Collaborate Disseminate
As I understand, some IoT devices verify the integrity of firmware updates downloaded from the internet using the checksum of the file before installing the update, making it impossible for attackers to perform a man-in-the-middle attack a… Continue reading How do IoT devices know the checksum of firmware upgrades?
It seems the latest version of CloudFormation binaries used on EC2 Windows instances are reported as NOT legit by VirusTotal.
Mainly cfn-elect-cmd-leader.exe" and "winhup.exe"
https://www.virustotal.com/gui/file/a2f09c6a1f7d… Continue reading Latest AWS Windows Cloud Formation bootstrap binaries are not legit?
So I’m making a distributed recovery system which consists of a bunch of hidden usb sticks. I plan to have the file be an executable, probably in the form of a appimage, which will contain my encryption software and encrypted volume.
The o… Continue reading Is there a way for a file/binary/exexutable to verify it’s own integrity?
A common way to ensure integrity of a file uploaded from a client is to include the md5 header in the request which can be used by the server for the same.
I would like to know that if a file can be corrupted on its way, then why can’t a h… Continue reading use of md5 for protecting file integrity over http/https call [duplicate]
So I am wondering how I can possibly verify different devices that I purchase. Like when you want to verify a file has not been changed you can verify the checksums. So for example, if I buy a new Android device, a new washer, IoT devices… Continue reading Wondering how to verify devices are still not compromised after reset?
Take an example of AIDE (Advanced Intrusion Detection Environment), it has a capability to scan system file changes based on checksum.
So in AIDE you can see it has this kind of configuration setting in /etc/aide/aide.conf that we can set … Continue reading What is the purpose of using different hash algorithm to detect file changes [duplicate]
Normally, The Document Foundation (TDF) publishes the SHA-256 and SHA-1 hashes, along with the MD5 checksum, for all LibreOffice releases. For example, see this.
However, for their current release (v7.1.4), TDF did not publish any hashes … Continue reading When file hash not available, how to best check authenticity of a file?
Normally, The Document Foundation (TDF) publishes the SHA-256 and SHA-1 hashes, along with the MD5 checksum, for all LibreOffice releases. For example, see this.
However, for their current release (v7.1.4), TDF did not publish any hashes … Continue reading When file hash not available, how to best check authenticity of a file?
Normally, The Document Foundation (TDF) publishes the SHA-256 and SHA-1 hashes, along with the MD5 checksum, for all LibreOffice releases. For example, see this.
However, for their current release (v7.1.4), TDF did not publish any hashes … Continue reading When file hash not available, how to best check authenticity of a file?
I am generating random OTP-style strings that serve as a short-term identifier to link two otherwise unrelated systems (which have authentication at each end). These need to be read and re-entered by users, so in order to reduce the error … Continue reading Picking a check digit algorithm