Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

-2
votes
1answer
3k views

How to find programs hidden in task manager? [closed]

Once I installed a keylogger on windows that was able to hide himself from Task Manager and even from msconfig.exe. Are there any way to find these programs?
0
votes
1answer
445 views

Possible to restrict network camera access using URL key instead of http authorization?

I own a few Axis network cameras, and all of the cameras implement an optional user-group security system with usernames and passwords. I require a username and password to be entered in order to ...
2
votes
3answers
680 views

what is “cd4f11d23e3716b84c14abcfeaea” and how did it get installed? [duplicate]

Possible Duplicate: Windows Updates Folders (With Strange Names) in C drive What are these folders created on my Western Digital 2TB Mirror? Mystery: Two nights ago, a 20GB file appeared ...
0
votes
1answer
305 views

ThreatFire antivirus - how is it different and does it replaces normal antivirus?

When reading the German Federal Office of Information Security recommends Chrome on Chrome Blog, they link to best practices guide: Today the BSI, Germany’s Federal Office for Information Security ...
1
vote
2answers
757 views

Is Windows simple file sharing safe?

Windows (in this case XP) allows me to simply "share a folder" via its SMB protocol, and I can access it via Linux quite nicely (with Samba), no questions asked. That's what bothers me, it just does ...
0
votes
2answers
620 views

Internet Blackouts - Random Timeouts in Intervals

Currently we are having random time outs on our internet connection. I can confirm this by pinging google.com/yahoo.com and other sites and I see the connection work for about 10 - 12 requests, then ...
2
votes
4answers
906 views

Firefox NTLM clear on Windows logout

My network uses Kerio WinRoute Firewall 6 and is configured to authenticate HTTP requests using built in Active Directory accounts. That means every computer gets sent an NTLM auth challenge when ...
2
votes
1answer
8k views

How do I tell if employees are using TeamViewer at work?

I've been tasked with helping the security department close up a few holes. They are in the process of hiring a dedicated network guy, but for the time being, I'm the closest they have. They've ...
7
votes
3answers
32k views

How to disable “Download scanning protection” of new Chrome-17?

In recent update of Google Chrome internet browser (in stable channel), there is a new security/privacy option: http://chrome.blogspot.com/2012/02/faster-browsing-safer-downloading.html In ...
0
votes
1answer
1k views

Allow snmpd to read /proc/net/* when running a grsecurity kernel and the grsec_proc group

I have rented a VPS from OVH (the Kimsufi 2G), and I'm having troubles getting snmpd to work correctly. The box is a Debian Squeeze running an OVH custom kernel: root@vps:~# uname -a Linux vps ...
2
votes
2answers
2k views

Can attackers harvest WiFi passwords by spoofing ESSID?

I've recently started using wireless on an (Arch) laptop. My wireless manager (wicd) is set up to automatically associate with any networks with a certain ESSID and attempt to authenticate with them. ...
1
vote
1answer
538 views

Should Gentoo's Hardened profile / SELinux be used on normal desktop computers?

well, the title pretty much says everything. I'm installing Gentoo on my machine, and I'm wondering whether I should use SELinux or not for a desktop computer. I'd also like to know if there are any ...
2
votes
3answers
3k views

Security difference between webmail access and desktop email client? [closed]

Is there a difference in privacy and security between webmail access and desktop email clients? Is one inherently more secure than the other? Is it more secure to use an email service that does not ...
1
vote
1answer
1k views

How to find out additional information about burned CD or DVD disk?

For instance, some music is burned on CD/DVD disk. How to find out what program this disk was burned with? What kind of extra information CD/DVD stores? Is it possible to track down a PC which was ...
3
votes
1answer
455 views

How did I get infected with “System Check”? [duplicate]

Possible Duplicate: Computer is infected by a virus or a malware, what do I do now? I've been infected with the "System Check" scareware not once, but twice -- after a reformat. It's now ...
0
votes
1answer
7k views

How can I reset the password on a Windows 7 VM under VMware 4 on Mac Lion?

I have a Mac running Lion, and a Windows 7 virtual machine running under VMware 4. The problem is that the password was lost in a phone upgrade. Is there any way using command line or other tools on ...
0
votes
2answers
313 views

Fix for php 5.3.9 libxsl security “bug” fix

just this morning i updated my debian server to php 5.3.9 , change log (last item in list) has a fix for this bug and now when running any hosted site using XSL transforms i get: Warning: ...
4
votes
3answers
198 views

How do I create a safe system on a used computer (running Windows 7) once purchased?

I have recently purchased a used computer. It has Windows 7 Ultimate (OEM) installed, but didn't come with any recovery discs. Even though the (private) vendor went to some effort to provide a fresh ...
2
votes
1answer
911 views

How do you write to the TrueCrypt outer volume?

How do I write to the outer volume of a TrueCrypt partition, without affecting the hidden partition inside it?
3
votes
1answer
694 views

Is a normal TrueCrypt partition indistinguishable from random data? (Does it pass a χ² randomness test?)

If I encrypt an entire partition with TrueCrypt (a standard volume, not a hidden volume), would the partition look statistically indistinguishable from random data? Or would someone be able to ...
16
votes
2answers
22k views

TrueCrypt, RIPEMD-160 vs SHA-512 vs Whirlpool

I am encrypting a volume with TrueCrypt. I have decided to use AES as the encryption algorithm, seeing as it is the government standard. But which hash algorithm is better (more secure)? RIPEMD-160 ...
2
votes
4answers
3k views

Windows network share on linux server without samba

I want to mount shared folders from my linux server on the network to appear like normal drives in Windows. The server has a private network on one side and a public network (which happens to give me ...
3
votes
1answer
1k views

How to safely store passwords in Irssi?

I use several IRC networks and it's unsafe to store passwords in plain text. On the other hand, typing each password after connection is uncomfortable. How can I store passwords in encrypted file and ...
1
vote
1answer
266 views

Apache virtual host and .htaccess

I`m using apache2 on ubuntu 11. I want to secure my wordpress site with .htaccess rules, but I understand that it is preferable to put the rules in the apache config file (httpd.conf). If I understand ...
2
votes
3answers
1k views

How to firewall a VPN connection in Windows 7?

I have a VPN connection to a private VPN server in another country. I don't want any internet packets to leave or enter my laptop unless they are going to or coming from the VPN server's IP. Is ...
1
vote
4answers
10k views

How to remove URL embedded in PDF document? (dialog “the document is trying to connect to” appears)

I have an Adobe PDF document which when opened displays a warning dialog with the words "the document is trying to connect to" followed by a certain URL. I choose the "Block" option to try to be ...
2
votes
2answers
1k views

How to disable the online Authenticode check everytime you open an EXE?

Every time you open an EXE file that you've downloaded, Windows 7 checks online if the EXE is signed. Is there a way to disable this? It takes around five seconds to test if it's okay, and then it ...
0
votes
1answer
295 views

Gmail loses browser encryption after a while

I'm using the latest version of Firefox on the latest version of OS X for reference. I've noticed that sometimes when I go back to my email tab and look in the location bar, Firefox says gmail is no ...
0
votes
1answer
440 views

How can I determine why exactly UAC is blocking an app from running/installing?

Windows 7 Professional (Fully updated). UAC seems to be preventing an Outlook Add-in from installing/running correctly. When I disable UAC and restart, it works fine. When I re-enable UAC and ...
3
votes
2answers
3k views

hard drive Password setup in BIOS - How to use?

I want to use the hard drive Password feature in the BIOS on my Asus 1015-pe netbook but the manual mentions nothing about that feature or anything within the BIOS. BIOS Options: Hard Disk Security ...
2
votes
1answer
679 views

Secure alternatives to VPN?

I need a way to access my home network (well, specifically just one server on the network) from anywhere. Usually I would use Himachi (free VPN client, made things very easy) but it has since become ...
3
votes
3answers
20k views

Internet Explorer refuses to connect to sites with untrusted SSL certificates

IE has started exhibiting a strange behavior. We have several intranet nodes (routers) that are configured to use HTTPS for access, but which have untrusted / self signed certificates on them. At ...
2
votes
4answers
613 views

How to exchange documents securely (cross platform)

I have to define a way for two parties to exchange a folder (files) securely. Encrypted zip format seems to be the most obvious but I have read some accounts of zip encryption being flawed. So I am ...
0
votes
1answer
1k views

SP2010 list connected to Outlook 2010 — why the password prompt?

I use Outlook 2010 on a domain-joined workstation. It doesn't typically prompt me for credentials, but rather my domain credentials are used. I connected a SP2010 list to Outlook 2010: Browse to ...
5
votes
2answers
2k views

Is Google's 2-step verification less secure with application-specific passwords?

When using Google's 2-step verification with services that can't use it, such as mail clients on smartphones and desktops, the solution is to create application-specific passwords for those services. ...
3
votes
1answer
825 views

How to find what elements on SSL page are insecure? [duplicate]

Possible Duplicate: How to tell which resources are loaded “insecurely” with Chrome using https I"m using a major tax site for this year's taxes, and I am getting the "Some ...
4
votes
1answer
430 views

Is it possible to allow users to create files/folders and prevent deleting folders?

I have a Windows 7 computer that has several users. I have a parent folder that is shared with the users. I want certain users to be able to create files/folders within this parent folder. However, I ...
2
votes
5answers
329 views

How can I monitor if someone is sending or receiving files?

I have a small office network with about 20 computers. How can I track what files and which computer is either sending or receiving files? My question is not how to prevent someone from sending ...
0
votes
0answers
1k views

How can I detect that someone is scanning my network?

Suppose another person is running a network scan on the network and my computer belongs to this network. Are there ways to find who is performing the network scan or know that a network scan is being ...
0
votes
1answer
440 views

nmap against windows 7

When executing the **smb-enum-shares.nse** script against a Windows XP host, I receive the output I'm expecting (shares, path etc.). However, when running the same script against a Windows 7 host, ...
2
votes
1answer
5k views

Reconfiguring a WiFi Access Point's wireless settings through WPS?

As you may know, WiFi Protected Setup (WPS) has recently been broken. I downloaded and tested Reaver-WPS, the tool that implements the WPS attack. The tool's README file states: Reaver performs a ...
4
votes
1answer
77 views

Can we use a cert to package a .zip file to let only people with cert can open the zip?

Except from using password, can I use a digital cert to assign for encoding the password to prevent people open the zip file? Thanks.
3
votes
4answers
265 views

Administrating “public” computer at local church?

I'm administrating a "public" computer, that is the computer at our local church. We use it to record the services in Ableton Live, show lyrics with Easy Worship and so on.. On it we have Moonscape ...
1
vote
2answers
525 views

How to set up a secure chat using netcat

I use netcat to chat in LAN. PC1 listen port 8080 $ nc -l -p 8080 PC2 connect to PC1:8080 $ nc 192.168.10.1 8080 Unfortunately, this is not secure. Anyone sniffing packets can intercept my ...
3
votes
1answer
571 views

Is it easy to hack a weak passworded linux pc from the Internet?

My question may seem very amateurish or even incorrect, but do please take in account that I'm a complete noob in computer and network security. I'm just trying to find out some information here. ...
5
votes
3answers
41k views

How to disable irritating Office File Validation security alert?

I have Microsoft Office 2007 running on Windows 7. Yesterday I updated Office to the latest service pack, i.e. SP3. This morning, when opening an MS Word document (.doc format, and a document I ...
2
votes
2answers
103 views

Getting Notified that a Virus Definition Update is Available for Microsoft Security Essentials

I have to perform regular offline updates on Microsoft Security Essentials Virus definition files for a computer not hooked up to the internet. I found the following KB article with a link to the ...
12
votes
4answers
26k views

How do I configure my Linksys routers to resist the WPS brute-force vulnerability?

US-CERT recently released Vulnerability Note VU#723755. http://www.kb.cert.org/vuls/id/723755 In short, this describes how modern wireless routers can have their PSKs discovered within just a matter ...
2
votes
1answer
983 views

Secure shared folders over VPN

I have machines both on windows 7 and windows 2008 R2.The VPN is up and running, and on all machines the VPN network is set to Home, and router network is set to public. What I need, is a secure and ...
0
votes
3answers
807 views

Why is passwordless ssh not a terrible idea? [closed]

So, I generated a passwordless key pair and uploaded it to all of my remote accounts. And now I can log in to all of my remote accounts with extreme ease and comfort. And so can a malicious user which ...