Yes, it is possible in theory to forge the Web Server Certificate that is used in SSL/TLS communication. This is because the certificate is signed by a certificate authority that your browser trusts using a cryptographic hashing algorithm of a specific length. The hashing algorithms that have been used to… Continue reading
Search this site
Check out my other project…
- Create an EC2 that runs Chrome for sandboxed websurfing
- Check Multiple AWS S3 Buckets for Missing Default Encryption
- The Equifax Data Breach and the Apache Struts Vulnerability
- Test Early, Test Often
- Linux Hardening
- Information Security at Startup Companies
- Timestamp bash_history with every command
- Has SHA-1 been hacked?
The Verge: Microsoft’s new Windows File Recovery tool lets you retrieve deleted documents.
Can you articulate the difference? https://www.techradar.com/news/cloud-computing-vs-edge-computing
Great SANS Cloud Security content, now with the convenience of YouTube: https://sansurl.com/cloudsecyoutube
TechTarget just published my guest blog post: How Azure, AWS, Google handle data destruction in the cloud https://bit.ly/2VfpPiT via @SearchSecurity