Security

Password 101: Best Practices for Secure Online Living
Password 101: Best Practices for Secure Online Living
Discusses how you should create and treat your passwords as well as tips for using a password manager to make it easier to manage unique and random passwords on every site / application you use.
ditatompel Insights
Plex Data Breach 2022 Exposes Emails, Usernames and Encrypted Passwords
Plex discovered that a third-party was able to access a limited subset of their user data that includes emails, usernames, and encrypted passwords
Why Inactive Email Accounts is Dangerous
Why Inactive Email Accounts is Dangerous
Malicious users can retrieve deleted email and try to make password reset to every popular sites and original owner will lost their website / app account.
Trying Gmail Confidential Mode for G Suite Users
Trying Gmail Confidential Mode for G Suite Users
Gmail Confidential mode allow G Suite users sending emails with expiration date, restrict to forward, copy, print, or download email content or attachments.
ZombieLoad: Serious Intel Processors Security Flaw
ZombieLoad: Serious Intel Processors Security Flaw
ZombieLoad is security flaw in Intel processors that allows malicious hacker to steal any data that’s been recently accessed by the processor.
Compromised Zimbra Server Running zmcat dblaunchs Malware 100% CPU Usage
Compromised Zimbra Server Running zmcat dblaunchs Malware 100% CPU Usage
Recent Zimbra XXE / SSRF Vulnerability Disclosure (CVE-2019-9670) being actively exploited and could allow an attacker to RCE on an affected Zimbra system.
Cloudflare Reverse Proxies are Dumping Uninitialized Memory
Cloudflare Reverse Proxies are Dumping Uninitialized Memory
Between 22 Sep 2016 – 18 Feb 2017 passwords, private messages, API keys, and other sensitive data were leaked by Cloudflare to random requesters.
Implementing Firewall Protection via Iptables Port Knocking
Implementing Firewall Protection via Iptables Port Knocking
Strengthening server security by leveraging port knocking techniques in conjunction with iptables firewall functionality.
Using GnuPG/PGP for Email Encryption in Thunderbird (2012)
Using GnuPG/PGP for Email Encryption in Thunderbird (2012)
To safeguard sensitive email content, we can utilize GnuPG/PGP. GnuPG/PGP is employed to encrypt the body or message of an email.
SSH Client - Server (Security & Simplicity)
SSH Client - Server (Security & Simplicity)
Hardening SSH access by disabling root SSH access, change the default port, and utilize public and private keys.
Lessons from MyBB FB Connect Plugin XSS Attack
Lessons from MyBB FB Connect Plugin XSS Attack
This article aims to share knowledge on how to counter-attack against attackers, specifically those using third-party Facebook applications.