Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

0
votes
3answers
75 views

When using VirtualBox, is the host OS 100% protected from security issues in the guest OS?

More specifically, if I intentionally install all kinds of viruses and malwares on a Windows installation running inside VirtualBox on Mac OS X, can I cause any damage to Mac OS or even to the ...
0
votes
0answers
199 views

What exactly is the “Shellshock” vulnerability?

Concerning the Shellshock bug (aka "bash bug", CVE-2014-6271), can someone explain how this vulnerability works? Based on the test given in some posts (below), it looks like some type of injection ...
0
votes
1answer
22 views

MS Surface / Windows PC - Wipe Between Users

As a company we have a few devices like MS Surfaces and some netbooks that are used for open access within social spaces. The problem being sometimes these devices are abused and wallpapers changed ...
-1
votes
1answer
301 views

Break the forgotten encrypted password of excel workbook

i have an Excel 2010 workbook, on which i applied an Encrypted (128 bits AES) password, which i can't remember now, is there any way to remove/reset or retrieve that password or any method to retrieve ...
25
votes
7answers
35k views

How do I fix the Shellshock security vulnerability in debian testing/jessie?

The test command x='() { :;}; echo vulnerable' bash shows that my Debian 8 (Jessie) installation is vulnerable, even with the latest updates. Research shows that there's a patch for stable and ...
0
votes
1answer
352 views

nmap output difference between -sL and -sP

I am trying to generate a list of currently active hosts. I get this by doing -sP 192.168.1.0/24 Starting Nmap 6.40 ( http://nmap.org ) at 2014-09-24 19:40 MDT RTTVAR has grown to over 2.3 seconds, ...
1
vote
0answers
93 views

Trying to find out if chromebook Supervised User hacked device

One of the kids has a chromebook, acer c720. I set him up as a supervised user on 9/5/2014, and was able to view browsing history on supervised user dashboard. However the history stopped on ...
0
votes
0answers
35 views

Are there risks to auto-login/passwordless login in Linux other than physical access control?

In Linux, does auto-login/passwordless login leave the computer in exactly that same state as it would be after manually logging in, or does it create security risks of a type other than access ...
0
votes
2answers
105 views

Deleting file names from MFT

I want to delete the unused contents of a disk without leaving any traces, e.g. for giving it to a colleague or a customer. The colleague/customer shall receive some files which are already on the ...
0
votes
2answers
40 views

How should I properly store passwords as a user? [closed]

So we all know that it's a bad idea to use one passwords for all your services. A breach in just one service, could allow the hacker to access every one of your services that uses the same password. ...
1
vote
0answers
44 views

Separation of work, personal, and private , for all things tech?

Increasingly I'm finding it's very difficult to separate anything on my computers and devices. Everything syncs everywhere, I need to do work from my home computer, I need to do personal things from ...
0
votes
0answers
14 views

How does ProtectedStorage on Windows work?

When going through the services on my system, I stumbled upon ProtectedStorage (...\system32\lsass.exe) , which says it provides storage protection for passwords, etc, so that other processes cannot ...
1
vote
0answers
38 views

How costly is it to install lots of rarely used USB and print drivers? [closed]

Over the course of years, I keep sticking all kinds of USB drivers into my laptop, and connecting to all kinds of printers, to use it just once. Exactly how costly is it, when not in use? Should these ...
2
votes
0answers
35 views

Convenient way to check AUR PKGBUILD against malicious code?

As is well known, one should take care when installing packages from the AUR, because the PKGBUILD may not do what you expect and may be malicious. For this reason, my workflow for installing and ...
-3
votes
1answer
874 views

Google Сhrome new Secure Preferences, how mod preferences now?

In new Сhrome version 37.0.2062.120 m appeared new Secure Preferences file, how make modification preferences now? Secure Preferences file: { "extensions": { "settings": { } }, "protection": { ...
0
votes
0answers
25 views

How can I test IPv6 security with a mikrotik router?

I'm experimenting with IPv6, and I want to test security and encryption. Does anyone know if there is some way to send a secure test packet between my computer and Mikrotik router? Perhaps using ...
0
votes
0answers
64 views

Google Chrome SQLite cookies contains keywords : drugs, illegal and pornography?

I was just testing some things with cookies in Chrome. I opened Local Storage and its content with SQLite browser. Then I found something weird... ...
0
votes
0answers
23 views

Security Monitoring Using last Command

I am new to linux administration and was looking for a good way to get e-mail alerts when a user logs in. I was thinking this might be useful as a security monitoring tool to allow me to see who is on ...
0
votes
0answers
56 views

Java applets not working in Windows 8

I really want to view the Java applet in this website. I've tried in firefox and IE and neither work. I followed Sun's instructions but they're inacurate: first of all there's no Java Control Pannel, ...
0
votes
1answer
51 views

Windows 7: Not prompting for administrator credential when group policies block removable storage driver installation

I am in the middle of blocking of USBSTOR access for all my standard user, currently I am able to use batch script to block the USBSTOR registry depending-ly, if they belongs to a security group they ...
0
votes
0answers
28 views

TrueCrypt mounted disk accessible by guest account

I noticed this issue. I have personal files on my truecrypt account and if it was mounted and then someone use my guest account, they can access my disk! how to prevent that? is there any option to ...
0
votes
2answers
26 views

followup: why are shebang files not suid-able?

followup question to http://unix.stackexchange.com/questions/364/allow-setuid-on-shell-scripts . there is a very good answer by Gilles. alas, I do not understand it. nothing described there seems ...
0
votes
0answers
29 views

How to set up limited access remote control to a specific program?

I have a certain program running on a Windows 7 PC and I want a group of people to be able to access it and use the program remotely. However, these remote users shouldn't have any other permissions ...
0
votes
3answers
92 views

Why very few modern motherboards are equipped with TPM? [closed]

I've heard bitlocker will be so common that microsoft will require every computer to have TPM to run windows 9. Yet I just called gigabyte. Gigabyte says that not one of their motherboard is equipped ...
1
vote
1answer
92 views

How to specify SIDs in Security Policy?

After the installation of KB2871997, on Windows Server 2008 R2 on a domain controller, you get a new user group: 'Restricted Users', and as this article mentions, you get two new well known SIDs: ...
3
votes
1answer
1k views

Run unsigned Java applets

Basiclly the same question as Allowing unsigned Java applications on all sites, but for Java 8, where I get the pleasure of seeing this screen: Unsurprisingly, this breaks things for me. Is there ...
0
votes
1answer
47 views

How secure is hosting a node.js personal app on 127.0.0.1? Can it be accessed anywhere other than my own computer?

I have a node.js app for personal purposes hosted at 127.0.0.1 server.listen(80, '127.0.0.1', function() {... It contains sensitive information. As I understand only me (computer that is currently ...
1
vote
1answer
24 views

HeartBleed and Client certificates

Is it true that a server, setup to require a client certificate, cannot suffer from the Heartbleed vulnerability, if that user does not have a client certificate?
0
votes
1answer
31 views

Concerned about using a public key in a class to decrypt resources

I've created a program which stores decryption key in a file, but when I run it, the key is decrypted and stored in a public class where the program can use it in all instances, but I'm concerned ...
0
votes
0answers
63 views

Security Alert: A secure connection with the site cannot be verified

I've had the same issue a lot of your readers have asked about the Security Alert: A secure connection with the site cannot be verified. Would you like to proceed? The certificate you are viewing ...
1
vote
0answers
26 views

How do security firms find out whether 3rd party software is safe? [closed]

What processes do professional software auditing and security testing companies follow to determine if a software is "safe" to use. Say, someone writes malware that behaves itself 99.999% of the ...
0
votes
0answers
23 views

Limiting the times my wireless network is open and available.

I have an HP PC with a linksys wireless network. My son has a laptop that he uses for gaming and stays up all night gaming on it. Is there anyway I can have my linksys network shut down for certain ...
0
votes
1answer
73 views

Are there downsides to installing node.js with root privileges?

I'm using the following code to install node: cd /usr/local/src/ wget http://nodejs.org/dist/v0.10.25/node-v0.10.25.tar.gz tar -xvf node-v0.10.25.tar.gz cd node-v0.10.25 ...
0
votes
0answers
16 views

Read history commands on GNOME 2?

Someone (old employee) deleted the history record and I am wondering if there is any way to read the commands executed by Gnome ? Thanks! FYI: Server: Debian 6.0 Gnome: v2
0
votes
0answers
52 views

Selective USB blocking

I would like to control access to USB ports on our network. We have operational USB devices connected to all PCs on the network, so I am not looking at simply disabling all USB ports functionality. ...
0
votes
1answer
42 views

How much dangerous rm -rf is?

Does rm -rf dir/ erase filesystems mounted below dir/ (say in dir/a)?
0
votes
0answers
141 views

How to block spambots and questions about security on a VPS

Is it normal to have many many lines in /var/log/kern.log about UFW block? For example: Aug 29 22:13:13 myvps kernel: [1980808.931708] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=60.173.8.240 DST=me ...
-1
votes
1answer
62 views

Linksys' incoming log…do i have an intruder?

My Linksys administration tab where logs are located shows a total of 12 incoming connection entries. Some of these addresses say they're in china when i google them which exponentially increased my ...
0
votes
1answer
74 views

Gemalto Smartcard change Admin Key

We are using Gemalto IDPrime smartcards for Windows Logon. The user can change their PIN number but using the Gemalto Mini-Driver Manager anyone can change the users PIN by logging in with the ...
22
votes
4answers
2k views

What's the responsibility of an IPv6 owner?

Living behind a consumer-grade router for the memorable past, I guess I took the side-effect of NAT for granted, in that I had the burden of forwarding ports when I needed to, instead of have to ...
0
votes
1answer
543 views

Locking and Terminating User Sessions via Group Policy settings

To conform with some new security requirements, my company is implementing Group Policy solutions to existing security vulnerabilities. My current assignment is to find and implement Group Policy ...
1
vote
1answer
22 views

Filtering who can connect to me via ssh

I want to access my home pc from my laptop. This will make working on projects while in university much easier (and a whole bunch of other things) I've successfully installed ssh and ssh-server. I ...
0
votes
2answers
93 views

Can I trust password manager software?

I'm considering downloading a password manager so that I don't keep forgetting my passwords. The problem is, how do I know that the password manager itself is both hackproof and trustworthy, i.e. no ...
0
votes
1answer
134 views

Where 'SYSKEY' password store? and what kind of algorithm it use to encrypt the passord?

As far as I know Windows store user-acconts passwords in SAM file under Windows\System32 and it use NTLM algorithm to encrypt it! As you know we can set another password for windows (not for ...
1
vote
1answer
72 views

Can I find out if my employer is snooping on me?

I work at a large university and have a computer supplied by my employer. There is apparently some sort of remote management that the help desk can use if I call them and accept their request to log ...
0
votes
0answers
158 views

Removing Java Security Prompt

I installed the software Action(s) on my Windows 8 machine but the annoying Java security prompt Window will not stop showing up when I launch the application: The Java Control Panel also resets my ...
-1
votes
1answer
79 views

if I use https, can someone (who monitors my wifi) see what I am doing? [closed]

I use a public wifi. I wonder if someone would be able to see what I am doing over the internet when I use https. And for plain http? What could I do to be safer? Using tor? But what about the other ...
1
vote
0answers
131 views

Self Encrypting Drives - is it possible to bypass ATA password?

I am using TrueCrypt but I want to buy SSD with SED, it's Samsung 840 Evo. After firmware upgrade it "supports advanced data security features(TCG/Opal and IEEE 1667)". If I set ATA password, would ...
0
votes
1answer
24 views

Security in a Word with password

How secure is a word document if I put a password to open it? I suppose is more save to put information in a note of Apple Keychain or 1Password, is that correct?
0
votes
0answers
10 views

Possible to use IRM server with a live Powerpoint demonstration?

I have a presentation where I'd like to live-stream the contents (like Microsoft Powerpoint online presentation services) however I also don't want people to do screen captures (like IRM server) I'm ...