servers using SSH. But I fail to find a way to require the combination of these. Is there … Continue reading How to force openssh client to require both SSH certificate and SSH fingerprint?
I’m currently working on a project that builds a defense system against HTTP GET Flooding attacks.
When DDoS attacks occur, traffic volume to a server suddenly increases to be far more than the normal range. However, because… Continue reading Mitigate DDoS attacks by randomly blocking traffic during the period of detection process
I am using the node tls module https://nodejs.org/api/tls.html to set up a secure connection between a client and a server (both Linux).
On the server I use:
const options = {
key: fs.readFileSync(‘server.key’),
cert:… Continue reading Does the nodejs tls module check for other authorities than my own authority?
I have a server with a self-signed certificate server.crt that the client trusts by adding the self-created authority to his browser’s trusted authorities. Now, upon connecting to the server’s IP address through https://, the… Continue reading Fake server certificate attack in SSL/TLS
A client is communicating with a server through https using two-way authentication. I would like to add an extra layer of security.
The protocol would look something like :
An 128-bit symmetric key is stored in a file on … Continue reading security protocol against attacks on SSL/TLS