The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

-2
votes
0answers
9 views

Ways to prevent out of service transactions for a website?

Long story short, building a website that is a tendering portal, somewhat similar to that of freelancer.com Except I've come to the realisation that the two organisations in the tendering process ...
1
vote
3answers
91 views

Is a Bitlocker encrypted drive safe to dispose?

Based on the nowadays public knowledge about the strongness of the Bitlocker encryption - and supposing the user thinks the Bitlocker password is strong enough to make bruteforce unviable with the ...
0
votes
1answer
15 views

Whats blocking direct access of error_log in apache

I have searched on google for a long time but it seems like nobody has even asked this question: What is blocking the direct access of error_log on Apache servers? Or is it even an Apache thing or ...
1
vote
3answers
64 views

Secure Chrome passwords against WebBrowserPassView

I just got shocked with what WebBrowserPassView can show - it basically shows every password I've saved in my browser (Chrome). I guess other users on my PC could get my passwords that easily too. ...
3
votes
2answers
26 views

Can the SAM database be encrypted with EFS to prevent offline password cracking?

Is it possible to EFS-encrypt the SAM database to prevent offline password cracking? Would it have to be encrypted as the SYSTEM user?
0
votes
0answers
10 views

SABNZB+ connects to Google

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME sabnzbdpl 29850 sabnzbd 5u IPv6 190586 0t0 UDP *:50895->par03s14-in-x0e.1e100.net:http sabnzbdpl 31115 sabnzbd 5u IPv6 ...
0
votes
1answer
21 views

Can an external client access an FTP server?

The current network setup is like this: Company A has a network setup consisting of Cisco devices only. It has an FTP server where all files are stored and accessed. Company B has a different setup ...
0
votes
1answer
55 views

Felt spied on at work and after two visits from security they are reimaging [closed]

I work for a very large school district. I logged in at work on my Dell PC one morning and see Ultra VNC twice in my Start menu. But let's go back to the night before I saw those eyeballs in my ...
0
votes
1answer
30 views

Amazon page redirecting to payment page on my wifi

When I open an Amazon page on my apple devices, it automatically redirects to a login page, and then next to the payment page if I enter dummy login credentials. This happens only on my wi-fi. This ...
3
votes
0answers
103 views

How can I safely remove an RSA 4096 ransom-ware virus?

My dad's computer got infected with an RSA 4096 ransom-ware virus. For those who don't know it is a virus that encrypts all the files on your PC using an RSA 4096 encryption key. Then you need to use ...
0
votes
0answers
48 views

Two network cards, one directly to internet, other in LAN

I need some insight in my thinking so that I don't do something completely stupid. I have two physical network cards on my computer, one card/interface offers a handful of services and the other is ...
-1
votes
0answers
26 views

Mac Firewall - Block all incoming connections except one app?

Mac OS X 10.11 - Firewall Want to keep my privacy but the app is only working when incoming connections allowed. Is it possible to block all incoming connections except for one app? And without ...
2
votes
0answers
41 views

Preventing ransomware attacks by detecting suspicious levels of file system activity

Assume a Windows 8/10 home/small office system with 3-4 users and a few TB of file share (say 6TB in a suitable RAID). Most files are static, but sometimes files get moved round or modified. But if ...
0
votes
0answers
27 views

WhatsApp end-to-end end encryption

I went through WhatsApp Security White Paper which talks about how WhatsApp end-to-end encryption is achieved so that third party and even WhatsApp can't decrypt a message transmitted between sender ...
1
vote
1answer
72 views

Security regarding nginx + php on CentOS 7 with OwnCloud 9

I'm trying to setup a OwnCloud Server v9 for my freelancing purpose. SPECS: - CentOS 7 - nginx - php I'm a little bit confused. I can find only the info about the PHP Version 5.5 in the ownCloud ...
-1
votes
0answers
31 views

How to track this user?

I have a network with a domain controller and active directory users in one location Also in another location i have a different domain controller and active directory users. They are separate ...
0
votes
1answer
25 views

Is it possible to monitor traffic and identify rogue outgoing emails from mobile devices using a PC as a wireless hotspot?

I've discovered that my home network IP address has ended up on several blacklists after spam traps received emails from this IP address. I've tested the one PC that uses this network, and it seems to ...
1
vote
0answers
19 views

Block all inbound traffic except one IP using windows firewall rules

I have no problem doing this in linux. I just write an iptable to block all traffic and another one after to allow a specific IP. However it doesn't look to be that easy on Windows. I did the exact ...
1
vote
1answer
23 views

What does single user mode in Linux/Unix means and how is it different from Safe mode in Windows

What is Single User mode used for? Can it override the root Password? Do you need a password to acces the SU mode? In a normal session when you run SU command does it stands for Single User or Super ...
0
votes
1answer
31 views

Effect of “windows defender is taking action to clean detected malware”

Sometimes I get this message, but when I look at the history of windows defender, I see nothing. I am scared that windows is mistaking something important for a malware and deleting it without me ...
1
vote
1answer
94 views

How does Bitdefender's Crypto-Ransomware Vaccine work?

I have read responses (66 currently) but still have no idea how this tool works. "Razvan Stoica says: It’s a vaccine, but it can (and probably will) be updated against new strains, hence the need to ...
1
vote
1answer
58 views

Is there a way to display a watermark on the screen at all times?

I am working in a government position where we regularly process confidential information. We are looking into a possible way to patch the analog-hole problem and discourage users from taking photos ...
-4
votes
0answers
37 views

Permissions for Storage and Vendor folders in Laravel 5

duper-users ;) I'm just getting acquainted with Laravel, and would like to know what would be the best way to give the web server permission to the storage and vendor directories (as per the ...
0
votes
1answer
9 views

How does IPsec operate in NAT environment?

I know that if you mess with IPsec header it will drop the packet and NAT is build exactly for that. How do they deploy IPsec where NAT is also needed.
-2
votes
0answers
17 views

I keep getting emails from people who attach their email to mine [migrated]

I quite often get emails from google saying that someone added my email address as their recovery email. I always dettach the email, but how do they do this? Gmail allows it without entering my ...
2
votes
1answer
27 views

Web Server Security : www directory

I have a question about Web Server, especially PHP / Apache Server. A Developer told me and my colleagues that today it is bad to put our Web directory in WWW directory, because it is unsecured ...
0
votes
1answer
38 views

Can't Charge iPhone with Windows with restricted USB Policy [closed]

My company has restricted our laptop machines for any external mass storage device (probably using Kaspersky Endpoint Security restrictions). Because of this, I am not able to re-charge my iPhone. ...
0
votes
0answers
15 views

Family Settings on Microsoft?

Over the past couple of days I've kept receiving this message on my Windows 10 Laptop, "Your family can see reports of what you do on this device..." Last time I checked my family never put any sort ...
1
vote
1answer
51 views

I can access my neighbour's powerline ethernet network. Does that mean he can steal my power?

I was under the impression that the electrics in my totally normal semi-detached house were sufficiently isolated from my neighbours' that it was impossible for my powerline networking adapters to ...
0
votes
1answer
24 views

Virtual Machine Port Forwarding Security

I would like to be able to have a Virtual Machine connected to my network hosting a game server / Apache server. The only concern I have is the security of opening up ports to the internet. I want it ...
0
votes
1answer
43 views

Simple ARP poisoning attack with UNIX?

I would like to know how to do a simple ARP poison attack with UNIX commands only (no ettercap or arpspoof or anything like that.) I don't care about forwarding packets to the actual router, I just ...
0
votes
0answers
12 views

Is it possible to require a TOTP on Windows Login using existing or custom software?

I have always been looking for a way to require a Two-Factor Authentication (One Time) Passcode on my Windows Login. Using an algorithm such as TOTP, this should be easy, and require no internet ...
1
vote
0answers
31 views

Force Desktop OneDrive to Prompt for Password

I use the Windows 8 implementation of "Desktop OneDrive" to create and access files stored in my OneDrive account. My OneDrive login is also my Windows login so that when I'm using my computer all my ...
0
votes
1answer
52 views

Local disk: These files might be harmful to your computer

When moving or copying files from my local harddisk, I get the message: These files might be harmful to your computer. Your internet security settings suggest that one or more files may be ...
-1
votes
1answer
59 views

Do malicious web sites ever exploit vulnerabilities in Linux clients?

Do malicious web sites ever exploit vulnerabilities in Linux clients? Are there any documented instances of this happening in the wild? I am talking about actually taking over the client's machine ...
1
vote
2answers
40 views

Denied SYSTEM access to my drive, how to re-enable it?

I gone into my drives properties and denied SYSTEM's access to it: Now I can't access that drive and can't find a way to return the system access. Tried to add it this way but it didn't work: ...
5
votes
1answer
72 views

“sudo screen” vs. “screen -> sudo”

When I want to drop a root shell into screen, I usually do sudo screen. A friend of mine first launches screen, then drops a root shell in the screen session. What is the better way of both from a ...
1
vote
1answer
54 views

ClipConverter.cc and “Leave this page” pop-ups

So I currently use ClipConverter.cc to convert music from YouTube into .mp3 files. The site itself is innocent and in my opinion is the best website to grab high-quality music from YouTube. However, ...
0
votes
0answers
46 views

Java out of box cacerts certificate are SHA1 is there one with SHA2

Java/JDK/JRE they have a keystore cacerts under lib\Security folder as shown below Java comes with around 93 certificates out of box, These are not self-signed these are supplied by java itself ...
1
vote
0answers
48 views

Unlock Samsung SSD 840 PRO with hdparm

My Samsung SSD 840 PRO is locked with a password set by using the BIOS. Every time I turn on the computer, I have to type in the password. Cause there is a BIOS bug, I am not able to change the ...
0
votes
1answer
30 views

Dictionary attack in Bash with cURL

I'm fairly new to Bash, but this is a script I've been working on for the past few days. It's meant to run a dictionary attack on an HTTP-POST login for a website, by reading the time module and ...
1
vote
1answer
159 views

How to Disable WebRTC in Google Chrome

I understand there are security vulnerabilities exposed when WebRTC is enabled, so I would like to disable it in Chrome. How does one do that? I thought I'd be able to do it under chrome://flags, ...
0
votes
0answers
26 views

Disabling Google Smart Lock but still save passwords

I use Chrome on Windows 7. Every time the browser asks to save my password it's saved in the cloud unless Google Smart Lock is off but it this case I have to reenter the password each time I log in to ...
0
votes
0answers
20 views

What log would show what in Windows blocked a programs' access to the Internet?

We have a program that connects to the internet to check registration for a subscription. Something on a customer's computer is blocking that. It's NOT: Windows Firewall (I disabled it. Problem ...
1
vote
1answer
17 views

Keypairs are stored securely on HSM. But during a smart card enrollment process, isn't the private key supposed to be injected into the smartcard?

I understand that in a PKI that utilises HSM, the key pairs are securely stored in the HSM. Applications that require encryption/decryption capabilities will communicate with the HSM via APIs. ...
4
votes
1answer
71 views

Is it possible to prove that a hard drive was within a certain PC?

I have a situation in which a person has been accessing confidential information from another PC which they shouldn't have accessed and stored the acquired information on their own PC. Since all of ...
3
votes
1answer
35 views

SSH key verification for many hosts behind a single DNS name

(note: this seems similar to an existing question, but I believe there are some differences in the implementation details here) The Problem I've got a few hundred hosts behind a single DNS address. ...
0
votes
1answer
53 views

I spliced Raspbian and Kali by accident… should I be worried?

So, I recently got a Raspberry Pi. I installed Raspbian Wheezy on it immediately, got it all set up with SSH and VNC, and ready to go. One day I decided that it would be a brilliant idea to install ...
0
votes
3answers
47 views

Who generates the keys?

I think I know the answer, but I'll ask anyway... I'm being given access to a remote server with SSH access. Who should generate the private/public key pair? My understanding is that I should ...
0
votes
1answer
23 views

Using IPS and IDS together for Defense in Depth

With in-depth knowledge of IPS and IDS, how can we use them simultaneously to achieve better security?