Unless the site now has access controls on the encrypted URLs (requiring that you first authenticate - prove your identity - and then that the server checks whether your identity is authorised to view that URL), no, it is not safe. Obvious problems include people sharing links through a site like this (without…
Cyber Security
Answered Feb 9, 2022
·
534 Views
Read answer →
There is some widespread confusion about NAT, so to answer your question of why is NAT not needed in IPV6 - NAT has never been meant to be used as a security feature. However, it so happens that in most cases (not all), when a machine has access to the Internet through NAT only, then the machine is somehow…
Cyber Security
Answered Feb 9, 2022
·
1.1K Views
Read answer →
Using [Jason, :, 502, :, aad3c435b514a4eeaad3b935b51304fe, :, c46b9e588fa0d112de6f59fd6d58eae3, :, :, as the example Jason is the user name 502 is the relative identifier (500 is an administrator, 502 here is a kerberos account.) (adsecurity.org/?p=483) aad3c435b514a4eeaad3b935b51304f is the LM hash…
Cyber Security
Answered Feb 9, 2022
·
678 Views
Read answer →
Zeus Trojan steals $1 million from U.K. bank accounts. Harmless? But wait, there's more. This was just a single instance. The Zeus trojan wiki security captures your keystrokes and implements 'form grabbing' (taking the contents of a form before submission and uploading them to the attacker) in an effort to steal…
Cyber Security
Answered Feb 8, 2022
·
654 Views
Read answer →
It's a small thing, and the safety of the solution is not compromised, but bear in mind that http://howsecureismypassword net/ contains 5 different cookie sharing websites (as reported by Collusion), so the tracker networks have recorded that fact that you have been there. Less security minded users may then fall for…
Cyber Security
Answered Feb 8, 2022
·
1.2K Views
Read answer →
The answer to your question - My car registration was stolen, should I be worried is that - Reach out to the DMV and your insurer. Your state's DMV will have a process on how to replace stolen registration documents. The risk of not reporting them as stolen is that the thief may try to impersonate you with respect to…
Cyber Security
Answered Feb 8, 2022
·
917 Views
Read answer →
Use the known, trusted algorithm over one that you've made yourself.** I can't speak for the entropy, but of course it will take more time if you have a sufficiently large number of iterations. It's just a matter of finding that number. That being said, I personally would not use your SHA256-based code. As has been…
Cyber Security
Answered Feb 8, 2022
·
629 Views
Read answer →
While @ThorTL67 points out some completely valid solutions, I don't feel comfortable with any of them, and they seem kinda irresponsible to me. This is because any malicious JS within the SVG XSS is still sent to the viewer. This means that if they happen to save the SVG file and then view it, any malicious JavaScript…
Cyber Security
Answered Feb 8, 2022
·
949 Views
Read answer →
You can fix this. You can stop the popups, if you don't like them. It's Open Source! As you can see the source of the addon here . There are a couple of lines on the top in the bootstrap.js file. firstRunURL:'http://barisderin.com/?p=2262', updateURL:'http://barisderin.com/?p=2264', Simply change them to ,…
Cyber Security
Answered Feb 7, 2022
·
521 Views
Read answer →
A simple Google search for digital footprint active passive has lead me to this article, which explains the difference: Active data traces is what a user leaves intentionally. Facebook, Twitter, blog posts, social network connections, image and video uploads all are among the ways individual’s create active digital…
Cyber Security
Answered Feb 7, 2022
·
530 Views
Read answer →
To decrypt hash password with salt, you should know that hash functions are designed to go only one way. If you have a password, you can easily turn it into a hash, but if you have the hash, the only way to get the original password back is by brute force, trying all possible passwords to find one that would generate…
Cyber Security
Answered Feb 7, 2022
·
900 Views
Read answer →
If you want to SSH into router, first ip a to find your local ip (The one under one of the UP interfaces), starting with 192.168.. Run a nmap scan like: nmap -sP 192.168.2.1/24 to find all hosts on the network (considering your local ip is starting with 192.168.2.). Once you find the router IP, then do nmap -sV -T4 -O…
Cyber Security
Answered Feb 3, 2022
·
557 Views
Read answer →