I hope I understand the claims concept in general now after reading related articles on ADFS, certificates used for claims token signing etc. But here is what strange for me:
Claims are so abstract that in general form are basically usel…
In my home I have a router protected with WPA2-PSK (WPA2 Personal), using the passphrase.
When I try to log in to a page over the Internet (this page does not use HTTPS to log me in), all my data is sent in clear text (since I can see the…
Security is a critical component in all our products at Microsoft. An emphasis on strong security starts at the beginning of all our work, including threat modelling as part of the design process and the consideration of Apple’s own security recommenda…
When port scanning my iPhone I get an RST, ACK from ‘Spytechphone’ over port 8192, does anyone know what this port does? I can’t find any useful information.
[1] http://www.iana.org/assignments/service-names-port-numbers/service-names-po…
When I created an evil twin AP with an SSID of someone else’s Wi-Fi network e.g. MyWifiNet, I could see two APs on my phone/laptop with the SSID MyWiFiNet, however the legitimate one was secured with WPA2 and the evil one was unsecured.
C…
I am using the DPAPI C# ProtectedData class to encrypt some information stored in the database. I am using it both with and without the optionalEntropy. Encrypting the same data multiple times, the first 80 characters (~60 bytes, I belie…
I am building a single-page(React-Redux on FE, Rails-API BE) application which makes a bunch of REST API calls to get certain information for logged-in users. Some subset of that information (categorization database) is more confidential t…
Most WAFs when blocking XSS will block obvious tags like script and iframe, but they don’t block img.
Theoretically, you can img src=’OFFSITE URL’, but what’s the worse that can happen? I know you can steal IPs with it, but is that it?
…
After I logout from my Outlook account, I get high frequency of “signing out error” reports, with the following message:
Hmm… we’re having trouble signing you out. You may still be signed in to some applications. Close your browser t…
A HaLVM unikernel is a Haskell program compiled with a modified version of the Glasgow Haskell Compiler to produce a standalone Xen kernel, which will boot on any Xen PV machine instance. A HaLVM unikernel thus replaces the operating syste…
