Tagged Questions

Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

-1
votes
1answer
28 views

How do I report vulnerabilities in Windows?

I have been looking for vulnerabilities in Windows 8 and Windows 7, and would like to report them to Microsoft. Some are extremely important including one that compromises the user's key store ...
0
votes
1answer
12 views

How to apply only security updates on CentOS?

Ive tried what this article describes: yum install yum-security Next step is yum list-security but the result of this is: Loading mirror speeds from cached hostfile * base: mirror.anl.gov * ...
3
votes
1answer
25 views

How to determine what is running in DLLHOST.EXE that's missing /ProcessID switch?

I have a series of dllhost.exe processes running on my computer: Every one of these image's command line is missing (what I am thinking is) the requisite ...
0
votes
1answer
12 views

unable to change the security properties on PDF file to password protect it

I have PDF file I scanned. I am unable to change the security setting to add password it it. Here is link how to password protect it and also the screenshot for the gray'ed out security propety. I ...
1
vote
0answers
6 views

How to make Pixaria work without ini_set()?

I am working on a server which has Pixaria installed. After wasting (yes, completely wasted) hours trying to find out why it showed a blank page, I finally decided to try to enable ini_set() in ...
0
votes
0answers
13 views

PCI Failure due to HTTP Reverse Proxy Detection

We use Security Metrics for our PCI compliance scans. Haven't had any issues in the past but our most recent scan said we failed due to "HTTP Reverse Proxy Detection". I'm guessing this has to do with ...
1
vote
1answer
16 views

How to remove error “Warning: ini_set() has been disabled for security reasons”, *without* enabling ini_set?

I don't want to turn on ini_set() for security reasons. So per CSF's recommendation, I did add it to be unset. However, a drupal site gives this error, but I want to remove the error (or hide it) ...
1
vote
2answers
31 views

Why is allowing root login via FTP( on cPanel) a considerable security risk?

I find it very convenient to administer my whole server by logging in as root. However, CSF tells me that it is a "considerable risk" to allow login to FTP via root, and other websites I googled ...
0
votes
1answer
9 views

How to hide Gnupg passwords when doing back ups with Duplicity?

I have been following some tutorials for Duplicity back ups. It is all fine except that everyone seems to be putting their Gnupg passwords in scripts or plain text files which sounds crazy stupid ...
-1
votes
1answer
45 views

“DoS attack: Smurf” in router logs - should i worry?

Here is 2 day filtered log from my Netgear 6300 Router. It seems that I am constantly having SMURF attacks. Based on my router settings it seems that I am being protected. I have "Disable Port Scan ...
0
votes
0answers
14 views

how to verify linux server security vulnerability?

I'd just install RHEL7, how do i certify that my server is free from vulnerability, virus or malware?, is the any tools or script that i can use to verify it? tq regards adabi
1
vote
1answer
3 views

Reversing AppArmor log line to rule

I am looking for a way to easily reverse a single line from /var/log/syslog reported by AppArmor for a profile in complain mode. I have seen that using aa-genprof that it uses what is reported to the ...
-3
votes
0answers
32 views

To prevent a DDOS attack [on hold]

Say I'm analyzing the traffic on the server and there's a sudden hike. What are all the steps and precautions that I have to consider in order to stop a DDOS attack?
0
votes
0answers
9 views

Workaround for Mavericks OSX for Java security

Is it possible to run a version of Java on OSX Mavericks that allows for "medium" security settings? This setting is required for my business' web-based remote access portal. Any suggestions/tips ...
0
votes
1answer
27 views

Where is the Windows Security Button or what does it look like? [duplicate]

Log in says Press CTRL + Alt + Delete or use the Windows Security button to unlock this computer. Nothing happens when I press CTRL Alt Delete. So, where is the Windows Security Button?
0
votes
0answers
12 views

How can I get my company proxy's root certificate (with Firefox)?

I'm facing a similar problem as in Firefox: This connection is untrusted + Behind corporate firewall that is, I'm getting "this connecting is untrusted" whenever I try to connect via https, as ...
0
votes
0answers
4 views

Syskey USB Mounting

The problem: Windows no longer mounts the USB Startup Key disk I created. As a result, I cannot log into Windows. Not even if I manually modify SecureBoot in the registry (from linux). Is there ...
0
votes
1answer
18 views

Is it possible to use USB token as file storage

Is it possible to store and retrieve files other than certificate in USB etoken? I would like to use it as read-only USB flash disk.
-2
votes
1answer
13 views

Post-Infection Analysis of Suspected Keylogger

I've recently downloaded and ran a file, which I now suspect might be a keylogger. I am wondering how can I tell if this file is a keylogger? I can provide a link to the file if anyone would be able ...
-2
votes
1answer
42 views

How to warn developers of an unknown server type (only have version #) that it's leaking their client's credentials all over Google? [closed]

This popular, but unknown server is leaking the admin login/pw all over Google, and I was wondering how to go about notifying the developer when all I have to go on is the information below. Server ...
0
votes
1answer
20 views

Limit Netgear Nighthawk AC1750 to given WAN IPs

I have a Netgear Nighthawk AC1750 router, and have SSH, HTTP, and several other ports forwarded to a server. It is not for public use, and will only be accessed by me. I've recently had 60,000 hits ...
-3
votes
2answers
37 views

Are new OS's secure? [closed]

I am not actually sure where to put this, so I will also be posting this to Stack Overflow and it will probably get kicked off one or the other. So I was messing around looking at different ways to ...
1
vote
1answer
43 views

Is it safe to run WindowsXP as a Virtual Machine?

I know XP should not be used on a normal internet-facing PC. But if you run it within a sand-boxed VM that can't access the main PC, is that OK? My use-case is I run a VPN within a VM, to RDP into a ...
0
votes
0answers
31 views

For a layman, how safe/secure are tokenized URLs? [closed]

Many web apps these days will allow you to post content that will be "unlisted" (I presume, not searchable via Google or their own search engine) and only shared via a URL. Some examples off the type ...
0
votes
1answer
38 views

New updates started to show up in fall 2014

Since WinXP support ended in April 2014, my Automatic Update client went quiet. But, about two months ago, updates started to show up in it again! Naturally, I was suspicious that M$ might be trying ...
1
vote
0answers
11 views

What can a non-Mac App Store app do in terms of sandboxing and security?

I'm curious about what applications from outside of the Mac App Store limitations are. By default, what are their permissions? What can they access on my computer? From my perspective, I can see that ...
0
votes
1answer
27 views

Is there a way to encrypt my traffic in foreign networks?

I will be staying in a hotel network for a while and I don't like the idea of someone wiresharking me. Is there any VPN software allowing me to encrypt my traffic? Something similar to TOR browser, ...
-1
votes
0answers
5 views

in Private Network System Can be Traced [closed]

in a Private Netowrk (in Company) if somebody using public DNS IP and Accesssing some Sites which are blocked, That System which he/she is using that can be traced? if that can be traced. how?
0
votes
1answer
30 views

how to prevent access of hard disc from guest user in window 7 ?

i want to restrict guest user from access the hard disc data, so how it could be, i goes through this way gpcedit.mc, User Configuration > Administrative Templates > Windows Components > Windows ...
0
votes
2answers
33 views

Splitting a file provides some sort of encryption?

I was wondering if splitting a file with tools like HJsplit provides some sort of encryption. Imagine I split an image or a pdf in various parts, if someone manage to get just 1 or more parts, could ...
0
votes
1answer
18 views

Prevent file from being uploaded(windows)

Say you have some file on your windows system. Is there a simple way or tool which can mark this file as not uploadable to some other machine over the internet? All applications on the system can ...
-1
votes
0answers
7 views

logging in via Google not working under firefox - security error [migrated]

I've tried to log in to this site via Google since I've been doing so for other StackExchange sites for a while now. However, it isn't working. When I click the "Log in using Google" link, it doesn't ...
2
votes
2answers
23 views

Securing and protecting a shared computer

I allow friends and relatives to use my home computer, but I'd like to secure it as much as possible, and so I have a few questions: How can I require an admin password (that only I know) for any ...
0
votes
0answers
23 views

Least-Privilege BUILTIN\Administrator Failure Configuring Application Control Policies with AppLocker

I'm configuring execution control on a computer running Windows 7 SP1 Ultimate with one hard drive with a single partition. With AppLocker comes the option to create "default rules". In the case of ...
0
votes
1answer
29 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
1
vote
0answers
20 views

Deny acess to file-shares (SMB)?

There are security policies like: Deny logon locally Deny logon on through Remote Desktop Services Deny access this computer from network Is there any policy to deny specific users/groups to ...
1
vote
0answers
31 views

How to require admin permissions to stop an executable in Windows 8

I have an executable on a Windows 8 machine, that I’d like to keep running. The problem is, the guy I share my dorm room and the Windows 8 machine with keeps shutting it off. Is there a way ...
0
votes
2answers
60 views

Is there a way to blacklist programs so that they can't be installed?

I again found on my sister's Windows PC the infamous Ask toolbar, probably installed along with some software. It is easy for bloatware to slip through. That is just one example. I'm aware that ...
1
vote
3answers
75 views

How do I properly SSH into a server behind a NAT while maintaining the tightest possible security?

I have a VPC in Amazon AWS. There's a NAT Server running in a Public Subnet that connects to an Internet Gateway. I have a bunch of servers running in various private subnets within the VPC. I'd like ...
0
votes
0answers
17 views

Database showing a list of current vulnerabilities?

I have been recently building my own firewall, but I was wondering is there a website or database which lists majority of the known vulnerabilities so I could obviously update my firewall based on the ...
0
votes
0answers
13 views

oscap audit on RHEL7

I'm new to OpenScap and I'm having trouble putting all the pieces together to evaluate a RHEL7 system. I've got the following RPMs installed: scap-security-guide-0.1.5-4.el7.noarch ...
0
votes
0answers
11 views

Representing web app users as OS users - bad idea?

How bad an idea is to have a web app that represents its users through OS users rather then storing them in a data base? And assuming their privileges are properly set up, to handle their http ...
1
vote
0answers
69 views

Java blocks applet on whitelisted site

On the webpage http://smbus.org/faq/crc8Applet.htm there is an applet for demonstrating the calculation of an 8-bit cyclic redundancy check. Java in Chrome and IE on MSWin7 will not allow this to run. ...
2
votes
1answer
48 views

Block site if browser not in incognito - Chrome

I want to block sites like internet banking and accounting systems if browser not in incognito mode (for security reasons, because browser has several plugins). Is it possible to block opening web ...
1
vote
0answers
21 views

Why was my computer try to to access the internet after I had placed it into hibernation?

From 21:30 on the 11/10/2014, my Computer was in hibernation. It started to come out of this mode and connected to the internet and with this address: https://www.google.co.uk/?gws_rd=ssl at ...
0
votes
1answer
27 views

How to patch a dormant windows 7 vm

I run windows 7 as a guest VM on an ubuntu Linux host. However I only start the VM rarely so there is a risk that Windows will have security holes until it is patched. Is it possible to patch the VM ...
0
votes
0answers
13 views

Firefox sometimes reporting insecure items on page with https

I have just installed a self-signed cert for usage on a test server and I added an exception in Firefox to trust it. When I load the page normally it shows the lock and all is fine; however if I ...
1
vote
2answers
58 views

How to secure a compromised virtual machine

I would like to run Windows in a virtual machine on my linux box. However, there is some concern from others on the same physical network that if the Windows box is compromised then they will ...
0
votes
1answer
31 views

Prevent unauthorized network connection

Can another computer (connected to Network B) gain access to my computer (connected to Network A through wifi) via any means? How can I protect myself from such unauthorized connections? I have the ...
0
votes
1answer
11 views

ActiveDirectory Update a user getting UnauthorizedAccessException

I have a script that updates user pictures. It works perfectly fine on my machine as I'm a Domain Admin. I want to schedule it to run on my SQL Server, but the account that is running the Agent ...