Collaborate Disseminate
Apple Push Notification Service is a gateway for viruses and malware, as noted here: https://www.virustotal.com/gui/ip-address/17.249.44.99/relations
https://www.threatcrowd.org/ip.php?ip=17.249.44.99
This includes both Mac… Continue reading *push-apple.com.akadns.net Pushing Malware to IOS & Mac? [on hold]
I am curious if it is possible for users connected to a VPN to perform ARP spoofing / poisoning attacks against other users on the same subnet of an OpenVPN or Wireguard server. Does OpenVPN & Wireguard provide inbuilt mi… Continue reading Are ARP attacks possible on OpenVPN and Wireguard connections?
In my testing of Fedora 29 and came to find it uses SELinux by default; I installed firejail which is available in the repos. Is there any benefit to running Firejail within this environment or is it redundant and or potentially opening th… Continue reading Wise/Safe to use Firejail within a SELinux preconfigured O/S?
Multiple vulnerabilities have basically obsoleted TLS_RSA, CBC and QUIC implementations.
February 9, 2019:
“Seven researchers from all over the world found –yet again– another
way to break RSA PKCS#1 v1.5, the most c… Continue reading How to disable obsolete/insecure TLS_RSA ciphers to harden Chrome? [on hold]
February 9, 2019: Source: New TLS encryption-busting attack also impacts the newer TLS 1.3
“Seven researchers from all over the world found –yet again– another way to break RSA PKCS#1 v1.5, the most common RSA configuration used to encr… Continue reading New TLS encryption-busting attack also impacts the newer TLS 1.3, is ECDHE_RSA also affected?
In windows 7, session tickets were disabled by disabling schannel cache, example:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL]
“EventLogging”=dword:00000004
“MaximumCacheSize”=dword:000000… Continue reading Truly Disabling Session Tickets in Windows 10 Schannel
According to ssllabs SSL Session tickets are enabled by default. These are the weakest link in TLS, how do I disable them? I’m using the latest stable.
Continue reading How do I disable TLS Session Tickets in Chrome?
Here is how:
#!/bin/sh
# Remove #, then add # on line above to enable logs!
# Optional: Rename [BLOCKED – INBOUND] to specified country (only one name at a time allowed atm)
# Usage is as follows For AsusWRT Merlin:
# sh /jf… Continue reading How to country block, but allow http https with IPtables / IPset?
There is so little info and so much confusion out there; People often equate SHA2 as being SHA256; so then would SHA be 160 bit? AKA SHA1? Is SHA depreciated like SHA1? Are they the same thing? What is the difference? Does a … Continue reading Cipher Question: Is SHA SHA1? SHA0?
Is anyone out there currently using or has used Zip Whip for SMS/MMS with their company landline number? Are there security features in place to prevent bogus / malicious texts coming into the business?