Collaborate Disseminate
I’ve been reading about ZeroNet and thought about putting a site together but have concerns that it may be vulnerable to the issue laid out in What can an attacker with 51% of hash power do?.
From what I understand, if a ma… Continue reading Are ZeroNet websites susceptible to 51% control attack?
Does it defeat the purpose of a key file to store it in the same location as the password database? What if a master password is needed also?
For example I save my .kdbx to dropbox as a means to backup and was wondering if I… Continue reading Password manager: should key file be stored on a different device than password db file (even if master pw used)?
I was reading this article here, in the middle I saw the author used -confirm()- as the payload.
I’d like to know what is this payload? I mean what’s the difference between -confirm()- and <script>confirm()</script> . Why does … Continue reading XSS via -confirm()-
So I recently ran a port scan (just TCP) on my home router/modem (AT&T U-Verse) and found two peculiar ports that are open. Here is the scan output/results for nmap 192.168.1.254 -P0:
Starting Nmap 6.49BETA4 ( https://nm… Continue reading Is my router/modem compromised?
Every time that someone mentions eval(), everyone says that there are “security issues” with it, but nobody ever goes into detail about what they are. Most modern browsers seem to be able to debug eval() just as well as normal code, and pe… Continue reading What are the security issues with "eval()" in JavaScript?
Fred Cohen in 1986 has proved in his Ph.D. thesis the undecidability of viral detection (no perfect virus checker can ever exist).
Does this imply that there exists a totally undectable virus?
Else is it possible for a malw… Continue reading How to make undetectable malware [closed]
Microsoft has just patched a vulnerability in Schannel that could allow remote code execution (MS14-066). What I can’t find are any reliable details on how this can be exploited. I’ve seen some people claim that it can only b… Continue reading Can the Windows Schannel vulnerability be exploited by visiting a website?
I patched for shellshock and was barraged a few days later. However, I would not have known any attempts were made at all if not for a regular expression I found on the internet. This has inspired me to look further into my l… Continue reading Regular Expressions for common exploits
I have read a post in thehackernews and searched the net to find how it worked.
How can anyone add javascript in an image such that when the image is displayed it can run a script.
Can this be done with other languages?
I’ve been performing lots of speed tests lately due to, among some other random things, an Internet programming class and getting Google Fiber hooked up.
Then I realized that SpeedTest.net uses a Flash app; it kind of bothered me that I c… Continue reading Are Internet speed tests an attack vector?