Unanswered Questions
10
votes
1answer
242 views
What attacks, if any, are possible against Security Support Provider Interface (SSPI)?
I've been looking at SSPI recently, as it is used for authentication in a variety of Microsoft products. From the looks of it, it's based on GSSAPI and provides an abstraction for wrapping various ...
9
votes
0answers
438 views
Getting exploit reliability when using the off by one framepointer overwrite on linux
We have a program that is vulnerable to a one byte framepointer overwrite. The stack is marked executable, the Linux machine has aslr disabled, stack cookies are disabled, and it's a little endian ...
8
votes
1answer
372 views
Return-oriented programming: how to find a stack pivot
I have a program with a heap overflow. It contains some code that is not randomized (is not using ASLR). I want to do a return-oriented programming exploit. Since this is a heap overflow, the first ...
7
votes
1answer
641 views
TextSecure protocol
Is anyone aware of an analysis of the TextSecure protocol?
https://whispersystems.org/blog/simplifying-otr-deniability/
https://github.com/WhisperSystems/TextSecure/wiki/Protocol
It is a ...
5
votes
1answer
132 views
What datastructure would/have you used to store ACLs within a hybrid ACL/RBAC system?
In our system, every resource has an access control list (ACLs), which list entries (ACEs) that have a specific kind of access to that resource. The ACE can be for end-entities (eg: users like "Mr Q") ...
5
votes
2answers
186 views
What are the security implications of linking a domain account with a personal Microsoft account in Windows 8?
Besides being able to mess up settings and having access to the personal SkyDrive account, what else might an attacker on the corporate network be able to do when the accounts are linked and settings ...
5
votes
0answers
617 views
Designing single-sign-on with JSONP/CORS?
I like the way that OAuth/OpenID can authenticate/identify a user from another domain, but only if the other domain allows it (presumably on the user's instructions).
I would like to do something ...
5
votes
0answers
341 views
Webapp2 security
I am coding a REST web application that runs on Google App Engine, it authenticates API requests to privileged data using sessions by cookies provided by webapp2_extras.auth and ...
4
votes
0answers
430 views
What Ubuntu packages are still affected by gnutls bug CVE-2014-0092?
Right now the internet is abuzz with news about a severe breach in GnuTLS.
An update to the relevant GnuTLS packages has already been released. But I am worried whether some packages might have had ...
4
votes
0answers
53 views
PHP: if charset mismatches (htmlentities UTF-8) viewed by client as ISO-8859-1 (or vice versa)
Short Question:
Question: Could any security vulnerabilities arise if a server runs htmlentities as UTF-8 but the client views the results as ISO-8859-1?
Assumption: No vulnerabilities exist when ...
4
votes
0answers
769 views
Free/Libre software to handle TCG OPAL 2.0-compliant Self-Encrypting Drives (SEDs)?
I'm in search of a free/libre software that is able to handle OPAL (2.0)-compliant SEDs (i.e. manage the setting of Pre-Boot Authentification (PBA) environment, encryption keys...).
It could be a ...
4
votes
0answers
284 views
Is there a list of phone numbers Facebook uses to send auth tokens?
Up to a few days ago, I always received Facebook auth tokens from numbers +181338477XX, except a few times from +85294985XXX.
Problem is that lately I've been receiving codes directly from Italian ...
4
votes
1answer
236 views
What SSD maker has implemented Secure Erase to spec?
I have a Kingston hyperx drive circa 2012. I kicked off a secure erase on it. I then remounted the drive and was horrified (well, not really more like bemused) to see my whole parts of my old file ...
3
votes
0answers
87 views
Is 'Forge' Javascript crypto library secure?
I need a client-side crypto library. I've seen https://github.com/digitalbazaar/forge linked many times on stackexchange. Forge seems to be the most complete and well-documented crypto library for JS. ...
3
votes
3answers
238 views
Is Chrome in Windows 8 Metro Mode more secure?
With Windows 8 and 8.1 Microsoft brings the Metro Apps, which are more secure, according to Wikipedia they are sandboxes. So I would be interested to know is it safer to run Chrome in a Metro Mode or ...
