Collaborate Disseminate
Two days ago, I received an email saying as object "March rent" in French. It says time to pay my rent for the month of March, and got the email March 1st… I thought this was my landlord sending me an email, as he sometimes do…. Continue reading Accidently opened a phishing email .docx attachment on my iPhone, should I worry?
Considering how log4shell seems trivial to exploit and the important control level it gives to an attacker, should we wipe everything affected and start over?
For example, we find out that a publicly accessible server in production has log… Continue reading Log4shell – Should affected servers be "nuked from the orbit"?
Considering that a RCE vulnerability has been recently found in the log4j library, a library used in a lot more applications than I thought. The following question comes to my mind.
If an attacker successfully exploits log4shell, does the … Continue reading At which OS privilege level log4j usually runs?
I plan to implement the following network configuration :
Internet [(cable A)]
Router A
(192.168.0.x)[(WAN:cable A)(LAN1:cable B)(LAN2:)(LAN3:)(LAN4:)]
Router B
(192.168.1.x)[(WAN:)(LAN1:cable B)(LAN2:)(LAN3:)(LAN4:)]
The first LAN port of… Continue reading Is a LAN to LAN with different subnet configuration secure?
I left my apartment for few days, so I disconnected my wireless router but I forgot to disconnect my Chromecast as well. I remember that when a Chromecast can’t find the network it was connected to anymore, it creates an open network that … Continue reading Could a Chromecast be compromised from its default open network?
Last week, I downloaded Kali Linux from the official https://www.kali.org/ website for educational purpose. I left the downloaded disc image (.iso) on my desktop. Yesterday, Windows Defender decided to run a quick scan and went through the… Continue reading Windows Defender found threats in Kali Linux disc image
I recently installed the package AIDE (Advanced Intrusion Detection Environment) on my Linux server. This is a web server installed about a year ago. Since no integrity checks have been done before on this server, I can’t tell if it is hac… Continue reading Possible to verify the integrity of AIDE itself?
Recently, we migrated from Windows 7 to Windows 10 and during that migration, we progressively ran into some issues with our NAS device. To be more precise, we progressively noticed some tcp socket flooding on it while client… Continue reading Does Kerberos authentication handle DNS names the same way between Windows 7 and Windows 10?
I bought an used IP security camera on eBay, I dont know who was the previous owner. I’ve always thought that we can’t trust 100% any firmwares/OSes that were been installed or used by someone else. We can’t tell if it has be… Continue reading Bought used IP security camera, should I reflash the firmware?
Is it possible for someone who is doing air monitor mode (ex. using airmon-ng) or is using a rogue device to capture attempted authentication on a Wi-Fi AP ?
For example, I have a home router WPA2-protected with a strong pas… Continue reading Capture WiFi AP authentication attempted password