Collaborate Disseminate
I’m using ExpressVPN on my Mac. My Little Snitch firewall is showing that several applications, including my browser and a process called expressvpnd, are making requests to DNS servers set by my ISP. I’ve never seen this behavior in the p… Continue reading Am I experiencing a DNS leak?
I’m starting out as a bug bounty hunter and found a website that might have a problem yet I’m unsure if its exploitable or not.
When sending any payload that contains % I get an error:
Invalid query parameters: invalid %-encoding (21%)
Usually when a server data breach occurs, information that gets leaked includes usernames and password hashes, rarely do you see a data breach where 2FA TOTP seeds gets leaked alongside them. How come this is the case? I thought the server… Continue reading Why are TOTP seeds rarely leaked in data breaches?
I am (hypothetically!) thinking about buying a used phone for sustainability reasons. I am also thinking about this being a non-Google phone for ethical reasons. There are some people in my country selling non-Google Android phones, most o… Continue reading How to make sure a used custom-ROM phone isn’t malicious?
I am (hypothetically!) thinking about buying a used phone for sustainability reasons. I am also thinking about this being a non-Google phone for ethical reasons. There are some people in my country selling non-Google Android phones, most o… Continue reading How to make sure a used custom-ROM phone isn’t malicious?
It seems technically plausible to me that one could implement some form of data store where the individual data points are protected by the encryption provided by the Trusted Platform Module available in many computers, perhaps via late bi… Continue reading Is a TPM protected datastore available/possible/desirable?
Was this recent US Treasury data breach
really caused by the Chinese government?
"Based on available indicators, the incident has been attributed to a China state-sponsored Advanced Persistent Threat (APT) actor."
What are thes… Continue reading Did the Chinese government really just hack the US Treasury Department?
Two weeks ago, I went to an embassy in my country to give a job interview. (Let’s just say this embassy represents a powerful Western country.) Before I could enter the room where the panelists were waiting, an HR officer asked me to surre… Continue reading Can someone download the data on your smartphone, even when they can’t open it, and how can you tell if someone has done so? [closed]
Body:
"Hello everyone, I’m a YouTube content creator interested in setting up an in-person interview with a white-hat hacker who can remain fully anonymous. The goal is to discuss topics around cybersecurity, ethical hacking, and best… Continue reading Seeking advice on safely arranging an anonymous, in-person interview with a white-hat hacker
I only store password hashes in the database and use them to verify the password entered by the user. As far as I know, reversing a hash is impractical. So even if I have the password hash, I can only compare it with other hashes, not calc… Continue reading Why is it a problem when password hashes are leaked?