Tag Info

New answers tagged

1

If we assume that the content of the input files is random, we can view your proposal as using MD5 as a PRNG algorithm and using the input files as the seed to the PRNG function. So your question becomes: Is it secure to use a PRNG algorithm, whose seeds are stored on my disk, as a password generator? The answer to that is clearly no because all of the ...


1

Advantages over a password manager: Little to none. Security problems: Your password generation technique would be logged in command history. Any file access mechanisms would record access to these files every time you log in. Your password would be visible on screen every time you needed to use it. If any files change without your knowledge, your ...


2

As Martin suggested in the comments, I would highly suggest using TLS. Even if your audience is young teens, disclosing the salt to the client is not a good idea. For example, what would happen if the salt for the hashes is hard-coded into your web application and an attacker exploits a vulnerability to extract the bcrypt password hashes? If the attacker ...


3

Yes, Zimprerium was the group that discovered and reported the StageFright vulnerability (here's the original blog post). Zimperium's Sr. Director of Platform Research and Exploitation, Joshua J. Drake (the discoverer and presenter of StageFright) is a famous Android security researcher, and a former researcher for metasploit. While I applaud being ...


0

Software auditing is easier since code is mostly done on standard platforms, whereas HW has at least two components: SW (firmware) and electronic components, which are sometimes proprietary and under patent laws. Reverse engineering a HW firmware is also possible, however you must deep understand how the electronic components work and what kind of ...


3

Your question here is basically the question every steganalysts are asking. Reading from wikipedia page: The goal of steganalysis is to identify suspected packages, determine whether or not they have a payload encoded into them, and, if possible, recover that payload. The usual way to go is to have a set of known not-steganographed data to extrapolate ...


-1

In case of hidden partitions, copy the materials to a different media. Don't clone it though. Also don't allow compressed or encrypted attachments. One of my clients doesn't allow compressed files beyond 99% compression for instance. In the case of images, you can resize an image by reduction, which will typically remove any altered binary info in the ...


0

Based on the information which I've found on-line so far, the following statements are true: Passwords are always encrypted source. Chrome uses your Google Account to encrypt your synced passwords source. Whether or not you use a passphrase, your synced data is protected by encryption in transit. Your Chrome sync passphrase is stored on your computer and ...



Top 50 recent answers are included