Collaborate Disseminate
I am trying to make the link between faults and weaknesses (As defined by Common Weaknesses Enumeration).
The word "fault" is generally used in the reliability domain, to designate the cause of an error i.e., the cause of the dev… Continue reading Faults vs weaknesses
Today I read about ethical hacking and cracking. I read that ethical hacking is legal but cracking is illegal. The confusion came in my mind when I think that both are same.
So how can we identify it’s illegal hacking or not? Because an … Continue reading What is difference between cracking and ethical hacking?
In security news, I faced a new term related to hash functions: it is reported that the “in-house hash function” used in IOTA platform is broken (i.e. Curl-P hash function). You can find the complete paper introducing the vul… Continue reading What does "in-house hash function" mean?
In the context of a) information security and b) an operating system such as Windows 10 or OS X, what actually constitutes a “hack”? Most non-technical end-users associate the term “hack” with the deliberate stealing of infor… Continue reading What does "hacked" actually mean?
As far as I know, penetration testing can be divided into black-box, gray-box, and white-box testing. But then what about secure code review? Is it part of white-box testing or is it separate?
Continue reading Difference between white-box testing and secure code review
It looks like I am having a terminology issue here. In cryptography, we have stream ciphers and block ciphers. I understand their difference. We also have cryptographic algorithms like AES (Rijndael).
My confusion point is h… Continue reading How are ciphers related to cryptographic algorithms like DES or AES?
This question already has an answer here:
What is the difference between misuse and abuse cases in security?
3 answers
During his talk at Google, Frank Abagnale mentioned the following:
…we will be doing away with passwords in the next 24 months. Passwords will leave the world, there will be no more passwords. There is a new technology … Continue reading What does Frank Abagnale mean by "Level 4 security" in his talk at Google?
I’ve seen the term ‘egg’ used in several questions used on here, but I can’t seem to find an explanation for it. I have a vague idea that an egg is a way of placing shell code onto the stack and getting it to execute (?). My … Continue reading What is an egg?
I’m taking a coursera course, and they take pains when talking about network security to distinguish between eavesdropping and sniffing.
According to their definitions, sniffing involves reading or monitoring whole packets,… Continue reading Eavesdropping vs. sniffing