Tag Info

New answers tagged

1

I try not to do this but this is very much a yes and no answer. Tools like FTK Remote Agent run as a service on the system. An investigator can connect to those tools and perform tasks (such as pulling a remote image of that particular system.) If you were to walk into the data center of AWS and could get console level access and installed than ran your ...


0

The presence of any service on the Internet will lead to it being attacked to a certain degree, as some attackers are just looking for free resources (bandwidth, CPU power) and don't really care too much about what's on the host. Assuming that you patch the OS it's not too likely that the SSH service was compromised directly, but if you're running a web ...


0

Lastpass encrypts and decrypts your data only locally, probably using Javascript, in the browser. Your master password is not sent do the Lastpass servers. Well, it should not and up til now I trust them not to do this. It sends the encrypted database to its servers. When you login on another computer, you enter your email address and password. Then ...


0

No, because /dev/random gathers environmental noise from device drivers. So unless you happen to have exactly the same events happening at the exact same time in both VMs, their random pool will differ enough to make this kind of attack impossible (or at least infeasible).


5

Zero-Knowledge is an expression with a very precise meaning in cryptography, which does not match yours. Not using that expression would be a good communication move, even though you would not be the first person to abuse the terminology. The property that you want to talk about would be better called "mistrust". The point of it is to indeed increase ...



Top 50 recent answers are included