If my company is running a man in the middle appliance to decrypt TLS traffic, does that mean they're able to read end to end encrypted chats such as Signal or Allo Private Chat?
My company offers free wifi for employees, but you need to install a root cert to use it, because there is a man in the middle cert minting utility.The noscript says it all. Does this break end to end encrypted messages?
Submitted February 19, 2018 at 11:33PM by plazman30
via reddit http://ift.tt/2C8t4RC
My company offers free wifi for employees, but you need to install a root cert to use it, because there is a man in the middle cert minting utility.The noscript says it all. Does this break end to end encrypted messages?
Submitted February 19, 2018 at 11:33PM by plazman30
via reddit http://ift.tt/2C8t4RC
reddit
If my company is running a man in the middle... • r/security
My company offers free wifi for employees, but you need to install a root cert to use it, because there is a man in the middle cert minting...
Flight sim group put malware in a jet and called it DRM
http://ift.tt/2EBd2RP
Submitted February 20, 2018 at 12:04AM by DemandsBattletoads
via reddit http://ift.tt/2CxshFf
http://ift.tt/2EBd2RP
Submitted February 20, 2018 at 12:04AM by DemandsBattletoads
via reddit http://ift.tt/2CxshFf
Rock Paper Shotgun
Flight sim group put malware in a jet and called it DRM
A company who make add-ons for Microsoft Flight Simulator X packed malware in with one of their airplanes and called it "DRM"
Privacy bug in KDE desktop notifications leads to IP disclosure on Discord and other communications apps
http://ift.tt/2obnRj3
Submitted February 20, 2018 at 12:43AM by XavierNite
via reddit http://ift.tt/2oivSCh
http://ift.tt/2obnRj3
Submitted February 20, 2018 at 12:43AM by XavierNite
via reddit http://ift.tt/2oivSCh
www.xnite.me
Fun with desktop notifications
A privacy bug in KDE (and possibly others) leaves applications vulnerable to information disclosure.
Infosec Career Survey - results published at bsides austin in march
https://goo.gl/forms/H8rRMqwS52Mp1AhC2
Submitted February 20, 2018 at 01:28AM by tacticalrce
via reddit http://ift.tt/2oie36k
https://goo.gl/forms/H8rRMqwS52Mp1AhC2
Submitted February 20, 2018 at 01:28AM by tacticalrce
via reddit http://ift.tt/2oie36k
Google Docs
Technical Information Security Professional Experience Survey
We are looking for data on the types of technical skills that are used regularly in different technical infosec roles.
This survey is broken into a General section and a section with duplicate questions for each different profession.
Many of you might wear…
This survey is broken into a General section and a section with duplicate questions for each different profession.
Many of you might wear…
UK smart meters could be vulnerable to cyber attacks
http://ift.tt/2oiqzCz
Submitted February 20, 2018 at 03:23AM by Iot_Security
via reddit http://ift.tt/2FiszDe
http://ift.tt/2oiqzCz
Submitted February 20, 2018 at 03:23AM by Iot_Security
via reddit http://ift.tt/2FiszDe
Information Age
UK smart meters could be vulnerable to cyber attacks - GCHQ warns
The government's plan to install smart energy meters into UK homes, could leave households vulnerable to cyber attacks
elf-strings: a purpose built ELF binary strings reader for the reverse engineer
http://ift.tt/2sI5E1v
Submitted February 20, 2018 at 04:24AM by LloydLabs
via reddit http://ift.tt/2oiqgI5
http://ift.tt/2sI5E1v
Submitted February 20, 2018 at 04:24AM by LloydLabs
via reddit http://ift.tt/2oiqgI5
[comedy - XKCD 1957] Leaked List of Major 2018 Security Vulnerabilities
https://xkcd.com/1957/
Submitted February 20, 2018 at 05:33AM by mortycrd
via reddit http://ift.tt/2BDOjJJ
https://xkcd.com/1957/
Submitted February 20, 2018 at 05:33AM by mortycrd
via reddit http://ift.tt/2BDOjJJ
xkcd
2018 CVE List
Search your Git Org/User/Repo histories for secrets (alternative to truffleHog implemented in Go)
http://ift.tt/2E4bGyI
Submitted February 20, 2018 at 08:55AM by pr0tocol_7
via reddit http://ift.tt/2FeadD6
http://ift.tt/2E4bGyI
Submitted February 20, 2018 at 08:55AM by pr0tocol_7
via reddit http://ift.tt/2FeadD6
GitHub
GitHub - zricethezav/gitleaks: Scan git repos (or files) for secrets using regex and entropy 🔑
Scan git repos (or files) for secrets using regex and entropy 🔑 - GitHub - zricethezav/gitleaks: Scan git repos (or files) for secrets using regex and entropy 🔑
Anchor CMS publicly exposes database passwords
http://ift.tt/2oc8NSk
Submitted February 20, 2018 at 12:26PM by le-quack
via reddit http://ift.tt/2BEcXda
http://ift.tt/2oc8NSk
Submitted February 20, 2018 at 12:26PM by le-quack
via reddit http://ift.tt/2BEcXda
BleepingComputer
Anchor CMS Sites May Be Spewing Their Database Passwords
Websites built using the Anchor CMS may be accidentally exposing their database passwords in publicly-facing error logs, Dutch security researcher Tijme Gommers has discovered.
Code Injection TR
http://ift.tt/2ojxqMf
Submitted February 20, 2018 at 12:21PM by berkdusunurx
via reddit http://ift.tt/2ocvx4J
http://ift.tt/2ojxqMf
Submitted February 20, 2018 at 12:21PM by berkdusunurx
via reddit http://ift.tt/2ocvx4J
www.berkdusunur.net
Code Injection | Web For Pentester
Code Injection Nedir? Code Injection kritik seviyeli güvenlik zafiyetlerinde listenin başında gelen güvenlik zaafiyetidir. İstisma...
Hosting provider's code tutorial contains SQL Injection vulnerabilities (and they know it) (x-post /r/programming)
http://ift.tt/2b40XHa
Submitted February 20, 2018 at 11:05AM by alias23
via reddit http://ift.tt/2EF4iGp
http://ift.tt/2b40XHa
Submitted February 20, 2018 at 11:05AM by alias23
via reddit http://ift.tt/2EF4iGp
The Official Cloudways Blog
How to Create a Simple REST API With Slim Framework
Learn how you can create a simple REST API using Slim Framework in this easy step-by-step guide.
Malicious Entity Injection (MEI) to do a Laughing Man style attack on X Reality
http://ift.tt/2ocZyBB
Submitted February 20, 2018 at 01:48PM by arandomtachikoma
via reddit http://ift.tt/2onopC2
http://ift.tt/2ocZyBB
Submitted February 20, 2018 at 01:48PM by arandomtachikoma
via reddit http://ift.tt/2onopC2
Medium
Malicious Entity Injection (MEI) to do a Laughing Man style attack on X Reality
I thought what I’d do was I’d pretend I was one of those deaf mutes, or should I?
Linux ASLR and GNU Libc: Address space layout computing and defence, and “stack canary” protection bypass [PDF and Github Sources]
http://ift.tt/2ocuYb6
Submitted February 20, 2018 at 01:47PM by TechLord2
via reddit http://ift.tt/2ojg565
http://ift.tt/2ocuYb6
Submitted February 20, 2018 at 01:47PM by TechLord2
via reddit http://ift.tt/2ojg565
reddit
Linux ASLR and GNU Libc: Address space layout computing... • r/netsec
2 points and 1 comments so far on reddit
Cyberwarfare is taking to the skies, aboard drones
http://ift.tt/2scmftZ
Submitted February 20, 2018 at 01:31PM by Iot_Security
via reddit http://ift.tt/2sHkkhe
http://ift.tt/2scmftZ
Submitted February 20, 2018 at 01:31PM by Iot_Security
via reddit http://ift.tt/2sHkkhe
MIT Technology Review
Cyber warfare is taking to the skies, aboard drones
Hovering computers will make it increasingly possible to hack equipment that doesn’t connect directly to the internet.
Cyber Risk Management in the Maritime Transportation System
http://ift.tt/2G0uGKP
Submitted February 20, 2018 at 01:31PM by Iot_Security
via reddit http://ift.tt/2sHklBO
http://ift.tt/2G0uGKP
Submitted February 20, 2018 at 01:31PM by Iot_Security
via reddit http://ift.tt/2sHklBO
Homeland Security Today
Cyber Risk Management in the Maritime Transportation System
In the face of such rapid technological growth, it is this culture of risk management that will provide for a safe transition from the age of diesel to the age of the computer.
iFrame and HTML Injection
http://ift.tt/2okrti0
Submitted February 20, 2018 at 03:40PM by ivanpanchev333
via reddit http://ift.tt/2ocK3cB
http://ift.tt/2okrti0
Submitted February 20, 2018 at 03:40PM by ivanpanchev333
via reddit http://ift.tt/2ocK3cB
Secapps
bWAPP iFrame and HTML Injection
Security solutions savings..is there save with Security for your business?
Actually, I don't know whether this is allowed to be post here but I really need some suggestions. I need like a report or diagrams pls showing the importance of implementing security solutions for your business and the amount of savings expected specially for cyber security. for example attacks will cost $$$ and is you implement SOC U will save this $$$.Cheers
Submitted February 20, 2018 at 04:38PM by besmile4ever
via reddit http://ift.tt/2sEeWeN
Actually, I don't know whether this is allowed to be post here but I really need some suggestions. I need like a report or diagrams pls showing the importance of implementing security solutions for your business and the amount of savings expected specially for cyber security. for example attacks will cost $$$ and is you implement SOC U will save this $$$.Cheers
Submitted February 20, 2018 at 04:38PM by besmile4ever
via reddit http://ift.tt/2sEeWeN
reddit
Security solutions savings..is there save with... • r/security
Actually, I don't know whether this is allowed to be post here but I really need some suggestions. I need like a report or diagrams pls showing...
55,000 Snapchat users data compromised
http://ift.tt/2EPQs7j
Submitted February 20, 2018 at 04:58PM by htbridgedigital
via reddit http://ift.tt/2EFBs8R
http://ift.tt/2EPQs7j
Submitted February 20, 2018 at 04:58PM by htbridgedigital
via reddit http://ift.tt/2EFBs8R
Red Herring
Snapchat Hack Affects 55,000 Users, in Latest Sting for Social Media Firm — Red Herring
Over 55,000 Snapchat users were hacked as part of a complex phishing scam, first flagged by a British government official in July last year. KLKViral, a website believed to originate from a…
This is one mean brute-force attack on ATM
http://ift.tt/2C9l1E2
Submitted February 20, 2018 at 06:22PM by Iot_Security
via reddit http://ift.tt/2sEprPf
http://ift.tt/2C9l1E2
Submitted February 20, 2018 at 06:22PM by Iot_Security
via reddit http://ift.tt/2sEprPf
Does NBC Universal have any strong ties with the government? A SCADA security video was striked and removed by them, but I have doubts as to whether it really contained copyrighted content.
No text found
Submitted February 20, 2018 at 06:19PM by PseudoSecuritay
via reddit http://ift.tt/2EWede5
No text found
Submitted February 20, 2018 at 06:19PM by PseudoSecuritay
via reddit http://ift.tt/2EWede5
reddit
Does NBC Universal have any strong ties with the... • r/security
4 points and 0 comments so far on reddit
Security In 5: Episode 178 - Google To Start Labeling HTTP Website As Not Secure
http://ift.tt/2ocWfKt
Submitted February 20, 2018 at 07:31PM by BinaryBlog
via reddit http://ift.tt/2ojUESp
http://ift.tt/2ocWfKt
Submitted February 20, 2018 at 07:31PM by BinaryBlog
via reddit http://ift.tt/2ojUESp
Libsyn
Security In Five Podcast: Episode 178 - Google To Start Labeling HTTP Website As Not Secure
Google is slowly moving toward a complete secure web. Starting in June Chrome will begin to label all HTTP only websites as Not Secure. This episode goes into the details, what the difference is between HTTP and HTTPS and why this is a good move for everyone. …