Fido2 and banking use cases
Fido2 is not only passwordless authentication, but also it can sign anything you need. Nowadays, we know Fido2 as passwordless authentication - which initial...
- security 14
- privacy 6
- dns 4
- fido2 4
- VinCSS 2
- mobile 2
- nfc 2
- linux 1
- bash 1
- redirection 1
- bugbounty 1
- atm 1
- card 1
- finance 1
- macos 1
- silicon 1
- ja3 1
- google 1
- IAP 1
- passport 1
- SoD 1
- extraction 1
- kafka 1
- configuration 1
- chip 1
- id 1
- cccd 1
- android 1
- accessibility 1
- webauthn 1
- u2f 1
- certificate 1
- transparency 1
- banking 1
- signing 1
security
Could I read your PIN/PASSWORD from platform authenticator?
Android Accessibility Service Android provides accessibility service for disabilities people. This service can access all events on phone’s screen. The secur...
How do we validate NFC ID card correctly?
NFC ID Card - new challenge for fraudsters. NFC ID card is new challenge for fraudsters and banking/fintech. Based on cryptography, the data on card must be ...
DNS Security Part 2: Is ECH saving us from MITM?
ECH is final piece of big privacy picture. When we connect to website, the TLS helps us with confidence, security but no privacy. The eyes of ISP still see y...
Retrieve kafka stream from unavailable place.
Problem I discovered some Kafka brokers. And when I consume topic, I get the error: failed to get offset for topic pushgatway_send Partition 3: dial tcp 172....
Google BeyondCorp Walkthrough
ZeroTrust is just a access context management Some years ago, I heard that zerotrust would become the future of security. Nowaday, I see zerotrust in every s...
TLS fingerprint and mobile security
The use case Mobile applications are replacing the traditional web applications. Some techniques are developed to identify the requests are coming from offic...
DNS Security: Part 1 which can we do if we manage the dns?
If you think dns only resolved the records, think it again. In IoT’s world, it involved more than a resolver.
Setup Macos smartcard login only
This page is for Silicon MacBook only. If you’re locked out from vault, press: Option+Shift+Return to input recovery code and login again.
[2023] New DNS Service announcement
In late March, we migrated from nginx to knot-resolver. Because of some problems with nginx, user’s switching network from LTE to wifi and vice versa cannot ...
Login SSH bằng VinCSS Fido2 key
Từ bản openssh 8.2 hỗ trợ sử dụng FIDO/U2F. VinCSS key chỉ hỗ trợ key dạng ecdsa-sk.
Login Linux bằng VinCSS Fido2 key
Fido2 là xu thế sử dụng passwordless đang được dùng rộng rãi. Nhân dịp vừa xin được key dùng thử thì mình setup login bằng vinccss key luôn.
Chuyện bounty ở công ty X
Một buổi sáng đẹp trời cậu em Phiêu Lãng gửi tôi một đường dẫn về một trang bugbounty mới của Việt Nam, tôi thấy thật tuyệt vì đây là nơi nhiều người anh em ...
New DNS Service announcement
[Updated on 8/12/2020] We migrated from dnsdist to nginx for perfomance.
privacy
Could I read your PIN/PASSWORD from platform authenticator?
Android Accessibility Service Android provides accessibility service for disabilities people. This service can access all events on phone’s screen. The secur...
DNS Security Part 2: Is ECH saving us from MITM?
ECH is final piece of big privacy picture. When we connect to website, the TLS helps us with confidence, security but no privacy. The eyes of ISP still see y...
DNS Security: Part 1 which can we do if we manage the dns?
If you think dns only resolved the records, think it again. In IoT’s world, it involved more than a resolver.
[2023] New DNS Service announcement
In late March, we migrated from nginx to knot-resolver. Because of some problems with nginx, user’s switching network from LTE to wifi and vice versa cannot ...
Chuyện bounty ở công ty X
Một buổi sáng đẹp trời cậu em Phiêu Lãng gửi tôi một đường dẫn về một trang bugbounty mới của Việt Nam, tôi thấy thật tuyệt vì đây là nơi nhiều người anh em ...
New DNS Service announcement
[Updated on 8/12/2020] We migrated from dnsdist to nginx for perfomance.
dns
DNS Security Part 2: Is ECH saving us from MITM?
ECH is final piece of big privacy picture. When we connect to website, the TLS helps us with confidence, security but no privacy. The eyes of ISP still see y...
DNS Security: Part 1 which can we do if we manage the dns?
If you think dns only resolved the records, think it again. In IoT’s world, it involved more than a resolver.
[2023] New DNS Service announcement
In late March, we migrated from nginx to knot-resolver. Because of some problems with nginx, user’s switching network from LTE to wifi and vice versa cannot ...
New DNS Service announcement
[Updated on 8/12/2020] We migrated from dnsdist to nginx for perfomance.
fido2
Fido2 and banking use cases
Fido2 is not only passwordless authentication, but also it can sign anything you need. Nowadays, we know Fido2 as passwordless authentication - which initial...
Fido notes
U2F vs Fido2 Fido U2F is renamed to CTAP1. FIDO UAF: FIDO Universal Authentication Framework. WebAuthn: New API supports passwordless login, compatible wit...
Login SSH bằng VinCSS Fido2 key
Từ bản openssh 8.2 hỗ trợ sử dụng FIDO/U2F. VinCSS key chỉ hỗ trợ key dạng ecdsa-sk.
Login Linux bằng VinCSS Fido2 key
Fido2 là xu thế sử dụng passwordless đang được dùng rộng rãi. Nhân dịp vừa xin được key dùng thử thì mình setup login bằng vinccss key luôn.
VinCSS
Login SSH bằng VinCSS Fido2 key
Từ bản openssh 8.2 hỗ trợ sử dụng FIDO/U2F. VinCSS key chỉ hỗ trợ key dạng ecdsa-sk.
Login Linux bằng VinCSS Fido2 key
Fido2 là xu thế sử dụng passwordless đang được dùng rộng rãi. Nhân dịp vừa xin được key dùng thử thì mình setup login bằng vinccss key luôn.
mobile
Certificate Transparency and Mobile Security
Introduce about Certificate Transparency Web Public Key Infrastructure (Web PKI) helps us on privacy and security. Trusted Certificate Authorities issue cert...
TLS fingerprint and mobile security
The use case Mobile applications are replacing the traditional web applications. Some techniques are developed to identify the requests are coming from offic...
nfc
How do we validate NFC ID card correctly?
NFC ID Card - new challenge for fraudsters. NFC ID card is new challenge for fraudsters and banking/fintech. Based on cryptography, the data on card must be ...
Extract passport NFC’s SoD certificate
NFC data is followed ICAO’s specification.
linux
Bash redirection
Hôm rồi tác giả có vá tập tin installer viết bằng bash với lewtds, thấy vấn đề redirect trong linux khá thú vị với case như sau, chắc hẳn giờ sẽ có câu trả l...
bash
Bash redirection
Hôm rồi tác giả có vá tập tin installer viết bằng bash với lewtds, thấy vấn đề redirect trong linux khá thú vị với case như sau, chắc hẳn giờ sẽ có câu trả l...
redirection
Bash redirection
Hôm rồi tác giả có vá tập tin installer viết bằng bash với lewtds, thấy vấn đề redirect trong linux khá thú vị với case như sau, chắc hẳn giờ sẽ có câu trả l...
bugbounty
Chuyện bounty ở công ty X
Một buổi sáng đẹp trời cậu em Phiêu Lãng gửi tôi một đường dẫn về một trang bugbounty mới của Việt Nam, tôi thấy thật tuyệt vì đây là nơi nhiều người anh em ...
atm
Chuyện bounty ở công ty X
Một buổi sáng đẹp trời cậu em Phiêu Lãng gửi tôi một đường dẫn về một trang bugbounty mới của Việt Nam, tôi thấy thật tuyệt vì đây là nơi nhiều người anh em ...
card
Chuyện bounty ở công ty X
Một buổi sáng đẹp trời cậu em Phiêu Lãng gửi tôi một đường dẫn về một trang bugbounty mới của Việt Nam, tôi thấy thật tuyệt vì đây là nơi nhiều người anh em ...
finance
Chuyện bounty ở công ty X
Một buổi sáng đẹp trời cậu em Phiêu Lãng gửi tôi một đường dẫn về một trang bugbounty mới của Việt Nam, tôi thấy thật tuyệt vì đây là nơi nhiều người anh em ...
macos
Setup Macos smartcard login only
This page is for Silicon MacBook only. If you’re locked out from vault, press: Option+Shift+Return to input recovery code and login again.
silicon
Setup Macos smartcard login only
This page is for Silicon MacBook only. If you’re locked out from vault, press: Option+Shift+Return to input recovery code and login again.
ja3
TLS fingerprint and mobile security
The use case Mobile applications are replacing the traditional web applications. Some techniques are developed to identify the requests are coming from offic...
Google BeyondCorp Walkthrough
ZeroTrust is just a access context management Some years ago, I heard that zerotrust would become the future of security. Nowaday, I see zerotrust in every s...
IAP
Google BeyondCorp Walkthrough
ZeroTrust is just a access context management Some years ago, I heard that zerotrust would become the future of security. Nowaday, I see zerotrust in every s...
passport
Extract passport NFC’s SoD certificate
NFC data is followed ICAO’s specification.
SoD
Extract passport NFC’s SoD certificate
NFC data is followed ICAO’s specification.
extraction
Extract passport NFC’s SoD certificate
NFC data is followed ICAO’s specification.
kafka
Retrieve kafka stream from unavailable place.
Problem I discovered some Kafka brokers. And when I consume topic, I get the error: failed to get offset for topic pushgatway_send Partition 3: dial tcp 172....
configuration
Retrieve kafka stream from unavailable place.
Problem I discovered some Kafka brokers. And when I consume topic, I get the error: failed to get offset for topic pushgatway_send Partition 3: dial tcp 172....
chip
How do we validate NFC ID card correctly?
NFC ID Card - new challenge for fraudsters. NFC ID card is new challenge for fraudsters and banking/fintech. Based on cryptography, the data on card must be ...
id
How do we validate NFC ID card correctly?
NFC ID Card - new challenge for fraudsters. NFC ID card is new challenge for fraudsters and banking/fintech. Based on cryptography, the data on card must be ...
cccd
How do we validate NFC ID card correctly?
NFC ID Card - new challenge for fraudsters. NFC ID card is new challenge for fraudsters and banking/fintech. Based on cryptography, the data on card must be ...
android
Could I read your PIN/PASSWORD from platform authenticator?
Android Accessibility Service Android provides accessibility service for disabilities people. This service can access all events on phone’s screen. The secur...
accessibility
Could I read your PIN/PASSWORD from platform authenticator?
Android Accessibility Service Android provides accessibility service for disabilities people. This service can access all events on phone’s screen. The secur...
webauthn
Fido notes
U2F vs Fido2 Fido U2F is renamed to CTAP1. FIDO UAF: FIDO Universal Authentication Framework. WebAuthn: New API supports passwordless login, compatible wit...
u2f
Fido notes
U2F vs Fido2 Fido U2F is renamed to CTAP1. FIDO UAF: FIDO Universal Authentication Framework. WebAuthn: New API supports passwordless login, compatible wit...
certificate
Certificate Transparency and Mobile Security
Introduce about Certificate Transparency Web Public Key Infrastructure (Web PKI) helps us on privacy and security. Trusted Certificate Authorities issue cert...
transparency
Certificate Transparency and Mobile Security
Introduce about Certificate Transparency Web Public Key Infrastructure (Web PKI) helps us on privacy and security. Trusted Certificate Authorities issue cert...
banking
Fido2 and banking use cases
Fido2 is not only passwordless authentication, but also it can sign anything you need. Nowadays, we know Fido2 as passwordless authentication - which initial...
signing
Fido2 and banking use cases
Fido2 is not only passwordless authentication, but also it can sign anything you need. Nowadays, we know Fido2 as passwordless authentication - which initial...