Tagged Questions
1
vote
1answer
123 views
Implementing Secure Remote Password with Remote Desktop Application
I had read the Secure Remote Password Protocol paper written by Tom Wu. This protocol is resistant to dictionary attacks. I have also go through some papers regarding to VNC attacks due to weak ...
2
votes
2answers
151 views
Attacks in SSL and SSH
I have a question
Assume that we have two end-host A and B connected by two routers R1 and R2. A wants to send a large file to B.
1) A decides to establish ssh connection with host B using public ...
5
votes
3answers
685 views
What are potential security risks when using an insecure wireless connection?
If someone is using an insecure wireless connection (for example a hot spot in a coffee shop) does it posse a threat even if the person is using a secure application layer protocol? What I mean by ...
3
votes
4answers
340 views
What's the safest way to access my US-based bank's website from within Mexico? VPN vs SSH vs HTTPS?
I will soon be moving to Mexico and living there for an extended period. During that time I will need to occasionally access my US-based bank's website. I'll always be connecting using my own laptop, ...
1
vote
3answers
229 views
Monitoring and filtering of arbitrary outgoing data
I would like to be able to not just centrally monitor but also filter any organizational data moving out our edge routers, regardless of the sender application and regardless of the protocol/port used ...
5
votes
2answers
863 views
Is IP spoofing relevant to TCP? Is it relevant for TLS or SSH?
I have read the TCP Connection Establishment on Wikipedia
In brief the packets to start are
SYN, with a (hopefully) random sequence number A from the client.
SYN-ACK, responding, with A+1 and ...
2
votes
2answers
80 views
Does TLS-OBC only improve security of Web Browsers? Does it improve the security of SSH?
I'm studying the TLS-OBC extension and would like to know if it improves security of non Web-based protocols?
Specifically, would it be of any benefit to SSH clients? (version 1 or version 2.x/secsh)
...
2
votes
2answers
531 views
Is it less secure to use OpenDNS for banking accounts, SSH, Adsense account?
I have one WiFi connection in my house which I use for my iPad, phone and computers.
I want to block adult sites, time consuming sites for every device that use the WiFi connection.
So I came across ...
5
votes
5answers
1k views
Which is the most vulnerable to MITM attacks, SSL or SSH?
Which is the most vulnerable to MITM attacks, SSL or SSH?
Here's the scenario, you have 20 minutes to set up a web proxy like this:
Laptop -> Chrome Browser -> Web Proxy -> Internet
You must secure ...
7
votes
3answers
469 views
Public wifi security protocols
I should apologise first- this post could seem a lot to ask for, but I am starting to go around in circles. I am interested in securing my laptop for when I use public wireless hotspots, as I am a ...
5
votes
1answer
2k views
How is tunnelling SSH through Poxytunnel/HTTPS different from doing it through SSL with Stunnel?
In an answer to What is the difference between SSL, TLS, and HTTPS, it's said that HTTPS is HTTP over SSL/TLS. That is, an SSL/TLS connection is established first, and then normal HTTP data is ...
4
votes
2answers
439 views
Which is the easiest secure file transport protocol to implement (SFTP, FTPS, HTTPS, FTP over SSH, FTP over IPsec)
I have to select a secure file transfer protocol, to be implemented in a pre-boot system. I have access to libraries with the basic network functionalities (IP, TCP, UDP, etc...). I might also have ...
5
votes
1answer
2k views
6
votes
2answers
2k views
What is the “openssh-blacklist” package? Is it related to the Debian OpenSSL bug?
What is the "openssh-blacklist" package? Is it related to the Debians OpenSSL bug?
24
votes
3answers
16k views
What is the difference between SSL vs SSH? Which is more secure?
What is the difference between SSH and SSL? Which one is more secure, if you can compare them together?
Which has more potential vulnerabilities?
