I want to write login scripts for clients websites to make them more secure. I want to know what best practices I can implement into this. There are password protected control panels in abundance, but very few seem to implement best practi…
I’m considering running a Tor (non-exit) relay on my personal Ubuntu 14.04 computer at home (which also has my personal data on it).
I wanted to know if I should have any concerns about the security of my computer, data and home network?
…
Consider an application using OpenSSL which has a bug. A packet capture of the full SSL session is available, as well as a core dump and debugging symbols for the application and libraries. A RSA private key is also available, but since a …
I was wondering if an adversary have your private gpg key but not the password/phrase, how easy/difficult would it be to crack a encrypted file compared to a encryption that only use password and not keys? (assuming that the password was t…
I’m developing a browser based on Google Chromium and keeping in mind that privacy is freedom; but I need to know how to protect my browser’s users against fingerprinting.
I was thinking about intercepting requests associated with finger…
Let’s say I buy a computer and use the internet for services but rarely download anything and when I do it is from legitimate sources with a minimal to non-existent chance of malware.
What benefits can an antivirus program provide me oth…
I have been using RSA SecureID ® Keys for quite some time now (perhaps 10 years), for things such as securely my home banking account online or accessing my company’s network of computers from home. These keys generate a 6-digit numeric to…
I have been using RSA SecureID ® Keys for quite some time now (perhaps 10 years), for things such as securely my home banking account online or accessing my company’s network of computers from home. These keys generate a 6-digit numeric to…
With the recent (and not so recent) news about fake cell towers popping up in different part of the world, I was wondering how these are detected (from a technical point of view).
I’m not really looking for information about how an end us…
From what I understand, mobile phone-based two-factor authenticators like Google Authenticator implement TOTP which uses a shared secret key between the phone and the authenticating server.
Why did they decide to use a single shared secret…
