Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

28
votes
3answers
2k views

Can Google Employees See My Passwords Saved in Google Chrome?

I understand that we are really tempted to save our passwords in Google Chrome. The likely benefit is two fold, You don't need to (memorize and) input those long and cryptic passwords. These are ...
11
votes
5answers
3k views

Does NAT provide security?

I'm following discussions about the IPv4->IPv6 transition, and IPv6 doesn't seem to like NAT at all. I've always thought that NAT was helpful in v4 for some security, I know it doesn't really hide ...
7
votes
5answers
2k views

Is it Possible for Hackers to steal password stored in your Browser

I was just wondering if XP passwords can be hacked then why cant a Hacker just hack my passwords stored in my browser. Is it possible for someone to know my browser saved password while I surf the ...
7
votes
11answers
1k views

VPN for a small organization [closed]

I am in charge of a small office network that has < 10 users. I want to be able to offer them access to the network from their home internet connections. At the moment we have a regular ...
6
votes
3answers
5k views

Running without admin rights: As users, what can we do to get apps working (that demand admin rights)?

I was prompted to ask this because of following question: Why does the majority of people in the Windows world still appear to not get that working as admin is plain stupid? We all know, deep down, ...
4
votes
3answers
6k views

What are reasons to disallow ICMP on my server?

An EC2 Instance has ICMP services disabled by default. While it's not totally clear to me why, I think it's because it could be a potential security risk. At the moment I'm enabling Echo Responses ...
10
votes
3answers
3k views

Windows XP Mode Vulnerabilities as of April 8th, 2014

EDIT I appreciate the answers I've gotten so far, but I might not have worded the question clearly enough. Is the Windows 7 side of the machine running in XP Mode exposed to any dangers it would ...
9
votes
4answers
40k views

putty 0.61 : why do I see “Access Denied” message after I enter my login id?

I use putty to login to my RHEL 5.3 server. I'm prompted to enter my login as "login as " and I enter my login Id. as soon as I press ENTER, I see a "Access Denied" message following which I'm ...
9
votes
10answers
747 views

Is email encryption practical enough?

All emails I have ever sent were sent as plain text. Like postcards, everybody on the way to the addressee could easily read and store them. This worries me. I know privacy is something of the past, ...
8
votes
5answers
8k views

Is there a point to using theft tracking software like Prey on my laptop, if you have login security?

Hey, so I have a Thinkpad that I use in a variety of places (coffee shops, work, etc.). I don't generally abandon it, but I figure there's a chance I might get careless and it gets stolen at some ...
6
votes
3answers
1k views

Worms vs Virus what's the difference? [closed]

I don't understand very well the difference between viruses ans worms, it seems that worms don't need any host to duplicate himself. But somebody can explain it? It means that a worm IS a soft? and ...
2
votes
1answer
5k views

Scan network for writable shares

I have a small-business network with 30 Windows XP machines on a single subnet and in a simple workgroup, not a domain. I would like to put a process in place that scans the network for writable ...
33
votes
3answers
26k views

Can admins monitor my activity locally even when I use a VPN?

My school has one of those super overreacting web blockers (specifically Fortisnet) that blocks things that should be accessible by a high-school senior trying to research projects. Despite many ...
22
votes
4answers
2k views

What functionality would I lose if I disable browser-based Java?

I am reading that disabling Java—not JavaScript—will make my computer safer form malicious software attacks. All indications are that it will indeed make it safer, but there are no real reasons out ...
21
votes
7answers
61k views

Windows 7 never remembers my password credential

Every time I need to connect to something in my company I get a dialog like this So I type in my password(this can popup when I am in IE 9 or outlook or whatever.) and check the box. Say I am in IE ...
17
votes
4answers
8k views

Do I need to have a passphrase for my SSH RSA key?

Before I started at my current job (at a small business), my office had no firewall on the network and literally nothing was ever being backed up. Now that I've signed on as a dedicated sysadmin / ...
15
votes
6answers
5k views

How can visiting a webpage infect your computer?

My mother's computer recently became infected with some sort of rootkit. It began when she received an email from a close friend asking her to check out some sort of webpage. I never saw it, but my ...
12
votes
7answers
6k views

Why is MAC-based authentication insecure?

Most wireless routers can use MAC-based authentication as part of their overall security scheme. It seems like a good idea, but I've heard that it is very ineffective, because it's easy to spoof MAC ...
11
votes
2answers
7k views

How to find out when a disc (DVD) has been written/burned?

Is there a way/tool to determine the date and time when a disc has been written/burned with high certainty? This is about data forensics and should be a solid proof. I already tried IsoBuster, but it ...
10
votes
1answer
963 views

How to “jail” Java applications in OS X?

Is it possible to "jail" Java applications? My bank has an applet that requests "unrestricted access" to my computer. That makes me feels very uneasy. There should be a way to tell the java ...
9
votes
4answers
8k views

How to run Firefox in Protected Mode? (i.e. at low integrity level)

I noticed that Firefox, unlike Chrome and Internet Explorer, doesn't run in the Low Mandatory Level (aka Protected Mode, Low Integrity) Google Chrome: Microsoft Internet Explorer: Mozilla ...
8
votes
2answers
2k views

Is it okay to use an administrator account for everyday use if UAC is on?

Since I switched to Windows 7 about 3 years ago, and now using Windows 8.1, I have become familiar with the concept of User Account Control and used my PC the following way: a standard account which I ...
8
votes
3answers
3k views

Why are email transfers between mail servers often not encrypted?

Users can often choose if they want to access their email provider (such as Gmail) using a secure channel (e.g. using HTTPS). However, to the best of my knowledge, when it comes to ...
8
votes
3answers
17k views

Disable Windows 7’s “Open File - Security Warning” dialog for exe on local drive?

I am trying to run Eclipse java-galileo-SR2-win32 when I get open-file-security-warning. The files are just extracted from a zip file and put into a directory ...
7
votes
2answers
256 views

How can I be sure that a Google Chrome extension isn't doing evil things?

I wanted to install this extension, but I have security concerns. The extension needs permission to "Access your data on all websites". This makes sense, but I presume this includes password and ...
7
votes
3answers
7k views

What is the SYSTEM group in Windows 7?

I want to disallow access to a drive in Windows 7, to all the users except myself (admin). So I have deleted all the users and groups in the drive's Security dialog but I am not sure whether I should ...
7
votes
3answers
27k views

Windows 7 : Any way to disable “show caracter” in WIFI network properties?

Here's my issue. I'm working in a school as IT Tech and I'm currently planning to roll out Windows 7 on students laptop. The issue is : When you go to the properties of a WIFI network, you have the ...
6
votes
5answers
78k views

How to avoid Windows Genuine Advantage for an XP update?

I am about to apply updates to a windows xp installation I have not booted in a couple of years. When going to update.microsoft.com, it forced me first to accept an activex installation and now it ...
4
votes
2answers
367 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
4
votes
2answers
1k views

Transparent screensaver for linux?

I want to have a few console windows running tail -f on logs. Unfortunately this means that anyone with access to the computer can press Ctrl+c and have shell access. So I want to lock the screen ...
4
votes
3answers
12k views

How secure is Skype?

I use Skype at work though sometimes for personal use and I am worried anyone can sniff network packets and find out what I'm typing or maybe the network admin can read conversations on the port Skype ...
4
votes
7answers
13k views

Disk wiping other than DBAN

Sometimes using DBAN takes several days to wipe a disk. What alternatives do you have experience with that work within a few hours and offer the simplicity of DBAN? I am mainly interested in free ...
4
votes
3answers
7k views

How can I leave the remote screen locked when I ARD/VNC/etc. to my Mac?

I'm currently using Jolly's Fast VNC and Mac OS X's built-in VNC server (System Preferences, Sharing, Screen Sharing) to access my iMac remotely. Here's my problem: When I'm using the iMac remotely, ...
3
votes
5answers
17k views

How to prevent the sethc.exe hack?

There is an exploit that allows users to reset the Administrator password on Windows. It is done by booting from a repair disk, starting command prompt, and replacing C:\Windows\System32\sethc.exe ...
3
votes
2answers
688 views

Data protection on HDD: trying to sort out relevant technologies

I'm trying to understand how I can protect data from being used if a computer or a hard drive disk is stolen. I'm looking for reasonable protection against non authorized access to private data ...
3
votes
2answers
2k views

How to schedule Motion detection

I've just discovered Motion and it works like a charm.. My only problem is that I'd like it to be active only during night-time, but there's no parameter for scheduling.. I think I could write a ...
2
votes
1answer
673 views

http Redirect to https Sometimes Leads to “this page contains other resources which are not secure”

In Chrome (though I may have seen similar behavior in other browsers), type in http://www.google.com. You will always be redirected to https://www.google.com. Usually when I do this, I get the good ...
2
votes
1answer
5k views

Reconfiguring a WiFi Access Point's wireless settings through WPS?

As you may know, WiFi Protected Setup (WPS) has recently been broken. I downloaded and tested Reaver-WPS, the tool that implements the WPS attack. The tool's README file states: Reaver performs a ...
2
votes
6answers
11k views

How to wipe a hard drive so that it's safe to recycle (while keeping the recovery partition intact)

My aunt and grandparents have some computers that they want to get rid of, all of them have windowx-xp and a recovery partition (which allows them to restore the computer to factory settings). So what ...
1
vote
1answer
259 views

How do you unprotect the VBA macros for a macro-enabled workbook if you forgot the password?

I have heard myths about how easy it is to crack a VBA macro password, but haven't been able to figure out how to do it myself. We have an excel file at work where the VBA is password protected and ...
1
vote
1answer
2k views

Windows method to detect ARP Poisoning in my local network (LAN)?

(This question comes from this thread, and is intended to remain as a reference question/answer pair for more generic ARP network detection not limited to WiFi, or without the need of the specific ...
1
vote
1answer
467 views

What alternative security measures are there to full drive encryption (for performance reasons)?

I'm evaluating full drive encryption using Truecrypt on my Crucial M4 SSD on Windows 7 32bit Pro on my Toshiba NB100 Atom N270 Netbook. I've encrypted this and noticed an increase in the boot time ...
1
vote
1answer
622 views

What is the simplest way to use svn repository through firewall without compromizing the security?

I have a multiple Win xp/7 PCs in a network that have no Internet access. All traffic is routed through a firewall PC (latest ubuntu LTS, without admin). This firewall has limited ports open to ...
45
votes
4answers
3k views

Should I install Internet Explorer updates although I disabled it?

I have disabled Internet Explorer in the "Windows Features" dialog. Nonetheless Windows Update alerts me that there are security updates for IE. I am aware that I cannot uninstall IE and it remains ...
38
votes
8answers
15k views

How safe is Firefox password manager?

I have been using the Firefox password manager for long time, but never checked/verified how secure it is.
37
votes
12answers
6k views

What is the value of MD5 checksums if the MD5 hash itself could potentially also have been manipulated?

Downloads on websites sometimes have an MD5 checksum, allowing people to confirm the integrity of the file. I have heard this is to allow not only corrupted files to be instantly identified before ...
16
votes
6answers
9k views

Is https traffic over an unencrypted wireless network secure?

This is something I've wondered for a long time. If I am, say, using Gmail over https, can someone read my IM conversations and emails if I use an unsecured wireless network? I assume that the data ...
8
votes
1answer
1k views

How can I encrypt the swap file under Windows 7?

Mac OS X has the ability to use "secure virtual memory", meaning that anything from RAM that is swapped out to disk is encrypted. This improves security by making sure no passwords / keys are ever ...
8
votes
3answers
39k views

How to disable “Download scanning protection” of new Chrome-17?

In recent update of Google Chrome internet browser (in stable channel), there is a new security/privacy option: http://chrome.blogspot.com/2012/02/faster-browsing-safer-downloading.html In ...
8
votes
3answers
927 views

saving and searching encrypted mail

I often send and receive gpg-encrypted mail. At the moment I use thunderbird + enigmail (in linux) to do that. As far as I know there is no way in thunderbird to find all encrypted messages which ...