Collaborate Disseminate
As far as I understand, the rolling-jam attack involves eavesdropping, signal blocking and replaying.
Does that qualify it as an MITM attack?
Could one say that the attacker is controlling the traffic?
Continue reading Is the rolling jam attack considered a MITM attack
I am working on security testing of an application. I was doing recon on the application and in one of the JS file I have seen an API key called "Spree API Key" and it’s value.
I am trying to determine if it’s a regular API key o… Continue reading What is the use of Spree API Key
I have the following private key. I’d like to be able to process it into an instance of ECPrivateKey using Bouncycastle (or the builtin Java security API if bouncycastle isn’t necessary).
—–BEGIN EC PRIVATE KEY—–
MIGTAgEAMBMGByqGSM49… Continue reading What format is this private key in, and how can I process it using bouncycastle?
I am currently working on a cli application which uses AES encryption. For key generation, I am using the PBKDF-2 algorithm, along with SHA-256. I am providing a way to enter the password once and store the key, to enable the user to use t… Continue reading Storing AES key for later usage
I setup an IKE VPN server for road warriors. I actually have this working (YAY!) but took some shortcuts that are leaving me with a working yet not-right/secure setup. My setup is as follows:
My server (DNS name vpn.mydomain.com) contains … Continue reading Where should private key(s) reside in IPsec VPN tunnel
I would like to store the password for my MySQL database in an AWS KMS. The access should be handled by the Secret Manager. It works well if I store it in KMS and access it with the Secret Manager ANR:
<?php
require ‘vendor/autoload.php… Continue reading Storing MySQL password in a secure way in AWS KMS?
Paraphrasing this:
Symmetric cryptography is like a door lock. Everyone that has a key can lock and unlock.
Asymmetric cryptography is like a common lock or handcuff. Anyone can lock it but only the (private) key unlocks it.
I assume tha… Continue reading Is the term "only-unlocking key" more accurate than the term "private key"?
I am struggling with the question how to store a security key in a secure way. I have done some research and there are multiple options.
Option 1) Storing the key on the same server (not recommended, because an attacker might easily get ac… Continue reading Storing an encryption key securely
I was trying to add a new certificate to our truststore. But I got the alias already exists error.
I can’t remove the old certificate yet, but I have to add the new certificate.
Will it matter if I imported the renewed certificate on a dif… Continue reading Does alias in a truststore matter?
I have this key fob for our apartment building, and I want to make a copy of it.
I’ve taken it to 3 locksmiths who are able to create a copy, but the copies don’t work.
I’ve confirmed that it doesn’t appear to be a rolling fob by comparin… Continue reading Tricky apartment key fob copies frequency & code correctly but the copy doesn’t work – not a rolling fob