The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

74
votes
10answers
16k views

How to destroy a CD/DVD rom safely?

I have old CDs/DVDs which have some backups, these backups have some work and personal files. I always had problems when I needed to physically destroy them to make sure no one will reuse them. ...
33
votes
2answers
14k views

Is it a bad idea to use the same private ssh key on multiple computers?

I recently bought a laptop from which I need to access the same remote hosts that I do from my desktop. It occurred to me that it might be possible to simply copy the private key file from my desktop ...
30
votes
4answers
72k views

SSH: The authenticity of host <host> can't be established

What does this message mean? Is this a potential problem? Is the channel not secure? Or is this simply a default message that is always displayed when connecting to a new server? I am used to ...
20
votes
3answers
17k views

Can other people on an encrypted Wi-Fi AP see what you're doing?

If you connect to an open, unencrypted Wi-Fi access point, everything you do can be captured by other people within range. If you connect to an encrypted point, then people nearby can intercept what ...
78
votes
2answers
8k views

What makes Secure Login (CTRL+ALT+DEL) Secure?

I was reading about enabling CTRL+ALT+DEL as a security measure when logging in. My question is, what exactly is secure about it? What goes on "behind the scenes" that makes it safe from viruses and ...
35
votes
1answer
37k views

How do I view the contents of a PFX file on Windows?

I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!). How do I view the details ...
27
votes
2answers
6k views

I'm using Chrome and Chrome Sync; does Google have access to my passwords?

I've been using Chrome (and Chrome Sync) for many years now. Does that mean Google, the owner of Chrome, knows all my passwords? I ask because I realized that Google owns Chrome, and also, it is a ...
21
votes
3answers
12k views

Do I need to have a passphrase for my SSH RSA key?

Before I started at my current job (at a small business), my office had no firewall on the network and literally nothing was ever being backed up. Now that I've signed on as a dedicated sysadmin / ...
41
votes
1answer
8k views

Why does Google call Thunderbird “less secure”?

I've never had problems using Gmail with Thunderbird yet, but while trying to use a free software client for Google Talk/Chat/Hangout I've discovered that, according to Google's document on "less ...
29
votes
3answers
12k views

Why is SSH key authentication better than password authentication?

This isn't so much a technical question as it is conceptual. I understand the cryptography used in an SSH key is far stronger than a regular password, but I don't understand why it is considered more ...
10
votes
3answers
21k views

Windows Firewall: Logging/Notifying on outgoing request attempts

I'm trying to configure Windows firewall with Advanced Security to log and tell me when programs are trying to make outbound requests. I previously tried installing ZoneAlarm, which worked wonders for ...
12
votes
3answers
8k views

Change EUID of running process

On Linux, how can I change EUID of running process from command line (provided I have root access)?
6
votes
10answers
309 views

What are the guidelines for creation of a secure passwords?

What are the best practices to create secure passwords? I would like to make them tougher to crack with brute force tools. Part II Are there any tools that can generate these passwords so I do not ...
19
votes
4answers
2k views

What are ways to prevent files with the Right-to-Left Override Unicode character in their name (a malware spoofing method) from being written or read?

What are ways to avoid or prevent files with the RLO (Right-to-Left Override) Unicode character in their name (a malware method to spoof filenames) from being written or read in a Windows PC? More ...
19
votes
2answers
4k views

How big of a risk are popular Chrome extensions?

I'm about to switch to Chromium and I installed a couple of extensions. Each time I installed an extension I was notified of which data the extension has access to, e.g.: I do understand that ...
19
votes
2answers
13k views

fine-grained sudoers configuration (allowed commandline arguments)

is there a straight-forward way to allow a user to run (for example) /usr/bin/pacman -S -u as root, without allowing him to run /usr/bin/pacman -S -u some_package ? The line user ALL=(root) ...
12
votes
2answers
3k views

How can I detect unauthorized access on my 802.11 g/n network?

I am using a wireless network and I want to make sure that no unauthorized users are connecting through my access point. I am using the standard encryption the device supports. I know it is a ...
9
votes
1answer
726 views

“Panic Password” on Linux

I run Linux on my netbook with an encrypted home directory (decrypted when I log in). One idea I had (partly from Cory Doctorow's Little Brother) was to have a password that I could enter which would ...
31
votes
3answers
3k views

Can Google Employees See My Passwords Saved in Google Chrome?

I understand that we are really tempted to save our passwords in Google Chrome. The likely benefit is two fold, You don't need to (memorize and) input those long and cryptic passwords. These are ...
14
votes
4answers
39k views

Force Chrome to Ignore a "weak ephemeral Diffie-Hellman public key”

With the update of Chrome to v45, it's blocking access to pages with weak ephermeral Diffie-Hellman public keys. I understand that this is due to Logjam. I understand that switching from https to http ...
11
votes
5answers
3k views

Does NAT provide security?

I'm following discussions about the IPv4->IPv6 transition, and IPv6 doesn't seem to like NAT at all. I've always thought that NAT was helpful in v4 for some security, I know it doesn't really hide ...
8
votes
5answers
9k views

Is there a point to using theft tracking software like Prey on my laptop, if you have login security?

Hey, so I have a Thinkpad that I use in a variety of places (coffee shops, work, etc.). I don't generally abandon it, but I figure there's a chance I might get careless and it gets stolen at some ...
7
votes
4answers
2k views

Is it possible for hackers to steal password stored in your browser?

I was just wondering if Windows XP passwords can be hacked. Then why can't a hacker just hack my passwords stored in my browser? Is it possible for someone to know my browser-saved password ...
7
votes
11answers
1k views

VPN for a small organization [closed]

I am in charge of a small office network that has < 10 users. I want to be able to offer them access to the network from their home internet connections. At the moment we have a regular ...
6
votes
3answers
5k views

Running without admin rights: As users, what can we do to get apps working (that demand admin rights)? [closed]

I was prompted to ask this because of following question: Why does the majority of people in the Windows world still appear to not get that working as admin is plain stupid? We all know, deep down, ...
35
votes
4answers
42k views

Can admins monitor my activity locally even when I use a VPN?

My school has one of those super overreacting web blockers (specifically Fortisnet) that blocks things that should be accessible by a high-school senior trying to research projects. Despite many ...
27
votes
6answers
1k views

Is BCCing e-mails guaranteed to be reliable?

In other words is it a safe assumption that no-one of recipients will ever see e-mails in BCC? What if the recipient is an administrator of his (but not sender's) mail server and can do any ...
27
votes
8answers
74k views

Windows 7 never remembers my password credential

Every time I need to connect to something in my company I get a dialog like this So I type in my password(this can popup when I am in IE 9 or outlook or whatever.) and check the box. Say I am in IE ...
26
votes
4answers
3k views

Why erase file with random patterns instead of all 0's or 1's?

Computer files aren't actually removed when they are deleted on Windows. The address pointer is simply released and that space freed for overwrite later. For sensitive information, it is recommended ...
14
votes
1answer
7k views

How secure is Apple's Bluetooth keyboard?

Can anybody post any documentation on how Mac OS X and Apple's Bluetooth keyboard pair up with each other? I have seen the articles Apple keyboard pairing over Bluetooth and Which wireless keyboard ...
10
votes
3answers
3k views

Windows XP Mode Vulnerabilities as of April 8th, 2014

EDIT I appreciate the answers I've gotten so far, but I might not have worded the question clearly enough. Is the Windows 7 side of the machine running in XP Mode exposed to any dangers it would ...
9
votes
4answers
47k views

putty 0.61 : why do I see “Access Denied” message after I enter my login id?

I use putty to login to my RHEL 5.3 server. I'm prompted to enter my login as "login as " and I enter my login Id. as soon as I press ENTER, I see a "Access Denied" message following which I'm ...
9
votes
9answers
769 views

Is email encryption practical enough?

All emails I have ever sent were sent as plain text. Like postcards, everybody on the way to the addressee could easily read and store them. This worries me. I know privacy is something of the past, ...
7
votes
2answers
317 views

How can I be sure that a Google Chrome extension isn't doing evil things?

I wanted to install this extension, but I have security concerns. The extension needs permission to "Access your data on all websites". This makes sense, but I presume this includes password and ...
6
votes
3answers
1k views

Worms vs Virus what's the difference? [closed]

I don't understand very well the difference between viruses ans worms, it seems that worms don't need any host to duplicate himself. But somebody can explain it? It means that a worm IS a soft? and ...
5
votes
2answers
2k views

Transparent screensaver for linux?

I want to have a few console windows running tail -f on logs. Unfortunately this means that anyone with access to the computer can press Ctrl+c and have shell access. So I want to lock the screen ...
2
votes
1answer
7k views

Scan network for writable shares

I have a small-business network with 30 Windows XP machines on a single subnet and in a simple workgroup, not a domain. I would like to put a process in place that scans the network for writable ...
23
votes
4answers
2k views

What functionality would I lose if I disable browser-based Java?

I am reading that disabling Java—not JavaScript—will make my computer safer form malicious software attacks. All indications are that it will indeed make it safer, but there are no real reasons out ...
15
votes
3answers
74k views

How to disable “Download scanning protection” of new Chrome-17?

In recent update of Google Chrome internet browser (in stable channel), there is a new security/privacy option: http://chrome.blogspot.com/2012/02/faster-browsing-safer-downloading.html In ...
15
votes
6answers
6k views

How can visiting a webpage infect your computer?

My mother's computer recently became infected with some sort of rootkit. It began when she received an email from a close friend asking her to check out some sort of webpage. I never saw it, but my ...
12
votes
7answers
8k views

Why is MAC-based authentication insecure?

Most wireless routers can use MAC-based authentication as part of their overall security scheme. It seems like a good idea, but I've heard that it is very ineffective, because it's easy to spoof MAC ...
11
votes
2answers
9k views

How to find out when a disc (DVD) has been written/burned?

Is there a way/tool to determine the date and time when a disc has been written/burned with high certainty? This is about data forensics and should be a solid proof. I already tried IsoBuster, but it ...
10
votes
1answer
988 views

How to “jail” Java applications in OS X?

Is it possible to "jail" Java applications? My bank has an applet that requests "unrestricted access" to my computer. That makes me feels very uneasy. There should be a way to tell the java ...
9
votes
2answers
3k views

Is it okay to use an administrator account for everyday use if UAC is on?

Since I switched to Windows 7 about 3 years ago, and now using Windows 8.1, I have become familiar with the concept of User Account Control and used my PC the following way: a standard account which I ...
9
votes
3answers
4k views

Why are email transfers between mail servers often not encrypted?

Users can often choose if they want to access their email provider (such as Gmail) using a secure channel (e.g. using HTTPS). However, to the best of my knowledge, when it comes to ...
9
votes
3answers
18k views

Disable Windows 7’s “Open File - Security Warning” dialog for exe on local drive?

I am trying to run Eclipse java-galileo-SR2-win32 when I get open-file-security-warning. The files are just extracted from a zip file and put into a directory ...
9
votes
4answers
8k views

How to run Firefox in Protected Mode? (i.e. at low integrity level)

I noticed that Firefox, unlike Chrome and Internet Explorer, doesn't run in the Low Mandatory Level (aka Protected Mode, Low Integrity) Google Chrome: Microsoft Internet Explorer: Mozilla ...
7
votes
3answers
9k views

What is the SYSTEM group in Windows 7?

I want to disallow access to a drive in Windows 7, to all the users except myself (admin). So I have deleted all the users and groups in the drive's Security dialog but I am not sure whether I should ...
7
votes
3answers
38k views

Windows 7 : Any way to disable “show caracter” in WIFI network properties?

Here's my issue. I'm working in a school as IT Tech and I'm currently planning to roll out Windows 7 on students laptop. The issue is : When you go to the properties of a WIFI network, you have the ...
5
votes
3answers
8k views

How can I leave the remote screen locked when I ARD/VNC/etc. to my Mac?

I'm currently using Jolly's Fast VNC and Mac OS X's built-in VNC server (System Preferences, Sharing, Screen Sharing) to access my iMac remotely. Here's my problem: When I'm using the iMac remotely, ...