I’ve heard many suggestions as to what makes a good password (hard to guess, not a dictionary word or permutation thereof, at least a certain length, etc.) so that it cannot be cracked in a realistic amount of time. However, from what I un…
What does PIN encrypted under LMK mean? From what I understand the Local Master Key is only there to encrypt other keys. I was reading some code and I saw function names like encryptClearToLmk or decryptLmkToClear.
Does the expression hav…
Today, we’re releasing the Enhanced Mitigation Experience Toolkit (EMET) 5.2, which includes increased security protections to improve your security posture. You can download EMET 5.2 from microsoft.com/emet or directly from here.
Following is the list…
How can I get the name of a Key Container that’s in a smart card required for initialization of CspParameters?
CspParameters^ cspa = gcnew CspParameters(ProviderType, ProviderName, keyContainerName, cryptoSecurityKey, securityString);
RS…
In November of last year, we uncovered a major flaw in iOS we dubbed
“Masque
Attack” that allowed for malicious apps to replace existing,
legitimate ones on an iOS device via SMS, email, or web browsing. In
total, we have notified Apple of fi…
In November of last year, we uncovered a major flaw in iOS we dubbed
“Masque
Attack” that allowed for malicious apps to replace existing,
legitimate ones on an iOS device via SMS, email, or web browsing. In
total, we have notified Apple of fi…
Now I assume that everyone knows of aircrack-ng and John The Ripper with it’s fantastic ability to pause and resume cracking.
With that aside, I want to add Crunch into the mix, however I can’t seem to add crunch to it.
The plan as goes:
…
Is there a way to implement SAML-based authentication to an IdP where the client keeps the session information? The idea is that a load-balanced server farm for the SP would be able to remain completely state-less and not have to build a s…
Today we are releasing MS15-011 & MS15-014 which harden group policy and address network access vulnerabilities that can be used to achieve remote code execution (RCE) in domain networks. The MS15-014 update addresses an issue in Group Policy updat…
I am getting confused with RSA, Diffie-Hellman Key Exchange, PKI and X.509v3.
RSA’s mathematics algorithm seems like an encryption algorithm, right? Generating public key and private key, using for encryption and decryption…
Diffie-Hellm…
