New answers tagged

5

Google has some servers (Edge Nodes) located into ISPs for quicker response, this is what they call the Google Global Cache. They are basically big proxy caches for serving static content (such as YouTube videos). According to their FAQ, it is ┬źdesigned for end-user networks with greater than 1Gbps of peak Google traffic┬╗ As you have observed, Alaska ...


4

Anyone capable of inspecting network traffic can intercept that image by its googleusercontent address as it bypasses my login authority. Not quite. As it's HTTPS, only someone who knows the private key in use (should only be you and google) are privy to the whole URL. Now, it is vulnerable to things like browser history attacks (anyone looking at ...


0

What would be ideal would be for gmail to scan your mail and when placing it in your inbox encrypt it with your public PGP key. That way, they get to accomplish their goals per their agreement and the user has the assurance that their e-mail is encrypted and safe on disk when it is at rest. The added benefit is the user gets the benefit of security and ...


3

According to the Android Developer Documentation: Android requires that all apps be digitally signed with a certificate. [...] The certificate does not need to be signed by a certificate authority. At least in my case - multiple apps with small user base - they are all self-signed. For self-signed Apps a third party could tamper with the APK and ...


3

Kaspersky, like most AV products these days, is performing a local MITM against your secure HTTP traffic. It does this in order to be able to scan payloads in HTTP transactions, be it in the request or the response. In order for this to be done correctly, Kaspersky has to generate its own root CA certificate, and generate spoofed certificates on the fly, ...


1

In other words, full disk encryption only provides data at rest security. Nothing new here! Data at rest security means that the literal data itself cannot be decrypted without the key. If the key is still in memory while the device is powered on, then anyone with access to the device (e.g. if the device is unlocked, or if it gets hacked, or cold booted, or ...



Top 50 recent answers are included