A client recently received an email that was spoofed in a way that I’d never seen before. The following are the anonymised, relevant details from the email’s headers:
authentication-results: spf=none (sender IP is 74.208.4.197) smtp.mail…
I need to use a USB analyzer. I’ve been looking at a couple of different options. This one came up. As far as I can tell, it’s not open source, but seems to be quite popular. Seeing that the data transfer is very sensitive, I want to make …
I currently found something interesting when browsing my iPhone app’s cache.db file.
There is a table called cfurl_cache_receiver_data and there is a column called receiver_data. This contains all the HTTP Request response that my app rec…
In my topology I have a secured area where all the servers are. There is also a DMZ with a few reverse proxy servers. I now need to make one of the servers in the secure area open to make HTTP calls to the Internet (to a specific IP addres…
What are the possible causes of a changed ssh fingerprint?
Some context: during a penetration test, something happened which I don’t remember happening before. When connecting to the VPS I used to verify the vulnerability, my ssh client co…
I read often that you should not share a PGP private key. I understand that and it makes sense. If someone has my private key (and manages to obtain the password for it), I can be impersonated.
But are there usecases where sharing a priva…
My system disk is full encrypted with luks. My Ubuntu logs in automatically, because I am the only user. But I still need to unlock my Gnome Keyring and I wonder, if there is any sense for that. Because I always unlock the keyring when I l…
Last week, the CERT/CC published an advisory describing some unexpected behavior they observed when enabling system-wide mandatory Address Space Layout Randomization (ASLR) using Windows Defender Exploit Guard (WDEG) and EMET on Windows 8 and above. In…
I have two network segments (call them A @ 192.168.1.x and B @ 192.168.2.x) plugged into two separate NICs (NIC-A and NIC-B).
The OS on the physical machine is standard stock Ubuntu, with nothing configured to do any bridging on routing….
A security risk with ordinary flash drives is that they have re-writable (flashble) firmware, which basically lets a hacker replace the operating system of the USB drive with their own.
Are there any USB drives that are guaranteed to be r…
