Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
Passkeys vs Hardware Token

I just watched the WWDC22 (I know, I'm a bit behind) and the talked about passkeys. I haven't really paid much mind to it until now. So essentially, passkeys are using a public-private key pair (I'm very familiar with this concept and I absolutely love cryptography) and it is as if your phone has a built-in hardware token, such as a YubiKey. Yes, I am aware that hardware tokens, like YubiKeys are primarily for MFA rather than the first (and only) factor when using passkeys.

1. Please correct me if I have any of the above wrong.
2. So are passkeys implemented via software ONLY? Or is there a TPM involved?
3. Do I have a separate public/private key pair for each different account?
4. Apple syncs my private key(s) to their server? Assuming for contingency reasons in case we lose our phone where all those private keys are saved locally. Wouldn't this also pose a vulnerability? Perhaps hackers can centrally target Apple servers for user private keys? What's the standard encryption is being used in transit?

submitted by /u/D1CCP
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Have you guys ever used bright security ?

What are your impressions about the product? My company is currently thinking about hiring this product so I really would like to know more about it and if it’s worth the money or there are better options when the subject is using a Dast

submitted by /u/xetoile
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Receive spoofed emails?

hello everyone. So basically:

I want to have a email from a custom domain from like [sea_championship@cool-domain.xyz](mailto:sea_championship@cool-domain.xyz)
and be able to RECIEVE and SEND emails. Anyone know something like this?

submitted by /u/Sea_Championship_915
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video