Tag: infosec

The Subtle Hazards of Real-World Cryptography

Post author By Soatok
Post date November 27, 2020
1 Comment on The Subtle Hazards of Real-World Cryptography

Imagine you’re a software developer, and you need to authenticate users based on a username and password. If you’re well-read on the industry standard best practices, you’ll probably elect to use something like bcrypt, scrypt, Argon2id, or PBKDF2. (If you thought to use something else, you’re almost certainly doing it wrong.) Let’s say, due to […]

Tags computer security, cryptographic hash function, cryptography, dumb exploit, HMAC, infosec, password hashing, PBKDF2, Security Guidance

Humor Software Security Vulnerability

Why Server-Side Input Validation Matters

Post author By Soatok
Post date April 27, 2020
5 Comments on Why Server-Side Input Validation Matters

Update (2020-04-29): Twitter has fixed their oversight. Anyone who set their custom gender to a long volume of text, should still have it set to a long volume of text. The original article follows after the separator. I was recently made aware of a change to Twitter, which exposes a new Gender field. If you’ve […]

Tags furry, infosec, input validation, LGBTQIA+, security, software development, Twitter

Software Security

“Source Code Leak” is Effectively Meaningless to Endpoint Security

Post author By Soatok
Post date April 22, 2020
3 Comments on “Source Code Leak” is Effectively Meaningless to Endpoint Security

There are two news stories today. Unfortunately, some people have difficulty uncoupling the two. The Team Fortress 2 Source Code has been leaked. Hackers discovered a Remote Code Execution exploit. The second point is something to be concerned about. RCE is game over. The existence of an unpatched RCE vulnerability, with public exploits, is sufficient […]

Tags common sense, information security, infosec, misinformation, reverse engineering, security, security through obscurity, source code