Collaborate Disseminate
I have an issue where I have an iOS app which is pinned to a root certificate of GlobalSign which is due to expire early February. This is their G2 root AlphaSSL cert.
We currently have a site certificate coming off of it which is due to e… Continue reading G4 cert using G2 intermediary cert
I’m currently working on developing a web3 site that requires accurate verification on the user’s wallet address. Is there a way to modify the value of the connected address ? (obtained through web3.eth.accounts[0] or window.ethereum.selec… Continue reading Reliability of web3.eth.accounts[0]
It’s said that a Windows Machine Account Password is usually composed of 120 characters in UTF-16-LE format. But when looking at the value stored in the Windows Registry under HKLM\SECURITY\Policy\Secrets\$MACHINE.ACC\CurrVal one finds a s… Continue reading How is a Windows Active Directory Machine Account Password stored in Windows/Samba Clients?
I want to image a drive with FTK Imager’s feature ‘Create Disk Image’ but the external hard drive has some issues. The external HDD does not appear in Windows File Explorer but it appears in Disk Management as Online and Unallocated. The d… Continue reading Creating disk image with FTK Imager: Failure: The specified network resource or device is no longer available. (55)
There’s a website I have an account on, and I needed to change my username. They said they were unable to change that. I requested to just have my account deleted, and then I would create a new account with the same email (As the email I u… Continue reading Site "can’t" change username, why? [closed]
How do we give access to some APIs with different levels of security?
I’m currently at a company where we have established a set of approved patterns of external exposure. In practice this means that users connect to the internal services … Continue reading MFA and developer access
I’m trying to set up two-factor authentication for all my accounts. Some of them, unfortunately, only support SMS.
In that case, which of these options would be more secure?
SMS
Google Voice (which has a strong and unique password, guarde… Continue reading Google Voice vs SMS for two-factor authentication
I have a Yubikey version 5.2.7 and I can’t generate any new certificates on yubikey manager app, which is weird since I have already generated two certs (on 9d slot) and they worked fine.
Now the following message pops up:
I’m keeping it vague on purpose so that it can help other cases as well.
Goal
The goal is to store information that is encrypted on client side and then delivered to the database.
Server should never receive nor handle unencrypted data.
U… Continue reading Seamless Key Management with Key Management Systems?
I’m a listener of the podcast "Security Now" where they often claim that there are no reasons to limit the number of characters a user can use in their passwords when they create an account on a website. I have never understood h… Continue reading Is there any security risk in not setting a maximum password length?