Collaborate Disseminate
With the growing need for privacy I had diverted some of my research towards the importance of secure communication.
Based on my research I have found two of the most primitive applications for communication are Signal and Threema.
Arguabl… Continue reading WEBRTC MIMT in Signal & Threema messenger
How can I trace network attacks where a stalker observes my traffic and other malware (including implanting malware/reconnaissance)
Which services or methods should be able to identify the activity?
Continue reading What methods or services identify network attacks? [closed]
I’m thinking through a mischief denial-of-service scenario that seems too easy to employ.
Your web-site validates email addresses for new users on sign-up.
A rogue party (a competitor) performs sign-ups using honeypot email addresses.
You… Continue reading How would you counter an email/honeypot mischief scenario?
There is a well-known threat named compression bombs. Such image formats as PNG and JPEG use compression methods, and therefore and in theory PNG/JPEG images might be a compression-bomb.
I’ve found an example of PNG, and many mitigations g… Continue reading Protection against JPEG compression bombs
I’m looking to shift my job / skillset over to the cyber security field. I’m currently in the script kiddy stages of my knowledge and wanted to move past this and locate/identify vulnerabilities without having to rely on scripts.
Does anyo… Continue reading Cyber Security skills development advice
I started noticing this behaviour for more than a month. Whenever I connect my laptop to the WiFi router there are lots of RST and DUP ACKs up to the same TCP sequence, as given in the example below, where DUP ACK reached the sequence numb… Continue reading Repeated DUP ACK and RST to same TCP SEQ and ACK
I am wondering how someone might look to protect their website against directory traversal attacks using tools such as Dirbuster which may reveal some sensitive directories?
I’m looking at a scenario in which it would be convenient to let 3 different cloud-rented Linux boxes (server A is the "scheduler control server", server B runs "database 1" on Oracle, & server C runs "database… Continue reading Is it a database security hazard to let multiple Oracle databases UTL_FILE the same filesystem?
My company is looking to allow Google Chrome to self-update, a necessity as we are finding it difficult to keep up with their release cycle in order to mitigate vulnerabilities.
On the pro side, letting the software auto-update helps us re… Continue reading Does Google Update perform cryptographic checks against releases?
My company is looking to allow Google Chrome to self-update, a necessity as we are finding it difficult to keep up with their release cycle in order to mitigate vulnerabilities.
On the pro side, letting the software auto-update helps us re… Continue reading Does Google Update perform cryptographic checks against releases?