Tagged Questions
3
votes
2answers
132 views
Confidentiality and integrity for web session
When the client authenticates with our service, he is issued an opaque "token". This token includes the information, that identifies the client and some other information about the client ("payload"). ...
0
votes
3answers
175 views
Why is it necessary to match the checksum of a download with another file provided by the same server? [duplicate]
Possible Duplicate:
Does hashing a file from an unsigned website give a false sense of security?
On many servers providing files for download, there is a file on which checksums are ...
3
votes
2answers
101 views
What's the point of using multiple checksum algorithm with “aide”?
In aide the author offers more than one hash algorithm to do the check-sum, why is that?
Aren't a single one, i.e sha512 enough for determining file changes? I believe these algorithms are all ...
13
votes
7answers
1k views
Tripwire - Is it security Theater?
Tripwire type intrusion detection systems supposedly protect your system from rootkits, by monitoring the checksums of important binaries for changes.
Let's say I have tripwire configured to run ...
