AI & Machine Learning

One-time secret sharing

32 sec read48 views0 listens

A new service has been released that allows users to share text via one-time links with configurable expiry and password protection. This approach, built using Astro, TypeScript, and PostgreSQL, prioritizes security by employing double AES-256-GCM encryption and a password derivation function (PBKDF2-HMAC-SHA256) to protect secrets from unauthorized access. The design ensures that only the first successful request to reveal and delete a secret can access its contents, preventing replay attacks and adding a layer of control for the secret owner.

Read the full article at DEV Community

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.

You Might Like

AI & Machine Learning1 day ago34 sec read

Nine CVEs, Nine Zeros: What Empty vul.cve Results Actually Mean

Recent queries of a vulnerability database revealed zero matches for nine CVEs, including some actively exploited, which initially suggested no systems were affected. However, this result doesn't indicate a lack of exposure, but rather a limitation i...

Ali Nemati

Cybersecurity2 days ago29 sec read

ConnectWise customers hit by supply-chain attack linked to compromised API secret

ConnectWise customers are experiencing disruptions to Cloud Backup services following a supply-chain attack where a threat actor exploited a compromised API secret. This incident highlights the significant risk posed by supply-chain vulnerabilities, ...

Ali Nemati

AI & Machine Learning3 days ago24 sec read

Browser Cookies: What Are They, How Are They Used, and How Can They Be Stolen?

Browser cookies are small data pieces used for various online functions including authentication, e-commerce, and user preferences, not solely for tracking. Session cookies, which identify a user's active session, can be stolen through various method...

Ali Nemati