Collaborate Disseminate
I got a Greenlite AIRZ thermostat which connects to my home wifi so that I can change the settings remotely on my phone. The Android app is, however, difficult to use, so I’m thinking about making my own. I found its IP address, put it in … Continue reading How to probe my smart thermostat for reprogramming? [migrated]
When reading about docker, I found a part of the documentation describing the attack surface of the docker daemon. From what I was able to understand, part of the argument is that it is possible to share (basically arbitrary) parts of the … Continue reading Host filesystem manipulation from docker vs. virtual machine
I was issued a chromebook, as was everyone at my school, to use for work in class and in case school has to shut down again. We bring it home so it connects to my personal Wi-Fi when I’m at home. I was working on homework and needed to tra… Continue reading Can my school computer see my files via USB?
Situation
I was about to install Skype on a laptop driven by Ubuntu 18.04 LTS Desktop.
The software installation helper graciously informs me that Skype
is unconfined. It can access all your personal files and system resources
Our support staff established remote access connection from jumphosts that are isolated within a DMZ. To provide support they need project files (up to a few GB of size) which are stored on a file server within our LAN. Curre… Continue reading Secure File Replication between LAN and DMZ
Description:
I want to create an upload center for small files (word/excel/zip documents etc) with PHP.
I want to protect files uploaded by user as much as possible, so if server is breached, attacker cannot read/open thes… Continue reading How to encrypt user files securely on the server with PHP
My answer here, resulted in this comment:
This could be subject to a TOCTOU1 attack and needs to be developed to be correct.
The answer is in Rust, but here’s some equivalent bash:
p=/home/roger/foo/bar/baz.txt
d=$(dir… Continue reading How is mkdir subject to a TOCTOU attack?
In Linux, every process holds its own file descriptor table, which keeps references to all opened files and file-like devices. This table is managed by the kernel.
Is it possible that a non-privileged user modifies a file de… Continue reading Can a non-privileged user modify the file descriptor table of an elevated process?
I am working on project which has more focus on user data security. Public key cryptography is being used in this and private key is getting stored to user device locally (computer local file system). This private key is requ… Continue reading Accessing a permitted file from local file system securely
I will be storing private user’s files on S3. The files will be PDFs, possibly containing private financial information.
I’m considering letting users directly access the files on S3, without proxying all the traffic throug… Continue reading Storing user’s private files on S3 and securing access using signed URLs – good idea?