The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

6
votes
0answers
4k views

Proxy radar found in apache logs file

I was reading the logs of the apache server and I was shocked by seeing these logs! [Sun Oct 25 06:44:48.922248 2015] [mpm_prefork:notice] [pid 17635] AH00163: Apache/2.4.7 (Ubuntu) PHP/5.5.9-...
4
votes
0answers
3k views

How to close suspicious port 999 garcon, is it malware?

On Mac OSX, I ran the command nmap localhost and I found I have this suspicious open port: 999/tcp open garcon Then I tried to see if there is an associated process, but nothing shows up with ...
4
votes
0answers
381 views

ESD considerations of an open-air/wood and plexiglas case

I am going to build a computer soon, and instead of buying a pre-built case I am planning to build my own case; either closed and built with wood and plexiglas, or open and built with just wood. My ...
3
votes
0answers
516 views

How to set TLS protocols as default after applying KB3140245?

This is about instructions to Windows update KB3140245 on a 64-bit Windows 7 machine. Microsoft released this update some time ago that "allows users to change system-wide default protocols for ...
3
votes
0answers
55 views

I keep getting unusual devices on my router

I keep seeing devices on my router that aren't mine (I have cataloged the MAC addresses of the devices in the household). I can ban them, but I can't stop them from coming. Although I use a secure ...
3
votes
0answers
156 views

How can I safely remove an RSA 4096 ransom-ware virus?

My dad's computer got infected with an RSA 4096 ransom-ware virus. For those who don't know it is a virus that encrypts all the files on your PC using an RSA 4096 encryption key. Then you need to use ...
3
votes
0answers
41 views

Debian 7 java Executable Flag Disappeared

I have an up to date Debian 7 server, also running Plesk 11. Yesterday exactly at the same time (2015-09-21 11:38:13 EET) the exec flag has been disappeared from all the java executables on the server....
3
votes
0answers
588 views

Use EMV-enabled Credit Card (chip card) for Windows Smart Card log-in?

I have a USB Smart Card Reader and a Credit Card with Smart Chip (EMV) on it. So I was wondering if I can associate this card to my Windows Administrator profile (local user account) and use it as a ...
3
votes
0answers
72 views

ssh-add: how to automatically insert private key passphrase?

I'm using ssh-add to add a private key in order to call lftp after that. It happens that my private key contains a passphrase and I need to automatically fill it when required. I'm able to overcome ...
3
votes
0answers
121 views

Convenient way to check AUR PKGBUILD against malicious code?

As is well known, one should take care when installing packages from the AUR, because the PKGBUILD may not do what you expect and may be malicious. For this reason, my workflow for installing and ...
2
votes
0answers
61 views

Is there anything legitimate that could change my Screensaver security settings?

A few days ago my laptop started displaying the "Locked" screen if I was away from my computer for a while. Looking into my screensaver settings, it was set to do this after 10 minutes even though ...
2
votes
0answers
15 views

Should a device that supports WPA2-AES be able to connect to a Mixed Mode network (WPA-TKIP, WPA2-AES)?

I'm not sure if this is the right place to ask this question, please let me know if it is not. I have a specific question about the 802.11 security standards for WiFi. I am using an embedded WiFi ...
2
votes
0answers
69 views

Preventing ransomware attacks by detecting suspicious levels of file system activity

Assume a Windows 8/10 home/small office system with 3-4 users and a few TB of file share (say 6TB in a suitable RAID). Most files are static, but sometimes files get moved round or modified. But if ...
2
votes
0answers
2k views

How secure is VeraCrypt by IDRIX when compared to the now defunct TrueCrypt?

I would like to know how safe is VeraCrypt by IDRIX to use when compared to TrueCrypt, which as the webiste states is unsecure. Had IDRIX managed to fix all the security bugs in TrueCrypt or is there ...
2
votes
0answers
118 views

UAC settings are automatically disabled at least once a day

I have a weird security risk that I have submitted to our IT Operations without any luck; at least once a day, our machines running Windows 7, 8.1 and 10 has the UAC settings disabled, and we discover ...
2
votes
0answers
52 views

Multi-factor authentication to 2012 RDS farm, preferably client certs?

Wonder if anybody can give me a steer on this. We use RDS quite heavily but I would like to enhance the security of it, VPN is an option but I would prefer to avoid if possible. Ideally what I'd ...
2
votes
0answers
1k views

How to set up a password to protect bitlocker key with tpm?

My computer is a dell xps12 (2013) laptop running on windows 8.1 pro, uefi and secure boot enabled. I successfully enabled tpm and encrypted system partition with bitlocker. I was a bit surprised it ...
2
votes
0answers
81 views

OSX - Custom lockscreen incorrect password script

As you probably know, in Mac OS X you can enable a lock screen when waking from sleep, where the user enters their password. I am looking for a way of running an Automator.app workflow when an ...
2
votes
0answers
46 views

Prevent computer from connecting to outside LAN networks

I'm looking for a solution like Restrict Computer from Connecting to Outside Wireless Networks that would also work with wired connections. We have a consultant in our company that sometimes works ...
2
votes
0answers
299 views

“Windows Security” alert when moving files in My Documents/Desktop (local disk)

Every time I try to move a file to a different location in My Documents or on the Desktop by dragging it I get a "Windows Security" alert telling me "These files might be harmful to your computer". I ...
2
votes
0answers
145 views

bash Segfault by infinite recursion

I just noticed that the bash I'm using (4.2.25(1)) isn't protected against infinite function recursion. In such a case a Segfault happens (and the bash process terminates). To check this on your ...
2
votes
0answers
253 views

HIPS for Linux (ie, interactive SELinux/AppArmor)

Windows has a number of programs (generally referred to as Host-based Intrusion Prevention Systems) that offer protection against difficult security threats (such as zero-day exploits) by blocking ...
2
votes
0answers
150 views

Windows' Security warning on all files on local drives

Users usually can download portable software and use it from local drives withount any warning. (I mean small executables just as putty.exe or a portable application from PortableApps.com) However ...
2
votes
0answers
45 views

How can sensitive data written in a custom Outlook Form be protected?

We have an outlook form that is installed on some users machines, for use with their Exchange email account. All the emails sent using that form go to an internal functional/shared mailbox that is ...
2
votes
0answers
452 views

Make Chrome automatically load insecure content for specific pages/websites

Is it possible to have Chrome load content for specific web pages? I have this page that I go to all the time and I am tired of clicking on the shield each time(to load anyway). I don't want to have ...
2
votes
0answers
263 views

Host hacks when no access to hosts file

I would like to test website where public DNS name is not changed yet. In order to to do that I need to change hosts file on the workstation but the domain security policy prevents me to do so. Is ...
2
votes
0answers
122 views

How to allow a secure remote desktop login, yet keep things convenient?

So I want to have RDP on my main desktop machine and while I did this countless times already, I always used just the hardest possible random passwords. Which indeed works quite well on servers, as ...
2
votes
0answers
168 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to Publisher):...
2
votes
0answers
62 views

Information about a given DSA Key

Reading the answer http://superuser.com/a/13189/246855 to the question What is better for GPG keys - RSA or DSA?, I decided to examine the 2048 bit DSA key I use to figure out which secure hash ...
2
votes
0answers
56 views

Differences between encrypting an actual PC vs a virtual one?

Are there any differences between using for example TrueCrypt to encrypt the system drive of an actual PC and a virtual one running on ESXi? Are there any security advantages/differences?
2
votes
0answers
160 views

Should i use AWS IAM or my root credentials for my webapp access to S3 bucket?

I have a webapp that requires uploading/deleting/reading files inside a S3 bucket. What I did was I created a brand new Amazon WebServices (aka AWS) account. Let's call this AWS account team@webapp....
2
votes
0answers
3k views

BSOD - “replacing invalid security ID with default security ID” - Cannot boot to windows, black screen

I was working away on my computer when it suddenly blue screened. It's maybe done that once many months ago. Upon Reboot it began running checkdisk, moving orphaned files and then it got to this ...
2
votes
0answers
16 views

Belarc BenchmarkSummary Error

Installed Belarc but when it is opened it does not display the report. It shows: unknown error BenchmarkSummary((Galceran-PC)).html Uninstalled and downloaded again from another source. Same Error. ...
2
votes
0answers
314 views

Security Warning on scripts, but only on desktop

Somehow over the weekend, my Windows 7 Enterprise (64-bit) computer at work seems to have developed an odd problem. I went to load a management console file (.msc) that I've had on my desktop for ...
2
votes
0answers
654 views

How to remove Ahnlab policy agent?

Anybody know how to remove the Ahnlab Policy agent? I was forced to install it so that I could connect to the campus network when I visited Korea. Now that I'm home, I would like to remove it. However,...
2
votes
0answers
114 views

Do there exist any published security audits of FreeOTFE?

I see that http://www.freeotfe.org offers FOSS encryption software for Windows. This software also has a Wikipedia article devoted to it. However, it appears to have received less scrutiny than its ...
2
votes
0answers
188 views

Right way of installing Windows 8 and Ubuntu with encrypted file system

Here is problem. for which I am looking for solution My Current Installation on laptop and HDD Partition is as follows. 500 GB HDD -- C: 35 GB [Windows 8 Consumer Preview] -- D: 195 GB -- E: 195 GB -...
2
votes
0answers
82 views

Which Windows services and startup programs can I disable/modify to optimize performance/security?

For Windows Vista SP2 and Windows 7: I use this stand-alone (no LAN) computer at home exclusively to browse the internet, nothing else!.. I have another computer I use for development and testing ...
2
votes
0answers
1k views

John the ripper - not showing cracked passwords

I am using jtr to perform an audit on our admin passwords. It's cracked a few which showed on the screen, however when I try and get them to show again with the --show command, it says it hasn't done ...
2
votes
0answers
31 views

How does an Update Server verify that the request sent was the intended application?

If you have an update service that's running on a server listening for connections on some random port, how could one verify that any requests coming into that port are from the specific application ...
2
votes
0answers
77 views

Commandline to set perms on SQL's backup folder

I'm trying to get my webhost to grant me permissions to the daily backup folder used by sql server. I'd like to use FTP to access all files in that folder. i'd like to give the host a nice easy ...
1
vote
0answers
51 views

SSD encryption the proper way

When encrypting devices it is always recommended to fill it with random data first, or it would become evident that the drive is encrypted and how much encrypted data there is. I've read that on an ...
1
vote
0answers
10 views

How to check for OpenSSL Oracle Vulnerability for internal application?

I am trying to test our internal applications(DEV and QA enironments) which are behind the firewall for OpenSSL Oracle Vulnerability. I am able to run Qualys(ssllabs.com) to check for Oracle ...
1
vote
0answers
35 views

my mac is asking me if I want to allow it to access information on an *unknown* iPhone … why?

When I came into my office this morning, my Mac Pro had an iTunes popup (#1):
 
 Do you want to allow this computer to access information on "John Doe's iPhone"? If you don't allow access, ...
1
vote
0answers
35 views

Difference between separate admin/standard user and admin with UAC/passwort prompt?

I just installed Windows 10 on a new PC and was wondering what is more secure. Assuming UAC is enabled on the highest setting and I'm the only one using the PC. a separate admin and standard account ...
1
vote
0answers
17 views

View powerpoint online while prevent users from saving it

My company currently has a number of powerpoint-based trainings. While we want these to be accessible and viewable by our client, we do not wish for our client to be able to distribute the material. ...
1
vote
0answers
30 views

What type of attack is this by adding /127.0.0.1/ in the URI request?

I am hosting a website and I see a lot of request that include /127.0.0.1/127.0.0.1/ in the URI. Some times the /127.0.0.1/ is present multiple of time in the URI e.g /any/path//127.0.0.1/127.0.0.1/...
1
vote
0answers
16 views

Secure a PDF document on a future date

I'd like to "secure" a PDF document on some future date (specified by me). By "secure" I mean either of the following: the document becomes encrypted with a password (and cannot be open without one) ...
1
vote
0answers
55 views

Windows Network Policy Server is not logging bad passwords in NPS logs

I have an NPS server for RADIUS from an Aruba controller. Accounting and authentication logging is turned on and working, except for when the logon fails because of bad password. Security Logs All ...
1
vote
0answers
22 views

splwow64 deleting %TMP% permissions

Repeatedly I've had problems as a result from having all permissions set on the %tmp% folder (C:\Users\<username>\AppData\Local\Temp) (Win10) deleted. As default the users/groups SYSTEM, the ...