Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

0
votes
0answers
11 views

Network security issue. Cannot access https websites

I am having an issue with my network. I cannot access any https website because it gets wrong certificates. Here is what I get: Attackers might be trying to steal your information from ....com. ...
1
vote
1answer
10 views

Ranked Order of Security for Encryption Algorithm Preferences: For GPG

GPG & PGP negotiate the encryption & hashing algorithm to use based on the recipient key's prioritized list of supported algorithms. The problem is DES/MD5 are forced to be included as the ...
10
votes
3answers
1k views

How is uniqueness of MAC addresses enforced?

Again and again I read that devices are uniquely identified by their MAC addresses. But how are MAC addresses determined? (And do they tell us anything about the device which they represent?)
2
votes
0answers
27 views

Strange temporary “Access denied” error accessing encrypted file

After a system reboot (Win7 x64), an application (Pidgin) reported that it couldn't access a file (blist.xml) in its subdir under AppData\Roaming\. The subdir was encrypted. Accessing the file with ...
4
votes
1answer
2k views

Force Chrome to Ignore a "weak ephemeral Diffie-Hellman public key”

With the update of Chrome to v45, it's blocking access to pages with weak ephermeral Diffie-Hellman public keys. I understand that this is due to Logjam. I understand that switching from https to http ...
-2
votes
0answers
22 views

How to secure a virtualised web server

I do front end web development for clients and have a local webserver that acts as my production/staging ground The webserver is virtualised on a windows 7 machine that has Ubuntu installed within a ...
3
votes
1answer
21 views

filtering/removing potential dangerous content from word files?

Word (.docx) files can be dangerous. I often receive word files from other people, which may or may not be safe. For the most part, I am only interested in getting the textual content, like text and ...
1
vote
1answer
87 views

Same SSL Cert on 2 Servers, 1 Passes & Other Doesn't

I run a few small sites, and last year installed SSL certificates on each of them. Last week a visitor contacted me with a question about my SSL certificate, which prompted me to run a couple of SSL ...
0
votes
2answers
135 views

Mozilla Firefox won't connect to Google, IE can

I have went on to Google search before, however today, Mozilla Firefox won't let me connect to Google's search page. This is what I get. You have asked Firefox to connect securely to ...
2
votes
2answers
46 views

How can a forwarded email know the forwarded-to email address?

I received an email with a coupon offer and viewed it within webmail (should not matter which provider). I wanted to print my offer, but my printer was down, so I forwarded the email to a friend so ...
-5
votes
0answers
28 views

Share a photo with inability to download it [closed]

When you share a photo on the internet how can you disable the download the photo in an original jpeg format to the end-user's computer, i.e. make it difficult to create a copy of the photo. (Not ...
1
vote
1answer
27 views

Can't edit Local Security Policy in Windows 7

I'm trying to add users to the Access this computer from the network User Rights Assignment policy but the 'Add' button is disabled: I'm connecting to the machine via RDP using the local ...
0
votes
1answer
25 views

log password for ssh login failures

I'm managing a server and i wonder if it is possible to log the password used for a failed connexion attempt. In the auth.log, there is the user but not the password. it's just for an informative ...
0
votes
0answers
7 views

Is user data compromised if JWT is intercepted? [on hold]

I have read many articles about using JWT for authentication and they make it clear that JWT is NOT encrypted and that the server will reject a modified JWT because the signature will be invalid. ...
-3
votes
0answers
36 views

What are some ways of bypassing SSL and HTTPS site blockers/security? [closed]

What are some ways of bypassing SSL and HTTPS site blockers/ security? I have a job at In-trek Co. here in Europe and they taught us some basics of how to bypass socks4 and socks5 security software. ...
0
votes
1answer
13 views

How should I record metrics on code that is being used by many people?

I have code (let's say a bunch of Python scripts) being used by many people (on a common AFS network). I would like to be able to collect metrics on the usage of the code (compile times, run times and ...
1
vote
1answer
30 views

Make Firefox warn before allowing user to visit non-HTTPS website

I want to avoid accidentally visiting websites served over unencrypted HTTP. How can I configure Firefox so that it will warn me if I attempt to visit such a site? Ideally: this shouldn't need an ...
0
votes
1answer
11 views

Choosing the correct security settings on Thomson TCW750-4 router

Should I leave both WPA-PSK and WPA2-PSK enabled on my Thomson TCW750-4-router? From trying to google it, I get the impression that just leaving the latter enabled will be more secure but that it may ...
0
votes
1answer
59 views

Does Windows 10's “reset PC and clean the drive” correctly clean the drive?

I'm resetting my Windows 10 laptop and deleting all my personal files to give it. When I asked Windows to reset, I found what seems to be a new option : "clean drive", that claims to make data ...
0
votes
1answer
27 views

Taking Over Ownership

So I took ownership over a folder and then I deleted the folder. Does that effect ownership security of the rest of folder in mast folder? Folder I deleted was a duplicate I made, it was nothing ...
0
votes
0answers
12 views

Run our own Certificate Authority for internal use only: safe or not? [migrated]

According to the guide at How to Run Your Own Certificate Authority, my company intends to issue our own digital certificates for internal use only (the Managers will sign PDF documents to send the ...
1
vote
1answer
97 views

How to change encryption algorithm for private key file using OpenSSH 5.3

Using ssh-keygen, I need to generate a SSH private key file where the encryption algorithm used when using a passphrase is AES-128 with CBC mode. I know this is the default for OpenSSH >= 5.4 as per ...
1
vote
0answers
19 views

OpenSSL listen and decrypt automatically

I want to design an application to connect my server using OpenSSL and send encrypted data (encrypted with server public key) to specified port on server like 4433. All client using server public key ...
0
votes
1answer
15 views

Only allow whitelisted IP addresses to try to connect in fail2ban

My auth.log is littered with connection attempts from nasty zombies. It is really annoying. And the server doesn't even permit password logins. What I would like to do is set up fail2ban to only ...
3
votes
2answers
308 views

Is my FTP connection secure?

First, I'm not sure to ask this question in StackOverflow cause it is for programming so SuperUser is more proper place I think. My hosting provider said that the FTP feature is not secure (not FTPS ...
0
votes
0answers
49 views

turn off messages for Security and Maintenance (Action Center) items in windows 10

turn off messages for Security and Maintenance (Action Center) items in windows 10 ? i found \Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\ChecksRegistry key of that. anybody ...
0
votes
1answer
31 views

How to whitelist an IPv6 address in VPC security groups on AWS?

I cannot enter an IPv6 address in the inbound rules in AWS VPC security group settings. It says The source must be a valid CIDR (e.g. 0.0.0.0/0) or the ID of another security group and It wont let ...
4
votes
1answer
21 views

Is there an open source implementation of an 802.1X authenticator?

I'm aware of Xsupplicant, but it seems to only implement the "client" side of the handshake. The authenticator side, which handles the other side of the EAPOL handshake, and interfaces to RADIUS ...
0
votes
1answer
20 views

Programs accessing hidden files and folders

I want to write an excel macro that deletes/creates files and folders. This brought me to ask myself the following question: How are hidden files/folders seen by programs and are they modifiable? ...
1
vote
1answer
22 views

How do you configure NLA for RDP in Windows Server 2012?

The Super User question Is windows remote desktop secure? describes Network Level Authentication (NLA) and how to configure it in Windows Server 2008. Unfortunately, the GUI option to configure NLA is ...
0
votes
1answer
35 views

Retrieve IP from a mail I received

I already made some researches about this subject on the interwab, but I couldn't find what I wanted. Here is the point. I'm a beginner highly interested onto web security and something blew my ...
1
vote
1answer
25 views

Prevent application from monitoring other processes running on same machine

Is it possible for a 3rd party application running locally on a Windows 7/8/10 to monitor other services/processes running on the same machine? If so, how would one prevent this?
-1
votes
0answers
34 views

How to get the correct password?

If I know that a password field has 10000 possibilities because it's a 4 numbers password like 1234. Generally, It is abcd where a,b,c,d is any integer between 0 and 9 and so that's how I get the 10^4 ...
1
vote
1answer
36 views

What to do about a possible attack on my server with “../../[…]../../ETC/PASSWD” in PHP?

I am running a web server (no root) hosted by one.com and I once coded a little “tool” that makes funny letters out of a “normal” user input though PHP `$_GET. This stuff is so 2000 but people still ...
4
votes
1answer
39 views

How does an os know an application was downloaded from the web?

I download a compressed tar file; I uncompress it; I run make, compiling a large number of object files that are then linked to make an executable, which is embedded in a (Mac OS X) application. I ...
-1
votes
0answers
15 views

Windows Certificate Store hierarchy / heredity?

i know the default windows system stores, like: CERT_SYSTEM_STORE_CURRENT_USER CERT_SYSTEM_STORE_LOCAL_MACHINE CERT_SYSTEM_STORE_CURRENT_SERVICE CERT_SYSTEM_STORE_SERVICES CERT_SYSTEM_STORE_USERS ...
1
vote
1answer
19 views

disabling root ssh access not working

By mistake I have allowed loging as root through ssh, now there are several automated attempts to log as root by some malicious machine. There are so many attempts that the server is slow and my sites ...
0
votes
0answers
80 views

I am the sole user (and administrator) of my PC, but I can't delete certain files from my C:\ drive because of permissions

I want to delete some folders from my C drive to clear up space, namely Windows.old which is just 100 gigabytes of wasted space. But when I try to delete it, it tells me I need permission from SYSTEM ...
0
votes
1answer
48 views

How to check OS X installed security updates

Triggered by the apple security update notification on Security update 2015-006 I updated all of the updates in the App Store (no new updates left). I was actual wondering how to check if the latest ...
1
vote
1answer
21 views

When multiple Encrypting File System certificates are installed, which one is used for encryption?

To encrypt a file or folder in Windows, you basically go to its Properties and check Encrypt contents to secure data. Windows will use the certificate for Encrypting File System (EFS) that is ...
0
votes
1answer
28 views

Basic Security Configuration for Router Base Configuration?

I'm trying to build a decent base configuration and I'm just a little curious if features like IPS and SPI need to be setup explicitly? This network isn't going to be integrated in with our users, but ...
0
votes
0answers
45 views

Browser problems after update windows 10 (ERR_SSL_PROTOCOL_ERROR)

I have problems with some websites, some of these websites will load occasionally but not always, such as Google, but others will not load at all, such as Twitter. Using Microsoft Edge, the website ...
1
vote
1answer
23 views

Mod Security core rule set, virtual patches [closed]

I've a question about terminology. Are the rules provided in the Core Rule Set for ModSecurity can be called virtual patches? If not, can you tell me why?
1
vote
0answers
65 views

Outlook 2013 keeps asking for Office365 password

Here is my problem: I have Outlook 2013 (with SP1) on a Windows 8.1. I configured a user@domain.onmicrosoft.com Office365 account on it and it works—mails are sent and received and the status shown is ...
0
votes
0answers
16 views

Java security sitelist not working

In the Java Control Panel you have the option to maintain an exception list for sites that would otherwise be blocked because of security settings. However I face a strange problem: When I add a site ...
0
votes
1answer
28 views

How does the Bitdefender Box actually work?

As I'm gradually adding internet-connected devices, appliances, and "things" around the house, I've been looking for one solution to protect all of them from malware and unwanted intrusions. As of ...
-1
votes
0answers
25 views

Will using something like vmware in addition to Tor help to increase anonymity and security even further?

I recently downloaded Tor Browser to help increase internet anonymity because I do not want my personal information to be compromised. I have heard of a program called "TAILS" that compliments Tor to ...
1
vote
0answers
23 views

Print Preview with PuTTY

PuTTY is a very good application, but it doesn't have printing options, or maybe I don't know them. Can anyone help me? It's really necessary to preview what we are going to print. Another option is ...
0
votes
2answers
39 views

Rsync over SSH and passwordless key security

I need to send files from a group of servers to a remote server. My plan was to use rsync over SSH as it meets my requirement of a secure connection and the ability to delete from source upon ...
0
votes
0answers
19 views

Is FTP user isolation adequate security for a Windows 2008 server?

On my Windows 2008 web server I've also setup an FTP site with user isolation within user folders and the NTFS permissions are set so that users only have read access to their own folder. Though I ...