You should check the reputation of the site or the comments of the file. As someone told you in comments, unless someone is using a day 0 attack or an unpatched vulnerability you will be safe. You can't do anything more before you download the torrent. If you wanna check if there is a torrent scam after the download,…
Cyber Security
Answered Feb 9, 2022
·
681 Views
Read answer →
If you are wondering how to unlock bios, you should try entering random strings in the password field for some couple of times until a password key is displayed. Take this key code and: Go to https://bios-pw.org/ Key in the key code that you have in the input field and click on Get password button A list of generated…
Cyber Security
Answered Feb 8, 2022
·
476 Views
Read answer →
The SHA-2 family of hashes was designed to be fast. BCrypt was designed to be slow. From PBKDF2 vs Bcrypt, both are considered robust. With enough rounds or work-factor, either one can take longer than the other, but I would lean towards the one that was designed to be slow. (if server load is an issue, the Work…
Cyber Security
Answered Feb 8, 2022
·
964 Views
Read answer →
PPTP v1 was broken a long time ago based on a questionable MS design... (https://www.schneier.com/academic/pptp/faq/) However, Microsoft did publish fixes to address the biggest problems; also long ago: The weaker LAN Manager hash is no longer sent along with the stronger Windows NT hash. This is to prevent automatic…
Cyber Security
Answered Feb 8, 2022
·
1.2K Views
Read answer →
You've almost answered your own question(s). First off, it's important to note that password complexity typically only comes into play for offline attacks. As your entropy report showed, a password like test123 that can be easily cracked offline would take much longer as an online attack. As for your bank only…
Cyber Security
Answered Feb 8, 2022
·
471 Views
Read answer →
For RFID door locks, I think that the proper way to analyse it is to think about money, and more specifically insurance. You put the kind of lock that will please your insurance company; with a custom lock, chances are that your insurance company will ask for more money every month -- or refuse to give you money if…
Cyber Security
Answered Feb 7, 2022
·
484 Views
Read answer →
The note on whitelisting the img src data protocol which is referenced says data: Allows data: URIs to be used as a content source. This is insecure; an attacker can also inject arbitrary data: URIs. Use this sparingly and definitely not for scripts. This is not in a part specific to the risks of data URIs in images,…
Cyber Security
Answered Feb 7, 2022
·
3.3K Views
Read answer →
The answer to your question - can prepaid phones be traced by police is that given the exact circumstances you provide, and assuming he doesn't slip up, it's low-profile enough that it's unlikely they could trace him via network activity.However, if the phone is obtained by LE and there is some evidence the phone…
Cyber Security
Answered Feb 7, 2022
·
1.2K Views
Read answer →
No. It's not just the length of the output. In MD5 vs SHA1, there are significant differences in their level of security against cryptanalytic attacks. There are devastating collision attacks on MD5. (The Wikipedia article on MD5 has some details.) These attacks mean that MD5 provides essentially no security against…
Cyber Security
Answered Feb 3, 2022
·
848 Views
Read answer →
Port 5060 is normally assigned to SIP traffic. It might or might not be used for SIP however. A simple nmap scan to this destination should probably reveal much more, for example here's an output from a OS fingerprint nmap scan to a voip adapter nmap -v -O ... Host is up (0.0026s latency). Not shown: 999 closed ports…
Cyber Security
Answered Feb 3, 2022
·
524 Views
Read answer →
In my experience the question of open source vs source available is so broad and the prejudices so deeply ingrained that you may be wasting your time trying to argue the case on either side. Closed source projects/organisations do not readily give up their code for analysis by an independent party - and even though…
Cyber Security
Answered Feb 2, 2022
·
423 Views
Read answer →
The answer to your question of Can MP3 files have viruses is that just like PDFs, websites, and other complex formats which need to be parsed, there could be parsing bugs. At best, such bugs trigger a warning or crash the program, and at worst (but not uncommonly) they are able to run code on your machine. Because it…
Cyber Security
Answered Feb 2, 2022
·
890 Views
Read answer →