0
votes
0answers
25 views

Can 'ping' requests still be used for a DoS attack?

I was reading this question, and couldn't help noticing this part of one of the answers: On the Internet, ping of death is a denial of service (DoS) attack caused by an attacker > deliberately ...
0
votes
0answers
5 views

How can I add an LDAP directory to all Outlook profiles? (SMIME directory)

I need my Windows based Outlook users to be able to look up an SMIME certificate from this LDAP directory How can I automatically modify an Outlook profile to include this?
1
vote
1answer
24 views

Is there a way to restrict my program installation to a certain web-source on Windows?

I have a program HelloWorld, signed by me and distributed from my company site. But someone has downloaded it from my site, wrapped into program SuperDuperHelloWorld and also added some malware into ...
0
votes
0answers
28 views

Windows: How do I recognize that someone has access to my PC?

I'm a Windows user (Windows 7 and 8.1). How can I see that somebody has access to my system and how do I block this? I mean both scenarios: Some person somehow knows my password and can access my ...
1
vote
0answers
17 views

How to manage SSH keys securely in Windows?

I currently have an SSH key I use to access both Bitbucket and my home server from my Windows laptop. The most convenient way I found to deal with the use of the private key was to just have pageant ...
1
vote
1answer
25 views

Is auto-logon on laptop with encrypted hard drive secure? [closed]

I have the complete hdd of my laptop encrypted (with the Windows built-in Bitlocker) and thus have to login two times upon booting (Bitlocker and user account). Since I'm the only person using the ...
-1
votes
1answer
42 views

Prevent program from getting stolen with Windows permissions

I'll be sharing a dedicated Windows 2008 R2 server with another person. I will have admin rights and admin an account. The other person will only have a "normal" account and no admin rights. I have a ...
0
votes
1answer
50 views

How can someone get my CLSID?

I just got a call from a guy telling me he was Microsoft IT support. He told me to go to a suspicious website and download an executable there. Totally did not give him the satisfaction and trolled ...
0
votes
1answer
5k views

Identifying program attempting to install certificate on windows

I'm trying to help a friend using Windows (which I'm not an expert on by any means) who's experiencing malware-like behavior: a dialog box is repeatedly popping up reading: You are about to ...
2
votes
1answer
22 views

Windows - service account default certificate store

I am writing a web app that connects to external web services. The external web services serve an intermediate certificate signed by Thawte SGC CA - G2. When I setup IIS to run the web app using ...
42
votes
4answers
2k views

Should I install Internet Explorer updates although I disabled it?

I have disabled Internet Explorer in the "Windows Features" dialog. Nonetheless Windows Update alerts me that there are security updates for IE. I am aware that I cannot uninstall IE and it remains ...
5
votes
1answer
122 views

Am I safe from MS Advisory 2963983 by using a different application to host the MSIE rendering engine?

Microsoft Security Advisory 2963983 Vulnerability in Internet Explorer Could Allow Remote Code Execution Published: April 26, 2014 General Information Executive Summary Microsoft ...
1
vote
2answers
54 views

Run Firefox as a separate limited user

Each year up to 100 new local and remote code execution vulnerabilities in Firefox are found. This is not browser specific, each browser is potentially vulnerable. Running it under your own user ...
1
vote
1answer
151 views

Windows method to detect ARP Poisoning in my local network (LAN)?

(This question comes from this thread, and is intended to remain as a reference question/answer pair for more generic ARP network detection not limited to WiFi, or without the need of the specific ...
3
votes
3answers
134 views

If you block an .exe file in Windows Firewall, are you also blocking the .dll files it uses or it needs to be done separatly?

Let's consider this scenario: There's some X software downloaded from the internet with one .exe file and several .dll files. The .exe file is prevented from accessing the Internet by using Windows ...
0
votes
1answer
119 views

Is windows remote desktop secure?

Is windows built-in Remote Desktop secure? I mean, does it use any encryption methods? or someone can hijack the data that have been transferred between two system?
1
vote
1answer
85 views

Windows Password Policy: What exactly do the complexity requirements involve?

I am currently viewing this feature in Windows 7, but I imagine it is very similar if not identical in many of the other Windows OS versions. I am looking for an explanation of the exact rules for ...
0
votes
3answers
592 views

How to prevent the sethc.exe hack?

There is an exploit that allows users to reset the Administrator password on Windows. It is done by booting from a repair disk, starting command prompt, and replacing C:\Windows\System32\sethc.exe ...
1
vote
1answer
28 views

Is it possible to keep several files on windows partition after re-installing windows?

Is it possible to keep several files and programs on windows OS after re-installing it? because of someone can steal the device that uses windows OS, then just removes the windows and install another ...
0
votes
1answer
34 views

Security of Microsoft Windows, Windows on a network, and network backup?

I recently got a laptop to accompany my desktop, and to manage files across them I am considering backing the laptop up to the desktop over a network, and then backing up the desktop in turn to an ...
1
vote
1answer
50 views

Stop IE from being started from a URL shortcut

This question is similar to How to disable Explorer.exe for given user?, but with a key difference: I've already blocked IE, mostly. In Group Policy I have added iexplore.exe to the list of ...
1
vote
1answer
36 views

Privacy with new windows accounts?

Windows 8 is insisting me to use Hotmail account to login into operating system. Having this, will it be possible to identify me with Internet Explorer from any site? UPDATE If I go to Hotmail site ...
0
votes
1answer
31 views

Is it bad to have a stand alone firewall that disables the native system firewall?

I've heard claims that firewalls such as the one that comes with Avast are better than others that disable the system firewall. Is it correct that it could lead to problems disabling a firewall built ...
1
vote
1answer
203 views

Why don't you have to press CTRL+ALT+DEL to logon anymore in Windows 8?

In previous versions of Windows, you had to press Ctrl + Alt + Delete to logon, or to unlock a locked workstation. This was because this key sequence was recognized directly by the BIOS, and thus ...
0
votes
0answers
10 views

What is the best way to share SMIME keys across all my devices?

I have many devices that I would like to use SMIME with IOS (iPad mini) Windows (Work PC) OSX (Home PC) Android (Cell phone) Web Browser (at my girlfriends) Since a SMIME message can only be sent ...
0
votes
0answers
19 views

Window folder sharing and security setting on subfolder

How could I set my sharing and permission setting so that the user can access a sub folder but cant not access the folder itself? Currently on my share drive I have a folder "A". With in the folder ...
80
votes
8answers
20k views

My colleague often shuts down my machine through the LAN - how do I prevent it?

This might sound weird. My colleague and I were working on a Windows machine. He frequently shuts it down through the LAN. He usually follows these steps: Access command prompt, enter shutdown -i. ...
0
votes
0answers
43 views

Is it possible to have a folder that only certain programs can write to?

I have an application which generates some data files and exports them to a folder. It is very important that no-one can then edit these files - they should be able to read them but not update ...
0
votes
1answer
99 views

Is there a limit to the number of IP addresses for a Windows Firewall rule's Scope?

I've got a Powershell script that adds IP addresses trying to run brute force attacks on my server to a firewall rule that blocks them from accessing it. Recently it stopped working, and started ...
0
votes
0answers
75 views

How to locate unknown user being created in windows 8?

How to identify unknown user being created in windows 8 machine? I found it in System Properties/Advanced/User Profiles/Settings as Account Unknown. It is not present in c:\Users nor in ...
0
votes
1answer
51 views

How to find application running by HWND?

I have a password keeper app which states that a certain other application is monitoring my clipboard. The password app only states the following as the application it is warning about: HWND: 855900 ...
0
votes
2answers
135 views

What is the difference between Linux's root privilege system vs Windows' administrator privilege system? [closed]

People say Linux is safe because system changes can only be made having root access and therefore blocks viruses or other malware from being executed. But doesn't windows administrator user system ...
0
votes
0answers
20 views

Mount encrypted volume before / during login

To reduce impact of possible computer theft, I would like to have my user profile protected using a robust encryption, so that even if someone can get a physical access to my computer, he will not be ...
1
vote
0answers
97 views

I want to be able to have a daily task run showing the times users log on and off

GOAL: I want to be able to have a daily task run showing the times users log on and off ENVIRONMENT: Windows 2008R2 domain ACTIONS SO FAR: I have enabled Account Auditing via: start -> ...
0
votes
1answer
32 views

Windows NTFS : How to reset security easily?

(My English can be strange ..) I have one external HDD formated by NTFS. I use this HDD as my data storage. When I reinstall windows, external HDD's security settings seem to remain, so I must have ...
2
votes
1answer
94 views

security consideration when passing passwords on command line in windows

Applies to windows clients like Vista, 7, 8 What are the security consideration when running a tool that has a passwort parameter from a URL in keepass. Is it completely moronic to do so or is it ...
8
votes
2answers
546 views

Is it okay to use an administrator account for everyday use if UAC is on?

Since I switched to Windows 7 about 3 years ago, and now using Windows 8.1, I have become familiar with the concept of User Account Control and used my PC the following way: a standard account which I ...
0
votes
1answer
60 views

What are the recommended internet security measures to take? [closed]

I have built a special-purpose server, the only purpose of this server is to download some data from a remote(internet) data feeder and then do some data processing. The only internet connection I ...
2
votes
0answers
78 views

Host hacks when no access to hosts file

I would like to test website where public DNS name is not changed yet. In order to to do that I need to change hosts file on the workstation but the domain security policy prevents me to do so. Is ...
1
vote
3answers
89 views

Prevent unauthorized access to windows(Considering windows and bios password failures)

SYNOPSIS: Well, as almost every one knows, the first line of defense against unauthorized access to a windows computer is the windows account password. But as many of you might know, breaching it is ...
0
votes
0answers
83 views

Detect USB device connection (any device, not only storage)

My question is: in Windows Server 2012, is it possible to launch an event when a device is connected to a USB port? I mean: any device, including a keyboard or a mouse, not just storage USB drives. ...
1
vote
1answer
1k views

Every website is showing untrusted certificate warning on all browsers

I'm on windows 7. Every website is showing untrusted security warning. I tried every browser that I have. I tried using https. This is extremely odd, it never happened before, well it could happen ...
0
votes
2answers
179 views

Windows Updates can be critical or recommended, but why?

I just wanted to know the difference is between Windows Updates being 'Critical' and 'Recommended'. And also what factors go into deciding this?
4
votes
1answer
89 views

IE can't load embedded swfs on the Internet, but can access them locally

We have two Windows Embedded Standard machines that have suddenly started failing to load embedded swfs over the Internet via IE, but then they're able to load them just fine when the HTML wrappers ...
2
votes
0answers
74 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
0
votes
0answers
548 views

Can non-admin user add himself administrator privileges?

Whenever I reboot Windows 7, I find that my domain user, under which I login and work, is not any more part of local Administrators group (or any groups included into Administrators group or domain ...
-1
votes
2answers
89 views

How to block all ethernet traffic destined to any MAC address other than the gateway?

I am using Windows 7 Ultimate. I want to be invisible on the LAN. It means that other hosts on the same LAN must not be able to see my computer. Based on this comment, I want to block all ethernet ...
0
votes
0answers
91 views

I removed “Everyone” on a NAS folder, now access denied

I read through first, but didn't see this specifically. I was worried about network access to my NAS, and right-clicked Security. I removed "Everyone" from the permissions, only \\server\admin ...
0
votes
1answer
340 views

How to restrict unwanted users to remotely access my system

I have windows 7 installed in my system. I want to manage my system in such a way that only users of particular ip in the network can take my system remotely and others not. I don't have to use third ...
0
votes
1answer
49 views

Will using the same password on windows 7 and Ubuntu make it easier to crack either?

I was just wondering if, due perhaps to different hashing methods, knowing that the password is the same for a Windows 7 and an Ubuntu system would make either system more vulnerable. The OSs are dual ...