Collaborate Disseminate
Lets assume I am building a pastebin-like web app: users can upload text notes and share them. Users should be able to password-protect notes. Whenever viewing such a note, other users must first provide the correct password to be able to … Continue reading Password checks in backend vs. password encrypted data sent to frontend?
We are currently implementing envelope encryption to securely encrypt sensitive data(name, emails, phone numbers, photo, previous employers etc.) about our users. However, we are now thinking about to implement browser-side caching to redu… Continue reading Browser- side caching of encrypted sensitive informations in sessionStorage?
Is it possible to use biometric fingerprint data to secure information? I know a regular fingerprint scanner will find the closest enrolled fingerprint, so it can’t be used to find a consistent key for data encryption.
Are there certain fi… Continue reading Secure Encryption via Fingerprint Scanner [closed]
TCP is preferred over UDP for various reasons, security being one of them. Obviously, TCP is also preferred for various reason unrelated to security (e.g. error debugging).
So in the context of security only: If all data is encrypted secur… Continue reading Is TCP still more secure than UDP if all data is encrypted?
Kaspersky shares details on QSC modular cyberespionage framework, which appears to be linked to CloudComputating group campaigns. Continue reading QSC: A multi-plugin framework used by CloudComputating group in cyberespionage campaigns
I was thinking of implementing this in software, starting with one password, with each new release being derived from that initial password.
(trying to find the name of this technique, I think it’s called a “hash chain”)
That way you can g… Continue reading Encryption password in program, to secure its centrally-stored settings?
According to my research, if you want to store passwords securely, you should use built-in hash functions that have been vetted by the professionals. Best practices recommend that you do not add a hard-coded pepper.
But why not?
Let’s say:… Continue reading Why do best practices recommend against adding your own pepper to passwords before hashing?
Hi i’m wondering about the security differences between AES Key Wrap and simply encrypting the encryption key with AES-GCM-SIV. What are the advantages of using AES Key Wrap, and what is different under the hood?
Lets say we have an application WebApp where users input confidential data to be sent to Acme Inc’s secure enclave (AWS Nitro in this case) for processing, and the results of this processing are sent back to the WebApp for display.
What wo… Continue reading What is best practice cryptography when it comes to this scenario?
In this Help Net Security interview, Miguel Guevara, Product Manager, Privacy Safety and Security at Google, discusses the complexities involved in scaling differential privacy technology across large systems. He emphasizes the need to develop secure, … Continue reading Google on scaling differential privacy across nearly three billion devices