So I was trying to download an arcade game, everything seemed legit and I guess I was too excited to play it I started running it – only after clicking it I decided to run a scan on both Avira and Malwarebytes. As it was running Malwarebyt…
Due to a security scan, I was told to not use TLS1.0. I found a link that gave me commands to use to check if a specific protocol is used/enabled. The command I ran (with output is)
(Output from TLS1.0 disabled)
$ openssl s_client -conne…
I recently had a discussion with a Docker expert about the security of Docker vs. virtual machines. When I told that I’ve read from different sources that it’s easier for code running within a Docker container to escape from it than for a …
During development we added to error logs details of http requests, including headers, to have better understanding for error investigation. Our architect pointed that we should not place sensitive information in logs. My question was shou…
Is it possible to inject a payload inside <a> tag such that the script runs without user interaction?
The injection is inside the href attribute. I can inject onmouseover or onclick attributes, but user interaction is required.
Th…
In my modsecurity auditlog there is a binary file logged as text:
How can I prevent modsecurity from bloating my logfiles with the content of binary files like that?
Recently, I saw some strange entries on my local-only webserver. The thing is I don’t know if the attack came from outside the network or from an infected machine. I have read up a little on the hnap attack, but I’m still unsure what to do…
Is there a watermarking scheme for images and audio that is:
Invisible – should be imperceptible for a human.
Non-invertable – cannot be removed by any means without the original.
Robust – in order to destroy the watermark you have to sp…
From reproducible-builds.org:
Reproducible builds are a set of software development practices that create a verifiable path from human readable source code to the binary code used by computers.
In general, it means that given the sam…
I’ve noticed that many services that offer 2 factor authentication have jumped from using four digits to six. However, it seems counterproductive to me because the digits are random, the digits (should) expire, and with six digits, you may…
