Ask a Question
Ask Question Login
Corporate Training
  1. Community
  2. Andrea Bailey

Andrea Bailey

Community Learner
Share
203Questions
201Answers
410.7KViews on questions

LM vs NTLM - What's the difference?

LM vs NTLM There's a pretty good Microsoft KB article on this exact subject. Basically, LM is used for compatibility with older clients. Specifically, Windows 98 and below. If you do not have any older clients on the network, then the cause for both hashes is most likely due to the password length being and not…

Cyber Security

Answered Mar 21, 2022 · 7.5K Views Read answer →

Is haveibeenpwned legit?

Is haveibeenpwned legit can be answered as - The argument haveibeenpwned also has a service that lets you look up to see if a given password has been leaked before. I could see this service being even more "questionable". After all, who wants to go around stuffing their password on a random website? You could even…

Cyber Security

Answered Mar 17, 2022 · 1.6K Views Read answer →

Is it possible to securely store passwords using reversible encryption?

Reversible encryption is not commonly used for passwords because the specific requirements and parameters of password authentication are incompatible with the weakness of reversible encryption. The primary weakness of reversible encryption is simple: if the key is compromised, the encrypted data is compromised,…

Cyber Security

Answered Mar 17, 2022 · 977 Views Read answer →

Explain the concept of channelbinding.

TLS Channelbinding is targeted to prevent MitM exposure of both Secret (password) and Data. SASL-SCRAM itself works in a way that it allows authentication without passing the password - password is used as shared secret to perform cryptographic operations on shared non-secret (nonce). That prevents MitM exposure of…

Business Analyst

Answered Mar 16, 2022 · 1.1K Views Read answer →

Why does our network firewall drop the netbios ns packets?

It is dropping the netbios ns packets to prevent NBNS-Spoofing. Anybody can answer NBNS requests and the requesting host will accept any answer. This enables MitM attacks. You're right that DNS provides the same service more securely and unless you have some legacy systems in your network, it should be safe to disable…

Cyber Security

Answered Mar 16, 2022 · 955 Views Read answer →

What is secureserver net? Why did it access my gmail account?

Godaddy-hosted email (if you choose to host your email through godaddy) is hosted under the "secureserver net" domain. In fact, the addresses you configure into your mail client are pop.secureserver.net, imap.secureserver.net, smtp.secureserver.net, etc. If you configured your Godaddy webmail (for perhaps some other…

Cyber Security

Answered Mar 16, 2022 · 3.1K Views Read answer →

What is a WiFi certificate? How can I use it?

Increasingly, wifi access points (or the portals which serve as "sign in" pages for visitors and guests) feature support for SSL certificates. These certificates are designed to serve a dual purpose: 1) Validation: They provide cryptographically-backed assurance to the visitor that the device they're connecting to…

Cyber Security

Answered Mar 16, 2022 · 1.1K Views Read answer →

Can https file transfer be used instead of secure file transfer?

HTTPS and SFTP when used properly are equally safe. The underlying encryption algorithms in practice are both functionally equivalent -- neither can be broken in practice by directly attacking the cryptographic protocols. However, in practice with non-tech savvy users, HTTPS is slightly weaker in my opinion.There are…

Cyber Security

Answered Mar 15, 2022 · 1.0K Views Read answer →

Is there a 7 zip password cracker available?

For 7 zip password crackers - If it's a 4 character password, you can do it. If it's 13, good luck. Rarcrack, under the GPLv2 licence, is one of the few cracking packages that has a mode for 7z files at this time. A tip from MyDigitalLife.info shows that if you start rarcrack once, then stop it, you can edit the abc…

Cyber Security

Answered Mar 15, 2022 · 1.2K Views Read answer →

OCSP vs CRL - How are these two different?

OCSP vs CRL The certificate revocation list (CRL) is a list of revoked certificates. It does not contain the certificate itself but mainly the serial number. It is signed directly or indirectly by the CA which issued these certificates. The CRL can be very big because it can contain lots of revocations. To check if a…

Cyber Security

Answered Mar 15, 2022 · 897 Views Read answer →

Is there any alternate method for nmap UDP scan?

First of all you can use the -T5 parameter on nmap UDP scan, which is the fastest rate possible. By default, nmap uses -T4. Still you won't get as quick results as you would with masscan. According to the creator's github: This is an Internet-scale port scanner. It can scan the entire Internet in under 6 minutes,…

Cyber Security

Answered Mar 14, 2022 · 956 Views Read answer →

More members from the Cyber Security community

Learners asking and answering questions on the same topics — follow their questions and join in.

Latest Cyber Security Blogs

Guides, tips and career advice on Cyber Security from JanBask experts.

Learn & Explore

Free tutorials and interview questions from industry experts — learn the skill, then get ready to prove it.