I can’t believe it happened to me but I entered Gmail account’s user-name and password into a website as part of a phishing scam. I use Gmail’s 2-step verification and have changed my password. Is my Gmail account safe?
I got an email f…
In the recent release of iOS 8.4, Apple fixed several vulnerabilities
including vulnerabilities that allow attackers to deploy two new kinds
of Masque Attack (CVE-2015-3722/3725, and CVE-2015-3725). We call
these exploits Manifest Masque and Exte…
In the recent release of iOS 8.4, Apple fixed several vulnerabilities
including vulnerabilities that allow attackers to deploy two new kinds
of Masque Attack (CVE-2015-3722/3725, and CVE-2015-3725). We call
these exploits Manifest Masque and Exte…
I’m currently with a web hosting account whose servers seem to be constantly down due to DDOS attacks. I check my analytics daily and I’m seeing a major surge in fake traffic for several of my URLs totaling around 60 visits a day per site….
I am preparing for a technical interview for an AppSec pen-testing position. For those of you that have had AppSec positions, what sharp-shooter questions do you think I can expect? What questions would you ask a candidate if you were do…
Here’s the scenario…
I have a git repository on a server that may have been compromised. My development team say that they can trust the files in the directory that houses the git repository because all commits (diffs) and new files be…
In the last several releases of Windows, we’ve been working hard to make the platform much more powerful for administrators, developers, and power users alike. PowerShell is an incredibly useful and powerful language for managing Windows domains. Unfor…
A lot of people recommend using Ed25519 instead of RSA keys for SSH.
The introduction page of Ed25519 (http://ed25519.cr.yp.to/) says:
[..] breaking it has similar difficulty to breaking [..] RSA with ~3000-bit keys [..]
So speaking only…
