The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

3
votes
1answer
96 views

How to retrieve RSA private key from wrapped key blob?

I have generated a pair of RSA keys on a smart card with OpenSC tools and retrieved it as wrapped key blob encrypted with DKEK key: sc-hsm-tool --create-dkek-share dkek/dkek-share-1.pbe sc-hsm-tool --...
0
votes
0answers
14 views

Using a VPN subscription service to connect to different other services

I've just set up a new UK Ltd company and one of my potential customers require that I have a Cyber Essentials Certification. (https://www.cyberstreetwise.com/cyberessentials/) The company I've set ...
2
votes
1answer
54 views

How can I stop files infected with ransomware from replacing my cloud backup?

I saw this question on Security.SE and it got me thinking about my way of backing-up my data. The way I do it is by storing my most important data (including kind of personal things) on a folder on ...
0
votes
1answer
32 views

how to block subdomain from any domain with windows7?

There are a lot of crappy websites which install spyware or badware software with a common subdomain name. For example (don't try these URLs, they are dangerous): 4d0a8a26-a90a-43b8-90c6-...
0
votes
0answers
47 views

Add link to Kaspersky whitelist in order to unblock it?

This window appears every 10 seconds saying "Malicious link blocked". I believe that the link is secure. How could I add this link to Kaspersky whitelist in order to unblock it? Note: I'm using ...
0
votes
2answers
52 views

Can HTTP servers on a LAN be hacked into from the web?

I have set up a web server on a ESP8266 microcontroller inside my local area network. HTTP GET requests sent to this unit can switch on and off a mains outlet, and I'm planning on deploying a couple ...
0
votes
0answers
36 views

What exactly are the security implications of ufw DEFAULT_FORWARD_POLICY “ACCEPT”?

I found this question asked on Serverfault, but the answer just provided alternatives instead of actually detailing the implications. I had to set DEFAULT_FORWARD_POLICY to "ACCEPT" to be able to ...
0
votes
2answers
85 views

Open SSH port a bad idea on a Raspberry Pi?

I have a Raspberry Pi at home that I have connected to my home network. I use it to run a VPN server, SSH tunnel, and occasionally I SSH into it to perform maintenance on it. Is it a bad idea to have ...
0
votes
0answers
18 views

What Everyone group actually means? [duplicate]

When I give Everyone a full access to some file does it mean anyone can just connect to my computer and download it? In which case Everyone rules will be actually applied? Is it safe to set some ...
1
vote
1answer
89 views

How does ransomware affect secured/hidden partitions? [closed]

I have hybrid hdd/ssd, there are some partitions for backup&stuff and also a special one that win8.1 created(recovery?). I can see the partitions with gparted, but can't access any of them through ...
0
votes
0answers
75 views

Simple ICMP DOS attack example with cmd on Windows 10 crashing the attacker's computer?

I had to make a simple batch file as an assignment in which I had to attack another pc on the same network by a ICMP DOS attack and analyze the traffic using Wire-Shark. Here the code which I used: ...
2
votes
3answers
187 views

Is a Bitlocker encrypted drive safe to dispose?

Based on the nowadays public knowledge about the strongness of the Bitlocker encryption - and supposing the user thinks the Bitlocker password is strong enough to make bruteforce unviable with the ...
0
votes
1answer
19 views

Whats blocking direct access of error_log in apache

I have searched on google for a long time but it seems like nobody has even asked this question: What is blocking the direct access of error_log on Apache servers? Or is it even an Apache thing or ...
1
vote
3answers
118 views

Secure Chrome passwords against WebBrowserPassView

I just got shocked with what WebBrowserPassView can show - it basically shows every password I've saved in my browser (Chrome). I guess other users on my PC could get my passwords that easily too. ...
3
votes
2answers
39 views

Can the SAM database be encrypted with EFS to prevent offline password cracking?

Is it possible to EFS-encrypt the SAM database to prevent offline password cracking? Would it have to be encrypted as the SYSTEM user?
0
votes
0answers
17 views

SABNZB+ connects to Google

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME sabnzbdpl 29850 sabnzbd 5u IPv6 190586 0t0 UDP *:50895->par03s14-in-x0e.1e100.net:http sabnzbdpl 31115 sabnzbd 5u IPv6 ...
0
votes
1answer
28 views

Can an external client access an FTP server?

The current network setup is like this: Company A has a network setup consisting of Cisco devices only. It has an FTP server where all files are stored and accessed. Company B has a different setup ...
0
votes
1answer
57 views

Felt spied on at work and after two visits from security they are reimaging [closed]

I work for a very large school district. I logged in at work on my Dell PC one morning and see Ultra VNC twice in my Start menu. But let's go back to the night before I saw those eyeballs in my ...
0
votes
1answer
40 views

Amazon page redirecting to payment page on my wifi

When I open an Amazon page on my apple devices, it automatically redirects to a login page, and then next to the payment page if I enter dummy login credentials. This happens only on my wi-fi. This ...
3
votes
0answers
156 views

How can I safely remove an RSA 4096 ransom-ware virus?

My dad's computer got infected with an RSA 4096 ransom-ware virus. For those who don't know it is a virus that encrypts all the files on your PC using an RSA 4096 encryption key. Then you need to use ...
0
votes
0answers
99 views

Two network cards, one directly to internet, other in LAN

I need some insight in my thinking so that I don't do something completely stupid. I have two physical network cards on my computer, one card/interface offers a handful of services and the other is ...
2
votes
0answers
69 views

Preventing ransomware attacks by detecting suspicious levels of file system activity

Assume a Windows 8/10 home/small office system with 3-4 users and a few TB of file share (say 6TB in a suitable RAID). Most files are static, but sometimes files get moved round or modified. But if ...
0
votes
0answers
31 views

WhatsApp end-to-end end encryption

I went through WhatsApp Security White Paper which talks about how WhatsApp end-to-end encryption is achieved so that third party and even WhatsApp can't decrypt a message transmitted between sender ...
1
vote
1answer
166 views

Security regarding nginx + php on CentOS 7 with OwnCloud 9

I'm trying to setup a OwnCloud Server v9 for my freelancing purpose. SPECS: - CentOS 7 - nginx - php I'm a little bit confused. I can find only the info about the PHP Version 5.5 in the ownCloud 9....
0
votes
1answer
40 views

Is it possible to monitor traffic and identify rogue outgoing emails from mobile devices using a PC as a wireless hotspot?

I've discovered that my home network IP address has ended up on several blacklists after spam traps received emails from this IP address. I've tested the one PC that uses this network, and it seems to ...
1
vote
0answers
37 views

Block all inbound traffic except one IP using windows firewall rules

I have no problem doing this in linux. I just write an iptable to block all traffic and another one after to allow a specific IP. However it doesn't look to be that easy on Windows. I did the exact ...
1
vote
1answer
42 views

What does single user mode in Linux/Unix means and how is it different from Safe mode in Windows

What is Single User mode used for? Can it override the root Password? Do you need a password to acces the SU mode? In a normal session when you run SU command does it stands for Single User or Super ...
0
votes
1answer
73 views

Effect of “windows defender is taking action to clean detected malware”

Sometimes I get this message, but when I look at the history of windows defender, I see nothing. I am scared that windows is mistaking something important for a malware and deleting it without me ...
1
vote
1answer
118 views

How does Bitdefender's Crypto-Ransomware Vaccine work?

I have read responses (66 currently) but still have no idea how this tool works. "Razvan Stoica says: It’s a vaccine, but it can (and probably will) be updated against new strains, hence the need to ...
1
vote
1answer
103 views

Is there a way to display a watermark on the screen at all times?

I am working in a government position where we regularly process confidential information. We are looking into a possible way to patch the analog-hole problem and discourage users from taking photos ...
0
votes
1answer
10 views

How does IPsec operate in NAT environment?

I know that if you mess with IPsec header it will drop the packet and NAT is build exactly for that. How do they deploy IPsec where NAT is also needed.
2
votes
1answer
28 views

Web Server Security : www directory

I have a question about Web Server, especially PHP / Apache Server. A Developer told me and my colleagues that today it is bad to put our Web directory in WWW directory, because it is unsecured (...
0
votes
1answer
59 views

Can't Charge iPhone with Windows with restricted USB Policy [closed]

My company has restricted our laptop machines for any external mass storage device (probably using Kaspersky Endpoint Security restrictions). Because of this, I am not able to re-charge my iPhone. ...
0
votes
0answers
16 views

Family Settings on Microsoft?

Over the past couple of days I've kept receiving this message on my Windows 10 Laptop, "Your family can see reports of what you do on this device..." Last time I checked my family never put any sort ...
1
vote
1answer
67 views

I can access my neighbour's powerline ethernet network. Does that mean he can steal my power?

I was under the impression that the electrics in my totally normal semi-detached house were sufficiently isolated from my neighbours' that it was impossible for my powerline networking adapters to ...
0
votes
1answer
32 views

Virtual Machine Port Forwarding Security

I would like to be able to have a Virtual Machine connected to my network hosting a game server / Apache server. The only concern I have is the security of opening up ports to the internet. I want it ...
0
votes
1answer
52 views

Simple ARP poisoning attack with UNIX?

I would like to know how to do a simple ARP poison attack with UNIX commands only (no ettercap or arpspoof or anything like that.) I don't care about forwarding packets to the actual router, I just ...
0
votes
0answers
27 views

Is it possible to require a TOTP on Windows Login using existing or custom software?

I have always been looking for a way to require a Two-Factor Authentication (One Time) Passcode on my Windows Login. Using an algorithm such as TOTP, this should be easy, and require no internet ...
1
vote
0answers
34 views

Force Desktop OneDrive to Prompt for Password

I use the Windows 8 implementation of "Desktop OneDrive" to create and access files stored in my OneDrive account. My OneDrive login is also my Windows login so that when I'm using my computer all my ...
0
votes
2answers
120 views

Local disk: “These files might be harmful to your computer”

When moving or copying files from my local harddisk, I get the message: These files might be harmful to your computer. Your internet security settings suggest that one or more files may be ...
-1
votes
1answer
60 views

Do malicious web sites ever exploit vulnerabilities in Linux clients?

Do malicious web sites ever exploit vulnerabilities in Linux clients? Are there any documented instances of this happening in the wild? I am talking about actually taking over the client's machine ...
1
vote
2answers
43 views

Denied SYSTEM access to my drive, how to re-enable it?

I gone into my drives properties and denied SYSTEM's access to it: Now I can't access that drive and can't find a way to return the system access. Tried to add it this way but it didn't work: ...
5
votes
1answer
89 views

“sudo screen” vs. “screen -> sudo”

When I want to drop a root shell into screen, I usually do sudo screen. A friend of mine first launches screen, then drops a root shell in the screen session. What is the better way of both from a ...
1
vote
1answer
79 views

ClipConverter.cc and “Leave this page” pop-ups

So I currently use ClipConverter.cc to convert music from YouTube into .mp3 files. The site itself is innocent and in my opinion is the best website to grab high-quality music from YouTube. However, ...
0
votes
0answers
132 views

Java out of box cacerts certificate are SHA1 is there one with SHA2

Java/JDK/JRE they have a keystore cacerts under lib\Security folder as shown below Java comes with around 93 certificates out of box, These are not self-signed these are supplied by java itself ...
1
vote
0answers
169 views

Unlock Samsung SSD 840 PRO with hdparm

My Samsung SSD 840 PRO is locked with a password set by using the BIOS. Every time I turn on the computer, I have to type in the password. Cause there is a BIOS bug, I am not able to change the ...
0
votes
1answer
70 views

Dictionary attack in Bash with cURL

I'm fairly new to Bash, but this is a script I've been working on for the past few days. It's meant to run a dictionary attack on an HTTP-POST login for a website, by reading the time module and ...
1
vote
1answer
332 views

How to Disable WebRTC in Google Chrome

I understand there are security vulnerabilities exposed when WebRTC is enabled, so I would like to disable it in Chrome. How does one do that? I thought I'd be able to do it under chrome://flags, ...
0
votes
0answers
36 views

Disabling Google Smart Lock but still save passwords

I use Chrome on Windows 7. Every time the browser asks to save my password it's saved in the cloud unless Google Smart Lock is off but it this case I have to reenter the password each time I log in to ...
0
votes
0answers
20 views

What log would show what in Windows blocked a programs' access to the Internet?

We have a program that connects to the internet to check registration for a subscription. Something on a customer's computer is blocking that. It's NOT: Windows Firewall (I disabled it. Problem ...