Collaborate Disseminate
I am encrypting chat messages with RSA thus speed is no issue.
It was working fine before I tried transmitting a long message.
Now I need to cope with the fact RSA is block, instead of stream, based. Easy: chop the bytes into smaller packe… Continue reading What makes chopping RSA payloads into constant size chunks unsafe?
There’s a certain website designed so that junior QAs learn to find bugs. Trouble is:
it’s http://
there’s no IP filtering
users are very junior so they use their real names as user names and probably reuse their only password.
I do not … Continue reading How to MITM an http website without infiltrating any infrastructure?
Would transmitting random packets at random times to random IPs cut it? Then both the sender and the receiver would be able to say "No, I didn’t message that guy, it was a random gibberish packet sent under this open and available pro… Continue reading What would it take for a chat application to provide plausible deniability? [closed]
With the raging pandemic not one kid is bored, we all want to develop a ‘privacy-conscious secure open cross-device scriptable chat app’. Mine is at the prototype stage. It’s a learning project with no dreams of ever being as good as one f… Continue reading How can a chat be secure? [closed]
All law enforcement and most of state bureaucracy are allowed to access my personal ID. Shopkeepers often ask "can I have your debit card so I can swipe it"; police has full authority over an arrestee’s things(including the CSV c… Continue reading What stops employees with legitimate access to private data from using it criminally? [closed]
Can an old and upatched (assume a 15 y.o. TP-Link: so plenty of vulnerabilities) be breached given:
no physical access
WEP is disabled
WPA is up but password is not crackable via aircrack-ng + johntheripper
Continue reading Can a router be attacked without being associated to it’s WiFi?
So you create a .kbdx file, protected by a password.
AFAIK in asymmetric key schemes and in WPA-AES brute-forcing consists of:
Trying a random password on the private key / on the router
If it doesn’t log you in, try another.
So, you imm… Continue reading Can a Keypass file theoretically be cracked offline?
Imagine my apartment’s front door or my university’s unattended basement server room’s door. What are the ways someone can gain access without a key and without being discovered by neighbours/service personnel?
Imagine I have the research papers on designing COVID-19, the cure and some nuke launch codes on my laptop and want to often communicate those to another computer at my home. I already installed a physically separate STP cable network. Now… Continue reading How to airgap properly? [closed]
Following people into a large RFID protected residential building is ridiculously easy, as not everyone knows everyone else. Just the other day I was let in with a rifle (an airgun, but how could have they known).
But standi… Continue reading Roles to play when tailgaiting into a residential building