Signed Pages Reviews

HackenProof Reviews

Signed Pages mentions (12)

• E2EE on the web: is the web that bad?

  There is "Signed Pages" by the debeloper of EteSync. It is a browser extension, that checks webapps based on signatures in the html file. The addon then warns the user if the signature is not correct or - if I remember correctly - the source changed. This allows you to be sure what webapp code was delivered. But it seems like it did not really get used outside of his own projects. - Source: Hacker News / 4 months ago

• Cloudflare and CDNs - call for community opinions

  EteSync has implemented something called Signed Pages, this might be worth looking closer at. This uses PGP keys which is preloaded into the browser; but I suspect that will be a barrier too high for most non-tech users. Source: about 1 year ago

• Truly safe?

  There are also projects like signed web pages which can also help increasing the trust level to some degree. But that requires that you can download the source code and regenerate the verification hash locally - or have other trusted methods to verify the hash value hasn't been modified as well. The current concept is reasonably sane, but it requires too much from users currently to make it widely used. Source: almost 2 years ago

• Security experts declare all Proton apps secure after security audit

  > The server can at any time start serving malicious payloads True, and I call this threat model "Beware Each and Every Fetch" (BEEF) in contrast to the more common TOFU model (although if you trust a desktop app to auto-update itself then these two models might not be all that different). In any case, I think you're being a little quick to dismiss the idea of server-hosted applications. It's true that browsers... - Source: Hacker News / about 2 years ago

• ProtonMail Is Inherently Insecure, Your Emails Are Likely Compromised

  Something like a browser extension for this does already exist, fortunately: https://github.com/tasn/webext-signed-pages. - Source: Hacker News / over 2 years ago

HackenProof mentions (6)

• Developer’s Guide To Web3 Security

  HackenProof – Hackenproof is Hacken’s bug hunting program. Hacken is a leading name in Web3 security, and just like Immunefy, Hackenproof offers huge bounties and is associated with big orgs like FTX and CoinGecko. - Source: dev.to / over 1 year ago

• 🔥Ethical hackers, it's a call for Ukrainian Cyber Defense!

  Also the domain registration, the website and twitter account were relatively recently created. Another strange thing is that their domain name hackenproof dot com was registered on 20 Aug 2017 and magically "all" their "testimonials" videos on YT are dated Nov 2017, how's possible that a company which basically nobody in the netsec community had heard before which didn't had even a domain name or a website up, in... Source: over 2 years ago

• Earn $2,579 per month on Fiverr, but how?

  The best way for projects is a bug bounty platform with triage service. The best way for hackers is web3. For instance, hackenproof.com - a bug bounty platform for crypto projects with own triage service. Source: over 2 years ago

• Learning A Foreign Language

  And 1 web3 cybersecurity company hacken.io with cybersec services including hackenproof.com - bug bounty platform with R&D office in Kyiv, Ukraine. Source: over 2 years ago

• Hacken & XT.com AMA Q&A Review

  Hacken is a reputable cybersecurity auditor of crypto projects and the ecosystem of cybersecurity initiatives, such as CER.live and the recently launched ToxicList and Hacken Scout, Hacken Proof and applications (hVPN, HackenAI). We are headquartered in Estonia and our R&D centre is located in Kyiv, Ukraine. Since our launch in 2017, we have entered into cooperation with more than 500 clients and established... Source: over 2 years ago