Let’s say I buy a computer and use the internet for services but rarely download anything and when I do it is from legitimate sources with a minimal to non-existent chance of malware.
What benefits can an antivirus program provide me oth…
I have been using RSA SecureID ® Keys for quite some time now (perhaps 10 years), for things such as securely my home banking account online or accessing my company’s network of computers from home. These keys generate a 6-digit numeric to…
I have been using RSA SecureID ® Keys for quite some time now (perhaps 10 years), for things such as securely my home banking account online or accessing my company’s network of computers from home. These keys generate a 6-digit numeric to…
With the recent (and not so recent) news about fake cell towers popping up in different part of the world, I was wondering how these are detected (from a technical point of view).
I’m not really looking for information about how an end us…
From what I understand, mobile phone-based two-factor authenticators like Google Authenticator implement TOTP which uses a shared secret key between the phone and the authenticating server.
Why did they decide to use a single shared secret…
Is it possible to provide a subjectAltName-Extension to the openssl req module directly on the command line?
I know it’s possible via a openssl.cnf file, but that’s not really elegant for batch-creation of CSRs.
We’ve just implemented a proxy that decrypts all SSL traffic in order to classify and scan it. Naturally a lot of our users feel concerned. We’re a small company (100 users) owned by a big company (5000 users). What we hear internally is t…
I know how to do this with RSA keys (see this article: Determine if private key belongs to certificate?) however I do not know how to do this for ECDSA certificate / key pairs.
With RSA keys, the modulus can be used for this. However I’m …
It appears that the textbook version of Diffie-Hellman is susceptible to man in the middle attack and the use of digital signatures could prevent this attack from occurring.
Digital signatures could be implemented during the Diffie-Hellma…
Today Microsoft released update MS14-068 to address CVE-2014-6324, a Windows Kerberos implementation elevation of privilege vulnerability that is being exploited in-the-wild in limited, targeted attacks. The goal of this blog post is to provide additio…
