Regarding the krack patch - It is often (but not always) enough to properly patch the WiFi client. You need to also patch the router if it works as a WiFi client too (e.g., a repeater) or has fast roaming (802.11r) enabled. The essential part of the attacks is that the client accepts message 3 of the 4-way handshake…
Answered Apr 6, 2022 · 717 Views Read answer →
LDAP vs Kerberos Where possible use Kerberos authentication above all else. It was built for providing authentication/authorization and is the most secure option. The whole premise is to exchange credentials in an environment that isn't trusted. LDAP can be easily misconfigured to send credentials in clear text over…
Answered Apr 6, 2022 · 758 Views Read answer →
RSA vs DSA vs ECDSA What are these files for? These are your host keys uniquely identifying your host. When OpenSSH is started for the first time, it will generate these keypairs. When an SSH client connects to your server, it will advertise that it wants to authenticate the host using a particular algorithm. As…
Answered Apr 5, 2022 · 1.3K Views Read answer →
If you want to decrypt SD card after factory reset, I hope you didn't format your SD card yet. I did the same thing with my S7 edge but managed to fix the problem. Headphone jack stopped working so Samsung support recommended a factory reset to rule out software problems. After backing up with the smart switch program…
Answered Apr 5, 2022 · 759 Views Read answer →
Your question - what can someone do with my IMEI number, this is basic FUD. WhatsApp works over TCP and doesn't have anything to do with the phone network. You could run WhatsApp over Ethernet from your home network. WhatsApp only requires you to confirm the ownership of a phone number by entering a code they text you…
Answered Apr 5, 2022 · 3.0K Views Read answer →
The answer to the question - Can a PDF contain a virus is - Yes it can. Whether a file is malicious or not, does not depend on the file extension (in this case PDF). It depends on the vulnerabilities in the software which will be parsing it. So for example, the PDF reader that you are using potentially contains a…
Answered Apr 5, 2022 · 820 Views Read answer →
Regarding the port 80 blocking - In short: USUALLY, keep it open and use it to redirect everything to HTTPS. Now onto the complicated stuff: taking away port 80 can stop cookie-thieves that passively look for straggle http://corp.com/some/forgotten/thing requests. The TCP connection does not succeed, the browser does…
Answered Apr 4, 2022 · 863 Views Read answer →
According to a site I came across, TTP security refers to the Tactics, Techniques and Procedures of cyber threats. Edit: Traditional security measures like firewalls, IDS, endpoint protection, and SIEMs are only part of the network security puzzle. Cyber Threat Hunting refers to proactively and iteratively searching…
Answered Apr 1, 2022 · 1.1K Views Read answer →
Looks like your router vendor decided to use a domain name (domain.name) which was never intended for this and which is controlled by a third party. There are reserved names for this kind of purpose (like domain.local would be fine) but they did not use it. Since the local domain name is automatically added to any…
Answered Mar 31, 2022 · 984 Views Read answer →
A common solution for 1password share password is key encapsulation. All the shared passwords are encrypted with one randomly-generated key. Then the password manager creates a copy of that key for every user and encrypts each copy with a key derived from that user's password. When a user wants to access the shared…
Answered Mar 30, 2022 · 870 Views Read answer →
No, pinging a site is very different from visiting a site A ping request is an ICMP packet which just by default sends null data to check if the host is up (You can change around the parameters being sent (read more here).) When you visit a website in the browser you are using the HTTP protocol which requests data and…
Answered Mar 30, 2022 · 810 Views Read answer →
No, you cannot interchangeably deploy HIPS vs NIPS. They attack different subsets of the same problem. Most simply N* is limited to network inputs, whereas H* has access to a far richer set of inputs (files! processes! network listeners!) to be judgmental about (and has less network visibility, so usually doesn't have…
Answered Mar 30, 2022 · 1.2K Views Read answer →
Learners asking and answering questions on the same topics — follow their questions and join in.
Cyber Security learner
158Questions 179AnswersCyber Security learner
127Questions 158AnswersCyber Security learner
113Questions 142AnswersCyber Security learner
107Questions 141AnswersSQL Server learner
71Questions 92AnswersSQL Server learner
63Questions 81AnswersGuides, tips and career advice on Cyber Security from JanBask experts.
Cyber Security Is Cybersecurity a Good Career? Pay, Roles, Outlook & How to Start
Is cybersecurity a good career for beginners and for the future? See pay, demand, the reality check, which role fits you, and how…
Cyber Security Is SOC Analyst a Good Career? Salary, Growth, Pros & Cons
Is SOC analyst a good career or just a stressful entry job? See real salary data, growth paths, pros and cons, AI impact, and how…
Cyber Security Is GRC Analyst a Good Career? Salary, Growth, Pros & Cons
Is GRC a good career path? See salary context, growth options, pros and cons, AI's impact, and whether GRC is worth it for you,…
Cyber Security The Ultimate Guide to SOC Analyst Certifications: Entry-Level to Senior
Not sure which SOC analyst certification to take first? Compare Security+, CySA+, SC-200, and hands-on certs with costs, study…
Free tutorials and interview questions from industry experts — learn the skill, then get ready to prove it.
Step-by-step Cyber Security guides from industry experts
Common Cyber Security interview questions, answered
