ForAllSecure

JUNE 16, 2021

In this episode, Jason Kent from Cequence Security talks about his experience hacking a garage door opener API, the tools he uses such as Burp, ZAP, and APK tool, and why we need to be paying more attention to the OWASP API Security Top 10. And in May of 2021 Researchers disclosed that the Peloton API authentication was broken.

Authentication 52

Authentication Security Applications Mobile 52

ForAllSecure

DECEMBER 17, 2021

As I produce this episode, there's a dangerous new vulnerability known informally as Log4Shell, it’s a flaw in an open source Java logging library developed by the Apache Foundation and, in the hands of a malicious actor, could allow for remote code injection. Vamosi: The idea behind Open Source is great.

Open Source 52

Open Source Software Software Applications 52

Phil Windley

AUGUST 12, 2020

I was the founder and CTO of iMall, an early, pioneering ecommerce tools vendor. Subjects have few tools for managing these relationship because each one is a little different, not only technically, but procedurally as well. This architecture implies that both parties will have tools that speak a common protocol.

Authentication 112

Authentication Architecture System Examples 112

Dataconomy

MAY 24, 2023

Ethereum boasts a mature ecosystem of tools for writing smart contracts using the Solidity programming environment, which operates on the Ethereum Virtual Machine. The IBM Blockchain developer tool has been specifically designed with flexibility, functionality, and customization in mind. How to become a blockchain maestro?

Network 59

Network Open Source IBM Applications 59

Scott Lowe

MARCH 20, 2020

This blending of “traditional” network engineering with containers, Linux, and DevOps tooling is how Matt is setting new trends and directions for the networking industry. Chris Wahl touches on the topic of using GitHub personal tokens to authenticate to HashiCorp Vault. Servers/Hardware. Nothing this time around.

Linux 60

Linux Vmware Authentication Storage 60

Phil Windley

JANUARY 7, 2019

Consider the following diagram that shows Alice receiving a credential from her employer and proving information about her employment to her bank. The only parties to the transaction are the three that need to be part of the transaction: Alice, her employer, and her bank. their bank's website or their employer's HR system).

Banking 88

Banking Internet System Software 88

Phil Windley

JANUARY 26, 2021

She might also use it at partner websites (like the benefits provider) to provide shared authentication without federation (and it's associated infrastructure). For example, suppose she is applying for a loan and her bank, Certiphi, who wants proof that she's employed and has a certain salary. Attestor is acting as a credential issuer.

Internet 72

Internet Authentication Architecture Examples 72

Phil Windley

AUGUST 20, 2019

Because DIDs are cryptographic artifacts tied to public-private key pairs, this exchange provides the agents with the means to perform mutual authentication and create an encrypted channel. To see how credential exchange works, suppose Alice (the identity owner) is applying for a loan at her local bank (the credential verifier).

Internet 102

Internet Banking System Architecture 102

ForAllSecure

MAY 17, 2023

You have to show to me that you're using multi factor authentication that you're doing vulnerability scanning and mitigation that you're harming your niche. That even a few years ago, you had to go into a bank and sign paperwork, and now I'm digitally signing things and sending it out. you're aligning to a framework, whatever.

Internet 40

Internet Insurance Security Virtualization 40

ForAllSecure

MARCH 30, 2022

A simple analogy would be who is going to manage which doors to lock and which to keep open. That’s what Nil and Sagi started looking at, the configuration tools that are out there for managing and they wanted to see what could happen if someone set it up all wrong. The WA agent is an open source software hosted on GitHub.

Firewall 52

Firewall Virtualization Authentication Linux 52

ForAllSecure

NOVEMBER 2, 2021

Vamosi: Zmap is a very fast open source, TCP, UDP and ICMP scanner. Léveillé: We do develop our own custom module for the grab tool to be able to fingerprint properly the different malware families that we are looking at. So fortunately, we were able to fingerprint it before the authentication.

Internet 52

Internet Malware Research Linux 52