Provide email author origin integrity
If i receive an email, how does my computer verify the author origin integrity using the digital certificates? Does it use any specific protocol for this?
Category Archives: protocols
Are there other methods than fuzzing for black box?
I find fuzzing a bit to basic method if it comes to black box apps. I am specifically interested how to find a vulnerability in network protocols. I have read “Attacking Network Protocols” but only fuzzing was discussed.
… Continue reading Are there other methods than fuzzing for black box?
NAS with a public IP and multiple file sharing services – security concerns
I’ve ‘inherited’ (it’s now my responsibility to take care of it) a WD My Cloud EX2 with a public IP and since it’s exposed to the internet, I want to make sure that the data and other machines on the local network are secure…. Continue reading NAS with a public IP and multiple file sharing services – security concerns
Can a damaged TGT in Keberos access the service?
I make a system to communicate using Kerberos protocol. I am User A. I type kinit and I take the ticket. That ticket came to my PC from remote KDC. What happens if the PC crashes and the ticket gets corrupted or damaged or en… Continue reading Can a damaged TGT in Keberos access the service?
Is it possible to become infected with virus, trojan or malware by browsing the infected sites or running installation .exe?
I am quite paranoid and I am always afraid that when i accidentally open some infected sites it would run scripts that automatically download malwares, viruses and trojans into my pc and run by themselves without prompting th… Continue reading Is it possible to become infected with virus, trojan or malware by browsing the infected sites or running installation .exe?
How are USSD messages used and who could send them?
Some illegal ads started showing up on my Android phone as message boxes recently. They are said to be “USSD messages” in an app recording notifications (com.evanhe.nhfree).
There is a Wikipedia article about USSD, but mostly about the pr… Continue reading How are USSD messages used and who could send them?
Slow Hashing Without a Salt?
I’m trying to design a security scheme that involves a shared secret but isn’t a traditional account password situation. The server would store a set of “keys”, each of which has a blob of data associated with it. In order fo… Continue reading Slow Hashing Without a Salt?
Is there any open source SDK for implementing a KMIP server?
Is there any reputable open source SDK for implementing an OASIS Key Management Interoperability Protocol (KMIP) server?
Continue reading Is there any open source SDK for implementing a KMIP server?
Simple File Transfer Protocol
My SIEM has produced something intriguing. I went looking for unauthorized SSH connections, and looked for the SFTP protocol by mistake. I found a Windows web server that is connecting from port 80 to a foreign IP address on … Continue reading Simple File Transfer Protocol
Does EAP exist as an independent authentication protocol, or just as a framework?
Does EAP exist as an authentication protocol itself, or will it only be found implemented as one of its methods (EAP-TLS, EAP-TTLS, etc)?
If EAP is only a framework, what additional detail do its methods provide that allows … Continue reading Does EAP exist as an independent authentication protocol, or just as a framework?