Collaborate Disseminate
I am currently employed at a financing company operating in both the USA and Canada. My current task involves exploring alternative methods to validate new credit applications.
Presently, we rely on a one-time SMS message for our new custo… Continue reading Application Validation Methods [closed]
I am currently employed at a financing company operating in both the USA and Canada. My current task involves exploring alternative methods to validate new credit applications.
Presently, we rely on a one-time SMS message for our new custo… Continue reading Application Validation Methods [closed]
I’m building a tool and users will run it by downloading a binary. What I’m considering is good ways to secure this for the user. There’s for me easy ways like "Recommend running this on a new temporary VM without internet access"… Continue reading Increasing trust in a downloaded binary
Consider me the average Linux user. I know the basics of shell scripting and intermediate Python. However, I have very limited knowledge of system admin or security related matters.
Background:
Say that I have a Python application just in … Continue reading Detecting if application connects remotely in linux
I’m working on idea for a project the goal is to allow a user to share their encrypted content with friends while ensuring the server and none friends maintains zero knowledge of the actual content.
Here’s an example structure of a user:
U… Continue reading User-Controlled Encryption in web app. How to Implement Encrypted Content Sharing Among Friends?
I’m working on idea for a project the goal is to allow a user to share their encrypted content with friends while ensuring the server and none friends maintains zero knowledge of the actual content.
Here’s an example structure of a user:
U… Continue reading User-Controlled Encryption in web app. How to Implement Encrypted Content Sharing Among Friends?
I am using the note taking app Color Note (www.colornote.com) on my mobile phone that is using Android 7.1.1 to take some notes (old device). I am not using their cloud sync capability, and my email/any personal accounts aren’t connected t… Continue reading Note Taking App Hacked?
With standard XSSI, an attacker can include a remote script which contains user-bound secrets across origins, and then read them out.
I have an endpoint which returns sensitive Javascript code, but the request to fetch it is POST-based (th… Continue reading Is POST-based XSSI possible?
Is it necessary to implement both Content-Security-Policy and X-Content-Type-Options for ensuring the security of a website?
I have a Windows executable file that has been code signed with a certificate from a Certificate Authority. The CA is listed in the official Microsoft Trusted Root Program list of participants. The level of my cert is Open Source, which is… Continue reading Do code signing certificates build reputation only for Microsoft, and is reputation maintained across releases?