Collaborate Disseminate
I save my notes in a git repository in plaintext (markdown). Currently, the remote repository is another computer in my appartment. I am thinking about moving this remote repository to a remote server.
Description:
I want this to be as … Continue reading How to store encrypted notes in a public git repository?
The attacker spoofs SYN packets to attack a server.
In this document:
Spoofed Attack: A malicious user can also spoof the IP address on each SYN packet they send in order to inhibit mitigation efforts and make their identity more di… Continue reading Whether ISPs provide path of Spoofed SYN Flood attack is the only way to trace the attack source?
We have a Java web application that was vulnerable to blind SQL injection attacks. Our developers fixed the code by using the replaceAll() function to convert single quotes to two single quotes. I am trying to understand whether the follow… Continue reading Is my Java code still vulnerable to SQL injection? [duplicate]
Are there any companies selling IP security cameras that produce uncompressed 4k RAW video output (to NVR, or even to cal sd-card)?
Almost all popular brands compress using H.265 (HEVC) which works great for many reasons (net… Continue reading Do 4k IP security cameras with uncompressed 4k video output exist? [closed]
How to explain to traditional people why they should upgrade their old Windows XP device? <- The interesting point made in the highest upvoted answer to this Q is that a fully patched OS is largely insignificant for the se… Continue reading Why is a fully-patched OS less important than AV?
This question already has an answer here:
What is this authentication method/approach called?
3 answers
I remember a secu… Continue reading Name of security measure that shows user a personal word / phrase / drawing [duplicate]
The goal of this process is providing more security to the cloud infrastructure, but in the process of hardening, sometimes there are some items in the checklists that can put the availability of our system in jeopardy.
A … Continue reading The best method for cloud infrastructure hardening [closed]
I am perhaps a little paranoid about IoT security. The only devices on my home network are PCs, mobiles, and a printer that’s restricted to LAN only. The recent news reports about weak certs, Ring WiFi, et al, have not assuag… Continue reading Are there IoT vendors who take security seriously? [closed]
Let’s assume I’m a user with root access to a machine and I’m a legit user. My machine/server runs Linux. I’m not very familiar with defensive security (I mainly practice offensive). Sometimes, popping shells can be as easy a… Continue reading How to detect backdoor/root shells?
This question already has an answer here:
What to do if caught in a physical pentest?
2 answers
This question was prim… Continue reading What do I do if I catch someone doing a physical pentest? [duplicate]