Collaborate Disseminate
I know HTTP is insecure because the data transmitted is not encrypted.
I made a web application, however, that the frontend and backend are hosted on different servers. The backend itself is configured with HTTPS, but the frontend is not y… Continue reading POST over HTTP: Is it ever safe to post sensitive information?
Pre-Shared Key (PSK) with simple symmetric encryption is a popular way of solving both client and server authentication when SSL cannot be used for some reason (for example, can’t trust or deal with certificate management, or even SSL not … Continue reading How to build a PSK website
I’m running an embedded Linux system, whose kernel is 3.18.21, with some applications on top it on MIPS. When I run iptables & ip6tables on the Linux, such as the following:
iptables -A INPUT -p tcp –dport 80 -j DROP
ip6tables -A IN… Continue reading Why doesn’t iptables command take effect on my embeded Linux?
[P B Richards] and [Aaron Flin] were bemoaning the resource hunger of modern JavaScript environments and planned to produce a system that was much stingier with memory and CPU, that …read more Continue reading Squish That Stack With Rampart
I noticed that discord (text chats) works even if I don’t have a plan on my modem (if I exceed my quota for example, I’ll have to recharge it before being able to use it again.)
Everything else does not work (on the browser) but discord wo… Continue reading Discord works after modem quota limits exceeds [closed]
If two processes on the same machine communicate over TCP, is it possible for different users to listen in on this communication?
A lot of the web is moving to HTTPS, which to my understanding does two things: Making the data unreadable by third parties, and verifying it’s coming from the expected sender.
The latter seems unarguably good, but the first also has some … Continue reading Signed but Unencrypted HTTP Traffic
I visited theannoyingsite (not hyperlinked because it is a nightmare)
It tells you to press space for three seconds, and then it unleashes hell upon your senses. Loud noises, bouncing windows, downloading cat images forcefully onto your co… Continue reading How dangerous is it to visit a website?
There are some HTTP security headers in the world of cyber security of web applications. These are e.g.:
X-Content-Type-Options
X-Frame-Options
Content-Security-Policy
Referrer-Policy
Strict-Transport-Security
Expect-CT
X-XSS-Protection (… Continue reading Are HTTP security headers only for web browsers?
I’m learning about the REST API fundamentals and randomly landed on the SANS API.
https://isc.sans.edu/api/threatcategory/research/
I wanted to see if I could query individual items, like IPv4, but didn’t get any results. I tried the follo… Continue reading RestAPI query resources with wget