Collaborate Disseminate
Could someone please explain this to me: When you use a fuzzy hash algorithm (ssdeep, tlsh, sdhash… or any other) to calculate the hash value of a file, does it calculate the hash based on the whole file (e.g. a PDF file consists of a tr… Continue reading Fuzzy hash of a file
In this post, we will describe what is an XVO file and how to open it on a Windows PC. An XVO file is the main file that makes up the .ratDVD file. ratDVD is a container file format associated with the DVD-ripping software RatDVD. It is used to compre… Continue reading What is XVO File and How to open it in Windows?
I want to know what attack am I exposed to if I implement one of the two method. I’m pretty sure both of them are not 100% fool-proof and both of them are expose to traffic-analysis attack if I do sent the files through the internet. I wan… Continue reading Which is preferable compress and encrypt or just encrypt and no compression in purely security perspective and not in resources or efficiency? [duplicate]
I’ve had a look within the official TLS specification but I cannot see any mention of this. Does TLS allow compression to be disabled? Or is it mandatory?
If you use Shannon’s entropy as an indicator to distinguish between encrypted and legitimate files, then it will be difficult to make a distinction between encrypted and compressed files, as both have a relatively high entropy value.
How i… Continue reading Why does ransomware also encrypt the file signature? [closed]
We are big fans of using SQLite for anything of even moderate complexity where you might otherwise use a file. The advantages are numerous, but sometimes you want to be …read more Continue reading Never Too Rich Or Thin: Compress Sqlite 80%
I use LUKS to encrypt all sensitive data on my computer. If I switch to using a filesystem with on-the-fly data compression such as ZFS, should I use its compression feature together with LUKS? Does compression here help the attacker as in… Continue reading Does filesystem compression aid cryptanalysis?
I’m not an expert of security.
I heard it’s not recommended to enable GZIP compression for HTTPS requests, that would open a security issue (see SO answer: https://stackoverflow.com/a/4063496/17307650 and https://en.wikipedia.org/wiki/BREA… Continue reading Gzip only request body of HTTPS request security BREACH?
I have a web server that serves content through https and would really benefit from having (http) compression.
The crime and breach attacks are nearly a decade old, and I have not seen any real update in here to this old question.
Though s… Continue reading Breach/crime update: should I compress? [duplicate]
There is a well-known threat named compression bombs. Such image formats as PNG and JPEG use compression methods, and therefore and in theory PNG/JPEG images might be a compression-bomb.
I’ve found an example of PNG, and many mitigations g… Continue reading Protection against JPEG compression bombs