v6ak
  • Member for 7 years
  • Last seen more than a month ago
What should a secure passphrase look like?
3 votes

The concern is perfectly valid for short passwords like a PIN for a payment card. If you generate a random four digit PIN, you have a 0.01% chance of generating “1234”, a 0.05% chance of generating “...

View answer
Do software do an integrity check before executing?
Accepted answer
3 votes

Performing such an integrity check is not a proper security measure. It might be some DRM-like obscurity that makes it harder to bypass licensing or some protection for accidental damage of executable ...

View answer
Can a ransomware "destroy" git remote repositories?
3 votes

Unless server prevents it, you can use git push --force to overwrite the chasnges.

View answer
How to reduce the risk of sudo vim -Z (sudo rvim)
Accepted answer
3 votes

Instead of running the vim in privileged mode and then mitigating vulnerabilities arised from it, what about just using correct file permissions? If plain UNIX permissions are not enough, you might ...

View answer
Use RSA key to encrypt/decrypt personal document
2 votes

It depends on your use case. From cryptanalysis point of view, symmetric is theoretically better as long as you have a really strong passphrase, because: GPG encryption with RSA just encrypts the ...

View answer
How do I create an invisible and persistent user on linux?
2 votes

It much depends on your victim. A simple and potentially efficient idea: If you have a non-root access (and you assume you won't lose it), you might try to copy some executable (e.g., /bin/bash) and ...

View answer
Why did TLS 1.3 drop AES-CBC?
2 votes

I believe that AES-CBC is still good, provided that you use it properly. Because TLS uses mac-then-encrypt, it is a dangerous field that allows multiple vulnerabilities. Current TLS implementations ...

View answer
Do Linux desktop environments add security risks?
1 votes

The key question is what untrusted inputs they process and how different the processing is. Window managers do process icons and titles. Most of the time, they are trusted (they come from apps ...

View answer
Bypass SSL Certificate Pinning using SSL Vulnerablilities
1 votes

Certificate pinning or public key pinning are rather some protections against malicious/compromised CAs. It can hardly defeat any attack that does not rely on this. So, attacks like LogJam, DROWN, ...

View answer
Can people know the server I'm connecting to despite being on SSH/HTTPS?
1 votes

Sure, they can. A proper encryption is supposed only to hide the content, but is not expected to hide: parties involved in the communication size of data exchanged timing of packets (anything else) ...

View answer
can wpa2 wifi be hacked by capturing data on an evil twin?
1 votes

The passphrase is used for mutual authentication. That is, clients authenticates to AP and AP authenticates to client. Doing a MITM should be possible only when the attacker knows the password. ...

View answer
Heads firmware and OS is more secure than Whonix, Qubes or Tails?
0 votes

I use QubesOS and Whonix, know Tails and have briefly read https://github.com/osresearch/heads . It sounds that many of those things are orthogonal. Heads is a boot environment that should be usable ...

View answer
Is SpiderOak truly “zero-knowledge”?
0 votes

Well, they can encrypt the new password by the old password or by some key exchanged between the machines prior the password change. This is the way they could do that. However, I don't have the ...

View answer
How secure is using Saving Session Feature on WinSCP?
-1 votes

I am not aware of any WinSCP specific. Generally, usage of public/private keypairs is encouraged over usage of passwords. Reasons are often similar to encouraging password managers over remembering ...

View answer
Is there a risk connecting to POP3 or SMTP email server without secure connection?
-1 votes

It depends on your threat model and type of connection. If you are just cable-connected and don't use Wi-Fi on that computer, you might be relatively OK. Well, I know nothing about securing the ...

View answer