Should I invest my time in making my site HTTPS-only?

Post published:July 18, 2022
Post category:Information Security
Post comments:0 Comments

All we need is an easy explanation of the problem, so here it is. I'm building a Django website that does not need to have registration/authentication. The only sensitive part…

Why do credit cards have chips, if I can purchase online without the chip being read?

Post published:July 18, 2022
Post category:Information Security
Post comments:0 Comments

All we need is an easy explanation of the problem, so here it is. Credit cards (and debit cards) are used in three different ways: In person + pin. The…

Does RSA encryption always pad small amounts of data to some larger size?

Post published:July 18, 2022
Post category:Information Security
Post comments:0 Comments

All we need is an easy explanation of the problem, so here it is. If I encrypt 160 bits (20 bytes) of data using an RSA 1024 private key, will…

Combating Networks of Forged OpenPGP Keys on Public Keyservers

Post published:July 18, 2022
Post category:Information Security
Post comments:0 Comments

All we need is an easy explanation of the problem, so here it is. I recently noticed that someone has created an elaborate forgery of my OpenPGP key. Specifically, they…

The use of DES-CBC3 for TLS

Post published:July 18, 2022
Post category:Information Security
Post comments:0 Comments

All we need is an easy explanation of the problem, so here it is. When researching some TLS compliant software I found some mentions of DES-CBC3. Further research shows that…

How to implement iterations when hashing passwords?

Post published:July 18, 2022
Post category:Information Security
Post comments:0 Comments

All we need is an easy explanation of the problem, so here it is. To securely hash passwords, algorithms such as PBKDF2 do many iterations of a common hash such…

How to identify Encryption algorithm for data coming in field/attribute values of an xml

Post published:July 18, 2022
Post category:Information Security
Post comments:0 Comments

All we need is an easy explanation of the problem, so here it is. This question already has answers here: How to determine what type of encoding/encryption has been used?…

Is this an SMS hack attempt?

Post published:July 18, 2022
Post category:Information Security
Post comments:0 Comments

All we need is an easy explanation of the problem, so here it is. A member of staff at work has been getting a number of texts like the below.…

Does DPAPI works if a user hasn't a login password?

Post published:July 18, 2022
Post category:Information Security
Post comments:0 Comments

All we need is an easy explanation of the problem, so here it is. I was wondering if the DPAPI will still work properly if a user doesn't have a…

How to verify a signature of one entity by another using OpenSSL CLI?

Post published:July 18, 2022
Post category:Information Security
Post comments:0 Comments

All we need is an easy explanation of the problem, so here it is. I'm teaching a class about certificate chains, so I download the chain from www.google.com which has…