2

Wedge attack was applicable on DDA cards (Dynamic Data Authentication) which were being superseded by CDA cards (Combined Data Authentication) at the time when vulnerability was disclosed. The researchers behind the vulnerability proposed a solution to fix DDA cards in his write-up: Defending against wedge attacks in Chip & PIN but there's no track ...


2

There is no single source of randomness on a device and there is no single way to create randomness, i.e. it is specific to the OS and maybe the OS version and maybe the OS configuration and maybe even the specific application. See for example TPM to feed random number generator for how to add (not replace) the TPM random generator as a source for randomness ...


2

Answering the question stated in the body, not on the title, you could run the wrapper under firejail, or even better, as a snap. Properly done, the application would run with no access to your filesystem, without needing a full VM / container (such as provided by QubeOS). (note when using snaps, you should still care about updates inside the snap) Jitsi ...


1

You should not trust any extension on files in general, special if your services offers functionality for upload files. If you service offers a service for upload files my recommendation is to use a anti-virus to scan the file. This make cost you money in terms of having the AV license, or you can go to open source solutions. Also you can build your own ...


1

The existing answers do a great job in explaining the best practices from a defensive side. I would like to answer this from testing perspective. A file upload issue can be exploited if the following two conditions are met: The application accepts the file The application exposes the file (e.g. storing it in the web root) which allows the attacker to access ...


1

As Steffen Ullrich said, it's not sufficient to consider a single application alone, but I'll write my answer assuming the user/application receiving the file trusts these uploads (which is bad if the file comes directly from an untrusted user). On Windows, (I don't use Windows right now) the identification of file type, and thus what program(s) to read/run ...


1

It is unclear what the expectations on the application are in this case and thus your question can not be answered. For example if the recipient expects data from untrusted sources anyway, it can be expected that the PDF is checked at the recipient. If the recipient instead expects fully trustable data, then more checks need to be done on the way to the ...


1

The NFC relay attack is still unresolved. Most of the attacks discovered against contactless payments work on top of the relay attack. The identified security issues result from flawed implementation of the standard. Others stem from failure of the issuer and the terminal to validate EMV transactions which is highly flexible in terms of card authentication ...


Only top voted, non community-wiki answers of a minimum length are eligible