Collaborate Disseminate
Suppose I decide to use an outdated application for some reason: maybe I can’t update it for compatibility reasons, or updates are not provided in the official repositories I use, or maybe I just don’t feel like upgrading it … Continue reading Can my machine be compromised if I use an outdated application and the input data is trusted?
We all know that passwords should not only be randomly generated, but also look random. The reason is that attackers can use patterns or existing words to be able to bruteforce the passwords faster, so a randomly generated pa… Continue reading What should a secure passphrase look like?
Detecting infected files in a website or web application is very easy: you just need to compare the files with a clean backup or the original source (for example with diff) and that’s it. However, detecting an infection in a … Continue reading How can I detect an infection in a database?
I understand the purpose of password managers and the fact that there seem to be a trade-off to accept, but well, I find that trade-off to be unacceptable and I wonder if there’s a way to avoid it. A password manager introduc… Continue reading Mitigating the problem of single point of failure introduced by password managers
Sometimes in the news I read that someone drugged a girl to rape her, and the next day the victim didn’t really remember much of what happened. Now, I don’t know how this works exactly and what kind of drugs can be used, but … Continue reading Can passwords be stolen by drugging the victim? [on hold]
I suppose the FBI receives email with attachments, like any other government agency: documents, resumes/CVs, etc. I also suppose they are very careful not to get infected, more than the average user, for obvious reasons. If I… Continue reading How do US government agencies open their email attachments?
I’m afraid this could be a very stupid question, yet I cannot think of an explanation. Password managers (keepass, etc.) often have a button that lets you “lock” the database, so if you need a password you will have to unlock… Continue reading What’s the purpose of the lock and unlock feature in password managers?
Today most hosting providers start a TLS connection whenever you connect to their FTP server. But Filezilla doesn’t store any root certificates, so whenever you connect to an FTP server and the TLS connection is started, you … Continue reading How can I verify the certificates when connecting to an FTP server with Filezilla?
I don’t know all the details of Spectre and Meltdown, but the way I understand it is that they allow reading from memory, not writing to it. Also, I read that at least Spectre can get out of the virtual machine and therefore also affect th… Continue reading Mitigation of Spectre and Meltdown affecting host OS from guest OS (Virtualbox)
I’d like to understand how Apparmor and Firejail compare to each other: advantages, pros and cons, purposes, similarities, etc.
I might be asking to compare apples with oranges, however I’ve noticed several similarities. Firejail has “pro… Continue reading Comparison between Firejail and Apparmor