Collaborate Disseminate
I am studying for an exam in computer security, and I got stuck on the following question from a past exam:
A random program generator service S allows clients to generate random data. Each client Ci
shares a symmetric key Ki with the serv… Continue reading Denial of Service question
I have a single home server with a single NIC. I intend to run numerous services — some will be internet exposed, some will not. I don’t know if I am going to run them as VMs or Docker container but it shouldn’t matter for this question.
… Continue reading What is the threat/risk difference in opening multiple ports on one physical NIC on a home server vs creating VLANs and opening ports on each VLAN?
I’ve been using someone else’s VPS and connecting from my computer. I’ve been connecting via WinSCP and the server is hosted on OVH. Is it possible for the VPS host to have access or view the files on the connecting computer?
If it is poss… Continue reading Could the VPS host have access through WinSCP to the connecting computer’s files?
How long does google keep information on deleted gmail accounts?
I’m testing a web server that may be vulnerable to denial of service because of the time server keeps alive conections of the clients, I found that in a qualys report I launched against the webapp. I was searching for a kind of benchmark o… Continue reading Is it possible to know the keep-alive time supported by a web server?
The server is running the Kubuntu Desktop variant of Ubuntu (I transformed it into a server, I had things configured that would have been a pain to transfer to another installation.).
One day I decided to do a security check-up and I check… Continue reading I found an unknown UFW rule on my ubuntu server – have I been compromised?
I have a database for a chat app to which users can upload images. These images get scanned before they are made available to other users in a conversation. But when the antivirus gets an update, should I rescan images which have already b… Continue reading Virus scanning uploaded images to database
Supposedly, a server should never use naïve comparison between secured and user-provided strings, because of time leaks.
But I wonder, during a server response there are many random factors that have a greater impact on running time.
I won… Continue reading Time leakage effectiveness of small strings
I have setup squid proxy on a CentOs server where I set forwarded_for to delete and denied request headers on the /etc/squid/squid.conf file. However, whilst connected to the proxy, if I visit http://ip-check.net/detect-proxy.php it still … Continue reading How to make Squid Proxy undetectable by ip-check.net?
Ransomware actors behind the attack have breached at least 85,000 MySQL servers, and are currently selling at least compromised 250,000 databases. Continue reading PLEASE_READ_ME Ransomware Attacks 85K MySQL Servers