2
votes
1answer
5k views

This site uses a weak security configuration - SHA-1 signatures [duplicate]

One of our users just sent us a screenshot of them browsing our site using Chrome for OS X, version 44.0.2403.130. This came as a surprise because I thought that our certificates were up to date (via ...
3
votes
1answer
59 views

Unauthorized file writes on Linux

Suppose my web browser or any other web-connected app has a minor security hole that won't allow an attacker to run code but will allow them to write a piece of text into a text file I own. On a ...
1
vote
1answer
130 views

In the United States, when can someone legally search my personal laptop? (Government or private security) [closed]

Unlike the United Kingdom, U.S. citizens don't have an explicit right to privacy in the Constitution. Although there are implied privacy rights within "penumbras" of the Bill of Rights this has ...
0
votes
1answer
165 views

The spyware spooks use to hack mobiles [duplicate]

With regards to the report and video link below: How do I guard against this sort of snooping? Is it only possible if unwittingly install some kind of trojan? BBC Click Report: Surveillance ...
0
votes
1answer
71 views

Examples of in-band signalling hacks? [closed]

In-band signalling or the mixing of control and metadata on the same channel is what allowed the early phone phreakers to obtain free calls on telecommunications systems. By sending control tones ...
18
votes
3answers
6k views

What are requirements for HMAC secret key?

I'm creating HTTP REST service which will be available over tls only. For authentication purposes I plan to generate JWT token for every user using HMAC HS256. I need a secret key for HMAC. What are ...
1
vote
1answer
199 views

Is it possible to execute Server Side Scripts despite Content-Type header?

Say, there's an upload function where users are supposed to upload images only. However, it's possible to upload arbitrary files bypassing the restriction. Say, I uploaded a shell (aspx) and ...
3
votes
1answer
233 views

Writing your own John the Ripper module

I have a script in C, which is able to determine the password of certain data. It uses HMAC and RC4 algorithms to encrypt the given password and then compares that later to the given data. If they ...
2
votes
1answer
330 views

Can malware spread via bluetooth file transfer in Android?

I am aware of some malware that spreads when two devices are paired using Bluetooth; but can malware spread when sending a clean file to someone or receiving it via bluetooth ? If so, does it need ...
4
votes
3answers
530 views

Is it OK to create a new SSL certificate before the old one expires?

Over the past year I have created multiple SSL certificates that are all valid for a year. In a week or so, the first will expire. I thought it would be practical if all my certificates would have the ...
6
votes
2answers
2k views

How to prevent abuse of SMTP by sending spam emails?

I'm not an admin, I just created a website, and there's also a mail server on the server I payed for from my hosting provider. Most for what I learnt about mail servers is from an internet tutorials. ...
0
votes
1answer
104 views

SSL key decryption [duplicate]

I am wondering if I can get the SSL Key given the following conditions: Encrypted Text is known Decrypted Text is known Any ideas on how I can create a program that does this?
0
votes
1answer
29 views

extendedCertificate's in PKCS7 / CMS

In PKCS7 / CMS, for the signed-data content type, there's a CertifcateChoices field in the certicates field in SignedData that is a SET of CertificateChoices. CertificateChoices is defined thusly: ...
1
vote
0answers
87 views

How would an improved “read receipt” work as an email, Facebook post, or webpage?

I'm exploring various ways to implement cryptographic read receipts, that would be used to tell the content producer that the content was viewed. In addition to feedback reporting, a response might ...
1
vote
1answer
12k views

TLS handshake encrypted alert on client certificate

I'm trying to debug a TLS handshake between a client and a server Client sends Hello Server sends Hello, Certificate, Certificate request, Server hello done. client sends Encrypted alert - content ...
2
votes
1answer
204 views

Sniff LAN SSL requests

When I log in into Facebook, using Wireshark in the same machine, I can read the request data in plain-text. That doesn't happen when I'm sniffing my LAN: I can read the SSL packets but they are ...
1
vote
1answer
118 views

Does using FreeDNS introduce a security risk?

If you use a service like FreeDNS for a DNS, does this introduce any additional security risk as opposed to simply paying a registrar? Obviously the owner of FreeDNS could hijack your domain. But ...
0
votes
0answers
188 views

How to add a certificate chain to a JKS

I want to setup a KeyStore which contains certificate-chains only. This is required by a PKE system which uses the PublicKey of the desired certificate for encryption an then sends the cipher to the ...
5
votes
1answer
100 views

Unique Touchscreen Authentication Schemes

I am working on a new software application that will have access to millions of patient medical records. I want this to be secure. The initial thought process was to simply use a standard username ...
1
vote
0answers
93 views

XSSF cookie stealer not working

I am playing with XSSF with Metasploit and attacking Mutilldae(security 0). I was able to get the generic XSS inject working. The inject was added to the Mutilldae blog. However, when I try to get the ...
1
vote
1answer
38 views

How exactly should I interpret the term “Hybrid Cloud”?

The CISSP CBK definition says that a hybrid could is a mix of public and private. But what exactly does it mean? Is it more a conceptual idea:If you use both a public and a private your company is a ...
-7
votes
2answers
1k views

How long does it take to execute a DoS attack on a PC using the ping… -t CMD command?

Suppose the target of a Denial of Service attack is a PC on LAN with IP 192.168.1.10. Then, I can continue to ping the target by running the ping command in an infinite loop in CMD, that is, by ...
1
vote
1answer
111 views

Why is brute forcing DH private key harder than calculating public key?

Assuming shared parameters: prime p base g Alice's private key is a and her public key is A, which is g ^ a mod p Calcuating A requires g * g * g... a times. Modulus is applied whenever necessary. ...
4
votes
1answer
122 views

Keepass - Needle in a stack of needles

I got the idea from someone saying the best way is to hide the needle in a stack of needles, not in a haystack. I am considering writing a little app to accompany my Keepass installation. The app ...
1
vote
2answers
439 views

Why does gpg use /dev/urandom [duplicate]

Looking at the strace output of GPG on my box seems to show that it uses /dev/urandom when encrypting a message without any access to /dev/random even when --no-random-seed-file is specified. Are ...
2
votes
1answer
183 views

Reflected XSS via $_FILES

Is it possible to perform a reflected XSS attack via the $_FILES variable? The vulnerable code I am imagining might look like this: echo $_FILES["file"]["name"]; I read that it's not possible to ...
8
votes
3answers
1k views

Someone registered a domain name with the IP of my VPS [duplicate]

I rented a VPS server to run my website a few month ago. Today, I looked at the /var/log/apache2/access.log and noticed a strange line : 192.0.2.123 - - [02/Aug/2015:05:21:29 -0400] "GET / HTTP/1.1" ...
0
votes
3answers
186 views

What benefit to use different encryption key (passphrase) for different customers?

When we store confidential information in our database, we encrypt it using AES. In addition, when customers install our product, they protect their machines using a firewall. Should we use different ...
31
votes
5answers
6k views

Why can't Windows 98/IE5 connect to HTTPS sites in 2015?

Recently I found an old installation CD for Windows 98 Second Edition, and looking for a bit of a nostalgia kick, I installed it inside VirtualBox. Win98SE shipped with IE 5.0, and browsing the web ...
-5
votes
2answers
94 views

Mission Critical Security [closed]

I thought that if TLS is well implemented that is sufficient for security. Today I analyzed PubNub (Global Data Stream Network) and found these steps for security: communication over TLS AES-256 to ...
-3
votes
1answer
168 views

{PHP} SQL Injection [duplicate]

Please note: this isn't a duplicate!!! Why? You can use ' but You don't know how :) I have this PHP code: <?php (...) function escape($str) { $ret = ''; for($i=0;@$str[$i];$i++) { if($str[$i]...
0
votes
0answers
11 views

Configuration panel videotron [duplicate]

At the moment I am living in an apartment with some other people. We are students and we will start school in Canada. One guy took internet with Videotron, he manages the internet and we just give ...
2
votes
1answer
72 views

Rasberry Pi with TRESOR immune to cold boot and DMA attacks?

I would like to set up a Rasberry Pi and connect a large USB Harddrive and some webcams to run motion for homesurveillance. If I am understanding everything correctly if I get Ubuntu mate to run with ...
0
votes
1answer
98 views

What are specific use cases for anonymity?

There are various technologies for anonymity online, most notably TOR, but also I2P and VPNs, as well as simply using one-shot email addresses. What are the specific use cases for anonymity? I'm not ...
1
vote
3answers
360 views

Security RESTful web application in Java

We are developing two web applications: Application A : Restful web-services running on a GlassFish Server . Application B : Dynamic web application running on a Tomcat Server . I am accessing ...
7
votes
1answer
2k views

HTTP Caching Headers: private vs no-cache

We're currently reviewing our set of "no-cache" security headers: Cache-Control "no-cache, no-store, must-revalidate Pragma "no-cache" Expires 0 Besides the "standard" set above, I found this ...
3
votes
2answers
242 views

Am I encrypting and storing an array of user-details correctly?

I came up with a user-details-storing procedure that was, in the beginning, based on actual security-literature – but then I just kept writing without really doing all the cross-checking I should have ...
1
vote
1answer
3k views

Difference between X-Forwarded-For IP, X-Real-IP, VPNs and TOR

I have this Google Chrome Privacy Preserving Extension that I am working on. Where I can spoof the header information e.g user agents and else. When I spoof X-Forwarded-For IP and go to http://...
0
votes
0answers
62 views

How to prevent injection attacks powerscript scripts when dealing with user made variables

I have a large number of scripts with code looking like this: task "$argument" Which is then called by: powershell.Runspace.SessionStateProxy.SetVariable(argument, UserMadeValue); powershell....
2
votes
2answers
551 views

Practical steps for encrypting an encryption key for data stored in MySQL

So I'm working on my first project where user data is stored as encrypted using the user's password as (part of) the key. I have read many similar things about best practices, but the details seems to ...
1
vote
1answer
62 views

Detecting the source of dll injection

Is it possible to determine the process that performed DLL injection against a victim process?
1
vote
1answer
105 views

How is a exploit code mmaped in user space executed in kernel space?

I am reading about a Ubuntu-12.10 security exploit CVE-2013-1763 which describes the vulnerability of stack buffer overflow that can be exploited to escalate privilege of a process and gain root ...
6
votes
3answers
446 views

Do ISP Detect and Block Pen Testing Tools?

I one of the earliest books I read on security - The Basics of Hacking and Penetration Testing (978-0124116443); the author emphasized that you cannot use these Penetration Test Tools over the ...
0
votes
3answers
799 views

Advantages to alphanumeric-only usernames?

Let's say we are setting up some registration form for some website. I know that if input fields aren't sanitized then SQL injection can happen. But let's say all fields are sanitized correctly. Is ...
2
votes
3answers
385 views

How does Facebook really identify requests?

Today I have discovered something very strange. It seems like Facebook is playing some kind of unfair game for identifying one's online identity. So, here is what I have done: I have a regular ...
2
votes
1answer
253 views

Find out the identity of the person that called you

I once heard that if a number that you don't know called you, you can access a website (that I don't remember now) that will call the number and make a recording of what the person said and send it to ...
1
vote
1answer
116 views

Sending Group Keys over network

For multicast encryption one user creates group keys on his local (Symetric and asymetric). If we encrypt these with other group user's public keys and send over networks . Is this acceptable? Can ...
5
votes
2answers
13k views

Ipsec Native VPN on Windows 8 or 10

I have a Cisco PIX, and have been using the Cisco VPN client on windows however I would like to enable this to work with the native Windows 8/10 VPN client. It works fine with the native clients for ...
0
votes
1answer
97 views

Preventing installation of VPN software on home computers? [closed]

How can users be prevented from installing VPN software on their home computers?
0
votes
1answer
497 views

Simulation of cloud based digital signature with Hardware Security Module (HSM)

I am working on a cloud-based digital signature with a Hardware Security Module (HSM). I know that PKCS#11 AND Microsoft CryptoAPI implementation is required. I want to simulate the total process. For ...

15 30 50 per page