Tyler – Page 2 – WindowsTechs.com

Apple Forcing iMessages through cellular data only [to other Iphone users] on initial text message, after mother travelled to foreign country

Posted on April 6, 2019 by Tyler

Apple is forcing my device to send imessages only through cellular data, which costs 50 cents per message; this happens only on the first text between myself and the iphone users, after family travelled to foreign nation. The… Continue reading Apple Forcing iMessages through cellular data only [to other Iphone users] on initial text message, after mother travelled to foreign country→

*push-apple.com.akadns.net Pushing Malware to IOS & Mac? [on hold]

Posted on March 21, 2019 by Tyler

Apple Push Notification Service is a gateway for viruses and malware, as noted here: https://www.virustotal.com/gui/ip-address/17.249.44.99/relations
https://www.threatcrowd.org/ip.php?ip=17.249.44.99

This includes both Mac… Continue reading *push-apple.com.akadns.net Pushing Malware to IOS & Mac? [on hold]→

Are ARP attacks possible on OpenVPN and Wireguard connections?

Posted on February 28, 2019 by Tyler

I am curious if it is possible for users connected to a VPN to perform ARP spoofing / poisoning attacks against other users on the same subnet of an OpenVPN or Wireguard server. Does OpenVPN & Wireguard provide inbuilt mi… Continue reading Are ARP attacks possible on OpenVPN and Wireguard connections?→

Wise/Safe to use Firejail within a SELinux preconfigured O/S?

Posted on February 27, 2019 by Tyler

In my testing of Fedora 29 and came to find it uses SELinux by default; I installed firejail which is available in the repos. Is there any benefit to running Firejail within this environment or is it redundant and or potentially opening th… Continue reading Wise/Safe to use Firejail within a SELinux preconfigured O/S?→

How to disable obsolete/insecure TLS_RSA ciphers to harden Chrome? [on hold]

Posted on February 10, 2019 by Tyler

Multiple vulnerabilities have basically obsoleted TLS_RSA, CBC and QUIC implementations.

February 9, 2019:

“Seven researchers from all over the world found –yet again– another
way to break RSA PKCS#1 v1.5, the most c… Continue reading How to disable obsolete/insecure TLS_RSA ciphers to harden Chrome? [on hold]→

New TLS encryption-busting attack also impacts the newer TLS 1.3, is ECDHE_RSA also affected?

Posted on February 9, 2019 by Tyler

February 9, 2019: Source: New TLS encryption-busting attack also impacts the newer TLS 1.3

“Seven researchers from all over the world found –yet again– another way to break RSA PKCS#1 v1.5, the most common RSA configuration used to encr… Continue reading New TLS encryption-busting attack also impacts the newer TLS 1.3, is ECDHE_RSA also affected?→

Truly Disabling Session Tickets in Windows 10 Schannel

Posted on February 4, 2019 by Tyler

In windows 7, session tickets were disabled by disabling schannel cache, example:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL]
“EventLogging”=dword:00000004
“MaximumCacheSize”=dword:000000… Continue reading Truly Disabling Session Tickets in Windows 10 Schannel→

How do I disable TLS Session Tickets in Chrome?

Posted on September 26, 2018 by Tyler

According to ssllabs SSL Session tickets are enabled by default. These are the weakest link in TLS, how do I disable them? I’m using the latest stable.

Continue reading How do I disable TLS Session Tickets in Chrome?→

How to country block, but allow http https with IPtables / IPset?

Posted on May 12, 2018 by Tyler

Here is how:

#!/bin/sh
# Remove #, then add # on line above to enable logs!
# Optional: Rename [BLOCKED – INBOUND] to specified country (only one name at a time allowed atm)
# Usage is as follows For AsusWRT Merlin:
# sh /jf… Continue reading How to country block, but allow http https with IPtables / IPset?→

Cipher Question: Is SHA SHA1? SHA0?

Posted on April 13, 2018 by Tyler

There is so little info and so much confusion out there; People often equate SHA2 as being SHA256; so then would SHA be 160 bit? AKA SHA1? Is SHA depreciated like SHA1? Are they the same thing? What is the difference? Does a … Continue reading Cipher Question: Is SHA SHA1? SHA0?→