All Questions
0
votes
1answer
14 views
How to protect against a determined harasser
My girlfriend is an admin on a German speaking site that for some time has been harassed by what we presume is a disgruntled user. At first it was merely an annoyance but a couple of days ago the ...
0
votes
0answers
8 views
How to secure communication between server pplication and client mobile application through HSM
We are planning to deploy HSM with our application.
The solution we are thinking is :
Mobile applications talks to server application,
Server application talks to HSM for authentications, ...
1
vote
0answers
14 views
How could a third-party know the contents of an email I sent to someone?
Apparently, a third party knew the contents of an email I sent to someone within an hour after I sent it. The following possibilities come into mind:
The recipient forwarded the email to the third ...
0
votes
0answers
15 views
PHP folder browsing
I made PHP app that allows you to browse through folders. I want to make impossible to browse anywhere else than in app folder and it's subfolders. Path to current folder is in URL (GET).
I would do ...
0
votes
1answer
15 views
Is a PGP revocation certificate sensitive?
In relation to an openpgp key on a smartcard:
Besides revoking the key, is there anything else it can be (ab)used for? Can I just ensure it's reliably stored but not worry about it's confidentiality?
...
0
votes
0answers
11 views
Should Access-Control-Allow-Origin need to be domain specific
Infosec has recommended us to use this header :
Access-Control-Allow-Origin:http://domainA.mycompany.com,http://*.mycompany.com
But I also own domain : http://domainB.mycompany.com
So, if i just ...
0
votes
1answer
16 views
Are there software solutions take encrypted credit card data taken straight off a square credit card reader and insert them into a standard web form?
Does anyone know how you can take the encrypted output of a square card reader and insert it directly into a standard web form?
0
votes
1answer
17 views
What are the strengths and weaknesses of using a single 'burner' computer vs. many public access computers over a sustained period?
Assuming that the user is accessing/publishing related sensitive information over this period, and also assuming that they would take additional precautions in both scenarios, such as a Tails live ...
1
vote
2answers
30 views
What to do if you ever lose a smart card?
I want to use an OpenPGP smart card for signing releases, but I'm not sure what to do if I ever lose the card or it breaks.
My idea is to generate the key using GnuPG on an isolated computer, ...
0
votes
1answer
22 views
Is Salt, IV and Key necessary when encrypting password in a database using AES? If so, how should they be used?
Imagine I have a website with user accounts. I want to authenticate users, so I need to know if the password they provide matches the one stored in my database. To protect the passwords from prying ...
0
votes
0answers
9 views
Design of Multi-tenant authentication
I am starting to design Multi-tenant system and already read the article:
http://msdn.microsoft.com/en-us/library/aa479086.aspx
Any case, I have couple of question related to authentication.
For ...
1
vote
1answer
52 views
File upload vulnerability
I am trying to pentest a webapp challenge.
Is the following control code vulnerable to file upload? I would like to upload a php shell...
I am able to upload shell.php.jpg file but I receive the ...
1
vote
1answer
41 views
Given a hash, salt, charset and password length, how do you get the password without brute-forcing it?
I got that question on an exercise and I'm not sure what to answer.
Without conventional brute-forcing and without a rainbow table, how could I find out the password?
An improved brute-force ...
0
votes
0answers
15 views
Using software to enable SSD's SED functionality on older motherboads [on hold]
I'm considering buying Crucial M500 SSD drive with SED (ATA password, TCG Opal 2.0, eDrive compliant). I'd like to use its SED functionality, but even after reading a bunch of articles, I'm still ...
0
votes
0answers
16 views
DNS: Conditional Forwarding
I'm currently attempting to track down a problem with a Websense Web Filter breaking SSL connections for sites in a conditional forward. To do this, I need to know exactly how a conditional forward ...
0
votes
0answers
26 views
Online Service for Storage of Bank Account Info? [on hold]
For obvious reasons, I do not want to store any bank account information on my servers.
However, my site does need to collect this information from contractors so we can pay them via direct ...
0
votes
1answer
60 views
Chrome extension sends browsing information [on hold]
When visiting a url in Chrome, I saw in Fiddler, after the responses, calls to:
http://api29.datarating.com/related
http://api29.datarating.com/service2
For example after going to ...
-1
votes
0answers
32 views
Facebook likes or youtube views increase [on hold]
I have seen in some of the websites that, they provide scripts to increase youtube views or to increase facebook likes.
Is that really happens or just a hoax?
If that is true then how to prevent ...
0
votes
0answers
115 views
Beginner: Is this good encryption? [migrated]
I've managed to knock together some code to encrypt/decrypt a string and I'm wondering whether I've done a good job at it. Is it truly secure, in other words.
I read in a StackOverflow post that ...
1
vote
2answers
39 views
SSH Security allowing only certain users to connect to the server [on hold]
I have set up a remote ssh server on the cloud. I am newb at these things and have managed to bypass the required firewall using SSH. Now I plan on giving the access to only 2 more friends of mine so ...
1
vote
2answers
44 views
What version of TLS does any web browser use when connecting to server where all SSL Protocols are enabled?
All (almost all) web browsers have TLSv1.0 enabled by default, moreover TLSv1.1 and even TLSv1.2 can also be enabled by default.
What version of TLS will be used to connect to web server (e.g. ...
1
vote
1answer
26 views
Why is monitor mode necessary on the NIC used to attack WPS with reaver and other tools?
I am trying to get a deeper understanding about the inner working of WiFi Protected Setup and its active attack using reaver, bully and other utilities.
What I am really unable to realize is why it ...
0
votes
3answers
37 views
Authorization with MD5 imlemented in Javascript
I want to use MD5 function (JavaScript library) to hash password before send it to server during logging in to website and during registration proces.
I want to ask is it a secure method?
I can't ...
3
votes
0answers
28 views
How can I hide IIS SMTP version number? [migrated]
If I type the following command and connect to my production server (Windows 2008):
telnet myserver 25
I see the following result:
220 myserver Microsoft ESMTP Mail Service, Version: 7.0.xxx ...
1
vote
3answers
107 views
What is the security flaw in the following code?
I am reading OWASP Testing Guide v3. The following passage:
Example 1: Magic Parameters
Imagine a simple web application that accepts a name-value pair of “magic” and then the value. For ...
5
votes
4answers
1k views
How secure is Java's hashCode()?
On our views in a Java web application, currently I am using hashCode as Id's for objects so that at server end I can get the same object back.
However, I am wondering how secure Java's hashCode ...
2
votes
0answers
16 views
Why does Android mix phone state with phone identity?
The "Phone State" permission on Android is widely requested by many apps. The explanation often given by the developer is that the app needs it in order to determine when you're on the phone, to stop ...
2
votes
2answers
79 views
DOM XSS attack failing in Firefox
I am trying to perform DOM XSS attack to exploit a vulnerability of localhost webpage. I am able to perform the attack successfully on IE-11 and Chrome. But Firefox is preventing me to perform the ...
0
votes
1answer
60 views
Impersonating Law Enforcement
Obviously impersonating a law enforcement officer on an engagement is illegal but badguys don't care about the law. If a company wanted to allow impersonating LE and have it in clear writing in the ...
0
votes
1answer
62 views
Is “bug banking” occurring? [on hold]
Reading about the fast approaching end of support for Windows XP, I seem to come across a lot of articles which speak about bug banking. Of it being likely that towards the end of 2013 and beginning ...
1
vote
1answer
29 views
Is Google API Key a sensitive information that needs to be protected?
I'm making use of google API for location (in Android, iOS apps).. Can the key be hardcoded? Or should it be protected? If It's sensitive, why is it sensitive and how can attackers exploit this?
0
votes
0answers
7 views
To which extent are paid alternatives to Apple's Xprotect worth it?
Mac OS X ships with Xprotect, Apple's mechanism to detect and remove malware. System software security holes are patched decently quickly. In a world of fragmented, code-signed, sandboxed apps, what ...
3
votes
3answers
183 views
Why do websites use HTTPS when they don't need to? [duplicate]
This has been bothering me for a while, but I have noticed that some websites (the first one that comes to mind is XKCD) use HTTPS for no apparent reason. I mean, XKCD is free and accessible to ...
2
votes
1answer
80 views
How to deal with websites with poor encryption?
I'm trying to access a website over HTTPS. However, it appears that it uses weak encryption: specifically, RC4.
Is there a way to improve the security of my connection to the website? I've been ...
1
vote
1answer
44 views
Can anyone explain how to use an X509 client certificate to securely authenticate a user?
Bit of background.
Web Application that can generate Pub/Priv Keys and X.509 certificates.
How would I make use of the certificate in a web application, username and password login form to provide ...
2
votes
2answers
49 views
Credit card number entropy?
I want to confirm that this understanding is correct:
A card has 16 digits plus a CV2
The first 6 digits are an issuer identification number
The last digit of the 16 is a Luhn mod 10 check digit.
...
0
votes
2answers
59 views
Monitoring file copy on external devices
Transferred a personal folder from an external HDD to a USB using my
work PC. Just used a simple cut paste method between the two drives,
never writing anything to the internal HDD. However, ...
0
votes
0answers
49 views
How to start career as Penetration Tester? [duplicate]
I'm currently studying BTEC Diploma in IT LVL3, and so far have basic command of C#, C++, and am going to learn Java basics soon, as we start a new class unit. I also plan on going to the university. ...
0
votes
1answer
43 views
How to use proxies on programs? [on hold]
My router blocks all connections that include the word "game" in the URL of the traffic,
and I would like to play a game which is an external program. Browser proxies won't work. Is there a way to get ...
15
votes
2answers
647 views
What exactly does it mean when Chrome reports a certificate 'does not have public audit records'?
When visiting Gmail in Chrome, if I click on the lock icon in the address bar and go to the connection tab, I received a message 'The identity of this website has been verified by Google Internet ...
5
votes
3answers
479 views
Does it make any sense to alter a hashed password? [duplicate]
I've always wondered if it would make any sense to put fake characters into a hashed password?
For example this is my password: 1234
and after hashing the password , this is the result: abcd
Then ...
0
votes
2answers
66 views
JS code vulnerable?
Can you please help me in order to understand what exactly do this code and if it is could be vulernerable?
<script type="text/javascript">
function getUrlVars(){
var vars ...
4
votes
1answer
43 views
Installing profile on “Good” Mail application give someone admin permission on my iPhone
My new enterprise use the app "GOOD" for the emails.
But to use it, I have to install a GOOD profile with description : "Install this profile to enroll to encrypted profile service". If I choose ...
0
votes
1answer
10 views
Use same PGP key for private and business mail addresses [duplicate]
I'm asking myself which one is better:
Use the same PGP keypair for use with both private email addresses and business email addreses
Use two seperate PGP keypairs, one for private and one for ...
0
votes
0answers
32 views
Vigenere polyalphabetic cipher
A Vigenere polyalphabetic cipher has a repeated keyword length of k, and encrypts
any of 26 letters using a rotation cipher. What is the keyspace of this cipher?
0
votes
1answer
21 views
Which is better in “DH-group14-sha1 with hmac-sha2-256” and “DH-group-exchange-sha256 with hmac-sha2-256” from performance and security perspective?
In our product (embedded system), so far we were using diffie-hellman-group1-sha1 with hmac-sha1. But due to security concern we are planning to use diffie-hellman-group14 for key exchange and ...
1
vote
2answers
38 views
Is it safe to use Diffie-Hellman public keys as nonces to protect against replay attacks?
I have an interesting case regarding protection against replay attacks. Under the assumption that Alice and Bob have used Diffie-Hellman key exchange to establish a secure temporary session, would it ...
0
votes
1answer
65 views
Assuming a good hash system, if 2 hashes has about 50% of their bits the same, what is the likelihood that the corresponding plaintext is the same? [on hold]
I am new to cryptography and this practice question is puzzling me. Please help!
1
vote
1answer
56 views
What does hardware full disk encryption imply?
I read the wikipedia article and few others, however I still don't have some things clear. The main question would be what does hardware full disk encryption imply for the user, however I have more ...
0
votes
1answer
92 views
Have I done enough not be compromised through image uploading
I know that you can never be sure that you have done enough to be secure, and I also know that file uploading is hard to make correct. Before asking this question I read some of the related posts here ...
