Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

0
votes
0answers
5 views

File delete audit, Windows 8

I have a shared folder (folderA) and our users must copy some files everyday and after they finish working they have to delete files and when they delete files there must be a record.(for security ...
2
votes
0answers
29 views

How could an unscrupulous company benefit from knowing my hard drive serial number?

I have recently run into some malware on my computer that has gathered up my computer's make and hard drive make and serial number, along with probably many other things. The malware installed itself ...
1
vote
1answer
9 views

How to remove the gpg signature from a signed file without creating a new file on disk?

If I have a 100 MB signed binary file that I download over the internet, I need 200 MB of disk space to open it. The file is just signed, not encrypted. When disk space is low, It is not possible to ...
1
vote
0answers
18 views

How do I display a message on login for Windows 8/8.1?

I've configured the following settings in my local security policy: Interactive logon: Message text for users attempting to log on Interactive logon: Message title for users attempting to log on ...
18
votes
2answers
2k views

Is “curl -u username:password http://example.com” secure?

Is curl -u username:password http://example.com secure? If not, can you give a brief explanation of how someone could obtain your password?
0
votes
0answers
5 views

How does the smart lock feature on Android define a trusted device? [migrated]

The smart lock feature on Android allows someone to set a Bluetooth device as "trusted" which makes it easy to unlock. See for example: https://support.google.com/nexus/answer/6093922?hl=en I tried ...
0
votes
0answers
9 views

How to check if logstash receiving/parsing data from suricata to elasticsearch?

Trying to configure suricata v2.0.8 with ElasticSearch(v1.5.2)-Logstash(v1.4.2)-Kibana(v4.0.2) on Mac OS X 10.10.3 Yosemite. suricata.yaml: # Extensible Event Format (nicknamed EVE) event log in ...
0
votes
0answers
16 views

How do I manage trust exceptions in Firefox?

Through the course of using Firefox over the years, I've had to manually trust certificates for a number of HTTPS sites for various reasons. I'm trying to find a way to view the list of these sites, ...
0
votes
1answer
43 views

The password on my mac (yosemite) is being changed everytime I logout

When I reset my macbook pro, the password gets changed. I have Yosemite 10.10.3 and Apple phone support haven't been able to get to the bottom of it yet. They suggested I re-install the OS but i'd ...
2
votes
3answers
45 views

SSH Private Key Authentication Failing

I'm kind of stuck here.. I am trying to disable all SSH login capabilities of root. No password login. No key-based login. Nothing. I have a user "andrew" that should only be able to SSH into my ...
1
vote
2answers
24 views

How to disable non-exe extensions from running?

I want to make my system unable to launch .scr .pif (and all executable windows formats here) as a executable program. How do I disable them an make .exe files only runnable as programs (and .msi ...
2
votes
2answers
42 views

Iframe on bottom of every page

I am not sure if this is the right place to ask this question, however I can't think of any other place where I can find answer to this. I have noticed, this weird iframe on bottom of quite a few ...
1
vote
1answer
28 views

Bitdefender license [closed]

I have bought Bitdefender Internet Security 2015 and it is shipped with a license to install it on 3 PCs. I only have 2 PCs: A laptop and a desktop computer, so my question is: Can I give away the 3rd ...
0
votes
0answers
6 views

Can I use same suricata instance for both IDS (for L3,4) and IPS (for L3,L4,L7)? [migrated]

I have a interface where traffic is flowing from internet to NGNIX server to application server. I want to monitor (IDS) the traffic flowing between Internet and NGNIX at L3,4 and IPS the traffic ...
-5
votes
0answers
20 views

How can I easily block applications from invasively scanning my computer [closed]

It is probably common knowledge by now that a whole host of applications scan our computers on a regular basis and without our real and informed consent. The standard excuses are usually piracy ...
1
vote
1answer
41 views

Secuirity concerns from Windows 8 login screen

I'm trying to create a secure setup on my new Windows 8 laptop to help keep a serious thief away from my data. An SSD with 256-bit hardware encryption provides a solid security foundation. But if a ...
-2
votes
0answers
10 views

RADIUS with MS-CHAPv2 Explaination

Can't find any flowcharts on how communication works between peers. I know how it works in Radius with PAP enabled, but it appears that with MS-Chapv2 there's a whole lot of work to be developed. I'm ...
0
votes
1answer
41 views

Securing Remote Desktop Connections With SSL Certificate From a Trusted Certificate Authority

Currently I'm using a desktop machine running Windows 7 Ultimate x64. Also have configured it to enable remote connections using MS Remote Desktop Services (RDS); however, since the machine issues its ...
0
votes
1answer
17 views

Clear sensitive information from vdi

I'm able to obtain file names and their contents from vdi image using grep despite the files were deleted. Example output: MICROS~3.DLLans0��1FR�b��?,|�R��?,|�R��?,|�R�� ...
9
votes
1answer
92 views

Unauthorised Bluetooth device keeps connecting to Mac

Recently I started experiencing frequent random lags with a Bluetooth mouse I have connected to my iMac: the tracking speed would suddenly drop for a few seconds before returning back to normal. One ...
0
votes
0answers
21 views

Requirements for continuous changes of wifi stations' names [on hold]

Assume you change the name of a wifi station continuously in all your devices when your serves says so: here every week for simplicity and the same name in all devices for simplicity. You have a list ...
0
votes
1answer
43 views

Getting lots of Audit Failures in Event Viewer > Security on Windows Server 2008 R2

Over the past few days we have been getting loads of audit failures on the event viewer > security. I suspect they hackers trying to gain access to the server, but they fall into 2 types: One where ...
-1
votes
1answer
28 views

best practice procedure for browser use on unsecured WiFi

At this posted question is the advice you need to always check that the SSL connection shows up green in your address bar and/or manually double-check that the certificate is valid when using ...
1
vote
3answers
83 views

Prevent admin users from reading my files

My surface tablet is shared with a friend. She uses a separate account, with admin rights. Being an admin, she is able to gain access to all my files. Even my OneDrive files. I guess I could follow ...
0
votes
1answer
10 views

Headless install of Java Cryptography Extension (JCE) Unlimited Strength?

Is there a way to install Java Cryptography Extension (JCE) Unlimited Strength jars without having to download them manually and accept the terms and conditions? I would like to set this up on my ...
0
votes
0answers
16 views
0
votes
1answer
27 views

Starting Suricata with launchctl on Mac OS X

Using Mac OS X Yosemite 10.10.3. I'm trying to make Suricata start in daemon mode on boot with launchctl. Here is my /Library/LaunchDaemons/org.suricata.Suricata.plist: <?xml version="1.0" ...
0
votes
0answers
23 views

Will it work: RDP Security Layer on Win08 R2, connected from Win7?

First some [very brief] background. Supposedly TLS 1.0 is no longer PCI compliant and thus I have to shut it off on our Win08R2 server. Last time I shut it off, it stopped my ability to RDP into the ...
0
votes
0answers
15 views

Setting Unlimited Strength Jurisdiction Policy Files for multiple versions of Java

I need to install the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files into the folder /Library/Java/JavaVirtualMachines/jdk1.8.0_45.jdk/Contents/Home/jre/lib/security/ ...
1
vote
2answers
26 views

Are there any security or performance implications of changing the user-agent in a browser?

I am working on a production issue which only occurs in IE10 and not in chrome/Firefox. If I change the IE10's user-agent (F12) to Mozilla Firefox it works. I need to debug the app. layer to find ...
0
votes
2answers
63 views

Hide public ip and location with openvpn on raspberry pi

I am trying to set up a way to mask/hide my public ip and location so I can surf the Internet anonymously and even use it to potentially show me in another country so I can access other country ...
0
votes
0answers
8 views

Can Suricata be configured to work as IPS (not only as IDS) on Mac OS X?

Does anyone here successfully use Suricata in IPS mode on OSX? Is it possible at all? I've spent a few days trying to configure sourcecode in different ways with --enable-nfqueue option but with no ...
-3
votes
0answers
20 views

how can I revert this encoded office file? [duplicate]

a friend has faced a peculiar ransom request for his files. his laptop has apparently been hacked and all his documents have been changed, both the extension and the content. the hacker has requested ...
1
vote
1answer
83 views

Is there a way to bypass HSTS protocol?

Is there a way to bypass the HTTP Strict Transfer Protocol (HSTS) which has been used nowadays by many sites like Google services,banking Services, etc.? I know that HSTS protocol forces a web client ...
-3
votes
1answer
24 views

example.com cannot be resolved to an IP Address

since this morning I can't connect anymore to my website. I'm on a centos dedicated server with apache. I think that there's a problem with DNS, this is the message I get from a webtool: example.com ...
0
votes
0answers
17 views

Bitlocker without TPM with both a startup USB and password?

On a Windows 8.1 Pro PC without TPM how can I use Bitlocker with both a startup USB and password? Here ...
3
votes
1answer
50 views

How to block insecure images on HTTPS pages in Chromium on Linux?

I'm trying to figure out a way to stop Chromium from loading insecure (i.e. non-HTTPS) images on pages served over HTTPS (i.e. basically the exact opposite of this question). Alas, all the ...
1
vote
3answers
26 views

How can I cryptographically verify that someone owns the website they claim to?

More specifically, can I get them to sign a string of text with their x509 private certificate and then I can verify it using the public cert used by the website in question? Perhaps I could supply ...
0
votes
1answer
40 views

How to enforce security of the system before sending notebook to the service?

I have to send notebook to the service to replace the keyboard. I don't to at least make it hard to for the serviceman to snoop through my private stuff. How to enforce security of the system disable ...
-2
votes
1answer
55 views

Illegitimate screenshots?

Our bank requires us to run Trusteer Rapport: http://www.bbt.com/bbtdotcom/business/online-services/online-banking/trusteer-rapport-online-fraud-protection-software.page On two different computers, ...
0
votes
0answers
20 views

Encryption and Decruption with GPG

A friend and I have a bunch of files that I encrypted stored on google drive. The issue comes up that he can't decrypt anything there. The steps I've taken thus far are 1.) Encrypt the ...
0
votes
1answer
32 views

Website failing to acquire proper permission to write to a folder under Windows 2012R2 with IIS 8.5 even though 'IIS APPPOOL\PoolName' is set properly

I am having specific issues in regards to IIS 8.5, Permissions, and Auditing. I have a PHP application running under KanboardPool identity and I've properly set permssions on the application 'data' ...
9
votes
3answers
71 views

A way to trigger an SELinux policy violation?

I'm studying the basic workings of SELinux and would find it useful to trigger a denial. My test machine is running CentOS 7, it's a basic server install without any extra services, and getenforce ...
-3
votes
1answer
37 views

Are the passwords for Windows user accounts encrypted using 128-bit AES? [closed]

I am referring to Windows 7/ Windows XP. Once a user account is locked (windows key + L)/ or logged off, is there anyway to get access to the users' files? Or anyway possible to break into the ...
1
vote
4answers
39 views

Restricting SSH Access to Amazon EC2 Instance

I am preparing to set up an Amazon EC2 instance. It will be a testing and development machine to allow me to put PHP, Python, etc scripts on a server without being tied down to a local machine. ...
2
votes
1answer
38 views

Taken to random websites when clicking on links

My girlfriend was browsing the web last night on this wireless connection and clicked my Google home page, only to get the ''Untrusted site'' page. I then went to yahoo.com and clicked on the youtube ...
0
votes
1answer
686 views

What makes Kali Linux different from other Linux distros for it to be used exclusively for hacking and penetration testing?

I have been asked to first start using Kali Linux and get used to the bash before doing anything in hacking. I was wondering what is so special in Kali Linux that I cannot do on Ubuntu or any other ...
2
votes
2answers
43 views

Securely delete a file in Ubuntu?

I have been reading about government standards for secure data erasure by overwriting the file location with random data [wikipedia: data erasure standards]. I am wondering if Ubuntu's default Delete ...
0
votes
2answers
47 views

Best way to secure RDP connections WITHOUT VPN?

We are needing to use RDP for a client, but the VPN and internet connection is just too flaky to use VPN anymore. VPN is NOT an option anymore for us. Currently the plan is to open a bunch of ports ...
1
vote
1answer
51 views

Does connecting to a VPN always provide a secure environment over unencrypted WiFI connections?

Sometimes I have to use public WiFi connections. I always connect to a VPN thinking it will provide the security of encryption. However, I don't know any details about how the VPN I use is ...