Collaborate Disseminate
i’m writing an application, which there i want to present a client certificate to the server, and use a value there to perform authentication.
I’ve seen that it’s common to use the Subject (CN) which supposed to be unique pe… Continue reading What client certificate value should i use for lookup and field usage?
I’m trying to get my head around how PKCE works in a mobile app and there’s something I don’t quite understand.
So from what I can gather the client app creates a random cryptographically secure string known as the code-veri… Continue reading What is PKCE actually protecting?
A potentially dangerous permissions bug in TeamViewer grants unauthorised access to either the client or the server—and patches may take up to a week to fully roll out.
Categories:
Cybercrime
Exploits
Tags: bugclientexploitserverteamview… Continue reading Use TeamViewer? Fix this dangerous permissions bug with an update
I have created a chat between two parties (using c#), and I am wondering what kind of weaknesses have I overlooked.
Description of its functionality:
There are two individual applications: Client (2 instances of TcpClient being the commun… Continue reading How secure is this communication chat?
I’m new to cybersecurity and am writing a TCP server with the Java Socket API. There is a client and server class. The server class is what would be run on a server, it listens on a specified port and accepts socket connectio… Continue reading Client Server TCP connection – sending a password
The Raspberry Pi Zero W is a great platform for IoT projects, with a smattering of GPIO and onboard WiFi. However, security is an important consideration when it comes to the Internet of Things and it can be beneficial to keep your IoT devices on a separate network for safety’s sake. [Albert] wanted to do this all on board the Pi Zero W, and figured out how to get it acting as an access point and a client all at the same time.
[Albert] starts off with a fresh install of Raspbian Stretch, and sets the Pi up in OTG …read more
Let’s assume an application has a server back end that stores activity information of users. But, the activities must be stored anonymously. That is, investigating the server side data, someone can only tell that an user acce… Continue reading How to isolate client profile information from server side profile information?
Let’s assume an application has a server back end that stores activity information of users. But, the activities must be stored anonymously. That is, investigating the server side data, someone can only tell that an user acce… Continue reading How to isolate client profile information from server side profile information?
This person replied to my mailing list message:
http://cygwin.com/ml/cygwin/2017-09/msg00106.html
but their email client did not properly remove or mask my email – leaving my
full plaintext email now in the archives. I woul… Continue reading Remove email address when quoting
I have 3 subdomains (not really a wildcard certificate) and I enabled client certificate on NGINX (I guess for this question is not that relevant…).
It currently works but I’m not entirely sure what kind of certificate in… Continue reading Restrict validation of client certificates to each subdomain’s client certificates?
