The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

1
vote
0answers
306 views

Secure wifi connection with FreeRADIUS, MySQL, EAP-PEAP, TLS

I'm trying to setup a wireless network as shown in the picture and I'm struggling how to secure it. Picture of Wifi Network: My basic question is: How I can securely store passwords into MySQL ...
0
votes
2answers
26 views

website with expired SSL

A website I'm trying to register at has an expired SSL certificate. I have the option to either use HTTPS with an expired certificate or HTTP, which option would be more secure? Is the expired SSL ...
0
votes
1answer
16 views

Special Identity Security Group in AD

In activity directory is there a way to create a security group that utilizes a special identity? I can explain why I’m trying to do this but typing it out is getting a little wordy. What I’d like to ...
0
votes
0answers
30 views

how to set windows firewall rules for bridged network connection?

i have created some rules in my windows firewall to grant access to only to a particular IP.. rest all connections are denied. i created a bridge between the host network and another network[ two nic ...
0
votes
0answers
24 views

How to analyze a suspicious traffic under linux machine?

Often under Linux machine, networks are protected by firewalls. This protection, though necessary, do not detect external attacks. Indeed, a Firewall is designed to block unwanted network flows while ...
0
votes
1answer
38 views

Do I have to update Windows 7 if all I use it for is Steam? [closed]

I am mostly an Ubuntu user, I have a Windows 7 Home partition for nothing except: Steam and GOG games Updating the BIOS (if I have to and cannot do so from Ubuntu) Presumably I do not need to keep ...
1
vote
2answers
59 views

How to overcome antivirus false positive error

We develop software which will upload the files to a website. We are facing the false positive error from different antivirus vendors. We have update file, downloader exe(which download the files from ...
57
votes
2answers
14k views

The MD5 hash value is different from Bash and PHP [duplicate]

I tried to generate the MD5 sum (using md5sum) of a string, "hello". I tried out different methods as the md5sum tool in Linux, PHP's MD5() function as well as various online text to md5sum ...
1
vote
2answers
324 views

Safety of local network over VPN

I have a Linux machine in a local network that uses an OpenVPN connection to reach the outside world. However, I know nothing about the VPN server itself and therefore I assume that whoever operates ...
3
votes
1answer
8k views

Linix Mint Live CD: DNS not working, but will ping out fine

I am running the Linux Mint (Cinnamon) 64-bit Live CD with VirtualBox on my Windows 8.1 Host computer. The guest can ping 63.84.3.27 (Google) just fine, but cannot access the web. I tried changing ...
0
votes
1answer
35 views

mDNS in the context of a DNS

Yesterday we have been discussing mDNS in the context of a lecture at the University. We did not exactly come to a result and I can't stop to think about it. The project in the lecture was about ...
0
votes
1answer
135 views

How to limit PIN attempts in Windows 10

I want to limit PIN attempt to only one, so that if somebody entered wrong PIN once, it will get locked for that session and he must have to enter the correct password (which will be relatively longer ...
3
votes
1answer
76 views

Security: Is the Raspberry Pi really stateless?

The Raspberry Pi has become very popular. Because it is rather cheap and simple it could be an attractive device for people living in so called developing countries. However in many of these states ...
4
votes
1answer
162 views

How to remove cryptowall encryption

Please help me urgently, Because My all files are encrypted by unknown virus named, 'CryptoWall encryption'. I attached one screenshot, which is provided by this virus.
0
votes
0answers
285 views

Keep permissions for control panel and immersive control panel items in sync on windows 10

I am working on locking a user down in Windows 10 Home to only allow them access to a few control panel settings (date/time, display, networking, and sound volume). I've done a bunch of things to make ...
-3
votes
3answers
602 views

Any secure backdoor for Windows 8? [closed]

I want to install a backdoor to my laptop with Windows 8 so that I can access it and stay hidden, just in case if someone will steal it. Most of remote access tools are not hidden and it is obvious if ...
1
vote
3answers
643 views

How do I ensure that BitLocker can't be bypassed with a recovery key?

I want to encrypt my hard drive using BitLocker, but it requires me to create a recovery key. Now, I understand why this is important, as there may be cases where my password alone can't unlock the ...
-1
votes
1answer
87 views

Are DNS requests from Tor exit nodes a security risk?

I am monitoring network alerts using Security Onion. I have come across an IP, 109.163.234.2, that is a known Tor Relay/Router. It is querying my DNS server for records. Are any bad actors trying to ...
-1
votes
1answer
82 views

Blocking programs from reading outside their allocated RAM

I was wondering if I could keep program A from reading my entire ram, as it does not need to monitor what program B is doing. Also I am on windows 8.1 64 bit.
0
votes
1answer
26 views

How does encrypting /home partition with ecryptfs on linux stop malicious modification of /boot or /(root)?

This is a page where a developer of ecryptfs explains the difference between ecryptfs and dm-crypt: https://stackoverflow.com/questions/18230784/what-is-difference-between-linux-kernel-subsystem-dm-...
0
votes
1answer
35 views

Tuleap compatilibity with openfire 3.7 or newer

I have a tuleap 8.10 server with openfire 3.6.4. After running a vulnerability analysis, I have the following message: 9090/tcp 51143 - Openfire Admin Console login.jsp XSS Synopsis ...
1
vote
0answers
18 views

Do you need a server for Endpoint Antivirus Protection?

So i'm looking into a a few antivirus software packages for a small business with no more than 5 computers. Stumbled across endpoint protection, but was wondering if you needed a server to deploy this?...
0
votes
0answers
23 views

How do I detect type of proxy

I have a proxy connection to one server. I need to know the type of proxy is it https tunnel or is it a standard ssl web proxy? How do I can do this? Note: This proxy is created inside of a program,...
17
votes
1answer
2k views

Can I detect sniffers in monitor mode on my Wi-Fi?

Attackers can sniff Wi-Fi networks in monitor mode to intercept the data without connecting to the router. Is it possible to check if somebody is sniffing my network?
0
votes
2answers
70 views

folder security, cannot access .. Permission denied, huh?

Okay, here's the thing .. I'm having trouble accessing a certain folder despite correct security settings (at least I think so). What am I missing ? Some details: Using Raspbian, that would be ...
1
vote
0answers
87 views

undocumented SID structure on windows 10 [S-1-19-512-4096]

regarding this question: Cannot write on WindowsApps directories and restore files After hitting to wall trying to restore some files inside this directory c:\Program Files\WindowsApps\ on windows ...
1
vote
1answer
153 views

Does HTTPS/SSL make sense on a local network?

I wonder if I should enable HTTPS/SSL on web servers in my LAN. Which opportunities does a sniffer/man-in-the-middle have in a local area network, where devices are usually connected by switches? Is ...
1
vote
0answers
117 views

Self-Encrypting Drive (SED) and S3-suspend (sleep)

since my laptop is aging, but I love its 4:3 screen, I don't like relying on external media (also no USB 3 ports), and SSDs are too small for my budget, but I want full encryption (previously ...
0
votes
0answers
87 views

Chrome HSTS Error: ERR_CERT_AUTHORITY_INVALID

I am using a self-signed certificate on my openmediavault setup. On Firefox, there is an option to add an exception to that, but on Chrome it complains with the error code: ERR_CERT_AUTHORITY_INVALID ...
0
votes
0answers
44 views

Edimax AR-7286WnA - Rom-0 Attack and all services disabled

Got an Edimax AR-7286WnA, dns pointed to malevolous. I'm using the google dns on all devices, but a virus redirect all my requests to tradeadexchange and then to a FlashPlugin fake update page that is ...
1
vote
2answers
60 views

How to login ssh without a password using the ssh host key?

I want to login to this machine, but I just have an ssh host key, not a password. Example from nmap: | 1024 b6:00:e3:71:8c:a3:4e:e4:8b:9a:b5:c2:68:86:de:82 (DSA) |_ 2048 56:7b:96:50:57:7c:3d:e2:...
0
votes
1answer
21 views

Extent of Citrix Receiver access to local resources

My partner's IT department told her that they "can see everything happening on your computer". Obviously a remote desktop client is going to capture keyboard and mouse, and could proxy local ...
0
votes
2answers
83 views

How to install SSL certificate for Windows 8.1

I have a Windows 8.1 machine that I RDP into on a public IP (also secured by 2FA). I am getting a failing PCI scan because the default SSL cert created by Windows for RDP is using SHA1 hashing. So ...
1
vote
2answers
33 views

Scan outgoing traffic for sensitive data

I run Windows on my desktop, but I would be willing to route my traffic through a Linux box if required. I've had two instances of my credit card being misused in two months now. Despite being ...
1
vote
1answer
116 views

True Crypt Alternative For Encrypting Drives

I have Windows 7 Pro and as such, bitlocker won't work for me. I have some sensitive information which I have locked with an AES-256 key in a 7zip folder, but I would like to encrypt my entire drive ...
1
vote
0answers
162 views

Mac OS X “Verify Certificate” every time connecting to secure wireless

Every time connecting to the secure wireless, Macs are getting a prompt to verify the certificate: Verify Certificate Authenticating to network "Network-Name" Before authenticating to ...
1
vote
0answers
25 views

Prove that a user exported data from Quickbooks

An employee leaving the company has exported our entire customer list and a record of all of the individual product sales to each customer from Quickbooks. I know that we should have had access ...
0
votes
1answer
45 views

Does Ventrilo encrypt the VoIP stream, session, and/or communications?

If you're not familiar, Ventrilo is a voice chatroom used for gaming. Here's the wiki for Ventrilo and similar software Mumble and TeamSpeak to give you an idea of what the software is about. I ...
0
votes
1answer
26 views

How to copy network credentials from PEAP authenticated computer to a new PC

Backstory I'm a student on our school's school network. There's three tears of network at our school. There's the Student network which the student iPads are connected to. We don't have the keys, but ...
-1
votes
1answer
100 views

Restrict access to folder in external HDD before lending it to someone

I have a HDD that I will lend to a friend of mine for a couple of days. There are some folders with personal files that I want to keep them private without temporary deleting them. What's the most ...
0
votes
2answers
466 views

Did I get hacked? Weird chinese files in Win 10 “recent files”

Whenever I open the file browser, I see this in last files: All of the above files should be on Desktop, where I do see nothing. I tried to google translate the file names, but no good. I tried to ...
0
votes
0answers
40 views

How this letter changes from f to r in address bar

Recently while i was browsing at offensive security website at firefox ,the words 'offensive' appears to be oRensive at address bar,Kindly have a look at the below snapshot : Note at the address ...
0
votes
0answers
16 views

Multi Boot - Prevent Drive Access / Data Security

I have one PC which I use for two different tasks. 1 - work 2 - play. I want to set up a separate boot for each. I want to keep the work part clean while play I could care less about. Along with two ...
0
votes
0answers
38 views

Keyboard/mouse layout changed and weird commands in logs. Was I hacked? (OSX)

Edit: Looks like my colleagues had some fun. False alarm. My work computer is running OSX Yosemite 10.10.1. I noticed my keyboard layout was changed to Dvorak and my mouse direction reversed when ...
0
votes
1answer
53 views

Mounting VHD, but not to a drive letter

Can I mount VHD so I can access it from my app, but not as a drive letter. I need to access some files from my app (C# apps), but don't want it to be visible in Windows Explorer.
3
votes
1answer
52 views

Practical SSH Key Management

As many users know, I run lots of Debian servers, for personal, work, and volunteer organizations. I'm seeing lots of posts recently on both Superuser and IT Security about disabling passwords, and ...
0
votes
1answer
31 views

How credible is company/publisher and its version information of DLL or EXE?

This Stackoverflow question shows how to modify version information in some classes of binary files, like DLLs. I often rely on the version information as one metric (amongst many) for peace of mind ...
0
votes
2answers
22 views

How to remove OpenPGP private keys from computer?

As the title reads, I wonder how I could securely, physically remove my private keys from my computer. I can't seem to find a way to do that on Kleopatra. These keys I'm talking about are used for ...
1
vote
0answers
48 views

OpenVPN Confusion - Server and client on one machine?

I have searched all over the internet and tried so many things.. but I cannot seem to figure this out. I have a Raspberry Pi. I have an ethernet, but I have access to a wireless if I needed it. 1)....
1
vote
1answer
244 views

How to find vulnerabilities in ubuntu services? [closed]

I have an ubuntu server running. Today I found that the server got hacked and is being used for DDoS through amazon abuse report. I found the following things on the server. The following suspecious ...