Category Archives: data-validation

What are the risks/are there techniques of using the sender’s MAC to modify a common session key for validation purposes?

Posted on by

I’m looking at group communication within a group of clients where a shared common session key has already been pre-established for ciphering purposes.
In order to enable validation of the sender, I’m considering modifyin… Continue reading What are the risks/are there techniques of using the sender’s MAC to modify a common session key for validation purposes?→

Is it legal/ethical to release commercial software with known security flaws

Posted on by

I am not a security professional. About 2.5 months ago I discovered systemic vulnerabilities in my employer’s software with the potential for financial damage to customers if exploited.

A logged in user’s ability to access … Continue reading Is it legal/ethical to release commercial software with known security flaws→