Validation of server identity via SSL certificate in during SSL connection handshake

My IoT Device is connecting to server using TLS. on Device side implementtaion (with wolfSSL) we are just passing CA (root) cert to validate/ authenticate the server! any specific identity of server is NOT being passed apart from the serve… Continue reading Validation of server identity via SSL certificate in during SSL connection handshake

A customer support of where my company host a VPS on asked me login detail, is this standard procedure?

We host our web application on a VPS, I maintain LAMP environment there to fulfill our client needs (I work on relatively small SaaS service provider), I also set up a script to backup the system regularly at night.
Our company had just up… Continue reading A customer support of where my company host a VPS on asked me login detail, is this standard procedure?

Is it possible to hack a database inside of local network by external attacker?

Can an attacker from global network hack a database located on office machine inside of local office network? For example after hacking a router, a gateway or the very machine? Or maybe there is another way for him? Is it possible to make … Continue reading Is it possible to hack a database inside of local network by external attacker?