Questions tagged [synchronization]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
140 views

How do u2f devices manage to not go out of sync?

U2F devices store an internal counter to resolve a challenge and the counter value is sent back to the server (source). I think the counters on the server and on the client must go out of sync from ...
Gamer2015's user avatar
  • 727
5 votes
0 answers
560 views

How did ntpd get patched to prevent NTP time synchronization attacks?

I recently tested the NTP Time Synchronization Attack as described and demonstrated by Jose Selvi in 2015. Basically, the attack was mostly used to send the victim's clock in the future, so the ...
programings's user avatar
0 votes
0 answers
115 views

Is quarantine threats absolutely necessary? Every time I do, all my Chrome tabs crash

I have been talking backwards and forwards with a MalwareByte support, because every time I run 'quarantine threats' all my Chrome tabs crash. This guy keeps asking me to switch Google sync off, and ...
Pépe Pepito Pepón's user avatar
3 votes
0 answers
175 views

Could an attack on time synchronization with a Galileo Satellite be used to spoof navigation messages with TESLA-based authentication?

I read about an attack on the TESLA protocol which will be used in Galileo's navigation message authentication (Full article can be found here: https://doi.org/10.1007/978-3-319-49806-5_1) Basically, ...
Dennis's user avatar
  • 31
1 vote
1 answer
2k views

Secure File Replication between LAN and DMZ

Our support staff established remote access connection from jumphosts that are isolated within a DMZ. To provide support they need project files (up to a few GB of size) which are stored on a file ...
gumlozol's user avatar
4 votes
0 answers
525 views

Is it a good idea to store TOTP tokens in a (synchronised) password safe? [duplicate]

Bitwarden (as an example) allows you to store your TOTP tokens in it. That is: you can use the mobile app to scan the QR code that (e.g.) Amazon AWS gives you, and then it'll generate TOTP codes. So ...
Roger Lipscombe's user avatar
1 vote
1 answer
219 views

Is there a way to check if Google Drive is scanning folders other than the ones I have synced?

I have a piece of software that monitors C:\Folder1. It keeps it in sync with C:\Folder2. It encrypts everything in C:\Folder2. I want to sync Folder2 to my Google Drive. But this additional ...
myaccountname's user avatar
2 votes
1 answer
278 views

Can my open Firefox Sync session be used to circumvent a Master Password?

In short I'm wondering what's stopping someone with access to my computer account to exploit an open Firefox Sync session to view my synced passwords, even if a Master Password has been set. On this ...
Andreas's user avatar
  • 121
1 vote
0 answers
109 views

Securely Synchronize Nodes [closed]

There's an application that is capable of spinning up nodes for HA. All nodes need to be synchronized with a configuration file that contains the credentials of all the admins. The current solution ...
ismisepaul's user avatar
0 votes
1 answer
330 views

What client side encryption algorithm/libraries should I use to make syncing easier?

I want to build a webapp and a sister mobile app (using react native) that uses client side encryption. The encryption would be for text entries written on a daily basis that the user could create and ...
Loktopus's user avatar
  • 165
3 votes
1 answer
644 views

Sharing the UUIDs of my Linux partitions

I currently started using a Debian 9 server for my day-to-day tests. Because most of the time the system ends destroyed in my hands, I was thinking about doing a backup of my fstab and smb.conf on a ...
Lemon's user avatar
  • 133
3 votes
0 answers
139 views

Does Apple have access to the cryptographic keys to decrypt Safari Sync Data?

I was reading over iOS's security guide, and it is unclear to me whether Apple can accessed synced Safari data. For example, if Apple received a FISA Order for all information on iCloud on all ...
user avatar
2 votes
1 answer
1k views

Question about ipsec prevent SYN flooding attack

how IPSec prevents SYN flooding attacks Like if A is sending packets to B using IPsec. Suppose B’s TCP ack gets lost, and A’s TCP retransmits the packet since it assumes the packet was lost. Will B’s ...
aaaabel's user avatar
  • 21
1 vote
1 answer
212 views

How is resynchronization performed for security keys / MFA devices?

When a MFA (time based) device security key drifts out of synchronization there is a procedure to resynchronize it. But there is no input to the device itself. Smartphone apps don't have this ...
Skaperen's user avatar
  • 315
0 votes
2 answers
3k views

How effective are timestamps as a countermeasure for Replay attacks?

I was reading the Wiki entry for Replay attacks. It mentions that timestamps can be used as a countermeasure against such attacks: Timestamping is another way of preventing a replay attack. ...
turnip's user avatar
  • 795
4 votes
1 answer
410 views

How do I use google drive local folder with auto sync while protecting myself from ransomware?

Background So I have my Google Drive 1TB account. Obviously, I'm using Drive to have a backup for all my precious files. I used to have a local Drive folder with auto sync on my PC. It was very ...
idanshmu's user avatar
  • 141
2 votes
1 answer
2k views

How to synchronize a nonce between two participants?

I am currently working with a symmetric algorithm which requires a nonce for encryption, and logically for decryption as well. However, I am a bit confused about how I would go and synchronize the ...
Sossenbinder's user avatar
1 vote
0 answers
162 views

Encrypt and backup files directly to cloud storage? (No locally saved copies) [closed]

So far I know of the following services: Tresorit (paid cloud storage service) SpiderOak (paid cloud storage service) Arq (paid software, works with a number of cloud services) ...are there any ...
user151460's user avatar
21 votes
9 answers
19k views

Keep encrypted files in sync on a cloud service, without having to upload an entire encrypted volume each time

Situation: User has several folders worth of GBs which they want to keep in sync on a cloud service (for example Mega or Dropbox) in an encrypted form; User does not want to sync a single encrypted ...
nonhocapito's user avatar
2 votes
1 answer
115 views

Is it possible to guarantee a transaction between two peers against interruption exploits?

Let's take an egregious example of this: Alice and Bob want to clone a Pokemon. They set up a trade between their console devices. Alice's device sends a copy of the data to Bob's device, then Bob's ...
Searinox's user avatar
6 votes
3 answers
162 views

Should I delete locally synced data if the user can't log in?

I'm building a Mac app that syncs the user's documents down from a third-party cloud service. When you set it up, it will sync all your documents down to the local hard disc, at which point you can ...
Kartick Vaddadi's user avatar
1 vote
1 answer
2k views

How can you spoof a TCP connection to a device that uses the same initial sequence number for each run of a TCP handshake?

So supposing the TCP implementation on a device always uses the same initial sequence number how could you as an off path attacker exploit this to spoof a connection to this device? So in order to do ...
ellefc's user avatar
  • 529
2 votes
1 answer
485 views

SYN Flood from fixed spoof IP but receive only one packet

I'm generating a network flood with a lot of packets coming from one fixed IP+port pair (in this example, 1.2.3.4:2003). Why do I only see one SYN_RECV'd packet in netstat on the victim machine?
xfr1end's user avatar
  • 121
77 votes
13 answers
29k views

Should I allow browsers to remember my passwords and synchronize them?

I wonder, how wise is it to allow Chrome and Firefox to a) remember the passwords b) synchronize them? My gut tells me that if it's not man in the middle who can intercept them, but Google and Mozilla ...
Incerteza's user avatar
  • 2,257
17 votes
3 answers
4k views

1Password for team how secure it is?

I would like to ask you opinion about how secure is the 1Passowrd for Teams. For someone who doesn't know how 1Password - Personal use - works here a summary: You create a master password (hard to ...
Greg's user avatar
  • 327
3 votes
1 answer
932 views

When using Dropbox to sync Keepass db, is it ok to open it in synced folder?

I'm going to be storing a Keepass 2 database file (.kdbx) in a local folder that's synced by Dropbox. Is it safe to use Keepass to open the database directly considering everything in the folder is ...
Celeritas's user avatar
  • 10.2k
4 votes
4 answers
6k views

Can Chrome sync be infected?

Can Chrome sync be infected by malware? I cannot imagine how, but a particular unproven example that comes in mind is to change the "preferences", so that a malicious proxy server is added. Another ...
pgmank's user avatar
  • 435