Collaborate Disseminate
In the course of my computer working I daily use dozens of username/passphrase pairs. Within the limits of my understanding and restrictions I apply the best practices for security. Unfortunately I have limitations on my abil… Continue reading How often, if at all, should I rotate my passwords?
This is an issue I’m recurringly facing: older people from my family (or people who my family members know) can be surprisingly reluctant to apply most basic security measures when they’re using their PCs. The particular issu… Continue reading How to explain to traditional people why they should upgrade their old Windows XP device?
While trying (and failing) to convice a certain older person who wanted me to “fix” their ~20 years old PC that they should not be connecting to the Internet with whatever version of Windows they have installed (they couldn’t… Continue reading How secure is connecting to the Internet via Windows XP (or even older) nowadays only for e-mail?
Code-injection via third- and fourth-party scripts — as seen with Magecart — is a growing security problem for websites. Continue reading Website, Know Thyself: What Code Are You Serving?
We all know that attacks on web browsers are entirely possible. This includes attacks such as drive-by downloads, MITB (man-in-the-browser) attacks and keylogger browser plugins/extensions.
However, although we know how thes… Continue reading How do attacks on web browsers succeed?
Are professionals only about defending information from being exposed to unauthorized entities / defending the environment from being altered and many more to defend?
Or is there also an attack methodology involved?
I’m developing an application which will need to derive a private/public key pair from a user provided password, and then use the public key to encrypt some text (up to 1000 characters in length) such that it can only be decr… Continue reading Most secure algorithms for KDF and Public Key Encryption
This question is about best practices, and not necessarily my how I manage my current setup.
I have these two scenarios, macOS Mojave with KeepassXC, and Windows 7 + Android 8.0.0 with SafeInCloud. The first is a work machin… Continue reading OS and Password Manager – How to Manage Multiple Credentials
I want to explain to a computer dummy, (someone from my family) that when you are pwned, you did not make any mistake, and that happens even to the best of the best in the security world.
So one story by answer.
The main cri… Continue reading expert pwned: the best educational story, for computer dummies [on hold]
(This is hypothetical, but based on a real-life problem I’ve had)
Context:
I am developing an (embedded) device which includes a few exposed network services. I’m responsible for security, not developing these services, so … Continue reading Ensuring all network services on a device use strong TLS cipher suites