Is Windows 10 ‘Backup and Restore’ sending my password in plaintext on unencryped link?

[Note: I have a Windows 10 system in an air-gapped network as the only computer on the network where it is the acting "server", as part of an RMF-compliant, DAAPM (link to PDF on dcsa.mil) defined "Multi User Standalone
(MUS… Continue reading Is Windows 10 ‘Backup and Restore’ sending my password in plaintext on unencryped link?

Cybercriminals use cheap and simple infostealers to exfiltrate data

The rise in identity-based attacks can be attributed to a rapid increase in malware, according to SpyCloud. Researchers found that 61% of data breaches in 2023, involving over 343 million stolen credentials, were infostealer malware-related. Of these c… Continue reading Cybercriminals use cheap and simple infostealers to exfiltrate data

Alternatives for password where at least one secret is not know by the server, with similar transparency

Some service like Bitwarden use the password to encrypt part of your personal data, so that nobody except you can access it, and they archive this because the server only gets your password’s hash from your login prompt the server never kn… Continue reading Alternatives for password where at least one secret is not know by the server, with similar transparency

How to create a redacted PDF where the redactions disappear with a password [migrated]

I submit drawings of structures to clients. Sometimes the clients refuse to pay after I submit the drawings. Is there a way in which I can obscure parts of a PDF of the drawings and protect it using a password? After the client pays, I wil… Continue reading How to create a redacted PDF where the redactions disappear with a password [migrated]

Top 10 web application vulnerabilities in 2021–2023

Our Security assessment team set up rankings that reflected our take on the most widespread and critical web application vulnerabilities as viewed through a prism of eight years’ experience. Continue reading Top 10 web application vulnerabilities in 2021–2023