Anil Mer

POP3S vs POP3 - What's the difference?

The only difference between POP3S and POP3 is that with old-style, it is implied that you will start SSL negotiation immediately upon connection. With STARTTLS, you go through the same process, but only after issuing/receiving a STARTTLS command. The protocols are designed to throw away any information discovered or…

Cyber Security

Answered Apr 6, 2022 · 2.4K Views Read answer →

Explain the WPA2CCMP attack.

To be precise, the "new WPA2CCMP attack" is an optimization of brute-force, by using a slightly faster way to check whether a key is correct or not, mainly through the knowledge of the first few bytes of plaintext. This offers a speed increase of 50% -- in other words, attacks which took 6 days can now be done in 4…

Cyber Security

Answered Mar 29, 2022 · 1.1K Views Read answer →

How does software keygen work?

One of them was discussed in stackoverflow: Assuming you don't want to do a special build for each user, then: Generate yourself a secret key for the product Take the user's nameConcatenate the user's name and the secret key and hash with (for example) SHA1 Unpack the SHA1 hash as an alphanumeric string. This is the…

Cyber Security

Answered Mar 29, 2022 · 2.7K Views Read answer →

What was the first 1.0.1 version of openssl that was not vulnerable to heartbleed?

The answer to What was the first 1.0.1 version of openssl that was not vulnerable to heartbleed is - They backported the patch. Check your package version like so:dpkg -l openssl From 1.0.1e-2+deb7u5, the security patch has been included.: openssl (1.0.1e-2+deb7u5) wheezy-security; urgency=high Non-maintainer upload…

Cyber Security

Answered Mar 28, 2022 · 2.3K Views Read answer →

Is avast bank mode safe?

As you asked - Is avast bank mode safe, You must understand that it's only a way of marketing their products. Every computer can be hacked one way or another. The best way to stay safe is by logging in using a live cd (kali linux or anything else).

Cyber Security

Answered Mar 24, 2022 · 540 Views Read answer →

I read somewhere that to put the file name with NULL Bytes in serialised sentences, what does it mean?

Null bytes refer to a byte with the value zero, i.e. 0x00 in hex. There have been security vulnerabilities related to null bytes. These occur because C uses null bytes as a string terminator. Other languages (Java, PHP, etc.) don't have a string terminator; they store the length of every string separately. Now,…

Cyber Security

Answered Mar 21, 2022 · 613 Views Read answer →

What is a gpg subkey?

Subkeys Subkey packets are defined in RFC 4880, OpenPGP, 5.5 Key Material Packet. They're only distinguished by another packet ID, and require a binding signature to be actually useful (see below). A Public-Subkey packet (tag 14) has exactly the same format as a Public-Key packet, but denotes a subkey. Subkey Usag…

Cyber Security

Answered Mar 16, 2022 · 607 Views Read answer →

I want to know what someone can do with your wifi password, if they get access to it?

The answer to what can someone do with your wifi password is that they can't see anything on your screen (unless you've enabled some sort of unencrypted remote desktop screen sharing program). They can, however, observe all the data being sent to and from your computer (I'm assuming for WPA/WPA2 they observed the…

Cyber Security

Answered Mar 14, 2022 · 767 Views Read answer →

Can a sim card be tracked without phone?

The answer to - Can a sim card be tracked without phone is that any SIM/Computer which is not in any network cannot be traced. SIM card are slave computing device which requires an entity to send a command to which it shall respond to. To talk to SIM, SIM is needed to be powered. A typical GSM mobile SIM doesn't…

Cyber Security

Answered Mar 9, 2022 · 959 Views Read answer →

Is enablelinkedconnections a safe option?

I found an answer about enablelinkedconnections option from Jon Schwartz, UAC Architect, which provided the following details: Mapped drives get interesting in combination with the "split-token" account, because of a weird dichotomy in the system (in large part historical) -- the drive letters are per-user, but the…

Cyber Security

Answered Mar 3, 2022 · 616 Views Read answer →

Is ffmpeg safe as part of a web service?

The answer to - Is ffmpeg safe is that - there are security risks, especially if you allow arbitrary formats. FFmpeg supports a huge variety of formats, both popular and obscure, for video, audio, and images. Any vulnerability in decoders for any of the numerous formats could be exploited to gain arbitrary code…

Cyber Security

Answered Mar 2, 2022 · 2.5K Views Read answer →

Veracrypt vs Truecrypt - which is better?

From Veracrypt vs Truecrypt Use VeraCrypt. As of September 26th 2015, google's security researchers found a couple of vulnerabilities that affect TrueCrypt 7.1a and VeraCrypt 1.14 they are CVE-2015-7358 and CVE-2015-7359On September 26th, 2015 VeraCrypt released 1.15 which fixes those vulnerabilities. On October 17th,…

Cyber Security

Answered Feb 28, 2022 · 911 Views Read answer →