The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

-1
votes
2answers
48 views

What damages can occur if flash drives are not safetly removed?

What damages can occur to my computer or my flash drive such as pendrive if I don't safety remove it before plugging it out after any read or write operation on my pendrive also if there is no read ...
1
vote
1answer
89 views

security: SecKeychainItemDelete: UNIX[Operation not permitted] on OS X when trying to remove a system root expired cert

So I see some expired certs under 'System Roots' (not 'System'), so I want to delete them via cmd. sudo security delete-certificate -c A-Trust-nQual-01 ...
0
votes
1answer
26 views

Multiple instances of programs allowed in windows firewall

I am new to windows firewall. While allowing a program through windows firewall, I am able to find that multiple entries present for Firefox, and java. Why is it so ? Thanks in advance.
0
votes
0answers
5 views

EMET has compatible confict with Firefox in Windows 8.1

I have to turn off the EAF option for firefox in EMET in order to stop the lag/long time loading problem of firefox. Turning that off may has serious security issue. Any suggestion?
-1
votes
1answer
31 views

Boss is getting my emails in sync withn mine [closed]

I recently took some time off due to medical condition, My boss has been receiving all my emails and often replies to my clients on my behalf and calls me regarding some of the mail received. I feel ...
0
votes
1answer
17 views

Windows 7 Drive permissions (alternative to group policy) block access to internal OS Drives from external OS

Windows 7 admin user (version without group policy) Hi, i want to block access (read write view etc) to the internal OS drive (boot & C:) from external OS drives pluged in. The external OS can ...
3
votes
1answer
53 views

How to check for false positive from anti-virus

Ran Kaspersky Rescue 10 overnight and the system came out clean, except for an obscure shortcut (one amongst hundreds). Kaspersky reports the trojan as: trojan-downloader.win32.pif.xx and according ...
1
vote
3answers
66 views

I will not be able to log back into Windows 10 when I log out.

I changed the password on my Windows 10 account earlier today but can't for the life of me remember what I changed it to. Therefore, when I log out or turn the computer off, I will not be able to log ...
-1
votes
3answers
52 views

Is my NAS secure if no internet access is allowed?

I have a Synology DS214se, with DSM 6.0 update 3 installed. QuickConnect is disabled and I haven't added any external access permission. Is my NAS safe from attacks? I was wondering if I should add ...
0
votes
0answers
23 views

Setting up an ssh authentication server [migrated]

I have some 30 Media Temple grid servers and I need to manage the access of 15 or so developers to those servers. Is it possible, and more importantly secure, to setup a server who's only job is to ...
0
votes
1answer
34 views

“Permission Denied” when killing process

When I try to kill a specific process (avastUI.exe), I got "permission denied". Obviously, the current user is in the Administrator group. I'm not looking for a way to kill this process, I just want ...
1
vote
1answer
17 views

Why does Google Chrome fail to provide a checksum

Alright, I may be a bit uneducated when it comes to this subject but I have a genuine curiosity about why Google does not provide a checksum along with a gpg signature with their Google Chrome ...
3
votes
1answer
37 views

setting up a locally shared folder on Archlinux (on a ext4 filesystem)

Let's assume the following scenario. We have two users trusted and untrusted. User untrusted is used to access the internet and download data, which then has to be reviewed and given to user trusted. ...
0
votes
0answers
21 views

NESSUS: Kali Linux Installation Issue

I am really interested in Nessus as it will be a useful effective tool for the needs of the company. Unfortunately, I have been unable to configure the tool correctly to evaluate it. For example, I ...
1
vote
1answer
11 views

LAMP server software requirements [closed]

I'm building my first LAMP server to be used as both a remote testing server and as practice for building a web server. I'm going to use Ubuntu Server with Apache2, PHP7, MySQL 5.7, OpenSSL and ...
0
votes
2answers
36 views

Is there any risk of irrecoverable damage by giving public access to remote desktop/terminal?

If I allow public access to a remote control program (SSH, teamviewer, remote desktop connection, etc) is there any risk of damage that can't be fixed through reinstalling the operating system? Do any ...
0
votes
0answers
41 views

How to create a Tor-only network interface suitable for Firejail?

The most popular way to Torify applications is probably the SOCKS5 proxy method. It has a downside though: you ask an application to use Tor, not force it. If the application misbehaves or is being ...
0
votes
0answers
15 views

How to run JNLP file by force on my computer?

When running JNLP file on my computer, it says I have added the URL to the exception list of Java config but this didn't help. I am the human and according to laws of robotics, computer should ...
1
vote
0answers
16 views

splwow64 deleting %TMP% permissions

Repeatedly I've had problems as a result from having all permissions set on the %tmp% folder (C:\Users\<username>\AppData\Local\Temp) (Win10) deleted. As default the users/groups SYSTEM, the ...
1
vote
1answer
40 views

“Reported Web Forgery” message on one install of Firefox but not another

On my 64bit Windows 7 machine running latest version of 32bit Firefox I received the following message when visiting a URL from an email... in order to check it out further, I loaded firefox on a ...
1
vote
1answer
118 views

Volume Shadow Copy Service - Security Permission Error

While trying to diagnose some other unrelated issues on my PC I noticed my windows error log is being written to every second (I am not exaggerating, there are 60 entries per minute every minute) with ...
3
votes
1answer
18 views

Why are key agents sometimes preferred over configuration files?

Some programs seem to prefer to use an SSH key agent, rather than specifying the key file in some configuration file somewhere. Examples: GitHub's instructions for using SSH SourceTree's method ...
-1
votes
1answer
110 views

How can I add a certificate exception for an HSTS-protected site in Firefox?

I'm extremely irritated with Firefox's constantly blocking lastpass.com . It is a well known website that stores all my passwords. I need that website to access hundreds of websites. Side note: ...
3
votes
1answer
68 views

How to retrieve RSA private key from wrapped key blob?

I have generated a pair of RSA keys on a smart card with OpenSC tools and retrieved it as wrapped key blob encrypted with DKEK key: sc-hsm-tool --create-dkek-share dkek/dkek-share-1.pbe sc-hsm-tool ...
0
votes
0answers
14 views

Using a VPN subscription service to connect to different other services

I've just set up a new UK Ltd company and one of my potential customers require that I have a Cyber Essentials Certification. (https://www.cyberstreetwise.com/cyberessentials/) The company I've set ...
2
votes
1answer
38 views

How can I stop files infected with ransomware from replacing my cloud backup?

I saw this question on Security.SE and it got me thinking about my way of backing-up my data. The way I do it is by storing my most important data (including kind of personal things) on a folder on ...
0
votes
0answers
11 views

how to block subdomain from any domain with windows7?

There are a lot of crappy websites which install spyware or badware software with a common subdomain name. For example (don't try these URLs, they are dangerous): ...
0
votes
0answers
20 views

Add link to Kaspersky whitelist in order to unblock it?

This window appears every 10 seconds saying "Malicious link blocked". I believe that the link is secure. How could I add this link to Kaspersky whitelist in order to unblock it? Note: I'm using ...
0
votes
2answers
48 views

Can HTTP servers on a LAN be hacked into from the web?

I have set up a web server on a ESP8266 microcontroller inside my local area network. HTTP GET requests sent to this unit can switch on and off a mains outlet, and I'm planning on deploying a couple ...
0
votes
0answers
21 views

What exactly are the security implications of ufw DEFAULT_FORWARD_POLICY “ACCEPT”?

I found this question asked on Serverfault, but the answer just provided alternatives instead of actually detailing the implications. I had to set DEFAULT_FORWARD_POLICY to "ACCEPT" to be able to ...
0
votes
1answer
34 views

Open SSH port a bad idea on a Raspberry Pi?

I have a Raspberry Pi at home that I have connected to my home network. I use it to run a VPN server, SSH tunnel, and occasionally I SSH into it to perform maintenance on it. Is it a bad idea to have ...
0
votes
0answers
17 views

What Everyone group actually means? [duplicate]

When I give Everyone a full access to some file does it mean anyone can just connect to my computer and download it? In which case Everyone rules will be actually applied? Is it safe to set some ...
1
vote
1answer
55 views

How does ransomware affect secured/hidden partitions? [closed]

I have hybrid hdd/ssd, there are some partitions for backup&stuff and also a special one that win8.1 created(recovery?). I can see the partitions with gparted, but can't access any of them through ...
0
votes
0answers
40 views

Simple ICMP DOS attack example with cmd on Windows 10 crashing the attacker's computer?

I had to make a simple batch file as an assignment in which I had to attack another pc on the same network by a ICMP DOS attack and analyze the traffic using Wire-Shark. Here the code which I used: ...
1
vote
3answers
112 views

Is a Bitlocker encrypted drive safe to dispose?

Based on the nowadays public knowledge about the strongness of the Bitlocker encryption - and supposing the user thinks the Bitlocker password is strong enough to make bruteforce unviable with the ...
0
votes
1answer
18 views

Whats blocking direct access of error_log in apache

I have searched on google for a long time but it seems like nobody has even asked this question: What is blocking the direct access of error_log on Apache servers? Or is it even an Apache thing or ...
1
vote
3answers
74 views

Secure Chrome passwords against WebBrowserPassView

I just got shocked with what WebBrowserPassView can show - it basically shows every password I've saved in my browser (Chrome). I guess other users on my PC could get my passwords that easily too. ...
3
votes
2answers
29 views

Can the SAM database be encrypted with EFS to prevent offline password cracking?

Is it possible to EFS-encrypt the SAM database to prevent offline password cracking? Would it have to be encrypted as the SYSTEM user?
0
votes
0answers
12 views

SABNZB+ connects to Google

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME sabnzbdpl 29850 sabnzbd 5u IPv6 190586 0t0 UDP *:50895->par03s14-in-x0e.1e100.net:http sabnzbdpl 31115 sabnzbd 5u IPv6 ...
0
votes
1answer
25 views

Can an external client access an FTP server?

The current network setup is like this: Company A has a network setup consisting of Cisco devices only. It has an FTP server where all files are stored and accessed. Company B has a different setup ...
0
votes
1answer
55 views

Felt spied on at work and after two visits from security they are reimaging [closed]

I work for a very large school district. I logged in at work on my Dell PC one morning and see Ultra VNC twice in my Start menu. But let's go back to the night before I saw those eyeballs in my ...
0
votes
1answer
31 views

Amazon page redirecting to payment page on my wifi

When I open an Amazon page on my apple devices, it automatically redirects to a login page, and then next to the payment page if I enter dummy login credentials. This happens only on my wi-fi. This ...
3
votes
0answers
128 views

How can I safely remove an RSA 4096 ransom-ware virus?

My dad's computer got infected with an RSA 4096 ransom-ware virus. For those who don't know it is a virus that encrypts all the files on your PC using an RSA 4096 encryption key. Then you need to use ...
0
votes
0answers
69 views

Two network cards, one directly to internet, other in LAN

I need some insight in my thinking so that I don't do something completely stupid. I have two physical network cards on my computer, one card/interface offers a handful of services and the other is ...
2
votes
0answers
51 views

Preventing ransomware attacks by detecting suspicious levels of file system activity

Assume a Windows 8/10 home/small office system with 3-4 users and a few TB of file share (say 6TB in a suitable RAID). Most files are static, but sometimes files get moved round or modified. But if ...
0
votes
0answers
28 views

WhatsApp end-to-end end encryption

I went through WhatsApp Security White Paper which talks about how WhatsApp end-to-end encryption is achieved so that third party and even WhatsApp can't decrypt a message transmitted between sender ...
1
vote
1answer
104 views

Security regarding nginx + php on CentOS 7 with OwnCloud 9

I'm trying to setup a OwnCloud Server v9 for my freelancing purpose. SPECS: - CentOS 7 - nginx - php I'm a little bit confused. I can find only the info about the PHP Version 5.5 in the ownCloud ...
0
votes
1answer
30 views

Is it possible to monitor traffic and identify rogue outgoing emails from mobile devices using a PC as a wireless hotspot?

I've discovered that my home network IP address has ended up on several blacklists after spam traps received emails from this IP address. I've tested the one PC that uses this network, and it seems to ...
1
vote
0answers
22 views

Block all inbound traffic except one IP using windows firewall rules

I have no problem doing this in linux. I just write an iptable to block all traffic and another one after to allow a specific IP. However it doesn't look to be that easy on Windows. I did the exact ...
1
vote
1answer
27 views

What does single user mode in Linux/Unix means and how is it different from Safe mode in Windows

What is Single User mode used for? Can it override the root Password? Do you need a password to acces the SU mode? In a normal session when you run SU command does it stands for Single User or Super ...