Symmetric crypto with forward secrecy using two yubikeys
http://ift.tt/2zpgOH4
Submitted November 26, 2017 at 07:49PM by mricon
via reddit http://ift.tt/2iT5Inv
http://ift.tt/2zpgOH4
Submitted November 26, 2017 at 07:49PM by mricon
via reddit http://ift.tt/2iT5Inv
paranoidbeavers.ca
Spy stuff: symmetric crypto with forward secrecy
Spy stuff: symmetric crypto with forward secrecy written November 25, 2017 in crypto,security,privacy,quantum
Thank you Imgur! Now this is how you handle a breach
http://ift.tt/2BaMe4s
Submitted November 26, 2017 at 08:52PM by freewarefreak
via reddit http://ift.tt/2hSCuEv
http://ift.tt/2BaMe4s
Submitted November 26, 2017 at 08:52PM by freewarefreak
via reddit http://ift.tt/2hSCuEv
The Washington Times
Imgur, popular meme site, confirms security breach affecting 1.7 milli
Email addresses and passwords pertaining to more than a million accounts on Imgur, one of the world's most popular websites, were compromised as the result of a 2014 data breach that went unnoticed un
An Introduction to Writing .NET Executables for Pentesters
http://ift.tt/2n6tf96
Submitted November 26, 2017 at 11:41PM by peewpw
via reddit http://ift.tt/2A7W8qz
http://ift.tt/2n6tf96
Submitted November 26, 2017 at 11:41PM by peewpw
via reddit http://ift.tt/2A7W8qz
Peew.pw
An Introduction to Writing .NET Executables for Pentesters
Background There are occasions during a red team engagement where you'll want to use executable file to accomplish something. We recently had the opportunity to perform a watering hole attack using a website we compromised. We embedded JavaScript into the…
OSCP Preparation – Stalking my Penetration testing Passion (My first blog post!)
http://ift.tt/2BenxEw
Submitted November 27, 2017 at 12:22AM by BaraSec
via reddit http://ift.tt/2A99piX
http://ift.tt/2BenxEw
Submitted November 27, 2017 at 12:22AM by BaraSec
via reddit http://ift.tt/2A99piX
BaraSec
OSCP Preparation – Stalking my Penetration testing Passion
To be honest, I am lost. Information security, is a huge, huge, enormously huge, world. And every time I learn a thing, I discover that there is other 1 million things than I already knew is there,…
How to hack a turned off computer, or running unsigned code in intel management engine
http://ift.tt/2w7gxqE
Submitted November 27, 2017 at 01:59AM by robertcw93
via reddit http://ift.tt/2hTQgqi
http://ift.tt/2w7gxqE
Submitted November 27, 2017 at 01:59AM by robertcw93
via reddit http://ift.tt/2hTQgqi
Blackhat
Black Hat Europe 2017
ROPEmporium: Pivot 32-bit CTF Walkthrough With Radare2
http://ift.tt/2n5FrqB
Submitted November 27, 2017 at 02:27AM by janne808
via reddit http://ift.tt/2hSivWr
http://ift.tt/2n5FrqB
Submitted November 27, 2017 at 02:27AM by janne808
via reddit http://ift.tt/2hSivWr
www.radiofreerobotron.net
ROPEmporium: Pivot 32-bit CTF Walkthrough With Radare2 - Zero State Machine
ROPEmporium Pivot 32-bit CTF walkthrough
Why Linus is right (as usual)
http://ift.tt/2AW81wX
Submitted November 27, 2017 at 02:55AM by speckz
via reddit http://ift.tt/2zrrWn0
http://ift.tt/2AW81wX
Submitted November 27, 2017 at 02:55AM by speckz
via reddit http://ift.tt/2zrrWn0
Erratasec
Why Linus is right (as usual)
People are debating this email from Linus Torvalds (maintainer of the Linux kernel). It has strong language, like: Some security people ...
FBI failed to warn officials about Russian email hackers
http://ift.tt/2zG8SFK
Submitted November 27, 2017 at 06:33AM by imr2017
via reddit http://ift.tt/2naVaFd
http://ift.tt/2zG8SFK
Submitted November 27, 2017 at 06:33AM by imr2017
via reddit http://ift.tt/2naVaFd
Engadget
FBI failed to warn officials about Russian email hackers
The FBI didn't warn officials that Russia was trying to infiltrate their email accounts, even though it knew for at least a year.
Phone number changing on its own?
Hi r/security,So my phone number changed on its own recently. I got in touch with my service provider, and they said I was the one who changed it (it's an fully online service provider so most of the stuff is done on their website). They "looked into it" with their backend people and still concluded that I was the one who changed it, which doesn't make sense because it had the wrong area code. Should I be worried?
Submitted November 27, 2017 at 10:52AM by SourPomegranate
via reddit http://ift.tt/2nb0AQy
Hi r/security,So my phone number changed on its own recently. I got in touch with my service provider, and they said I was the one who changed it (it's an fully online service provider so most of the stuff is done on their website). They "looked into it" with their backend people and still concluded that I was the one who changed it, which doesn't make sense because it had the wrong area code. Should I be worried?
Submitted November 27, 2017 at 10:52AM by SourPomegranate
via reddit http://ift.tt/2nb0AQy
reddit
Phone number changing on its own? • r/security
Hi r/security, So my phone number changed on its own recently. I got in touch with my service provider, and they said I was the one who changed...
First Aid Training - Jovin Security Training
http://ift.tt/2nb0Cb8
Submitted November 27, 2017 at 10:38AM by JovinSecurity
via reddit http://ift.tt/2zHi7FS
http://ift.tt/2nb0Cb8
Submitted November 27, 2017 at 10:38AM by JovinSecurity
via reddit http://ift.tt/2zHi7FS
Jovin S T Ltd
First Aid Training | FAW Courses - First Aid At Work Course
Jovin Security provides HSE first aid training courses which cover safe best practice, awareness, vital signs, incident management, Minor Injuries, etc...
Image removal vulnerability in Facebook polling feature
http://ift.tt/2joM1Ul
Submitted November 27, 2017 at 03:14PM by imr2017
via reddit http://ift.tt/2AAtpvo
http://ift.tt/2joM1Ul
Submitted November 27, 2017 at 03:14PM by imr2017
via reddit http://ift.tt/2AAtpvo
Dynamic World
Image removal vulnerability in Facebook polling feature
Latest Cyber Security News Articles - Cyware
http://ift.tt/2ABR3rF
Submitted November 27, 2017 at 03:22PM by cywarelabs
via reddit http://ift.tt/2Aade7v
http://ift.tt/2ABR3rF
Submitted November 27, 2017 at 03:22PM by cywarelabs
via reddit http://ift.tt/2Aade7v
Cyware
Cyber Security News Today | Articles on Cyber Security, Malware Attack updates | Cyware
Check out top news and articles about cyber security, malware attack updates and more on Cyware.com. We provide machine learning based curation engine brings you the top and relevant cyber security content. Read More!
J.A.W.S. - Windows Host Enumeration Script
http://ift.tt/2Bg2NMv
Submitted November 27, 2017 at 07:43PM by 411Hall
via reddit http://ift.tt/2iVDsR8
http://ift.tt/2Bg2NMv
Submitted November 27, 2017 at 07:43PM by 411Hall
via reddit http://ift.tt/2iVDsR8
Ellingson Mineral
J.A.W.S. Windows Enumeration Script
While doing my OSCP a few months ago I found I was having to perform the same post enumeration actions on every single Windows host I compromised. I had tried a few of the existing enumeration noscripts available for Windows during my lab time and found them…
Linux Expl0rer: open source easy-to-use live forensics toolbox for Linux endpoints
http://ift.tt/2AfXaOY
Submitted November 27, 2017 at 08:08PM by omri9741
via reddit http://ift.tt/2zH4OVz
http://ift.tt/2AfXaOY
Submitted November 27, 2017 at 08:08PM by omri9741
via reddit http://ift.tt/2zH4OVz
GitHub
intezer/linux-explorer
linux-explorer - Easy-to-use live forensics toolbox for Linux endpoints
Exim Zero Day Exploit DoS
http://ift.tt/2hQ7MM7
Submitted November 27, 2017 at 08:04PM by RuckelBob
via reddit http://ift.tt/2n51mhC
http://ift.tt/2hQ7MM7
Submitted November 27, 2017 at 08:04PM by RuckelBob
via reddit http://ift.tt/2n51mhC
Security In 5: Episode 119 - Uber Was Hacked And Covered It Up For A Year, Scary
http://ift.tt/2BrGPqC
Submitted November 27, 2017 at 07:33PM by BinaryBlog
via reddit http://ift.tt/2zvIcU5
http://ift.tt/2BrGPqC
Submitted November 27, 2017 at 07:33PM by BinaryBlog
via reddit http://ift.tt/2zvIcU5
Libsyn
Security In Five Podcast: Episode 119 - Uber Was Hacked And Covered It Up For A Year, Scary
Uber was the recent hack that was made public. 57 million records of riders and drivers. The data stolen for the riders was name and email, no passwords, payment info or locations. The drivers had more sensitive data stolen that included their driver's license…
How to Build a Secure Enclave on AWS
http://ift.tt/2n9C3ev
Submitted November 27, 2017 at 09:17PM by SecurityTrust
via reddit http://ift.tt/2zK4PIk
http://ift.tt/2n9C3ev
Submitted November 27, 2017 at 09:17PM by SecurityTrust
via reddit http://ift.tt/2zK4PIk
Vidder
How to Build a Secure Enclave on AWS
Vidder’s PrecisionAccess solution can unlock the agility and cost benefits of public clouds for organizations that must operate in secure facilities.
systemd Vulnerability Leads to Denial of Service on Linux (CVE-2017-15908)
http://ift.tt/2BhxWQK
Submitted November 27, 2017 at 09:14PM by EvanConover
via reddit http://ift.tt/2hVu674
http://ift.tt/2BhxWQK
Submitted November 27, 2017 at 09:14PM by EvanConover
via reddit http://ift.tt/2hVu674
Trendmicro
systemd Vulnerability Leads to Denial of Service on Linux - TrendLabs Security Intelligence Blog
Many Linux distributions are at risk due to a recently disclosed flaw in systemd: a flaw in its DNS resolver could cause a denial-of-service attack on vulnerable systems. The vulnerability is exploited by having the vulnerable system send a DNS query to a…
Two-factor authentication flowsheets
I'm looking for flowsheets for implementing two-factor authentication in a web application, including registration, login, forgotten password, and lost authentication device.I can probably work these out for myself, but with all things crypto, I'm hesitant to develop my own algorithms because I risk missing something vital and leaving a security hole that an attacker can exploit.Any recommendations of blogs or books that cover this?
Submitted November 27, 2017 at 09:29PM by grkuntzmd
via reddit http://ift.tt/2iVVkLZ
I'm looking for flowsheets for implementing two-factor authentication in a web application, including registration, login, forgotten password, and lost authentication device.I can probably work these out for myself, but with all things crypto, I'm hesitant to develop my own algorithms because I risk missing something vital and leaving a security hole that an attacker can exploit.Any recommendations of blogs or books that cover this?
Submitted November 27, 2017 at 09:29PM by grkuntzmd
via reddit http://ift.tt/2iVVkLZ
reddit
Two-factor authentication flowsheets • r/security
I'm looking for flowsheets for implementing two-factor authentication in a web application, including registration, login, forgotten password, and...
Imgur confirms email addresses, passwords stolen in 2014 hack
http://ift.tt/2A6P1z0
Submitted November 27, 2017 at 11:51PM by volci
via reddit http://ift.tt/2zsBcqX
http://ift.tt/2A6P1z0
Submitted November 27, 2017 at 11:51PM by volci
via reddit http://ift.tt/2zsBcqX
ZDNet
Imgur confirms email addresses, passwords stolen in 2014 hack
The hackers stole email addresses and passwords.
The future of cyberwar: Weaponised ransomware, IoT attacks and a new arms race
http://ift.tt/2z4GI76
Submitted November 27, 2017 at 11:43PM by SecurityTrust
via reddit http://ift.tt/2zsnEvv
http://ift.tt/2z4GI76
Submitted November 27, 2017 at 11:43PM by SecurityTrust
via reddit http://ift.tt/2zsnEvv
TechRepublic
The future of cyberwar: Weaponised ransomware, IoT attacks and a new arms race
Now that cyberwarfare is out of the shadows, here's a taste of what is coming next.