Andrew Jenkins

What's the value of a certificate fingerprint?

The certificate fingerprint, as displayed in the Fingerprints section when looking at a certificate with Firefox or the thumbprint in IE is the hash of the entire certificate in DER form.If your certificate is in PEM format, convert it to DER with OpenSSL: openssl x509 -in cert.crt -outform DER -out cert.cer Then,…

Cyber Security

Answered Feb 27, 2022 · 16 Views Read answer →

After the security scan, I got to know that the server leaks inodes via Etags. What should I do?

First of all, this is a false positive. Nikto reports this issue "Server leaks inodes via ETags" if there is a dash in the ETag header, which is by itself not an indication of anything. An inode is a data structure used by the Linux file system. Every file and directory has an inode which stores its name, size and…

Cyber Security

Answered Feb 25, 2022 · 3.2K Views Read answer →

What is torrent encryption?

The "torrent encryption" hides the content of the torrent data traffic from a casual observer and makes it harder to determine that the traffic is in fact torrent data traffic. It was designed to make it harder for ISPs to snoop on torrent traffic (and either block it, throttle it or send nastygrams). It can also be…

Cyber Security

Answered Feb 24, 2022 · 1.3K Views Read answer →

What should I do in the case of a selenium element not visible?

Selenium element not visible exceptions can be resolved by using Explicit wait. Explicit wait in selenium will wait until the element is visible. Once it's visible you can perform the necessary operation. Syntax for Explicit wait WebDriverWait wait = new WebDriverWait(driver,30); WebElement e =…

QA Testing

Answered Feb 9, 2022 · 1.2K Views Read answer →

Is using the firefox master password more secure?

Firefox Master password and encrypting them on your computer further than what the OS already offers shows this is nothing more than a security theatre. Although it is convenient, it still leads to risky practices, and even worse makes it easier to forget your passwords. The Actual Impact on Security A great quote…

Cyber Security

Answered Feb 8, 2022 · 1.4K Views Read answer →

I want to know how to get someone's IP from skype?

Your question- how to get someone's IP from skype can be answered as - I have Skype running on a computer, and I can see that the Skype client is periodically exchanging packets with my contacts on Skype. So it is possible to figure out the IP address of your contacts simply by looking at network traffic on your own…

Cyber Security

Answered Feb 8, 2022 · 1.3K Views Read answer →

What file under the /etc folder contains the hashed passwords for a local system?

The answer to the question - What file under the /etc folder contains the hashed passwords for a local system is that Passwords in unix were originally stored in /etc/passwd (which is world-readable), but then moved to /etc/shadow (and backed up in /etc/shadow-) which can only be read by root (or members of the shadow…

Cyber Security

Answered Feb 8, 2022 · 1.1K Views Read answer →

Can we determine if an email is encrypted during transport using the header information via ESMTPS?

Yes, but only if you believe the MTA that inserted that header and every MTA that touched the message subsequently. Any of those MTAs could write that information into the header even if it isn't true. No, here's a counterexample: Received: from XXX (XXXX [IPv6:XXX]) by XXX (XXversionXX) with ESMTP id XXXX…

Cyber Security

Answered Feb 8, 2022 · 1.3K Views Read answer →

Is DuckDuckGo legit or should I choose other providers?

There is no proof that DuckDuckGo operates as advertised. (There never is, on the web.) However, that is the wrong question. DuckDuckGo is very clear in its privacy policy. DuckDuckGo says it doesn't track you, it doesn't send your searches to other sites, by default it does not use any cookies, it does not collect…

Cyber Security

Answered Feb 7, 2022 · 1.1K Views Read answer →

Are there any testing books through which I can learn software testing?

Here you have a full list: https://github.com/ligurio/free-software-testing-books There's a huge list of free testing books on the topic of software testing. And now we have not only lists with books in English and Russian, but also courses and podcasts.

Cyber Security

Answered Feb 3, 2022 · 1.0K Views Read answer →

What's the audacity of Accountchek.com?

Anyone who has been requested to use the service should pay special attention to the privacy policy and terms of service(TOS) for AccountChek's parent company FormFree Holdings Corporation https://www.formfree.com/privacy-policy/The information provided by the lender includes the borrower’s name, e-mail address,…

Cyber Security

Answered Feb 3, 2022 · 1.2K Views Read answer →

Can I directly echo the PHP user agent?

You are correct that you do not need to worry about PHP user agent code being injected. The echo command just echoes stuff - it does not execute it. The JS is more problematic, though. Your code may be vulnerable to XSS. The client controls the user agent, and the attacker controls the client. You are giving an…

Cyber Security

Answered Feb 2, 2022 · 1.2K Views Read answer →