Collaborate Disseminate
If a device uses full disk encryption such as LUKS, BitLocker (with a pin), Veracrypt and others and boots using a complex password, what is the need for complex passwords to log into the operating system thereafter and why?
… Continue reading Should operating system passwords be complex if full disk encryption is used that has a complex passphrase?
If private information such as name, phone number have been indexed by search engines and other sites such as ZoomInfo (although the source of the information no longer exists and hasn’t been available for months), how can th… Continue reading How can private information be removed or erased from online search engines and sites such as ZoomInfo?
Assuming that online storage providers are considered untrusted, if files and directories are encrypted, how can these be protected against fingerprinting?
The files are encrypted using rclone’s implementation of Poly1305 an… Continue reading How can we protect encrypted files and directories from being fingerprinted when stored on online storage services?
As a follow-up to the question in The DMZ, is an encrypted drive (full disk encrypted e.g. LUKS, BitLocker) protected against malware if it is not mounted when using a LiveCD?
The use case is that no other devices are avail… Continue reading Is an encrypted hard drive immune from malware if it is not mounted when using a LiveCD?
I own an ecommerce platform that sells large (500 megabyte+) ebooks. To reduce server costs I am looking at hosting the ebooks on S3 and using Sendowl/ FetchApp to create the links to the downloads.
My understanding is that … Continue reading Is using "Signature Versioning" in Amazon S3 a secure way of selling ebooks?
I’ve been using LastPass for years, generally through the original Chrome extension.
In recent months, certain features of the extension have been totally broken, such as the ability to share passwords or the ability to generate new rando… Continue reading LastPass installer scary message about sideloading
If a laptop has WIFI but it is disabled in the Device Manager, can it still be used to gain access to the machine?
I am trying to run a bash script in a sandbox to gain information about what it launches. There don’t appear to be good emulators or static analysis tools for it, so I was going to run it in a chroot, and optionally inside a … Continue reading Safe Bash Emulation – using chroot and qemu
Well, is it possible to enter MySQL terminal(track and send queries) without username, password and IP?
I have gaming server and some guys just shared some details about our users on pastebin(like password – unhashed!). They… Continue reading MySQL terminal hack?
I was wondering if there was a calculator or formula I could use to find a rough estimation of the time it takes to crack hashes based on GPU. I am trying to assess how much performance I would lose/gain based on different bu… Continue reading Estimating Password Cracking Speed Based on GPU?