Collaborate Disseminate
The ACME protocol defines the use of a replay nonce to prevent replay attacks.
I understand what replay attacks are and why it’s important to prevent them in certain scenarios. But I can’t think of a scenario where a replay attack would be… Continue reading Possible scenario for replay attack in acme protocol
At my work email, which is handled by MS Office 365 Outlook, I keep getting phishing emails, typically 3 times a week, usually with some attachment "your company’s monthly financial report" or "voicemail recording – high pri… Continue reading Why does M365 keep accepting phishing emails that Gmail rejects?
Google provides a CSP evaluator to validate if a given content-security policy is well set up (github, validator). However, if one uses ‘unsafe-inline’ in the style-src directive this is reported as ‘all good’ (See image below).
Does this … Continue reading Google CSP Evaluator and style-src ‘unsafe-inline’
I have my home network divided into multiple VLANs, with a main router running OpenWrt forwarding between VLANs, where each VLAN equals a firewall zone. Zone wan hosts the Internet router.
Firewall zone settings in Luci are:
default input… Continue reading OpenWrt firewall mystery
This question already has an answer here:
Password Managers: encrypted database vs hashing strategy
1 answer
Concept
The… Continue reading Is hashing the concatenation of my password and account type secure? [duplicate]
I am going to tell the truth. I am Starbucks right now using the public network, knowing that it has vulnerabilities.
I am trying to solve this problem: How can I still be secure on a public network?
I don’t want to use data on my phone either…
I always was interested in getting a VPN, but I feel that I just don’t trust their “no logs” description of the service. I know there is always some sort of log with everything. I feel that our privacy is artificial, and a illusion.
Anyways, can you tell me how to research a VPN. I am trying to learn about security. That you have done very close research into the VPN service. Please tell me what you’re using if you are using a VPN. I am really nervous to use a VPN. I feel that I will be sold, again and again and I have to pay for it.
I read the Q&A is Hard, shopping suggestions. I am avoiding that now.
Thank you everyone. (*＾▽＾)／
I have seen a couple of questions on here today that recommend DNScrypt for encrypting DNS traffic. However, I feel a little bit of gut inertia that this is not good enough for 2017.
What tools do you recommend for encrypti… Continue reading How do you encrypt DNS traffic in 2017? [on hold]
I have seen a couple of questions on here today that recommend DNScrypt for encrypting DNS traffic. However, I feel a little bit of gut inertia that this is not good enough for 2017.
What tools do you recommend for encrypti… Continue reading How do you encrypt DNS traffic in 2017? [on hold]
In the Bitcoin world I see people using hardware key stores (and hardware signing devices) as the de-facto only secure way of storing and transmitting $M values.
Wouldn’t a hardware SSH keystore be the best way to go forward… Continue reading Why aren’t hardware SSH keys the default access for production systems?