Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

2
votes
3answers
152 views

SSH Private Key Authentication Failing

I'm kind of stuck here.. I am trying to disable all SSH login capabilities of root. No password login. No key-based login. Nothing. I have a user "andrew" that should only be able to SSH into my ...
1
vote
2answers
31 views

How to disable non-exe extensions from running?

I want to make my system unable to launch .scr .pif (and all executable windows formats here) as a executable program. How do I disable them an make .exe files only runnable as programs (and .msi ...
3
votes
2answers
233 views

Iframe on bottom of every page

I am not sure if this is the right place to ask this question, however I can't think of any other place where I can find answer to this. I have noticed, this weird iframe on bottom of quite a few ...
1
vote
1answer
52 views

Bitdefender license [closed]

I have bought Bitdefender Internet Security 2015 and it is shipped with a license to install it on 3 PCs. I only have 2 PCs: A laptop and a desktop computer, so my question is: Can I give away the 3rd ...
1
vote
1answer
47 views

Secuirity concerns from Windows 8 login screen

I'm trying to create a secure setup on my new Windows 8 laptop to help keep a serious thief away from my data. An SSD with 256-bit hardware encryption provides a solid security foundation. But if a ...
0
votes
1answer
311 views

Securing Remote Desktop Connections With SSL Certificate From a Trusted Certificate Authority

Currently I'm using a desktop machine running Windows 7 Ultimate x64. Also have configured it to enable remote connections using MS Remote Desktop Services (RDS); however, since the machine issues its ...
0
votes
1answer
22 views

Clear sensitive information from vdi

I'm able to obtain file names and their contents from vdi image using grep despite the files were deleted. Example output: MICROS~3.DLLans0��1FR�b��?,|�R��?,|�R��?,|�R�� ...
10
votes
1answer
388 views

Unauthorised Bluetooth device keeps connecting to Mac

Recently I started experiencing frequent random lags with a Bluetooth mouse I have connected to my iMac: the tracking speed would suddenly drop for a few seconds before returning back to normal. One ...
0
votes
1answer
325 views

Getting lots of Audit Failures in Event Viewer > Security on Windows Server 2008 R2

Over the past few days we have been getting loads of audit failures on the event viewer > security. I suspect they hackers trying to gain access to the server, but they fall into 2 types: One where ...
4
votes
5answers
174 views

best practice procedure for browser use on unsecured WiFi

At this posted question is the advice you need to always check that the SSL connection shows up green in your address bar and/or manually double-check that the certificate is valid when using ...
1
vote
3answers
136 views

Prevent admin users from reading my files

My surface tablet is shared with a friend. She uses a separate account, with admin rights. Being an admin, she is able to gain access to all my files. Even my OneDrive files. I guess I could follow ...
0
votes
1answer
25 views

Headless install of Java Cryptography Extension (JCE) Unlimited Strength?

Is there a way to install Java Cryptography Extension (JCE) Unlimited Strength jars without having to download them manually and accept the terms and conditions? I would like to set this up on my ...
0
votes
0answers
16 views
0
votes
1answer
67 views

Starting Suricata with launchctl on Mac OS X

Using Mac OS X Yosemite 10.10.3. I'm trying to make Suricata start in daemon mode on boot with launchctl. Here is my /Library/LaunchDaemons/org.suricata.Suricata.plist: <?xml version="1.0" ...
0
votes
0answers
44 views

Will it work: RDP Security Layer on Win08 R2, connected from Win7?

First some [very brief] background. Supposedly TLS 1.0 is no longer PCI compliant and thus I have to shut it off on our Win08R2 server. Last time I shut it off, it stopped my ability to RDP into the ...
0
votes
0answers
49 views

Setting Unlimited Strength Jurisdiction Policy Files for multiple versions of Java

I need to install the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files into the folder /Library/Java/JavaVirtualMachines/jdk1.8.0_45.jdk/Contents/Home/jre/lib/security/ ...
1
vote
2answers
30 views

Are there any security or performance implications of changing the user-agent in a browser?

I am working on a production issue which only occurs in IE10 and not in chrome/Firefox. If I change the IE10's user-agent (F12) to Mozilla Firefox it works. I need to debug the app. layer to find ...
0
votes
2answers
201 views

Hide public ip and location with openvpn on raspberry pi

I am trying to set up a way to mask/hide my public ip and location so I can surf the Internet anonymously and even use it to potentially show me in another country so I can access other country ...
0
votes
0answers
56 views

Can Suricata be configured to work as IPS (not only as IDS) on Mac OS X?

Does anyone here successfully use Suricata in IPS mode on OSX? Is it possible at all? I've spent a few days trying to configure sourcecode in different ways with --enable-nfqueue option but with no ...
1
vote
1answer
184 views

Is there a way to bypass HSTS protocol?

Is there a way to bypass the HTTP Strict Transfer Protocol (HSTS) which has been used nowadays by many sites like Google services,banking Services, etc.? I know that HSTS protocol forces a web client ...
-3
votes
1answer
32 views

example.com cannot be resolved to an IP Address

since this morning I can't connect anymore to my website. I'm on a centos dedicated server with apache. I think that there's a problem with DNS, this is the message I get from a webtool: example.com ...
0
votes
0answers
41 views

Bitlocker without TPM with both a startup USB and password?

On a Windows 8.1 Pro PC without TPM how can I use Bitlocker with both a startup USB and password? Here ...
3
votes
1answer
84 views

How to block insecure images on HTTPS pages in Chromium on Linux?

I'm trying to figure out a way to stop Chromium from loading insecure (i.e. non-HTTPS) images on pages served over HTTPS (i.e. basically the exact opposite of this question). Alas, all the ...
1
vote
3answers
34 views

How can I cryptographically verify that someone owns the website they claim to?

More specifically, can I get them to sign a string of text with their x509 private certificate and then I can verify it using the public cert used by the website in question? Perhaps I could supply ...
0
votes
1answer
40 views

How to enforce security of the system before sending notebook to the service?

I have to send notebook to the service to replace the keyboard. I don't to at least make it hard to for the serviceman to snoop through my private stuff. How to enforce security of the system disable ...
-2
votes
1answer
63 views

Illegitimate screenshots?

Our bank requires us to run Trusteer Rapport: http://www.bbt.com/bbtdotcom/business/online-services/online-banking/trusteer-rapport-online-fraud-protection-software.page On two different computers, ...
0
votes
0answers
40 views

Encryption and Decruption with GPG

A friend and I have a bunch of files that I encrypted stored on google drive. The issue comes up that he can't decrypt anything there. The steps I've taken thus far are 1.) Encrypt the ...
0
votes
1answer
67 views

Website failing to acquire proper permission to write to a folder under Windows 2012R2 with IIS 8.5 even though 'IIS APPPOOL\PoolName' is set properly

I am having specific issues in regards to IIS 8.5, Permissions, and Auditing. I have a PHP application running under KanboardPool identity and I've properly set permssions on the application 'data' ...
9
votes
3answers
126 views

A way to trigger an SELinux policy violation?

I'm studying the basic workings of SELinux and would find it useful to trigger a denial. My test machine is running CentOS 7, it's a basic server install without any extra services, and getenforce ...
-3
votes
1answer
40 views

Are the passwords for Windows user accounts encrypted using 128-bit AES? [closed]

I am referring to Windows 7/ Windows XP. Once a user account is locked (windows key + L)/ or logged off, is there anyway to get access to the users' files? Or anyway possible to break into the ...
1
vote
4answers
93 views

Restricting SSH Access to Amazon EC2 Instance

I am preparing to set up an Amazon EC2 instance. It will be a testing and development machine to allow me to put PHP, Python, etc scripts on a server without being tied down to a local machine. ...
2
votes
1answer
45 views

Taken to random websites when clicking on links

My girlfriend was browsing the web last night on this wireless connection and clicked my Google home page, only to get the ''Untrusted site'' page. I then went to yahoo.com and clicked on the youtube ...
0
votes
1answer
776 views

What makes Kali Linux different from other Linux distros for it to be used exclusively for hacking and penetration testing?

I have been asked to first start using Kali Linux and get used to the bash before doing anything in hacking. I was wondering what is so special in Kali Linux that I cannot do on Ubuntu or any other ...
2
votes
2answers
90 views

Securely delete a file in Ubuntu?

I have been reading about government standards for secure data erasure by overwriting the file location with random data [wikipedia: data erasure standards]. I am wondering if Ubuntu's default Delete ...
0
votes
2answers
117 views

Best way to secure RDP connections WITHOUT VPN?

We are needing to use RDP for a client, but the VPN and internet connection is just too flaky to use VPN anymore. VPN is NOT an option anymore for us. Currently the plan is to open a bunch of ports ...
1
vote
1answer
65 views

Does connecting to a VPN always provide a secure environment over unencrypted WiFI connections?

Sometimes I have to use public WiFi connections. I always connect to a VPN thinking it will provide the security of encryption. However, I don't know any details about how the VPN I use is ...
2
votes
2answers
104 views

Eset Smart security finds my hosts file as threat and quarantines it

Everytime I edit my hosts file, Eset Smart security finds my hosts file as threat and quarantines it. It says the host files is a Qhost trojan. What should I do?
2
votes
2answers
197 views

How can I run an EXE from a Network Share?

I have the network share \server\me mounted as H: There are executable in directories there. I try to run them in cmd.exe H:\somedir>program Access is denied. I've read that it is possibly ...
0
votes
3answers
31 views

Intrusion is possible through firmware signature file

I have a small NAS system and recently i got a firmware to upload the features. I have one image file and a signature file. I just trying to edit the signature file and append some junk character ...
0
votes
1answer
30 views

how do I copy these files with access denied?

I had to reformat my computer but I backed up all my data onto a hard drive. Now some of the files that I backed up are getting access denied when I try to put them back onto the new OS. How do I get ...
1
vote
2answers
103 views

Credible sources to download TrueCrypt 7.1a [closed]

As the official developers of TrueCrypt discontinued the software and left the following messages on the official website WARNING: Using TrueCrypt is not secure as it may contain unfixed security ...
0
votes
0answers
18 views

Newly generated pgp keypair missing from Portable PGP

I have a USB drive with Portable PGP on it and have used it for quite some time with no issues. I generated a new key-pair the day before yesterday in order to secure a new account with 2FA ...
2
votes
1answer
37 views

Linux bootup only with USB dongle

I am currently trying to figure out if there is a way to make Linux only boot if a specific USB dongle is present in one of the USB ports. I tried to find a solution on the internet but couldn't find ...
4
votes
1answer
47 views

Does increasing the complexity of a PSK passphrase mitigate the risks of WPA-TKIP?

I'm responsible for configuring a small business network (50-60 devices) and we have some ancient devices that must connect wirelessly to the network. Our regular wireless accepts AES WPA and WPA2 ...
76
votes
2answers
8k views

What makes Secure Login (CTRL+ALT+DEL) Secure?

I was reading about enabling CTRL+ALT+DEL as a security measure when logging in. My question is, what exactly is secure about it? What goes on "behind the scenes" that makes it safe from viruses and ...
0
votes
1answer
567 views

Chrome complains about HSTS

As of April 13, navigating to Facebook returns a giant red padlock with a NET::ERR_CERT_DATE_INVALID response. Like, a really big padlock. The error message seemed descriptive enough, so browsed some ...
-1
votes
1answer
1k views

How does Trusteer Rapport install itself in all my browsers?

Like so many people, I am forced to install Trusteer Rapport to use the online platform of my bank. I ran the installer and now Trusteer Rapport is installed in all my browsers: Internet Explorer, ...
2
votes
3answers
159 views

What causes CTRL-ALT-DELETE to be enabled on a non-domain-joined system?

Recently, on my personal laptop running Windows 7, my login screen turned into a CTRL-ALT-DELETE secure login screen. I've looked around for reasons why this might be the case, and the only indication ...
0
votes
0answers
80 views

Snort alerts analysis (web interface)

I have a question about Snort (or maybe any other IDS/IPS, any working solutions would be ok). The goal is to set up some web interface providing a way to view the whole TCP stream packets of each ...
-1
votes
2answers
60 views

Problems starting Suricata on Mac OS X

I am trying to start Suricata 2.0.7 on Mac OS X but am having issues. Any idea what’s wrong and how to fix it? Here are the errors I am seeing: $ sudo suricata -c /etc/suricata/suricata.yaml -i en2 ...