ewanm89
  • Member for 10 years, 7 months
  • Last seen more than a month ago
How to detect "forged" SSL certificates from the webserver end
13 votes

The only way I can see is to open a XMLHTTPRequest over SSL and pull the certificate out of that connection: MDN: How to check the security state of an XMLHTTPRequest over SSL (archive) This doesn'...

View answer
What are the advantages of EV Certificate?
13 votes

They are supposed to convey extra trust to the user that the certificate authority has done their job properly. The primary purpose of extended validation certificates however, is really just to ...

View answer
Manually adding 's' to 'http'
10 votes

You are negotiating ssl/tls, else you would get connection refused ("Oops! Google Chrome could not connect to ...") or connection timed out error ("This webpage is not available Google Chrome could ...

View answer
Is authentication using personal pictures more secure than passwords?
8 votes

Cleopatra is saying an embedded photo in a certificate does not prove the certificate came from the person pictured. This is a whole different use of a picture for authentication purposes. As to the ...

View answer
Attacking an office printer?
8 votes

Often printers maintain logs of printed documents, sometimes containing copies of the documents themselves being able to be downloaded remotely. Even if the documents themselves aren't sensitive ...

View answer
Why is using salt more secure?
8 votes

If your hashes are unsalted I can generate a whole dictionaries worth of hashes and store them in a database (special kind called a rainbow table, it's more efficient for large numbers of hashes) , ...

View answer
Calculating password entropy?
7 votes

From a purely combinatorial mathematical point of view 0123456789 is no more less weak than any other 10 character string. Such equations that you are referring to are based in combinatorial math. ...

View answer
Are inactive vulnerable Wordpress plugins still unsafe?
Accepted answer
6 votes

Depends on the plugin, they can be if there is say a PHP script that can be called directly (doesn't depend on wordpress code or includes the right statements to load the wordpress libraries it needs)....

View answer
HTTPS Everywhere vs. NoScript
Accepted answer
6 votes

HTTPS Everywhere uses an EFF produced whitelist of sites and rules to use and can have rules like redirecting wikipedia.org to secure.wikipedia.org. NoScript has only a user defined whitelist of ...

View answer
Ping Blocking: How to do? How to break?
6 votes

Ping uses Internet Control Message Protocol, this also is used for other errors and stuff like preventing a packet ending up in an infinite loop around a group of routers. By blocking ICMP Echo ...

View answer
How does KeePass master key derivation increase security?
Accepted answer
5 votes

The key derivation is entirely to take the users password and turn it into a 256bit long key to use whatever it's length and hopefully in a secure way. If running a pure brute-force, yes one could ...

View answer
How safe is the 256-bit encryption used in bank transactions?
5 votes

It's the AES/RC4 symmetric keys that are 256bits long. Asymmetric cryptography like RSA is very slow and needs very big keys based around products of very large primes as a such it is only used for ...

View answer
How can we trust PKI, for example, Verisign?
4 votes

1) Certificate authorities are just one method of creating PKI. Pre distributed certificates by a side channel and Web of trust are others. Your question should be, "How can we trust certificate ...

View answer
Does WPA PSK/Personal break PMK?
4 votes

The PMK is used the same after generation, however they are generated very differently. With WPA-PSK the PMK is generated from the PSK, fundamentally if one knows the PSK one can access the network. ...

View answer
Is DKIM needed for emails encrypted with OpenPGP?
4 votes

DKIM only really proves it's from the domain it says it is from. OpenPGP digital signatures can prove from a particular email address anyway (as long as the trust of the public key is valid and the ...

View answer
How does Team Viewer establish a Remote Desktop Connection?
4 votes

Teamviewer run proxy servers, both sides connect to the server and then the server relays from one to the other (though it can do direct connections if possible and it can also do UDP NAT holepunching)...

View answer
Why are security-crucial software written in unsafe languages?
3 votes

Actually in some cases, one has to use such languages to be secure as higher level languages don't provide enough hardware access. For example wiping encryption keys from memory after they are ...

View answer
In SSL/TLS, how is the authenticity of a server's certificate verified?
3 votes

The article is about an extension called TACK, which works more like SSH than a traditional CA system. With a traditional CA system the CA signs (with the CA's private key) the certificate which ...

View answer
Eavesdropping in VoIP. Any other software besides Ethereal?
3 votes

Ethereal was renamed Wireshark back in 2006 due to trademark issues. Ethereal/Wireshark is just a packet capture tool with a GUI front end, there are many packet capture tools available. As to ...

View answer
Should Stack Exchange be more obscure in its systems' structure?
3 votes

I would say is maybe hiding exact version numbers from the response strings, but: Only when you are sure the protocol implementation is stable and correct (you do not want some software using version ...

View answer
What are the security issues relating to macro enabled MS office documents?
3 votes

There have been several macro viruses in the past where they install macros on any document one opens, though it's been a while since I've seen this attack in use. This kind of malware even rates it's ...

View answer
Interesting article on a vulnerability found in Tor
3 votes

Tor acts as a SOCKS 5 proxy and SOCKS 5 proxies can only proxy TCP data. Now DNS has similar issues so tor has a built in TCP encapsulation for DNS data, however such encapsulation is protocol ...

View answer
How can one guarantee that a Diffie-Hellman initial key exchange is not stored?
Accepted answer
2 votes

The analogy of the sending of the box is not quite accurate in any public/private key algorithm. It is only as good as it is something that would work in the physical world. With that out of the way, ...

View answer
Difference between "Unknown" and "Hidden" Caller ID
Accepted answer
2 votes

Unknown: there is actually no caller id data given. Probably totally stripped by the sender, but can happen in other ways like between networks that have no conversion between the Caller ID standard ...

View answer
Safe to connect a USB to Linux?
2 votes

The only safe thing to do with unknown USB devices is not plug it in, but if you must then plug it into an air gapped freshly installed computer and wipe it again afterwards.

View answer
Can I scratch off the magnetic strip off a debit card to only allow chip and PIN?
2 votes

Erasing or damaging the magnetic strip well stop it being read, this may prevent the card working in some ATMs and such. As pointed out card not present, contacted (this one is lethal) and using an ...

View answer
Explain real world symmetric key encryption
2 votes

1) Yes, --symmetric does derive a 128bit key from the password and a salt prepended to the encrypted output. It uses a function called Password Based Key Derivation Function 2 (PBKDF2) to do this. ...

View answer
Block cipher Implementation in C++
2 votes

For the keys, they should be as random as you can get them, so either use a true random number generator (unlikely) or a cryptographically secure pseudo-random number generator. The plain text can be ...

View answer
cracking MD5 with salt using JTR
Accepted answer
2 votes

Yes, it's just a base64 encode of the salt. Yes, all UNIX/UNIX-based systems have some standardisation of their user databases and functions. FreeBSD was the first variant to use MD5 and encode is in ...

View answer
What pros and cons are there to a one-time random salt between client and server?
2 votes

In such uses it's a nonce, not a SALT, and what you are describing is a form of challenge response protocol. See CRAM-MD5 for a standardized protocol similar to what you are suggesting (it's about one ...

View answer