Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

2
votes
3answers
91 views

How come the machine name shows up in the email header?

All of the mails I send out arrive with the following header: Received: from My-iMac (12.12.12.12 [12.12.12.12]) by mx.mail.com How come my machine name My-iMac shows up? Is it because of my mail ...
1
vote
0answers
31 views

Virtualization for security reasons [closed]

I am going to build a home server and I am planning it's software setup. I would like to expose one or two services to the outer world. Namely, OwnCloud, in order to have remote access to my files. ...
0
votes
1answer
63 views

Quick Way To 'Hide' or Encrypt Several Terabytes Of Data? [closed]

I'm trying to adopt some best-practices (or at least less-bad-practices) with my external data storage. I'm looking for a way to quickly provide some minimal level of protection from prying eyes for ...
2
votes
0answers
48 views

Windows' Security warning on all files on local drives

Users usually can download portable software and use it from local drives withount any warning. (I mean small executables just as putty.exe or a portable application from PortableApps.com) However ...
0
votes
0answers
12 views

Is system call the only way that a user program can intentionally affect the state of a Linux kernel?

I think there are several ways that a user program can intentionally affect the state of a Linux kernel. By invoking a system call; By invoking mmap() and writing the memory that has been mapped to ...
0
votes
0answers
23 views

Really weird behaviour of Apache POST call

Scenario: I have a server with MantisBT, plain HTTP, port 80. Queries are done to SOAP interface through HTTP POST calls. It's not working from my Windows XP PC using Eclipse Luna and Mylyn plugin: ...
1
vote
0answers
20 views

Nginx Modsecurity Apache Include Equivalent

I just switched from apache to nginx and so far I've been pretty happy. However, I've been having some issues with modsecurity. Back when I used apache I could use the following to add every rule I ...
-1
votes
1answer
481 views

John the Ripper: Crack ZipCrypto password

I made a password protected zip file with 7zip, using ZipCrypto algorithm. Set the password to 1234. I am using john-1.7.9-jumbo-7. I followed this manual: ...
0
votes
0answers
23 views

ssh-add: how to automatically insert private key passphrase?

I'm using ssh-add to add a private key in order to call lftp after that. It happens that my private key contains a passphrase and I need to automatically fill it when required. I'm able to overcome ...
0
votes
1answer
36 views

How to keep ~/.ssh folder secure on OS X

My question is about storing private and public rsa keys in ~/.ssh on OS X Yosemite. By default ssh-keygen stores pairs of keys in plain text format, which means anybody who have access to my OS X ...
0
votes
1answer
22 views

What are these files that defy file permissions to be inaccessible?

Every once in a while in our environment the AV comes across a malicious file, usually in a users temporary internet files, that no matter what I try, I can't edit, move, copy, or in any way access ...
1
vote
0answers
72 views

Windows Server 2012 WAP + ADFS 3 + SP 2013

We are looking to expose a SharePoint Portal over internet using Web Application Proxy secured with ADFS pre-authentication. The permissions to the Portal are provided through Claims based on certain ...
0
votes
0answers
42 views

Word allows users to create nested controls even during protection enforcement. Workaround?

I am trying to create a document with restricted editing in which users will only be allowed to fill in information in rich text controls. I will then programmatically grab the data from each rich ...
0
votes
1answer
30 views

Is blocking / allowing by IP using .htaccess (or equivalent) enough to secure a resource on a web server?

Currently in the process of setting up a web infrastructure to host my web application where security is the most important factor and I need to be able to allow only specific IP addresses to a ...
1
vote
0answers
33 views

Lock a folder so that user can't access but software can

i have a situation here i need to lock a folder (password protect) so that user can't access it without password application/software can access that folder.. :) What i can now: i know i can lock the ...
0
votes
1answer
31 views

Need to produce an Issue - “This file came from another computer”

I need to reproduce this issue for some particular reason. The thing is I'm struggling to get the message to appear on a folder: Security : This File came from another computer and might be ...
1
vote
0answers
14 views

Protection against maliciously altered files

Regarding this question, what can then be used to verify the authenticity of a file transferred using Internet if the uploader and downloader do not know (and can't meet) each other in person? ...
0
votes
0answers
18 views

How do mail clients vs. using a web browser compare in terms of security and vulnerabilities?

I have multiple email accounts from different providers: gmail, yahoo, etc. as well as more secure, privacy-minded services that use heavier encryption. Right now I access them all through a web ...
37
votes
12answers
5k views

What is the value of MD5 checksums if the MD5 hash itself could potentially also have been manipulated?

Downloads on websites sometimes have an MD5 checksum, allowing people to confirm the integrity of the file. I have heard this is to allow not only corrupted files to be instantly identified before ...
0
votes
1answer
42 views

Disposal of old 4mm tape cartridges

In cleaning out my home office, I see that I have a number of old 4mm DAT tapes. I no longer have a working DAT drive. Some of these tapes may have information that I do not want to have out in ...
0
votes
1answer
60 views

Best first steps for a hard drive?

I volunteer my time to service my schoolmates, fixing their problems, but conversations have come up about surveillance and hacking. I've been watching DEFCON's videos, and have learned that even ...
1
vote
0answers
31 views

Pairing of logitec Unifying devices uses a “secret algorithm”?

I'm considering buying a Logitec M570 wireless trackball. This device uses Logitec's "Unifying" wireless technology: a single tiny USB insert supports multiple logitec devices. This thread ...
-1
votes
1answer
17 views

How to secure data in production environment [closed]

I have an enterprise application running that uses both MySQL and Mongodb datastores. My development team all have ssh access to the machine in order to perform application releases, maintenance etc. ...
0
votes
2answers
82 views

Laptop security plan: Acronis True Image + TrueCrypt + Prey

Scenario: I'm working since 2 years as a software developer and sys admin. I never had anything useful on my pc. Now it's full of personal and sensitive data (passwords/source codes, etc). Now that ...
0
votes
0answers
29 views

Glary *.gfe decrypting file, lost psswd

I forgot password to my *.gfe encrypted file. How can i decrypt it? I need a script to break the psswd / hash of psswd from file. Can You help me? Thanks in advance
0
votes
1answer
213 views

Why hydra doesn't return a valid username&password with a valid supplied username&password

I'm just trying out hydra on OSX Yosemite, installed with brew brew info hydra hydra: stable 8.0 (bottled), HEAD https://www.thc.org/thc-hydra/ /usr/local/Cellar/hydra/8.0_1 (14 files, 1.2M) * ...
0
votes
0answers
10 views

Restrict shell (sh/bash) to a list of allowed parents?

Does anybody know whether is it possible, without modifying the source code, to restrict shell execution to a list of "white-listed" parent processes (in practice getty, x-term, sshd, /sbin/init or ...
0
votes
0answers
41 views

Free/open source alternative to Folder Guard

I've just cleaned my friend's infected computer. I highly suspect infection got via torrent downloading. She's downloading some music and sometimes instead of mp3 files she gets exe and executing it ...
0
votes
2answers
36 views

McAfee: Stock software distributed by SONY with Windows 7. Do I need to register this software or not? What happens if I do/don't register it?

My Sony VAIO Windows 7 system came with a copy of McAfee installed, but I never registered it. What puzzles me is, yes, I know it's out of date now, but the software still runs and protects me from ...
0
votes
1answer
621 views

About adding many sites with only different ports to Java Exception Site List

After update Java to Java 8 update 25, the Medium security level has been removed from the Java Control Panel. I am a TA and need to browse many sites from the students. These sites contain Java ...
2
votes
2answers
261 views

Does keeping Windows 7 updated make anti-virus software useless?

I was thinking, given that I regularly keep Windows 7 updated through Windows Update, doesn't this make having any anti-virus software useless. I may well be a naive user, but it seems to me that if ...
-1
votes
2answers
37 views

About the passphrase related vulnerability of symmetric encryption

There are tools like gpg or ccrypt that use the AES algorithm to symmetrically encrypt a file, which I've read it is quite safe, and uses 128/256 bit keys. Now, maybe I'm missing or not understanding ...
0
votes
1answer
36 views

Check if I'm supervised [closed]

Is there any software that I can use to check If my computer is supervised? I want to know if anyone is sniffing my traffic out of my computer with wireshark or another software. Is this possible?
0
votes
0answers
41 views

mod_security: Disable empty user agent checks for specific requests

I am using Ubuntu 14.04 LTS server and Apache 2.4.10 with mod_security installed. I have integrated an API from Exotel (a cloud telephony system), that calls my php script url whenever i get an ...
0
votes
3answers
53 views

What's the security used in my school network [closed]

In my school we have to use the school computers to our homework. I like to work on my machine because I have all well configured (Vim, Firefox and I use Ubuntu instead of Windows ...etc). I use my ...
0
votes
1answer
76 views

Lost all desktop settings

I'm using windows 7. I logged in one morning and found my desktop background was black, and I had lost all my desktop icons & settings. I then found that I could not open any application - it ...
0
votes
0answers
31 views

Encrypting a bootable (Windows Portable) USB drive

I know it's possible to install Windows on a USB flash drive and in theory any PC you plug it into will boot the said Windows install, provided Windows will have suitable drivers for the hardware. ...
0
votes
1answer
49 views

Malicious port scanners: do they target machines that they know exist even if they're powered off?

I set up my ageing Netgear (circa 2007) router to send email security logs quite a long time ago, and then never really looked at them or fully understood what they meant. I was doing a general sweep ...
1
vote
1answer
46 views

Send emails over port 80 using Linux command line

I have a server that is not allowed to send outgoing emails or have access to any name servers. What it has is an http proxy that allows it to access the other servers and I am able to do wget ...
2
votes
0answers
91 views

Github for Mac installs a webserver, github conduit. Is that a security risk?

Github for Mac is a helpful app provided for free by the people at Github.com. It's an OS/X GUI for simple operations with git, and works quite well. It turns out that when I visit a repo on ...
0
votes
0answers
280 views

What is atos? It keeps popping up on my Mac

So what is atos? It keeps popping up in on my mac screen that I need to give my password to let it do something. Is this a virus or is my Mac being hacked? Please help!!!
0
votes
1answer
129 views

Prevent access to my PHP page source?

If I publish a PHP page (e.g. mypage.php) on my hosted web space (the URL of the PHP page is publicly known, e.g. http://example.com/mypage.php), can a hacker access in some way the PHP source of this ...
0
votes
0answers
39 views

Unable to connect to FTP server (pure-ftpd) with SSL/TLS enabled

I have two machines inside my private network: one running Ubuntu 10.04 with pure-ftpd FTP server with SSL/TLS enabled, and another running Windows 7. I have configured my FTP server for SSL/TLS for ...
0
votes
0answers
59 views

Removing a Redirect Virus from Fedora Linux

Seems like there is a redirect virus on my computer but I am not able to remove it or even find where exactly the problem is. There is nothing much about it on the Internet either. I am running Fedora ...
5
votes
1answer
284 views

Why is data still recoverable after writing zeros to a harddrive? [closed]

If you write 0s to the entire HDD, why is it that data can still be recovered? Why would you need to perform more than one pass?
0
votes
0answers
8 views

How to make an exception in a pam module?

I have 2 servers: A and B. I want A to connect to B via ssh (as a non-root user) to run a sudo command. But sudo on B requires a yubikey input to allow the command: auth required pam_yubico.so ...
0
votes
1answer
32 views

Is it safe to git clone https://usr:PWD@gitserver/repo with plain text passphrase in the URL?

Is it safe to git clone https://usr:PWD@gitserver/repo with plain text passphrase in the URL?
0
votes
0answers
204 views

Java 8 Update 25: Security settings won't allow a website even after adding to the list

I've been attempting to allow a website to run an unsigned applet, and even after multiple re-installs and security changes, Java still informs me upon launching the applet that security settings ...
0
votes
1answer
59 views

“Anonymous logon” happen once in a while on my machine

There is some random "Anonymous logon" session happening once in a while from 3 machines in our company, 3 machines on around 1000. I have a windows 7 enterprise 64 bits edition. I have all updates ...
1
vote
1answer
41 views

Get username of a thread

How to gather the username/SID/account of a particular thread? No, I am not looking for account of the process, but of specific thread. I've looked-up Process Explorer, but it doesn't show ...