Questions relating criminal activity, performed (or aided) with the usage of a computer system.
8
votes
1answer
3k views
Tools to test for BEAST/CRIME that AREN'T Internet-based?
We have increasing pressure to identify and remediate any HTTPS server configurations that are vulnerable to BEAST (CBC) and CRIME (compression). We need to fix servers that are accessible to the ...
3
votes
1answer
78 views
Is NTFS file compression vulnerable to a CRIME-like attack when using an encrypted volume?
I know that content compression can cause SSL to be vulnerable to the CRIME attack, via changes in the content length when injected plaintext matches existing content. Does this principle carry over ...
2
votes
4answers
354 views
How to Investigate Wi-Fi Intrusion and where to look for evidence?
I'm trying to figure out how to configure a network so that I can tell what an intruder did (in the past) while on the network after they are detected.
eg. If someone with a wi-fi enabled laptop ...
2
votes
1answer
431 views
Detect a server supporting SPDY?
With my current interest in the CRIME attack, I am currently trying to check if there actually exits a way to "fingerprint" a server that supports SPDY?
My research lead me to believe only that the ...
0
votes
1answer
69 views
Mobile Broadband, e-Fraud & Anonymity Against My Website [closed]
I was wanting to know if the blend in the title of this post provides e-criminals an open field to explore.
What I mean is this: say a fraudster goes and buys a pay-as-go SIM card from a certain ...
