Collaborate Disseminate
I’m fairly well acquainted with the role of conhost in Windows. I am aware of conhostV1.dll and conhostV2.dll so I assume force V1 would force the legacy mode of conhost (as in Pre Win 7 mode when it asked for stuff directly from Kernel s… Continue reading What is the effect of the arguments in the following: conhost.exe 0xffffffff -ForceV1
Is Maven a plausible vector of attack?
Discusses Maven Central as a method of attack, but the answers assume MITM, or attacking a known library uploaded to Maven Central from the outside.
Either being an author of a library… Continue reading Is uploading to Maven Central a plausible vector of attack?
My goal is to have two separate systems where one is secure even if the second one is full of malware. My current approach is to have two separate laptops and the only way these two communicate with each other is by sending t… Continue reading What is the (literally) lightest way to run a second secure system?
Consider the following situation:
In a LAN the router is configured to forward one incoming port from the WAN to a specific local ip-address/port.
My question is, how is the security in this situation impacted compared to a … Continue reading Port forwarding to ip address in LAN that is not available
I ask about 2045 because I’d like the answers to take into account:
Expected advances and infrastructure changes to the Internet which could aid in physical security of cables or important servers
Expected advances in Inter… Continue reading How would someone take down the Internet in 2045? [on hold]
Many popular VPN services (that provide encrypted tunnels between the users’ devices and distant VPN servers) authenticate users using a pair of email address and password. What attacks would the disclosure of the credentials… Continue reading What attacks does the disclosure of VPN user credentials allow?
I am trying to create a special military RADIO transmitter.
Basically, the flow is:
A solider will receive a message (thought the internet) to transmit (about 10 times a day). Each message is of length 1024 bits exactly.
He… Continue reading Military level engineering challenge [on hold]
I think to get a Yubikey and read that Keepass with OTP makes no sense No. Security remains the same + extra cognitive overhead.
I try to store all data local and use seldom cloud based services.
If I have a very bad SecOp … Continue reading Does a two-factor authentication dongle (OTP) which is always inserted in MacBook add a security benefit?
I ssh to my AWS instances via WinSCP and it has public-private key authentication, password authentication is disabled. All the sessions are saved on WinSCP, so I click on the IP of the machine and I get logged straight in wi… Continue reading How secure is using Saving Session Feature on WinSCP?
Say an attacker had access to a list of OpenID tokens, what could the attacker leverage with that to access a system?
Would they need to have another piece of information, MITM? Or can they just use that to authenticate.
… Continue reading What can an attacker do with an OpenID token