Hot answers tagged

8

If I have the MAC address and S/N of a Lenovo 3000 Laptop, is there some way for me to find exact street location of this laptop ? No, there is not. You can get somewhat along the way if you pre-provision the system with software intended to "phone home" (the IP address will point to the ISP, and the ISP can determine which account was using that IP address ...


5

Short answer: because RFC 3280, its predecessor, says so. Longer answer: because historically ASN.1 encoders/decoders have had problems with properly encoding and decoding integers. X.509 uses DER encoded ASN.1, which amongst other things, means that the data must be encoded in its minimal (shortest) form. As integers are stored in a variable length twos-...


3

Realistically? They can (possibly) DoS the OOB management link, and possibly the whole OOB management system, and that's probably about it. However, you have the exact same issue for any console connection to a compromised system. This assumes you're just using the serial link as a serial console (so no SLIP, PPP, or X.25 over it, all of which would ...


3

How does my browser know this? Firefox seems to cache information about certificates which got used, at least until you restart the browser. If you've added an exception because you are using your own (maybe untrusted) CA then it might even have the information in the CA store. What security risk would be entailed if my browser just ignored the ...


2

The serial number of the certificate is not related to the serial numbers of the issuer or the subject - if these have serial numbers at all.


2

If you want to prevent low hanging fruit attacks, AES-CBC with a static key stored in the EEPROM of each device is fine. I would avoid AES-CTR simply because it's too easy to perform malleability attacks. I checked asymmetric key it's more secure but I don't have hardware support for that. Anyone can guide me in selecting the encryption? Asymmetric ...


2

ASN.1 defines the serialNumber OID of 2.5.4.5 to be a PrintableString. It is not defined as a numeric attribute, therefore any printable characters are permitted, and no sign is required or even interpreted. http://www.itu.int/ITU-T/formal-language/itu-t/x/x520/2012/SelectedAttributeTypes.html serialNumber ATTRIBUTE ::= { WITH SYNTAX ...


2

In X509 the fields making a certificate unique is the combination of issuer and serial number. Only the serial number is not guaranteed to be unique since two CAs may use the same serial. This is the reason both are typically needed for revocation. In practice, if you only have one CA, the serial will be enough of course. But it's not generic. There should ...


1

Having the Serial Number will is really your best set of information you have here. The Serial Number would allow police to Identify the hardware in the event that it is found. The MAC Address is less useful. MAC Address are "likely" unique but this is not guaranteed, as MAC Addresses are self reported by the Software / Hardware sending the traffic. ...


Only top voted, non community-wiki answers of a minimum length are eligible