Collaborate Disseminate
I have Google Authenticator and Microsoft Authenticator. I want to move both off my main phone and onto two backup phones, mainly in case my main phone is ever lost or stolen. Walking around with all my security and bank accounts on my ma… Continue reading Export accounts from Microsoft Authenticator [migrated]
If you use inspect in the developer tools for Chrome the values for the two input boxes below will look the same.
<input name="test1" type="text" value="<script>alert(‘a’)</script>"/>
<inp… Continue reading Understanding browser text input value rendering for combatting XSS
I need to validate and store credit card information (name, card number, expiration date, CVC) for retrieval at a later date. Once retrieved, the data will be used for manual processing on a separate system.
I have been told countless time… Continue reading Validating and storing credit card data for retrieval later
So I originally posted this on Code Review but it didn’t get any responses so I am going to try here…
I have been using Cloudflare’s Email Obfuscation for a while now but the JavaScript file loaded was causing a pretty substantial increa… Continue reading Vanilla JavaScript Email Obfuscation Defenses Against Bots
I usually connect to my work VPN on my personal Mac and then use Windows Remote Desktop client to access my work computer.
Today on my Mac while disconnected from the VPN I noticed the username/machine that usually shows up in the terminal… Continue reading Can work system admin remote into my personal Mac when I connect to work VPN? [duplicate]
Consider an API that requires a JWT for authorisation. For each JWT presented, it has to validate the signature, including base64 decoding, hashing and asymmetric encryption, which is stated noted as being more computationally expensive t… Continue reading How susceptible are JWTs to being used for denial of service?
So my place of work, if you can tell by the title is either Gov or Mil, and we recently had a tech refresh where all of our workstations were replaced with VM’s. We are running version VMWare Version 14 on ESXi version 6.7. V… Continue reading DoD 52220.22-M (3 Pass wipe) and Virtual Machines
I’m just in the process of parsing some raw $LogFile data, and I’m a bit confused regarding the layout of the records (‘RCRD’).
Here’s an example:
Parsing LSN record at position: 16800
Current LSN: 182393075764
Previous LSN… Continue reading NTFS $LogFile client data
I’m building a remote management software that will allow remote access to work equipment.
To get access, the user will have to enter a code which is shown on the device to be accessed. The user will take this code in person… Continue reading What’s the minimum access code length considered secure?
Let’s assume that attacker knows verifier, so now he can commit MitM attack.
1) Client sends A to Server
2) MITM takes it and sends B to client
While MITM knows the verifier, he also can compute the secret key. So every m… Continue reading SRP and compromised verifier