Clik here to view.
How to re-add the security question in Gmail?
As we all might know that today is “Safe Internet Day”. So Google is reminding us for the security check-up. I tried it. And I saw that I could remove my security question. I did it with the belief...
View ArticleMySQL server with root user that can be accessed remotely with just a...
I have a MySQL server that has a root user enabled. This root user is protected by a password and can be accessed remotely: %. The reason for this is from time to time I use MySQL Workbench to access...
View ArticleClik here to view.
Does WordPress contain “default” anti-SQL injection code that responds with a...
I’ve been through the “seven layers of the candy cane forest” on this one… Our plugin receives data via a POST request. On a particular site that has our plugin installed, we observed odd behavior. In...
View ArticleInformation leaks out of encrypted file system
If I only encrypt the home directory, what are some common ways for information to leak out to the unencrypted part of the file system? Aside from the obvious problems like swap space files in /tmp are...
View ArticleWhat kind of attack causes a JavaScript 'out of memory' on the attackers device?
We experienced a strange attack yesterday. Our error log picked up the same ‘out of memory’ JavaScript error from a single IP address every 10 seconds. The requests came from 6 client ports on the same...
View ArticleBrute Forcing Android Lock; How Long Does It Take?
We’ve seen that iPhone calculation takes 80 milliseconds per trial to complete. And there’s further increasing time penalty with each wrong trial. Android uses scrypt to generate its Encryption key, so...
View ArticlePHP Code Sniffer – WordPress VIP Coding Standards
I’m trying to fix up my code to meet the WordPress VIP Coding Standards. I’m getting a couple of issues that I’d like to see go away, but i’m not sure what the best strategy is. The first issue is when...
View ArticleXML files linked to hash [closed]
One of the games I’m trying to modify has hash files under each xml file and so modifying the xml files corrupts the game. How do I get around this?
View ArticleSomeone else set up a trial Google Apps account on my domain. How can I get...
I own my domain (say, mydomain.com) and administer it through my hosting provider. A couple of days ago, I started receiving mail from Google Apps addressed to jyotioffsetjsm01@mydomain.com. There’s no...
View ArticlePassword resets itself after each reboot
Macbook with OS X 10.11.3. No iCloud account, regularly updated via softwareupdate -i -r && brew update && brew cask update. Rather restrictive firewall(ing) via LittleSnitch and pf....
View ArticleIs providing a user login a functional requirement of a system?
Is providing a user login a non functional requirement? Since this is concerned with security which is a non functional requirement, I feel that providing a user login is also non functional but again...
View ArticleAre the default salts secure?
When installing a fresh wordpress, one of the things one should do is, updating the salts in wp-config.php. The section looks like this define('AUTH_KEY', 'put your unique phrase here');...
View ArticleHow to prevent someone accessing my iMac
My desktop is in the living room where anyone visiting can access it. I’d like to make it secure from those in my home since I have a roommate.
View ArticleHaving an discussion about security concerns with another software engineer...
Background: The company I work for uses different systems to hold their insurance data which is customer related. They want to have an app for their customers where they can find their insurance...
View ArticleCustom SELinux policy for iptables [on hold]
I am trying to build a custom ROM for Android that has a built in firewall. In doing this I want to allow my Settings app to block different apps from using mobile data and/or wifi. My approach so far...
View ArticlePrevent USB data transfer (when phone is in use) and being charged
I would like to know how to protect my data when I use public battery charger in public places. I know that if I do not unlock my screen when charging, my data is safe, but what if I would like to use...
View ArticleSecurity skewers torque
I purchased Pinhead security skewers, and the instructions suggest to tighten them to 8 N-m (70 in-lb) of torque. However, the skewers use a special key which doesn’t appear compatible with a torque...
View ArticleStrange ''sign in attempt prevented'' messages on Gmail
These messages from no-reply@accounts.google.com say something like this: Hi (my name), Someone just tried to sign in to your account (my Gmail)from an app that doesn’t meet modern security standards....
View Articlepam_mount changes owner of mountpoint to root
On Debian 8.3 I want to mount an encrypted container /usr/local/share/test.img with pam_mount at login at the mountpoint /home/test (which is owned by test, of course). The LUKS encrypted disk image...
View ArticleClik here to view.
Using .htaccess deny returning 302 and not 403 forbidden
I’m in the process of adding yet another layer of security to some of my WordPress installs, since some of my customers sites use shared hosting, and generally they do not ban users for brute force...
View Article
