Collaborate Disseminate
Recently the company’s website was flooded with malicious registrations, where a few people signed up for hundreds of accounts to win an online lottery. Our investigation shows the source may be a group of employed workers (l… Continue reading Detecting fraudulent registration
So, a funny thing just happened.
I have my (personal) mac connected to the wired enterprise network and have for several months. Today, a couple of guys from IT came busting through the door saying that they were seeing a ma… Continue reading Is there malware on my mac?
A friend of mine is taking a UNIX systems class and mentioned to me that when they take exams they do so on their computers. That is all students are using their own computer/laptop. Students are not being provided a compute… Continue reading Is it possible to "fake" being connected to a router?
I’ve seen these types of instances occur quite often, and I’m curious to why (even without a filter) they won’t execute… as the code is right there. Every occurrence of this I’ve noticed that when you inspect in any devel… Continue reading Attempting to find a XSS, why doesn’t this piece execute?
If someone has the key and a valid referer, they can use the API key from any client as long as the set referer header, correct?
So is it worthwhile to use this restriction?
Continue reading What is the point of restricting a google API key by HTTP referer?
If someone has the key and a valid referer, they can use the API key from any client as long as the set referer header, correct?
So is it worthwhile to use this restriction?
Continue reading What is the point of restricting a google API key by HTTP referer?
I’m interested in getting offlineimap working with my Gmail account so that I can read my emails while offline. My biggest concern with this is that it’s a pretty big workaround to get the .offlineimaprc file to be encrypted … Continue reading Storing passwords in text files inside Ubuntu encrypted home directory
I’m interested in getting offlineimap working with my Gmail account so that I can read my emails while offline. My biggest concern with this is that it’s a pretty big workaround to get the .offlineimaprc file to be encrypted … Continue reading Storing passwords in text files inside Ubuntu encrypted home directory
Is there a way to actually find out whether a hash is MD5 or MD4?
For instance:
10c7ccc7a4f0aff03c915c485565b9da is an MD5 hash
be08c2de91787c51e7aee5dd16ca4f76 is an MD4 hash
I know that there is a difference “security… Continue reading Md5 vs Md4 recognition
I hope this is an appropriate place to ask this question. I’ve been thinking recently about public and private keys, and I’m wondering what the best practices are related to management of my own personal private keys. Specifi… Continue reading Should I generate new SSH private keys for each machine I work from?