We are developing an iOS application and server where a user will be able to store some personal information and top up money.
I have been reading about the OAuth Authorization flow using PKCE and seems to be the right thing to do. Still f…
Git commit signatures seems the signature signs the commit message, but I can’t find much information on what the signatures actually solve, and don’t understand the git architecture.
If I have a repository which began unsigned but moved…
I am doing a security course and a module on client side attacks, which is why this post might seem evil or outdated.
I have a Java applet fetching a malicious jar file and trying to then download and execute a malicious binary on a Windo…
What does this URL do that opens each time Google Chrome loads?
http://redirector.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOWVmQUFXS041NV9ZVXlJVWwxbGc5TUM4dw/7519.422.0.3_pkedcjkdefgpdelpbcmbmeomcjbeemfm.crx
Yo…
In a previous post we described some of the differences between on-premises/physical forensics and cyber investigations and those performed in the cloud, and how this can make cloud forensics challenging. That blog post described a method of creating a…
In comparison to keyloggers, mouse recorders do not seem to be able to obtain much sensitive information. For example, passwords, credit card numbers, email addresses, names, passport numbers, etc. can be obtained using keyloggers. But wha…
In many dictatorships SIM card cloning is used by the police (working together with the telco) to spy on dissidents, journalists etc. Some people say that you need the authentication key on the SIM card to clone it so that physic…
Traditional computer forensics and cyber investigations are as relevant in the cloud as they are in on-premise environments, but the methods in which to access and perform such investigations differ. This post will describe some of the challenges of br…
Do modern (versions of) operating systems, primarily Android and iOS on mobile, still send targeted or directed probe requests when searching for Wi-Fi networks to connect to?
Such targeted or directed probe requests contain the SSIDs of …
Let’s assume we are talking about top 10 most used web browsers: Usage share of web browsers
https://www.cgisecurity.com/questions/httptrace.shtml
‘TRACE’ is a HTTP request method used for debugging which echo’s back
input back …
