Questions tagged [protocols]
A description and set of rules for the ordered exchange of structured information designed with the goal of protecting the security of the system.
3
votes
1answer
56 views
How do I know that the request and response is using encryption protocols in burp suite?
I know these things can easily be done on wireshark, tshark, etc but is it possible to know that the request I forwarded and the response I received is using protocols such as TLS, TLSv1.2, TCP, HTTP, ...
-1
votes
1answer
50 views
What are the flaws in this security protocol between client and server? [closed]
Here is my security protocol for the use of a service provided by server. It utilises a symmetric key:
Client requests to use a service
Server sends back nonce
Client sends back nonce encrypted with ...
1
vote
3answers
112 views
Why is it required to HMAC riv in HDCP 2.3?
In HDCP 2.3 (pdf) during the Session Key Exchange, the HDCP transmitter sends also the 256-bit HMAC of riv (HMAC-SHA256(riv, kd)).
Why is it required? Does it prevent any attack?
1
vote
0answers
35 views
Kerberos Protocol Centralized Server
If a small company is expanding with various branches across the country, how would the kerberos centralized server be configured? Are the new users assigned new ticket granting servers or are they ...
1
vote
0answers
25 views
Provide email author origin integrity [closed]
If i receive an email, how does my computer verify the author origin integrity using the digital certificates? Does it use any specific protocol for this?
1
vote
1answer
46 views
Are there other methods than fuzzing for black box?
I find fuzzing a bit to basic method if it comes to black box apps. I am specifically interested how to find a vulnerability in network protocols. I have read "Attacking Network Protocols" but only ...
1
vote
1answer
36 views
NAS with a public IP and multiple file sharing services – security concerns
I've ‘inherited’ (it's now my responsibility to take care of it) a WD My Cloud EX2 with a public IP and since it's exposed to the internet, I want to make sure that the data and other machines on the ...
0
votes
1answer
66 views
Is it possible to become infected with virus, trojan or malware by browsing the infected sites or running installation .exe?
I am quite paranoid and I am always afraid that when i accidentally open some infected sites it would run scripts that automatically download malwares, viruses and trojans into my pc and run by ...
2
votes
0answers
17 views
Multi Party Protocol - Proof with semi-honest adversaries
I have designed a protocol where one entity acts as a "client", sends information to one of many "server-parties". This second party sends some other information to another "server-party" and so on, ...
0
votes
1answer
76 views
How are USSD messages used and who could send them?
Some illegal ads started showing up on my Android phone as message boxes recently. They are said to be "USSD messages" in an app recording notifications (com.evanhe.nhfree).
There is a Wikipedia ...
1
vote
1answer
130 views
Where exactly in the OSI model does TLS/SSL belong [duplicate]
I am trying to understand where exactly SSL/TLS sits in OSI model. If I look at this answer on StackExchange,
While all network models are imperfect, this question can only be
answered by looking ...
1
vote
1answer
105 views
Slow Hashing Without a Salt?
I'm trying to design a security scheme that involves a shared secret but isn't a traditional account password situation. The server would store a set of "keys", each of which has a blob of data ...
0
votes
0answers
53 views
Is there any open source SDK for implementing a KMIP server?
Is there any reputable open source SDK for implementing an OASIS Key Management Interoperability Protocol (KMIP) server?
3
votes
1answer
227 views
What is httpvh:// and is it the result of something malicious?
I was working on a client's old website and I noticed that some of their YouTube links were broken and looked like this:
httpvh://www.youtube.com/watch?v=jNQXAC9IVRw
At first I assumed it was some ...
4
votes
1answer
122 views
Simple File Transfer Protocol
My SIEM has produced something intriguing. I went looking for unauthorized SSH connections, and looked for the SFTP protocol by mistake. I found a Windows web server that is connecting from port 80 to ...
2
votes
1answer
45 views
Does EAP exist as an independent authentication protocol, or just as a framework?
Does EAP exist as an authentication protocol itself, or will it only be found implemented as one of its methods (EAP-TLS, EAP-TTLS, etc)?
If EAP is only a framework, what additional detail do its ...
0
votes
1answer
82 views
What does a secure path mean?
I saw it in a slide for Mark Stamp. He says:
"Authentication on a stand-alone computer is relatively simple: 1) For
example, hash a password with a salt. 2) “Secure path,” attacks on
...
89
votes
10answers
18k views
Does it improve security to use obscure port numbers?
I recently started a job at a small company where the CTO prefers to host SSH services at obscure, high numbered ports on our servers rather than the well known port 22. His rationale is that "it ...
-6
votes
1answer
262 views
LTE Security: What kind of cryptograpy could be used to fix layer 2? [closed]
New attacks on LTE:
https://thehackernews.com/2018/06/4g-lte-network-hacking.html
https://www.alter-attack.net/media/breaking_lte_on_layer_two.pdf
Layer two (data link) does not guarantee the ...
0
votes
1answer
42 views
Trustable Sources For Security Algorithms and Standards?
I am learner of cryptographic algorithms and security standards. I usually Google it to understand the basics of the algorithm or the protocol, and to find an implementation of a protocol. However I ...
2
votes
2answers
90 views
One way protocol with encryption without tcp
I am trying to brainstorm how I might either:
1) create a protocol (although against this option)
2) use an existing protocol
That does the following:
1) allows 1 way communication from 1 node to ...
0
votes
0answers
72 views
Non-invasively forcing reauthentication in Bluetooth 2.1
Is it possible for an unauthenticated bystander to force reassociation/reauthentication of a pair of Bluetooth 2.1 devices in a manner similar to IEEE 802.11i deauths? Bluetooth 2.1 (BR/EDR) uses ...
7
votes
1answer
2k views
What are non-standard ports and protocols [closed]
I am new to the security field and reading about how to check if an application is secure. One of the checks involves finding out if the app uses non-standard security ports and protocols. However, ...
3
votes
1answer
429 views
MsChapV2 authentication and Evil Twin attack
I'm trying to understand the dynamics of the authentication process in the MS-CHAPV2 protocol. In particular, if I implement an Evil Twin attack I can't understand how it's possible that I can ...
6
votes
1answer
2k views
WireGuard VPN: how safe is it for production in its current state?
In our project we had to build a VPN to get through to computers residing behind NAT. I never did it before. While looking for suitable software I came across WireGuard which claimed to be very simple....
1
vote
1answer
146 views
Does TLS protocol make encryption at L2/L3 layers redundant?
If a pair of endpoints are using TLS protocol for secure data exchanges, does it make the encryption at the network or MAC layers redundant?
E.g. if I create a TLS session between two endpoints ...
9
votes
1answer
504 views
Why does TLS 1.3 deprecate custom DHE groups?
According to the second draft of the TLS 1.3 specification, custom DH groups have been deprecated. As we all know, hardcoded DH groups are vulnerable to a precomputation attack that allows retroactive ...
1
vote
1answer
237 views
Does TLS 1.3 encrypt alert messages?
I'm working quite some time now with TLS 1.3 implementations (OpenSSL, WolfSSL), but I can't find anywhere in the TLS 1.3 drafts if alert messages should be encrypted or not. I personally thought only ...
2
votes
1answer
71 views
Are there techniques or methods to develop security protocols without side channel attacks?
In general timing attacks are a manifestation of the implementation. So if I am processing data on the server or the client then I can leak information depending on how the code is written.
To ...
-1
votes
1answer
82 views
How to restrict my PC to browsing only for security reasons? [closed]
I have a PC that i only use for browsing the web. I do not have any problem with disabling any other services/protocols that does not affect web browsing.
I want to disable these unnecessary services (...
2
votes
1answer
168 views
What's the fastest protocol to target for password attacks
In a Windows domain environment, there are numerous protocols (SMB, LDAP, Webpages, RDP, FTP, etc.) that query against the same Windows based AD. Many of these protocols have their own overhead that ...
0
votes
2answers
613 views
Why is SQL considered to be a session layer “protocol”? [closed]
Within the OSI-Model, why is SQL considered to be a session layer "protocol"? Isn't SQL a language and not a protocol at all?
1
vote
2answers
126 views
Is there any way to protect a client-side game from a hacked client?
Here's a toy example of a game: the player is presented with N slot machines. They can click on each slot machine once, and when they do so, the slot machine rolls a random outcome (based on a ...
14
votes
1answer
283 views
Why is caller ID spoofing so simple, and catching offenders so hard?
There is plenty of software which allows a user to input a recipient's information, and a fake-originator's information, and the software will complete the caller ID spoof. I'm trying to understand ...
3
votes
1answer
275 views
Secret Santa - implementation that does not require a participant to trust the server
In the Christmas spirit I read Cryptographic Secret Santa from MathOverflow, and then followed the link to another page titled Cryptographic Secret Santa.
On this latter page the author explains an ...
2
votes
1answer
210 views
Is it safe to store secrets in LDAP?
Many systems store secret or sensitive information in LDAP attributes. For example, IEC/TS 62351-8 prescribes storage of user tokens in LDAP.
Is it safe to store secret or sensitive information as an ...
0
votes
0answers
70 views
Can EAP be used to authenticate to a service?
Can an app implement EAP to authenticate a user to a remote server?
Are there better alternatives?
e.g
A pc connected to the Internet running an app A that ask the username and password of the user. ...
3
votes
0answers
96 views
Is there a secure, anonymous peer to peer matching solution?
I am newbie so please pardon my naivete. I was wondering if there is any cryptographic procedure that allows for peer to peer matching.
Perhaps to illustrate my question I will use an example. Say I ...
7
votes
2answers
3k views
Is it already the right time to say goodbye to TLS1.1 support on web servers? [closed]
Reading different articles, mentioning this one, for the sake of this question on old TLS topic.
Quoting part of the article:
30 June 2018 is the deadline for disabling SSL/early TLS and ...
3
votes
1answer
418 views
Penetration Testing & TCP/IP Interview Question [closed]
I recently read that as a penetration tester you should be able to explain the TCP/IP protocol in depth, however these writers never say how in depth is good? Rewriting the protocols by hand type of ...
2
votes
2answers
95 views
TLS Extentions: Omitting TLS Handshake Messages
I've been reading though various RFCs and couldn't find a definite answer to my question: can a negotiated TLS extension skip some of the TLS Handshake messages and still be compliant with the TLS ...
-1
votes
1answer
41 views
How to connect to external address as other outgoing port number without proxy [closed]
Is it possible to (mask / define) outgoing port locally on network without using a proxy?
default (outgoing protocol)
[address] [port]
set to (outgoing protocol)
[address] [selected port]
There ...
1
vote
1answer
121 views
File transfer secure from a network security perspective
Let's assume a simple network with a (Windows) server and a (Windows) workstation. Turns out the question of how to securely transfer files between the two isn't obvious considering:
I define secure ...
4
votes
1answer
246 views
How can I see whether the e-mails I exchanged with someone have been encrypted?
In my understanding (please correct if applicable),
The e-mails sent through a secure server are encrypted in the route between me as client and the mail server, whether this is a local or remote ...
2
votes
0answers
145 views
How do adversary models and security types relate [closed]
Reading some questions in this forum I encountered this answer mentioning IND-CPA as a requirement for ciphers. It got me thinking about this paper I recently read, where a formal model of the Honest-...
5
votes
1answer
296 views
Minimum set of TLS features for an embedded device
I am reviewing the security of an embedded system, specifically how it uses the TLS or DTLS protocol to communicate securely. The system implements as few features of the protocol as it can get away ...
2
votes
0answers
81 views
Why don't cell towers authenticate with cell phones? [duplicate]
Stingrays exploit a significant security vulnerability of cell phones: phones attempt to identify themselves to, and even worse, continue to use fake towers. Why not have towers authenticate ...
0
votes
1answer
36 views
Process of finding device hostnames on LAN
Is there a reliable way to retrieve hostnames from LAN devices without having to install extra software or performing nmap-style OS fingerprinting?
I'm ideally looking for either a protocol that has ...
0
votes
2answers
536 views
What should I know to prevent relay attack on NFC?
I am doing thesis on "NFC relay attack" in my BSc last year. I have studied 10-15 papers and learned the basics of NFC and relay attack. Still I am no where near to understand how relay attack is ...
4
votes
1answer
684 views
What to do if you still have SMBv1 running on your network?
I was looking into the network traffic at our company while preforming a security audit and I found that we still have a server running SMBv1 on the network.
The server is a Windows 2003 Domain ...
