Unanswered Questions
4,846 questions with no upvoted or accepted answers
19
votes
3answers
1k views
Fully transparent proxy
By default, mitmproxy will use its own local IP address for its server-side connections. What I want instead is mitmproxy to use the client’s IP address for server-side connections.
The following ...
12
votes
2answers
1k views
What unique fingerprinting information can an iOS 10 app collect?
As a follow-on to these questions:
What unique fingerprinting information can an iOS7 app collect?
What unique device fingerprinting information can an iOS8 app collect?
What unique device ...
12
votes
1answer
5k views
How to crack (get secret from) Android Keystore System
I am looking for the best way to protect sensitive data in Android devices, e.g. secret or private keys, and found Android Keystore System. Based on the documentation, key material may be bound to ...
11
votes
0answers
160 views
How can I verify Keybase's end-to-end encryption between me and a friend?
The premise of end-to-end encryption (E2EE) is that the client is secure and trustworthy, your end devices is secure and trustworthy, but the network and server need not be trusted. You've read all ...
11
votes
0answers
1k views
How to interpret the scrypt vs bcrypt vs pbkdf2 comparison table?
You are probably familiar with this table:
The source of the table is this here
This table is 10+ years old. Is this still valid with current technology?
Wikipedia says that since 2014 there is ...
11
votes
1answer
465 views
Pin required for accessing (smartcard) Card Authentication Slot
So let me set the stage:
I have created an Intermediate Signing Certificate by way of the Yubico walkthrough: https://developers.yubico.com/PIV/Guides/Certificate_authority.html
I made a couple ...
10
votes
0answers
1k views
Should Javascript & IFrames be used to refresh sessions when Master Cookie Domains are used?
Suppose I have 3 sites that I want to have SSO in, site1.com, site2.com, and auth.com. SSL is always required.
According to how SiteMinder cookies are described here, one of those domains would ...
9
votes
1answer
179 views
How does CVE-2020-0601 (ChainOfFools/CurveBall) work to undermine ECC?
What is the recently patched and disclosed Windows 10 OS family Crypt.dll vulnerability CVE-2020-0601, nicknamed ChainOfFools and/or Curveball? I've read up on it and while I understand the basics (...
9
votes
0answers
500 views
Has anyone had a look at DIME, the new Darkmail infrastructure, yet?
Background. In 2013, Lavabit and Silent Circle formed the Dark Mail Technical Alliance and launched the Darkmail project to create the Dark Internet Mail Environment (DIME) – a new mail architecture ...
9
votes
1answer
533 views
FB Oauth CSRF security, PHP website
I am experimenting with third party login, using Twitter and Facebook.
After getting access token from these parties, and confirming its validity, I then issue my own JWT token that's used within my ...
8
votes
1answer
298 views
XSS with escaped equal sign inside jQuery selector
Web-site uses jQuery 1.8.3 which has known XSS vulnerability in selector. (https://snyk.io/vuln/npm:jquery:20120206).
It passes filtered and urldecoded document.location.hash (val2 below) value ...
8
votes
0answers
881 views
Limited Buffer Size for shellcode on 64 bits machine
I have a code snippet which has the classic strcpy vulnerability
int main(int argc, char argv[][]){
char buffer[8];
strcpy(buffer, argv[1]);
}
By disassembling the binary file, we can see ...
8
votes
0answers
2k views
TPM PCR value unchanged with BIOS configuration changes
I have been experimenting with the TPM on a Dell R710 (BIOS version 6.3.0). My goal was to detect changes to BIOS settings through TPM PCRs. The research I have done leads me to believe that BIOS ...
8
votes
1answer
686 views
wireless security - Authentication and Association
I am trying to learn wireless security a bit more technically but resources out there on the net are so confusing. Here is my understanding.
There are two types of Authentication:
1) Open System ...
7
votes
0answers
168 views
Kerberos Attacks Questions
It's amazing how many "Attacks on Kerberos" articles exist out there and almost none really explains the small details.
My guess is that usually they assume it's basic knowledge and sometimes, they ...
