The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

1
vote
1answer
67 views

How does ransomware affect secured/hidden partitions? [closed]

I have hybrid hdd/ssd, there are some partitions for backup&stuff and also a special one that win8.1 created(recovery?). I can see the partitions with gparted, but can't access any of them through ...
2
votes
8answers
17k views

How to get TeamViewer to ask for a password everytime when connecting to a remote machine?

TeamViewer has a convenience feature where it automatically fills in the password from a previous session, so you only have to press the Logon button to connect. I don't like this behavior and is ...
1
vote
1answer
203 views

How do I find out what my SQL Server database audit records contain?

I need to find out if my SQL Server 2005 database audit records contain the required information that I need. Where or how can I find this out?
4
votes
4answers
2k views

Will Windows show a warning if someone tries to guess my password for a lot of times?

To access shared files on my Windonw 7 computer, another person can go through the wireless network and provide the correct user name and password and access those files. I heard a 802.11b or g ...
0
votes
1answer
253 views

Why are the properties for Audit Policy Disabled?

=I am logged in as an Administrator on my machine and when I check Local Security Settings -> Audit Policy -> Audit Account logon events I click on "Properties" and try to turn it off for "Success" ...
5
votes
2answers
8k views

How do I check if a user connected an external hard drive?

I originally came across this from a Citadel LLC complaint against a former employee. Text of complaint: http://www.scribd.com/doc/63606232/Citadel-vs-Yihao-Ben-Pu From the filing: "Forensic ...
2
votes
2answers
4k views

Does Intel centrino advanced-n wifi 6205 support packet injection? (For penetration testing)

Like it says does intel centrino advanced-n wifi 6205 support packet injection? I am a pen tester its not for unauthorized hacking....
1
vote
1answer
74 views

How to find my network and database access [closed]

Our company gets audited pretty regularly and I was wondering if there's an easy way to find out which accounts have access to what on our network? We're an all windows development shop, so all our ...
1
vote
1answer
761 views

Audit tab in advanced security setting of printer does not appear in Windows 7

I want to audit printer access failures on Windows 7. But when I go to printer properties->security->advanced, there is not Audit tab there. If I try to audit folder, Audit tab is there, but for ...
1
vote
1answer
5k views

Bully for WPS wireless auditing: is it possible to continue an interrupted --bruteforce PIN test?

Bully is a neat program for wireless auditing: it allows to test WPS PINs against my router or access point so I can know if it is secure enough. Example: $ sudo bully mon0 --bssid 11:22:33:44:55:66 -...
0
votes
1answer
2k views

Windows 7 Security Auditing being turned off - By what?

This has been driving me nuts. I've searched high and low for a solution but have found nothing. I did find this question which I thought held the solution through auditpol.exe. No dice. I can set my ...
0
votes
1answer
36 views

How to view all directories with auditing enabled on Windows 7?

A while back I enabled file auditing on a few folders on my Windows 7 machine, but I have forgotten which folders I enabled it on. Is there any way to view a list of all the folders which have at ...
8
votes
2answers
42k views

How to get the real IP address of someone using a proxy?

I was researching digital goods and security when I stumbled upon this company. One of the services they provide is "Real IP". They claim to be able to get the real IP address of users even when ...
0
votes
0answers
17 views

What Everyone group actually means? [duplicate]

When I give Everyone a full access to some file does it mean anyone can just connect to my computer and download it? In which case Everyone rules will be actually applied? Is it safe to set some ...
6
votes
4answers
20k views

Windows Server 2008 Create Symbolic Link, updated Security Policy still gives privilege error

Windows Server 2008, RC2. I am trying to create a symbolic/soft link using the mklink command: mklink /D LinkName TargetDir e.g. c:\temp\>mklink /D foo bar This works fine if I run the command ...
3
votes
3answers
13k views

How do I deny access to everybody but me in Windows 7?

I am trying to set up a file server on my my Windows 7 Pro system at home. I set up one common "Share" folder that I have shared/published. Within the share folder I want to have individual folders ...
0
votes
0answers
53 views

Simple ICMP DOS attack example with cmd on Windows 10 crashing the attacker's computer?

I had to make a simple batch file as an assignment in which I had to attack another pc on the same network by a ICMP DOS attack and analyze the traffic using Wire-Shark. Here the code which I used: ...
5
votes
4answers
33k views

How to prevent the sethc.exe hack?

There is an exploit that allows users to reset the Administrator password on Windows. It is done by booting from a repair disk, starting command prompt, and replacing C:\Windows\System32\sethc.exe ...
2
votes
2answers
323 views

If an old LUKS header with a compromised key is recovered, can it be used to read data?

From what I understand, even when data is overwritten on disk there is a possibility of it being recovered. From what I also understand, replacing/deleting a LUKS key is fast/trivial and does not lead ...
50
votes
2answers
6k views

What do you do if you are being hacked by something coming from a supposedly legitimate IP address such as from Google?

Earlier today I was prompted to use a CAPTCHA—because of suspicious search activity—when doing a Google search, So I assumed either a PC on my network had a virus or something. After poking around I ...
1
vote
1answer
108 views

How does Bitdefender's Crypto-Ransomware Vaccine work?

I have read responses (66 currently) but still have no idea how this tool works. "Razvan Stoica says: It’s a vaccine, but it can (and probably will) be updated against new strains, hence the need to ...
0
votes
1answer
56 views

Felt spied on at work and after two visits from security they are reimaging [closed]

I work for a very large school district. I logged in at work on my Dell PC one morning and see Ultra VNC twice in my Start menu. But let's go back to the night before I saw those eyeballs in my ...
7
votes
6answers
55k views

Why can't I connect to the wireless network after the network password was changed?

My family changed the network password and some other network settings after new computers were brought into the house, because apparently they wouldn't work with the settings or password we had. (...
0
votes
1answer
18 views

Whats blocking direct access of error_log in apache

I have searched on google for a long time but it seems like nobody has even asked this question: What is blocking the direct access of error_log on Apache servers? Or is it even an Apache thing or ...
1
vote
3answers
102 views

Secure Chrome passwords against WebBrowserPassView

I just got shocked with what WebBrowserPassView can show - it basically shows every password I've saved in my browser (Chrome). I guess other users on my PC could get my passwords that easily too. ...
13
votes
1answer
2k views

Unauthorised Bluetooth device keeps connecting to Mac

Recently I started experiencing frequent random lags with a Bluetooth mouse I have connected to my iMac: the tracking speed would suddenly drop for a few seconds before returning back to normal. One ...
3
votes
2answers
36 views

Can the SAM database be encrypted with EFS to prevent offline password cracking?

Is it possible to EFS-encrypt the SAM database to prevent offline password cracking? Would it have to be encrypted as the SYSTEM user?
0
votes
0answers
16 views

SABNZB+ connects to Google

COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME sabnzbdpl 29850 sabnzbd 5u IPv6 190586 0t0 UDP *:50895->par03s14-in-x0e.1e100.net:http sabnzbdpl 31115 sabnzbd 5u IPv6 ...
42
votes
19answers
19k views

Destroy a hard drive without proper equipment

I need to make two hard drives unreadable. Unfortunately, I have some constraints which make this harder than usual (in particular, they rule out the answers to other questions): I don’t have a ...
3
votes
0answers
144 views

How can I safely remove an RSA 4096 ransom-ware virus?

My dad's computer got infected with an RSA 4096 ransom-ware virus. For those who don't know it is a virus that encrypts all the files on your PC using an RSA 4096 encryption key. Then you need to use ...
0
votes
1answer
25 views

Can an external client access an FTP server?

The current network setup is like this: Company A has a network setup consisting of Cisco devices only. It has an FTP server where all files are stored and accessed. Company B has a different setup ...
0
votes
1answer
32 views

Amazon page redirecting to payment page on my wifi

When I open an Amazon page on my apple devices, it automatically redirects to a login page, and then next to the payment page if I enter dummy login credentials. This happens only on my wi-fi. This ...
0
votes
0answers
81 views

Two network cards, one directly to internet, other in LAN

I need some insight in my thinking so that I don't do something completely stupid. I have two physical network cards on my computer, one card/interface offers a handful of services and the other is ...
2
votes
0answers
59 views

Preventing ransomware attacks by detecting suspicious levels of file system activity

Assume a Windows 8/10 home/small office system with 3-4 users and a few TB of file share (say 6TB in a suitable RAID). Most files are static, but sometimes files get moved round or modified. But if ...
1
vote
3answers
1k views

How do I wipe a USB drive using dd on cygwin on Windows?

I am trying to use dd to wipe a usb drive using Cygwin on Windows. What should I use for the of argument? dd if=/dev/null of=?
0
votes
0answers
30 views

WhatsApp end-to-end end encryption

I went through WhatsApp Security White Paper which talks about how WhatsApp end-to-end encryption is achieved so that third party and even WhatsApp can't decrypt a message transmitted between sender ...
0
votes
1answer
32 views

Is it possible to monitor traffic and identify rogue outgoing emails from mobile devices using a PC as a wireless hotspot?

I've discovered that my home network IP address has ended up on several blacklists after spam traps received emails from this IP address. I've tested the one PC that uses this network, and it seems to ...
1
vote
2answers
59 views

How to overcome antivirus false positive error

We develop software which will upload the files to a website. We are facing the false positive error from different antivirus vendors. We have update file, downloader exe(which download the files from ...
1
vote
3answers
5k views

Is “guest network” feature on ASUS routers safe?

My ASUS RT-AC68U router has an option to enable a "guest network". I'm curious how "safe" this is. The config page claims that it only allows traffic through to the internet, so I assume it physically ...
29
votes
9answers
82k views

Windows 7 never remembers my password credential

Every time I need to connect to something in my company I get a dialog like this So I type in my password(this can popup when I am in IE 9 or outlook or whatever.) and check the box. Say I am in IE ...
4
votes
2answers
267 views

How can I browse an untrusted USB flash drive safely?

Say I have a USB flash drive I found lying on the ground. I want to see if it has any information that could help me return it to its owner, but I live in an urban society. It could easily contain ...
1
vote
0answers
27 views

Block all inbound traffic except one IP using windows firewall rules

I have no problem doing this in linux. I just write an iptable to block all traffic and another one after to allow a specific IP. However it doesn't look to be that easy on Windows. I did the exact ...
1
vote
1answer
36 views

What does single user mode in Linux/Unix means and how is it different from Safe mode in Windows

What is Single User mode used for? Can it override the root Password? Do you need a password to acces the SU mode? In a normal session when you run SU command does it stands for Single User or Super ...
0
votes
1answer
53 views

Effect of “windows defender is taking action to clean detected malware”

Sometimes I get this message, but when I look at the history of windows defender, I see nothing. I am scared that windows is mistaking something important for a malware and deleting it without me ...
10
votes
5answers
554 views

Preventing malware from sniffing the sudo password

I often hear people citing sudo as one of the main barriers to malware infecting a Linux computer. The most commen argument seems to go along the lines of: Root privileges are required to modify ...
1
vote
1answer
80 views

Is there a way to display a watermark on the screen at all times?

I am working in a government position where we regularly process confidential information. We are looking into a possible way to patch the analog-hole problem and discourage users from taking photos ...
0
votes
1answer
21 views

How to verify the installed build of dd-wrt on used router

I recently acquired a used router on which a previous owner had installed dd-wrt (I acquired it via a non-technical friend who bought it off ebay, so I have no idea who did the install). I'm ...
0
votes
1answer
10 views

How does IPsec operate in NAT environment?

I know that if you mess with IPsec header it will drop the packet and NAT is build exactly for that. How do they deploy IPsec where NAT is also needed.
3
votes
2answers
8k views

Open a direct file on the hard drive from Firefox (file:///)

I have a small PHP system I created for myself. This system contains a few .doc and .docx file documents. I want to be able to open them directly from the browser without downloading them. I created ...
1
vote
1answer
275 views

How to Disable WebRTC in Google Chrome

I understand there are security vulnerabilities exposed when WebRTC is enabled, so I would like to disable it in Chrome. How does one do that? I thought I'd be able to do it under chrome://flags, ...