Tag Info

New answers tagged

1

Please look at how SipHash replaced old hash mechanism to counter-measure DoS through hash collision. https://131002.net/siphash/#at -> Slides of the presentation "Hash-flooding DoS reloaded: attacks and defenses"


0

Sounds like a very cool project. It seems that you have rediscovered the very problem that Kerberos was designed to solve. Looking at your example, why would you not just use PKI both ways? Or can you not control the certificates at both ends? You could look at SSL session initialization to see how you could transfer a confidential message under the gaze ...


0

Nice project but as usual you really should not reinvent the wheel. Writing such protocols for production use is a bad idea in almost every case. I recommend reading Bruce Schneier's Cryptography Engineering book. It is not a light read but would definitely clear out all your questions. First of all I think burning keys into executables is a terrible idea. ...


0

Fundamental to the question, is if the endpoint is not secured, keys, whatever they may be can be obtained, which is why for endpoint secure transactions, the terminal itself is under the aegis of the proprietor - eg. atms, cash points, etc.


1

You can't have a private key hard coded in software that is distributed. The two options I see are: Have each client generate a unique key-pair that they use for communicating with the server. Bob would send his public key to the server when he initially connects. The server will then encrypt messages to Bob with his public key. The first communication ...


2

There are many ways that Nessus, and similar scanners or other utilities, may remotely control or alter systems without RDP enabled. In fact, you'll probably be hard-pressed to find any remote management utility or vulnerability scanner that requires RDP. Remote Desktop is mainly for the human user. Graphical interfaces help us to more easily interpret and ...


1

Nessus appears to use SMB and WMI when doing credentialed scans. Take a look at the following PDF from their site: http://static.tenable.com/documentation/nessus_credential_checks.pdf


1

Software such as PsExec allow remote command execution without software on the remote system: PsExec is a light-weight telnet-replacement that lets you execute processes on other systems, complete with full interactivity for console applications, without having to manually install client software. PsExec's most powerful uses include launching ...


0

Facing the same issue I ultimately decided to provide the crypto keys via an API, when an application asks for it. This has several advantages and drawbacks: you rely on some kind of containment / limitation. In my case it was IP filetring which was optimal for the architecture we were in. there is the the risk of IP spoofing which needs to be weighted ...


0

To answer the first question: no, it is not possible for one socket without connecting to it, unless you attack the IP layer underneath. In that case you don't have to talk about sockets anymore. No, it is not safer to have a server socket connect back to the client. An attacker could send the server socket almost anywhere. If you want to protect a socket, ...



Top 50 recent answers are included