Collaborate Disseminate
How safe are WiFi modules/devices for use in security systems or even IoT?
How effective are dictionary and brute-force attacks in cracking WPA2? Online tutorials I’ve seen such as this claim to be able to crack passwords in a matter of m… Continue reading WPA2 Security for Security System/IoT
I am burning an iso onto a CD using CD burning software. Before burning I take the 512sum of the image. After burning, I extract the image off the CD and check the sum again to make sure, and I get an incorrect checksum.
Th… Continue reading Could this be a sign of firmware infection?
Some time ago, I was browsing this website over tor. After selecting a location in the menu, it was able to tell me exactly how far away the nearest test centers to my location were, which means it was able to get my location… Continue reading Can JavaScript break anonimity provided by Tor?
If I took a clean computer/laptop and removed the harddrive, lock the BIOS with a password, then did all my work from a live OS like Knoppix, will this help reduce the risk of persistent malware infection? Assuming the comput… Continue reading Will removing the harddrive from a computer protect it from persistent malware?
Can a USB-based atack, e.g., BadUSB, RubberyDucky be detected by observing the output from dmesg?
I bought a brand new DFRobot Beetle, which is essentialy a miniaturized Leonardo.
A few seconds after plugging it in, the USB … Continue reading Detecting USB-based(Arduino Leonardo) attacks
I have a web server set up and would like to connect to it from outside using Tor.
The web server simply serves up a simple webpage that will act as an interface for a program running on the machine.
It is not meant to be accessible by an… Continue reading Is ssh with public key authentication, no passwords secure enough?
What are the ways for firmware in a computer, especially the BIOS, to be infected or compromised?
What are the most common attack vectors? and for people who “don’t have to” worry about the more common attacks, what attacks … Continue reading What are the possible attacks on firmware? [on hold]
If an attacker manages to get control of one of the devices managing or routing internet traffic along or on my network, e.g, a compromised router or femtocell/IMSI-catcher for mobile internet, how do I go about safely and se… Continue reading Updating computers over unsafe connections
At what points on a (wired) phone connection can a wiretap occur?
At any of these points, if an attacker gains access, is it possible to intercept/read/modify internet traffic that uses the line?
Continue reading Can an attacker who has wiretap access to my phone line intercept internet traffic?
In A Monitor Darkly, Ang Cui demonstrates an attack exploiting the monitor’s firmware. In it, he describes a possible vector where a pixel displayed on a website he controls sends commands to the controller on the monitor and… Continue reading Is the exploit described in A Monitor Darkly applicable to laptops and smartphones/tablets?