Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

0
votes
0answers
12 views

found a bunch of DO_NOT_TRUST_FiddlerRoot personal certificates installed on my system

I was looking at my personal certificates in Google Chrome and found a bunch of DO_NOT_TRUST_FiddlerRoot certs there. I don't know how these got there. Should I be concerned?
1
vote
1answer
18 views

Can YouTube safety mode be configured to survive a browser history clear?

I turned on YouTube's safety mode and set it to "Lock this Browser". Despite the text I found on Google's support site, the lock does not seem to work: Safety mode is enabled on a browser level, ...
34
votes
3answers
2k views

How does Linux know that the new password is similar to the previous one?

A few times I tried to change a user password on various Linux machines and when the new password was similar to the old one, the OS complained that they were too similar. I always wondered, how does ...
-1
votes
2answers
22 views

How to lock my computer through incoming connection directly into my computer

Im on a macbook yosemite, I usually get connected to internet through my landlord's wifi connection. How can I make sure that he cannot see or access my files in my computer (in Shared section of my ...
1
vote
3answers
60 views

What is the theory behind securely delete files on a SSD?

Assume that I have a file which I want to securely delete in a ssd. If I do a regular detele and then fill all unused space with a random data file, would this works?
0
votes
0answers
4 views

Unable to connect the Ubuntu EC2 instance to VPC LAN on AWS using secondary NIC adapter?

Infrastructure setup: VPC is created with 192.168.254.0/24 netwok Private subnet within VPC (Virtual Private Cloud) is created with 192.168.254.0/25 network Public subnet within the VPC is created ...
-2
votes
2answers
22 views

My Linux (Ubuntu 14.04) Box is being hacked [closed]

for a while now i've noticed that my machine operates itself by automatically popping dropdown menus in gnome and sometimes my firefox browser mysteriously opens new windows despite me having a script ...
25
votes
1answer
3k views

Why does Google call Thunderbird “less secure”?

I've never had problems using Gmail with Thunderbird yet, but while trying to use a free software client for Google Talk/Chat/Hangout I've discovered that, according to Google's document on "less ...
2
votes
1answer
27 views

Hidden network seems off and how can I increase my network security

For the last few week a hidden network keeps popping up in my network list. Every time this happens our internet drops is speed and our latency rises. This give me a feeling something is off so I have ...
0
votes
0answers
39 views

Creative solutions to work around kext signing issue in Yosemite? [closed]

Unfortunately Apple has decided to create kext signing in Yosemite that creates issues for SSDs that require Trim support for optimal function and longevity. Whether this is vendor lock in or ...
1
vote
1answer
20 views

How secure are go lang based HTTP Servers? [closed]

How secure should I consider the go lang net/http framework to be? I understand just how broad a question this is, but I'm wondering how robust I should consider the framework itself, NOT the ...
0
votes
0answers
30 views

Maximize seucurity in Windows XP [closed]

I would like to downgrade Windows 7 (currently installed on my laptop) to Windows XP, which is no longer supported by Microsoft. I know this is something silly and I shouldn't been doing this, but I ...
0
votes
1answer
23 views

Sophos Remote Management & VuuPC - can my business partner access my private data?

I am not very security-savvy, but after getting loads of viruses and malware, one of my business partners offered to install their best antivirus software on my computer - it's called Sophos. A few ...
0
votes
0answers
4 views

make Xvfb listen only on local ip

to use graphical software even on my debian based systems without graphic cards (or in addition to its main graphic) i use the virtual frame buffer x server Xvfb. I am starting it with a little bash ...
2
votes
3answers
64 views

How come the machine name shows up in the email header?

All of the mails I send out arrive with the following header: Received: from My-iMac (12.12.12.12 [12.12.12.12]) by mx.mail.com How come my machine name My-iMac shows up? Is it because of my mail ...
1
vote
0answers
29 views

Virtualization for security reasons [closed]

I am going to build a home server and I am planning it's software setup. I would like to expose one or two services to the outer world. Namely, OwnCloud, in order to have remote access to my files. ...
0
votes
1answer
44 views

Quick Way To 'Hide' or Encrypt Several Terabytes Of Data? [closed]

I'm trying to adopt some best-practices (or at least less-bad-practices) with my external data storage. I'm looking for a way to quickly provide some minimal level of protection from prying eyes for ...
1
vote
2answers
193 views

Error installing shockwave player - can't close Norton popup window

I'm having the same problem as itmushroom. Adobe Shockwave Norton "Agree" button error Since I can't answer on his question because of my reputation, I'll try to clarify what he asked by ...
-1
votes
0answers
26 views

How do I prevent users from deleting a folder, while still giving them modify permissions to its contents… Doesn't work?

I have a backup of files on my computer and I am trying to make it so some of the folders cannot be deleted but their contents can. I was following the instructions on a post here, yet for some reason ...
2
votes
0answers
25 views

Windows' Security warning on all files on local drives

Users usually can download portable software and use it from local drives withount any warning. (I mean small executables just as putty.exe or a portable application from PortableApps.com) However ...
0
votes
0answers
10 views

Is system call the only way that a user program can intentionally affect the state of a Linux kernel?

I think there are several ways that a user program can intentionally affect the state of a Linux kernel. By invoking a system call; By invoking mmap() and writing the memory that has been mapped to ...
0
votes
0answers
13 views

Really weird behaviour of Apache POST call

Scenario: I have a server with MantisBT, plain HTTP, port 80. Queries are done to SOAP interface through HTTP POST calls. It's not working from my Windows XP PC using Eclipse Luna and Mylyn plugin: ...
1
vote
0answers
10 views

Nginx Modsecurity Apache Include Equivalent

I just switched from apache to nginx and so far I've been pretty happy. However, I've been having some issues with modsecurity. Back when I used apache I could use the following to add every rule I ...
-1
votes
0answers
47 views

John the Ripper: Crack ZipCrypto password

I made a password protected zip file with 7zip, using ZipCrypto algorithm. Set the password to 1234. I am using john-1.7.9-jumbo-7. I followed this manual: ...
0
votes
0answers
17 views

ssh-add: how to automatically insert private key passphrase?

I'm using ssh-add to add a private key in order to call lftp after that. It happens that my private key contains a passphrase and I need to automatically fill it when required. I'm able to overcome ...
0
votes
1answer
25 views

How to keep ~/.ssh folder secure on OS X

My question is about storing private and public rsa keys in ~/.ssh on OS X Yosemite. By default ssh-keygen stores pairs of keys in plain text format, which means anybody who have access to my OS X ...
0
votes
1answer
21 views

What are these files that defy file permissions to be inaccessible?

Every once in a while in our environment the AV comes across a malicious file, usually in a users temporary internet files, that no matter what I try, I can't edit, move, copy, or in any way access ...
1
vote
0answers
13 views

Windows Server 2012 WAP + ADFS 3 + SP 2013

We are looking to expose a SharePoint Portal over internet using Web Application Proxy secured with ADFS pre-authentication. The permissions to the Portal are provided through Claims based on certain ...
0
votes
0answers
37 views

Word allows users to create nested controls even during protection enforcement. Workaround?

I am trying to create a document with restricted editing in which users will only be allowed to fill in information in rich text controls. I will then programmatically grab the data from each rich ...
0
votes
1answer
25 views

Is blocking / allowing by IP using .htaccess (or equivalent) enough to secure a resource on a web server?

Currently in the process of setting up a web infrastructure to host my web application where security is the most important factor and I need to be able to allow only specific IP addresses to a ...
1
vote
0answers
27 views

Lock a folder so that user can't access but software can

i have a situation here i need to lock a folder (password protect) so that user can't access it without password application/software can access that folder.. :) What i can now: i know i can lock the ...
0
votes
1answer
24 views

Need to produce an Issue - “This file came from another computer”

I need to reproduce this issue for some particular reason. The thing is I'm struggling to get the message to appear on a folder: Security : This File came from another computer and might be ...
1
vote
0answers
14 views

Protection against maliciously altered files

Regarding this question, what can then be used to verify the authenticity of a file transferred using Internet if the uploader and downloader do not know (and can't meet) each other in person? ...
0
votes
0answers
14 views

How do mail clients vs. using a web browser compare in terms of security and vulnerabilities?

I have multiple email accounts from different providers: gmail, yahoo, etc. as well as more secure, privacy-minded services that use heavier encryption. Right now I access them all through a web ...
36
votes
12answers
5k views

What is the value of MD5 checksums if the MD5 hash itself could potentially also have been manipulated?

Downloads on websites sometimes have an MD5 checksum, allowing people to confirm the integrity of the file. I have heard this is to allow not only corrupted files to be instantly identified before ...
0
votes
1answer
36 views

Disposal of old 4mm tape cartridges

In cleaning out my home office, I see that I have a number of old 4mm DAT tapes. I no longer have a working DAT drive. Some of these tapes may have information that I do not want to have out in ...
0
votes
1answer
36 views

Best first steps for a hard drive?

I volunteer my time to service my schoolmates, fixing their problems, but conversations have come up about surveillance and hacking. I've been watching DEFCON's videos, and have learned that even ...
0
votes
0answers
15 views

How should a wildcard certificate be used? [migrated]

I have a wildcard certificate (pfx file) and I have doubts on how to use that. Should I install that on all of my application servers or alternatively create a new certificate and sign it with the ...
1
vote
0answers
8 views

Pairing of logitec Unifying devices uses a “secret algorithm”?

I'm considering buying a Logitec M570 wireless trackball. This device uses Logitec's "Unifying" wireless technology: a single tiny USB insert supports multiple logitec devices. This thread ...
-1
votes
1answer
15 views

How to secure data in production environment [closed]

I have an enterprise application running that uses both MySQL and Mongodb datastores. My development team all have ssh access to the machine in order to perform application releases, maintenance etc. ...
0
votes
2answers
52 views

Laptop security plan: Acronis True Image + TrueCrypt + Prey

Scenario: I'm working since 2 years as a software developer and sys admin. I never had anything useful on my pc. Now it's full of personal and sensitive data (passwords/source codes, etc). Now that ...
0
votes
0answers
15 views

Glary *.gfe decrypting file, lost psswd

I forgot password to my *.gfe encrypted file. How can i decrypt it? I need a script to break the psswd / hash of psswd from file. Can You help me? Thanks in advance
0
votes
1answer
78 views

Why hydra doesn't return a valid username&password with a valid supplied username&password

I'm just trying out hydra on OSX Yosemite, installed with brew brew info hydra hydra: stable 8.0 (bottled), HEAD https://www.thc.org/thc-hydra/ /usr/local/Cellar/hydra/8.0_1 (14 files, 1.2M) * ...
0
votes
0answers
7 views

Restrict shell (sh/bash) to a list of allowed parents?

Does anybody know whether is it possible, without modifying the source code, to restrict shell execution to a list of "white-listed" parent processes (in practice getty, x-term, sshd, /sbin/init or ...
0
votes
0answers
14 views

Free/open source alternative to Folder Guard

I've just cleaned my friend's infected computer. I highly suspect infection got via torrent downloading. She's downloading some music and sometimes instead of mp3 files she gets exe and executing it ...
-1
votes
0answers
26 views

Can badBIOS work on Raspberry Pi?

Raspberry Pi is minimum hardware computer. It doesnt have a Bios and the bootloader lives in the SD card. BadBios* represents a kind of virus that also includes BadUSB**. They affect the firmware of ...
0
votes
2answers
27 views

McAfee: Stock software distributed by SONY with Windows 7. Do I need to register this software or not? What happens if I do/don't register it?

My Sony VAIO Windows 7 system came with a copy of McAfee installed, but I never registered it. What puzzles me is, yes, I know it's out of date now, but the software still runs and protects me from ...
0
votes
1answer
70 views

About adding many sites with only different ports to Java Exception Site List

After update Java to Java 8 update 25, the Medium security level has been removed from the Java Control Panel. I am a TA and need to browse many sites from the students. These sites contain Java ...
2
votes
2answers
230 views

Does keeping Windows 7 updated make anti-virus software useless?

I was thinking, given that I regularly keep Windows 7 updated through Windows Update, doesn't this make having any anti-virus software useless. I may well be a naive user, but it seems to me that if ...
-1
votes
2answers
32 views

About the passphrase related vulnerability of symmetric encryption

There are tools like gpg or ccrypt that use the AES algorithm to symmetrically encrypt a file, which I've read it is quite safe, and uses 128/256 bit keys. Now, maybe I'm missing or not understanding ...