Collaborate Disseminate
I saw it in a slide for Mark Stamp. He says:
“Authentication on a stand-alone computer is relatively simple: 1) For
example, hash a password with a salt. 2) “Secure path,” attacks on
authentication software, keystrok… Continue reading What does a secure path mean?
I recently started a job at a small company where the CTO prefers to host SSH services at obscure, high numbered ports on our servers rather than the well known port 22. His rationale is that “it prevents 99% of script kiddy … Continue reading Does it improve security to use obscure port numbers?
I recently started a job at a small company where the CTO prefers to host SSH services at obscure, high numbered ports on our servers rather than the well known port 22. His rationale is that “it prevents 99% of script kiddy attacks.” I’m … Continue reading Does it improve security to use obscure port numbers?
New attacks:
https://thehackernews.com/2018/06/4g-lte-network-hacking.html
https://www.alter-attack.net/media/breaking_lte_on_layer_two.pdf
The link two (data link) do not guarantee the integrity of data.
They deployed a … Continue reading LTE Security: What kind of cryptograpy could be used to fix layer 2?
I am learner of cryptographic algorithms and security standards. I usually Google it to understand the basics of the algorithm or the protocol, and to find an implementation of a protocol. However I can never be sure if the a… Continue reading Trustable Sources For Security Algorithms and Standards?
I would like to know if an application is using a NetBIOS/ LLMNR protocol as they are vulnerable and can be poisoned. In order to prevent local network attacks, I would like to find the applications that are using these proto… Continue reading What are the best tools to find the network protocols used by various application? [on hold]
Don’t ask me why (well, a kind of nostalgia), but I want to use Opera 9 as my secondary browser.
For some reason, when I try to open any HTTPS site (even very simple one) – there is a very long delay. JS and plugins are alre… Continue reading Access HTTPS sites in Opera 9 [on hold]
I am trying to brainstorm how I might either:
1) create a protocol (although against this option)
2) use an existing protocol
That does the following:
1) allows 1 way communication from 1 node to another.
2) Provides (hig… Continue reading One way protocol with encryption without tcp
Is it possible for an unauthenticated bystander to force reassociation/reauthentication of a pair of Bluetooth 2.1 devices in a manner similar to IEEE 802.11i deauths? Bluetooth 2.1 (BR/EDR) uses Simple Secure Pairing (SSP) w… Continue reading Non-invasively forcing reauthentication in Bluetooth 2.1
Is it possible for an unauthenticated bystander to force reassociation/reauthentication of a pair of Bluetooth 2.1 devices in a manner similar to IEEE 802.11i deauths? Bluetooth 2.1 (BR/EDR) uses Simple Secure Pairing (SSP) w… Continue reading Non-invasively forcing reauthentication in Bluetooth 2.1