Collaborate Disseminate
I know lots of websites that do clock skew fingerprinting using tcp timestamps. I know how to disable timestamps but i want to know techniques that can be used to counter clock skew fingerprinting. I read somewhere that one can spoof this … Continue reading Any Known countermeasures against clock skew fingerprinting?
What is a practice for issuing TSA (Time Stamping Authority) certificates?
I read that TSA certificates should be issued directly from Root CA, but basically TSA certificate is end entity certificate and Root CA should’t be … Continue reading Issuing TSA (Time Stamping Authority) certificates
Say Alice receives synchronized time from Tina the timekeeper. Say Ted spoofs a GPS signal, fooling Tina about the current time. Tina sends this fake time to Alice.
What can Alice do to avoid being too seriously fooled? Are there implemen… Continue reading Mitigate Time Spoofing Attack
I’ve recently started experiencing an odd occurence with my home machine (Win 7). I have set two-factor authentication on the webmail account I use. When logging into the account from this particular machine using Firefox and… Continue reading When logging into webmail from specific machine with correct system time, OTP SMS arrives immediately but with time stamp one hour behind system time
Latest ETSI standard CAdES, XAdES and PAdES require for baseline profile LTA to fulfill previous LT, T and B levels. Summarizing,the conformance requirements are:
B : Base signature with content-type, signing-time and sig… Continue reading Why AdES -A signatures require TWO timestamps?
This question already has an answer here:
Proving creation time/date of a screenshot
9 answers
I need to prove that all my pi… Continue reading How to prove a picture was taken before a certain date? [duplicate]
Sometimes we need to prove that a file was not created in advance – a good example is warrant canaries. The person releasing them may have been forced to sign the file with a future timestamp. For example, AutoCanary uses rec… Continue reading How to prove that a file was not created in advance
As a part of my thesis, I am about to evaluate different approaches to establish the trust in trusted-timestamping performed by a TSA (see RFC3161 – Trusted Timestamp Protocol).
A trustworthy timestamping scheme must provide the following … Continue reading How to put the "trust" into trusted-timestamping
With a simple filter a timestamp can be added to any output.
read more Continue reading Easily add timestamp to PowerShell output
So, lynis informs me that I should unset net.ipv4.tcp_timestamps.
I know that’s a bad thing because an attacker could figure out which updates that require restarting the machine I haven’t applied, or they could use it to figure out my upd… Continue reading Pros and cons of disabling TCP timestamps