Collaborate Disseminate
I am building an web service where I handle user data and security is the top and main concern. To store my passwords, I have decided on a algorithm which takes a little longer at runtime than I want. I am using AWS Lightsail for hosting m… Continue reading Should I isolate my password hashing algorithms in another server to decrease CPU stress?
I have created an App and made clients install it on there phone.
When my app tries to connect to server or request data from my server I want to verify if that app is genuinely my app and not modified or tempered version of my app, Can an… Continue reading Is there any way I can verify that my app in not modified or tempered (code is changed or something) on clients phone? [duplicate]
Logging is enabled. Only allow rules are logged. The very last line of my firewall rules is:
Anywhere DENY Anywhere
No logging is asked for, however two IPs repeatedly show up in my firewall logs as blocked:
Dec… Continue reading ufw logs BLOCKS from 2 sites while BLOCK logging is completely disabled for ALL sites [migrated]
I’m doing some research into secure client-server communication. I’ve decided to use AES to encrypt data, and then encrypt the AES key using ECC to send to the recipient. It’s important to me that I get this flow right, and then I can work… Continue reading Is this key exchange & encryption flow correct? [closed]
I’m doing some research into secure client-server communication. I’ve decided to use AES to encrypt data, and then encrypt the AES key using ECC to send to the recipient. It’s important to me that I get this flow right, and then I can work… Continue reading Is this key exchange & encryption flow correct? [closed]
I tried multiple blogs but haven’t found anything. I was able to query by servciename but I’m looking to filter by SERVCIE_START_NAME
sc \localhost query | findstr SERVICE_NAME
We are focusing on mobile phone and hard drive encryptions. This idea can be extended to any data encryption also.
iPhone and recent Androids are all encrypted. We know that changing the password will not change the encrypted data. It only… Continue reading Does Re-Encryption make our data more secure?
What are the security implications of managing your own server verses using a PaaS (i.e., Heroku, google cloud). I’ve been trying to find discussion of this topic, strangely to no avail. So I thought I would ask people here what they thin… Continue reading Security implications of PaaS vs a self managed server
I am thinking of creating a small chatting server. I want it to be as secure as possible so I found it to be very helpful if some expert could guide me a little bit.
Has there been any research on or perhaps a completely built prototype of… Continue reading Chatting server that doesn’t know who the end clients are
I am thinking of creating a small chatting server. I want it to be as secure as possible so I found it to be very helpful if some expert could guide me a little bit.
Has there been any research on or perhaps a completely built prototype of… Continue reading Chatting server that doesn’t know who the end clients are