The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

1
vote
0answers
37 views

Block all inbound traffic except one IP using windows firewall rules

I have no problem doing this in linux. I just write an iptable to block all traffic and another one after to allow a specific IP. However it doesn't look to be that easy on Windows. I did the exact ...
1
vote
0answers
34 views

Force Desktop OneDrive to Prompt for Password

I use the Windows 8 implementation of "Desktop OneDrive" to create and access files stored in my OneDrive account. My OneDrive login is also my Windows login so that when I'm using my computer all my ...
1
vote
0answers
169 views

Unlock Samsung SSD 840 PRO with hdparm

My Samsung SSD 840 PRO is locked with a password set by using the BIOS. Every time I turn on the computer, I have to type in the password. Cause there is a BIOS bug, I am not able to change the ...
1
vote
0answers
237 views

Disable Checkpoint Endpoint Security Policy

I have the same problem as this (How to disable the security policy with check point VPN-1 secure client?) but with an other client from checkpoint. I have the Checkpoint Endpoint Security Version ...
1
vote
0answers
22 views

How can throughput be greater than the bandwidth? Is this a valid reason?

I asked this question on networking engineers but it was closed as off topic since it wasn't for professional application. Hope it fits better here. I'm studdying for the CISSP secuirty exam and a ...
1
vote
0answers
28 views

SRP not blocking EXE

I wanted to use SRP (Software Restriction Policies) on my Windows 7 Professional for whitelisting. For now I have just set the default level to dissallowed no additional rules just the 2 which are ...
1
vote
0answers
409 views

Secure wifi connection with FreeRADIUS, MySQL, EAP-PEAP, TLS

I'm trying to setup a wireless network as shown in the picture and I'm struggling how to secure it. Picture of Wifi Network: My basic question is: How I can securely store passwords into MySQL ...
1
vote
0answers
20 views

Do you need a server for Endpoint Antivirus Protection?

So i'm looking into a a few antivirus software packages for a small business with no more than 5 computers. Stumbled across endpoint protection, but was wondering if you needed a server to deploy this?...
1
vote
0answers
94 views

undocumented SID structure on windows 10 [S-1-19-512-4096]

regarding this question: Cannot write on WindowsApps directories and restore files After hitting to wall trying to restore some files inside this directory c:\Program Files\WindowsApps\ on windows ...
1
vote
0answers
151 views

Self-Encrypting Drive (SED) and S3-suspend (sleep)

since my laptop is aging, but I love its 4:3 screen, I don't like relying on external media (also no USB 3 ports), and SSDs are too small for my budget, but I want full encryption (previously ...
1
vote
0answers
234 views

Mac OS X “Verify Certificate” every time connecting to secure wireless

Every time connecting to the secure wireless, Macs are getting a prompt to verify the certificate: Verify Certificate Authenticating to network "Network-Name" Before authenticating to ...
1
vote
0answers
28 views

Prove that a user exported data from Quickbooks

An employee leaving the company has exported our entire customer list and a record of all of the individual product sales to each customer from Quickbooks. I know that we should have had access ...
1
vote
0answers
55 views

OpenVPN Confusion - Server and client on one machine?

I have searched all over the internet and tried so many things.. but I cannot seem to figure this out. I have a Raspberry Pi. I have an ethernet, but I have access to a wireless if I needed it. 1)....
1
vote
0answers
19 views

Linux : Looking for a distribution or configuration to turn debian/Ubuntu to access only Firefox without accessing data on disk or OS

We have to give a laptop to some people and what we are looking for is that the OS should be secure like bootloader disabled, home-folder encrypted, TTY's disabled and when the OS is active, no access ...
1
vote
0answers
89 views

Portable method for encrypting a usb partition that works on Windows and Linux

I am looking for a good (and secure) way to encrypt a single partition of a USB-drive that will work for both, Windows and Linux systems. At the moment I have a 64GB USB 3.0 that is split up into 3 ...
1
vote
0answers
46 views

Excel 2010 Password Protected Book Accepts More Than One Password

I use Excel 2010 64 bit (14.0.6023.1000) A workbook that is being protected by password "flu" and be unprotected by password "flu" OR " ab". Why is that? First of all, I thought beginning with Excel ...
1
vote
0answers
24 views

Is it secure to keep Guest account enabled in Windows 8.1 or 10?

I enabled guest account on Windows 8.1, because I wanted to create a network share with access for everyone without a password. The question is: Is this secure? Does enabling the guest account allow ...
1
vote
0answers
22 views

OS X Gatekeeper bypassed when application is owned by root

I understood that the purpose of OS X Gatekeeper was to block software without proper code signing. However, changing applications to be owned by root overrides this behavior. Enable Gatekeeper and ...
1
vote
0answers
110 views

How do you disable AUTH in sendmail?

I'd like to entirely disable AUTH on my home server's sendmail on Fedora 21, mostly because the constant fail2ban Emails are annoying, coming from constant CRAM-MD5 brute force attempts to get my ...
1
vote
0answers
8 views

Using and Verifying DNSSEC with DNS server

On a machine running Windows that is configured to use a DNS server that supports DNSSEC, what is the easiest way to verify DNS SEC is infact being used?
1
vote
0answers
123 views

samba setup for simple NAS - is it as secure as it could be?

I'm setting up a music server for my family. It is actually working, which is why I'm on (was on code review, bounced off as not really code) here. I'm not happy that I understand enough about how ...
1
vote
0answers
49 views

Security of Time Machine's AFP connection

I use Time Machine to backup my Mac over the Internet on a Synology server. TM connects throught AFP protocol, it this protocol resistent to Man-in-the middle attack (attacker can't steal creditials ...
1
vote
0answers
152 views

Medusa returns Segmentation fault or gives up on 1st try

For my thesis, which is about the use of software for computer forensics, I want to use Medusa to attack a server of my own, just to sniff the packets to see the data for port 80 (and therefore prove ...
1
vote
0answers
267 views

fail2ban ban multiply recidive hosts

We are using fail2ban on our web-facing servers to block IP addresses that repeatedly fail to authenticate properly. Our normal bantime hereby is one hour; IPs that have already been banned multiple ...
1
vote
0answers
68 views

Any risk of hosting a public website on my home network? Year 2015

I have read the following post but it was already 6 years ago so I'm wondering if anything has changed over the last few years in terms of security because I heard windows firewall has been improved ...
1
vote
0answers
13 views

Unlocking external disks upon login

AFAIk, FileVault 2 on OS X automatically unlocks/decrypts the startup disk on login. Could external disks/partitions be unlocked on login? If not FV2, are there other ways, e.g., scripts? Scripts ...
1
vote
0answers
207 views

How do I script the creation of Disposable Virtual Machines with vmware workstation?

I am Making a disposable (use for one task/website then delete) Virtual Machine (VM) it's a slow process to do it in VMware workstation. I want to automate it so it is like the quick ~5 second DispVM ...
1
vote
0answers
39 views

OpenSSL listen and decrypt automatically

I want to design an application to connect my server using OpenSSL and send encrypted data (encrypted with server public key) to specified port on server like 4433. All client using server public key ...
1
vote
0answers
156 views

PuTTY 0.64 to OpenSSH 6.2 Connection Failure

I am having a problem connecting a PuTTY 0.64 client to an OpenSSH 6.2 server. The only two clues I have are the following, from the session log: We believe remote version has SSH-2 channel request ...
1
vote
0answers
64 views

Route only HTTPS Connections through TOR

I want to create an tor router on my network using an extra computer I have (2011 Mac Mini). Since the exit node can read/modify traffic that is not end-to-end encrypted, I would only like to route ...
1
vote
0answers
47 views

Windows: Stop users from deleting files NTFS

I've changed the NTFS permissions on a folder called share1 that means users from group 'nodelete' do not have permissions 'delete' or 'delete subfolders and files' This seemed to work OK, except one ...
1
vote
0answers
65 views

Can I rely on TRIM to destruct data after file deletion?

I have a broken laptop that I want to return and I have some passwords already stored for it in the browser. I can delete the (Firefox) files that contain this data. Can I rely on TRIM to destroy ...
1
vote
0answers
61 views

UEFI multi-factor authentication on admin password?

Many UEFI vendors offer boot and Admin passwords for a local machine. For a normal cold boot or reset, I would like the UEFI system to simply pick the properly signed bootloader and proceed. Having ...
1
vote
0answers
148 views

Win 7, permanent update of “Windows Malicious Software Removal Tool”

I get permanent update offers for “Windows Malicious Software Removal Tool” and installed them with success, but with the next restart I get another offer of the same version again. I have tried to ...
1
vote
0answers
53 views

Is Windows 8+ Reset the same as performing a clean install from a MSFT .iso or an OEM .iso?

Windows 8 and newer versions have a "Windows Reset" feature that reinstalls windows. The question is, does it perform the same kind of clean install that you would achieve with a MSFT .iso, or does it ...
1
vote
0answers
130 views

how to record all who that login to my linux machines and records them

I installed the package audit on my linux red-hat 6.x machine in order to view the recored of each user that log to my linux machine yum install audit kit installation from: https://access.redhat....
1
vote
0answers
83 views

Nginx Modsecurity Apache Include Equivalent

I just switched from apache to nginx and so far I've been pretty happy. However, I've been having some issues with modsecurity. Back when I used apache I could use the following to add every rule I ...
1
vote
0answers
172 views

Windows Server 2012 WAP + ADFS 3 + SP 2013

We are looking to expose a SharePoint Portal over internet using Web Application Proxy secured with ADFS pre-authentication. The permissions to the Portal are provided through Claims based on certain ...
1
vote
0answers
138 views

Lock a folder so that user can't access but software can

i have a situation here i need to lock a folder (password protect) so that user can't access it without password application/software can access that folder.. :) What i can now: i know i can lock the ...
1
vote
0answers
19 views

Protection against maliciously altered files

Regarding this question, what can then be used to verify the authenticity of a file transferred using Internet if the uploader and downloader do not know (and can't meet) each other in person? ...
1
vote
0answers
414 views

Java 8 Update 25: Security settings won't allow a website even after adding to the list

I've been attempting to allow a website to run an unsigned applet, and even after multiple re-installs and security changes, Java still informs me upon launching the applet that security settings aren'...
1
vote
0answers
675 views

Very high CPU usage on Linux server

I have the following server: Ubuntu 14 LTS 64 bit Linode Hosting fail2ban enabled firewall enabled SSH root login diabled and only key access to server. Problem: When I run htop, it shows high ...
1
vote
0answers
31 views

How to make Pixaria work without ini_set()?

I am working on a server which has Pixaria installed. After wasting (yes, completely wasted) hours trying to find out why it showed a blank page, I finally decided to try to enable ini_set() in php....
1
vote
0answers
17 views

What can a non-Mac App Store app do in terms of sandboxing and security?

I'm curious about what applications from outside of the Mac App Store limitations are. By default, what are their permissions? What can they access on my computer? From my perspective, I can see that ...
1
vote
0answers
117 views

Deny acess to file-shares (SMB)?

There are security policies like: Deny logon locally Deny logon on through Remote Desktop Services Deny access this computer from network Is there any policy to deny specific users/groups to ...
1
vote
0answers
43 views

How to require admin permissions to stop an executable in Windows 8

I have an executable on a Windows 8 machine, that I’d like to keep running. The problem is, the guy I share my dorm room and the Windows 8 machine with keeps shutting it off. Is there a way (...
1
vote
0answers
198 views

Java blocks applet on whitelisted site

On the webpage http://smbus.org/faq/crc8Applet.htm there is an applet for demonstrating the calculation of an 8-bit cyclic redundancy check. Java in Chrome and IE on MSWin7 will not allow this to run. ...
1
vote
0answers
19 views

Locate files relating to MS Security Essentials scan result

I just ran a MS Security Essentials scan on my computer. The results show two entries under "Allowed". I don't remember allowing any such items to run on my computer. How can I locate the files ...
1
vote
0answers
2k views

DisableCAD local security policy on standalone Windows 7 machine reverts to Enable after reboot or logging out

I have been struggling for days trying to resolve this issue. We are required to have our users press ctrl+alt+delete to login to our systems. The local security policy has the "Interactive logon: Do ...
1
vote
0answers
361 views

Trying to find out if chromebook Supervised User hacked device

One of the kids has a chromebook, acer c720. I set him up as a supervised user on 9/5/2014, and was able to view browsing history on supervised user dashboard. However the history stopped on 9/11/2014....