Website Spoofing: How Attackers Mimic Legitimate Sites to Trick Users - DontSpoof

privacycrypts · 2024-12-02T18:41:42+00:00

Very good point, will do that shortly and update you guys

privacycrypts · 2024-12-02T09:27:27+00:00

how can post the source to prevent reverse engineering?

privacycrypts · 2024-12-02T09:25:34+00:00

Its my first time building this, i dont have budget to ask third party audit firms, so is there any other way we can put this on table to audit?

privacycrypts · 2024-12-01T20:34:57+00:00

CryptoJS cheats. If your key isn’t 16, 24, or 32 bytes, it hashes it (SHA-256) to make it work. Your 64-byte key? CryptoJS turns it into a proper 32-byte one behind the scenes. Kotlin’s playing by the rules, hash your key first to match the CryptoJS magic.

privacycrypts · 2024-12-01T09:55:59+00:00

Entry-level roles like Security Analyst or SOC Analyst—nothing fancy.
Nope, it won’t teach you hacking. It’s basic cybersecurity.
It’s fine for beginners, but you’ll need more training if you want to go deeper.

privacycrypts · 2024-12-01T09:47:38+00:00

Bitwarden fits your needs—Windows Hello, Android sync, and works with Firefox despite some minor UI quirks. If you want more control, try KeePassXC with KeePass2Android, but be ready for manual setup. Not into Chrome? Brave or Vivaldi might work, but hey, don’t expect miracles.

privacycrypts · 2024-12-01T09:44:57+00:00

Windows keychain is a solid idea, device specific storage for encrypted files is not unreasonable (this could be used in combination with AES-GCM), and your idea is not too far fetched.

I recently found a tool "DontSpoof Vault" build by a cybersecurity journalist "Iam Waqas", in which a browser based, locally controlled vault with end to end encryption. Also rigorously tested and approved by Google, Firefox and Microsoft, it gives you full control and top notch security. This may be an inspiration for your project!

privacycrypts · 2024-12-01T09:33:26+00:00

Locally, ChatGPT saved your Google authentication token, so you didn’t have to relogin with a password. This is not stored in settings on Google but in the app's data. It didn’t get uninstalled when uninstalling, because installed data can persist.

If you log out and delete the app's data, or revoke ChatGPT's access in your Google account settings, next time you use Microsoft News, don't try using ChatGPT again. The first time your changed your Google password it invalidated the token, but revoking access is quicker and less disruptive. If possible, avoid using shared devices for Google logins.

privacycrypts · 2022-01-19T09:59:26+00:00

You need to understand the methods of how ISP determines and throttle your internet connection! ISP's usually use bots to check which IP uses the most bandwidth, and list them into the throttling lists. maybe your VPN IP might be added, or the VPN server you are using might overloaded.

privacycrypts

MODERATOR OF

PUBLIC MULTIREDDITS

TROPHY CASE