The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

0
votes
0answers
10 views

EAP Profile, certificate and AC, why we have to delegate trust to user's appreciation

I'm wondering about user trust appreciation in AC in EAP profile authentication process. Take a computer, and try to connect to an 802.1x network with EAP. When the 802.1x client contact your radius ...
1
vote
2answers
1k views

Windows Smart Screen can't be reached in Windows 10?

I keep receiving the Windows Smart Screen can't be reached right now prompt when Installing software.For which I visit the Microsoft Community. But there it's given steps troubleshooting the ...
1
vote
1answer
15 views

Can Powerpoints link to information online without user consent?

I recently read a superuser question here regarding whether or not PDF files could access the internet when someone opens them in Acrobat. This led me to wonder, when I open a powerpoint file, can it ...
0
votes
0answers
45 views

Allowing Outbound UDP 123 - Security Implications?

What are the risks of allowing outbound UDP 123 for an internal server (archive server) to synchronize with the external NTP server. Our internal server always displays incorrect time intervals ...
0
votes
0answers
12 views

How to grant the Local Service account rights to start other services?

Is it possible to grant the "Local Service" or "Network Service" account rights to start another services on the system?
1
vote
0answers
80 views

Medusa returns Segmentation fault or gives up on 1st try

For my thesis, which is about the use of software for computer forensics, I want to use Medusa to attack a server of my own, just to sniff the packets to see the data for port 80 (and therefore prove ...
0
votes
0answers
94 views

Java Client SE 8 Process/es and Windows 10 — Something I'm Missing?

So over at the Information Security StackExchange forum I and a few other people have been kicking around a question about a new security protection Oracle apparently added for the Java client player ...
32
votes
2answers
2k views

How much can we rely on filesystem permissions for security?

My question is about filesystem permissions (specifically the Unix style permissions) and how they relate to security. Say I have access to a computer with a guest user account and a user named Bob. ...
1
vote
2answers
162 views

Should I set a password for local account in order to increase security over the Internet (Windows)? [closed]

What if I will use Windows without passwords (for local accounts) ? Is it unwise in matter of Internet security ?
0
votes
0answers
17 views

Access RDP only with USB drive

I am widely using RDP everywhere to my local computer. Is there any way how to add 2nd level of protection. I would like to make possibility to access RDP to specific user if only there is USB drive ...
6
votes
1answer
2k views

Audit failure 5061 after logging in to Windows 10

Logging in to Windows 10 Build 10547 I see for a split second a message box pop up. There's no time to read it as the login succeeds. In the event log I see: Audit failure 5061 with a task ...
1
vote
0answers
76 views

fail2ban ban multiply recidive hosts

We are using fail2ban on our web-facing servers to block IP addresses that repeatedly fail to authenticate properly. Our normal bantime hereby is one hour; IPs that have already been banned multiple ...
0
votes
1answer
58 views

Windows Home permissions add SID, not username, for current user

I've come across a peculiar issue for a user. They are using a home edition of windows, originally windows 8, just upgraded to windows 10 which I thought might fix it, but it hasn't. Everything ...
-2
votes
1answer
16 views

folder accessibility in document library in office365

Is it possible to hide folders from users in O365? User A - logs on and sees Folder A User B - Logs on and sees Folder B but not Folder A
0
votes
1answer
63 views

Is there a way to run VPN behind a heavy handed uni firewall?

I would like to run a VPN or similar solutions to change my IP while surfing the web from my work PC. I am connected to internet via Ethernet, and through my university network, which is heavily ...
1
vote
0answers
53 views

Is it possible to detect unauthorized HDMI/DVI screen grabber? [closed]

We are a small IT company, potentially dealing with sensitive data, no top secrets but still. We would like to enable employees to work from home, connecting to their desktop using some remote desktop ...
1
vote
0answers
59 views

Any risk of hosting a public website on my home network? Year 2015

I have read the following post but it was already 6 years ago so I'm wondering if anything has changed over the last few years in terms of security because I heard windows firewall has been improved ...
3
votes
0answers
34 views

Debian 7 java Executable Flag Disappeared

I have an up to date Debian 7 server, also running Plesk 11. Yesterday exactly at the same time (2015-09-21 11:38:13 EET) the exec flag has been disappeared from all the java executables on the ...
0
votes
1answer
82 views

Is it possible to hack my encrypted home by getting root access?

As we know there are some ways (as single user mode) to change root password by person having physical access to the machine. So: What will happen if someone steal my laptop, get root access and ...
1
vote
0answers
10 views

Unlocking external disks upon login

AFAIk, FileVault 2 on OS X automatically unlocks/decrypts the startup disk on login. Could external disks/partitions be unlocked on login? If not FV2, are there other ways, e.g., scripts? Scripts ...
2
votes
3answers
149 views

Use USB as a password/key

Is there any way to prevent a computer from booting up into Windows unless there is a USB device plugged in? I suspect this is difficult/impossible, in this case would there be any way to prevent ...
1
vote
0answers
60 views

Is RTF format safer than a Word “.docx” document? [closed]

I am receiving documents from others and becoming concerned about potential security issues, as I don't know the security settings on all their computers. I am just wondering if it is safer to use RTF ...
0
votes
1answer
80 views

Disable SAP file open dialog confirmation

SAP shows a security related dialog when accessing files like this: Since I want to perform automated system tests, I'd like to get rid of this warning. I know I can check the checkbox and ...
0
votes
1answer
40 views

Can I route all connections on my router through a VPN?

I have a Cisco Linksys e1200v2 with DD-WRT v24sp2 mega. I would like to have all connections go through the OpenVPN server that I already have configured. I have noticed the Open VPN Server and Open ...
0
votes
1answer
32 views

How to untrust proxy or antivirus certificate and/or certificate authority?

I have antivirus inspecting my web traffic including HTTPs. In this question we discovered, that it installed it's self certificates or certificate authority (not sure about terminology). Now I wish ...
0
votes
1answer
193 views

How can Kaspersky embed code into web page accessed via HTTPs?

I have Kaspersky Internet Security (antivirus program) doing some security for me. Specifically, it checks links by it's database and marking it with green K signs. The question is: how it can be ...
0
votes
2answers
726 views

Kaspersky keeps messaging about URL goldenticket.disconnect.me every time I open Chrome. What is it and how to get rid of it?

This is the Kaspersky message that appears every time I start a session in Chrome I press the green button "Disconnect" (don't mistake this with the problematic URL, disconnect.me) and the message ...
0
votes
0answers
33 views

dm-crypt with encrypted key on USB

The requirement is to use dm-crypt with a key stored on an on external USB drive. The key most almost be encrypted with some symmetric encryption, decrypted at boot time (by entering the pasphrase), ...
0
votes
2answers
1k views

How to Encrypt Home Directory on Windows 10 Home?

I want to encrypt my user's data but not the whole OS. (Secrutiy + Performance) Is there an option for home directory encryption in Windows 10 Home?
2
votes
1answer
127 views

Folder I didn't create with numbers and letters in secondary drive. What it is and what is safer to do?

In Windows 10 (but by seeing "Date Modified" I guess it was there when I was using Win 8.1) there's a folder in the secondary drive (my laptop has two) I just use for Windows File History (Windows ...
5
votes
1answer
444 views

How to skip Java Security Prompt

NOTICE: Finally it works adding an exception as @duDE shows in his posted Answer, basically it doesnt work before because i did it wrong. The problem: I'm running a Java applet in my browser and ...
0
votes
2answers
794 views

Can wifi admin see viber messages

Can a wifi admin can see viber messages? And how far or detailed can a wifi admin see, like pictures sent through viber?
-1
votes
1answer
65 views

How i can disable access to my local machine form another local machine by \\ip address\c$?

Someone in the same local network here has user full control administration he can enter to my partitions D, C, E all partitions by type in start menu \\my IP address\c$ he can copying and delete my ...
3
votes
1answer
41 views

how to verify whether remote server SSH key has changed?

I have connected to a Linux/Unix server via SSH client such as WinSCP, OpenSSH for years. Recently, I got a warning about POTENTIAL SECURITY BREACH, which says that The server's host key does not ...
0
votes
1answer
26 views

How to open a .htmlENX file

I have found some .htmlENX files on my computer and I know that these are encrypted files using the Egis program. That's all I've been able to determine from the file name. These files are just chat ...
0
votes
0answers
14 views

Nginx - how can I securely display access logfiles to public?

When a request comes to echolog.example.com, I want to log it. I also want any visitor to http://echolog.example.com to be able to browse to and open the logfiles. I'm concerned about doing this ...
0
votes
2answers
321 views

Edit a veracrypt encrypted drive from linux?

I'm looking for some help with decrypting my veracrypt encrypted drive, I know the password and everything needed to decrypt it from boot, but I changed the admin's password on the OS :( I figured I'd ...
3
votes
1answer
568 views

How can I stop Windows 10 from nagging me to “restore internet security settings”?

Windows 10 has a new notification system that it uses instead of system tray messages so that users can check back on old notifications they have not yet dismissed. One of the more odious messages ...
0
votes
0answers
31 views

Is DNScrypt working properly? ESET blocking

I installed DNScrypt on Windows 7 and from a test from dnsleak.com it reroutes the DNS requests. But: I have ESET AntiVirus installed. It has some website blocking included. When I go to a website ...
0
votes
1answer
102 views

Asus Router web admin site forces manually typing password (no copy paste)

The Asus Router RT-N66U Router's admin website changed a few versions back to prevent pasting into the login password field. Firmware 3.0.0.4.378_6117 (Latest as of 9/12/2015) Given I use a randomly ...
2
votes
1answer
77 views

How to prevent my operating system from extracting password dumps?

There were many tools like mimikatz which extracts passwords from memory and display as plain text [working at windows 10 too :(] , is it there any reliable way to hide passwords from tools which ...
0
votes
1answer
271 views

How do I remove security certificate exceptions from Google Chrome?

I am a developer and have created a certificate for my application. The first time I access it Chrome states that the certificate is not recognized and suggests to leave the website. There is however ...
1
vote
0answers
140 views

How do I script the creation of Disposable Virtual Machines with vmware workstation?

I am Making a disposable (use for one task/website then delete) Virtual Machine (VM) it's a slow process to do it in VMware workstation. I want to automate it so it is like the quick ~5 second DispVM ...
-2
votes
1answer
39 views

Configuring security policy under Windows 7 Pro

We are trying to setup application security policy in Windows 7 Pro. I Have enabled the system's local policy with configuration below: {Policy sample} Name Type Security Level Description ...
0
votes
1answer
37 views

How secure is a mail account without TLS/SSL but encrypted password on Thunderbird

I am working with a new partner who has provided an 'internal' messaging service using an email server. It is designed to provide secure communications between geographically widespread individuals ...
1
vote
1answer
145 views

Is it possible Windows 10 upgrade uninstalled antivirus software?

Was using Trend Micro Titanium. Upgraded from windows 7. Used to see a notification saying Trend Micro was scanning in Windows 7. I haven't seen the notification in a month. Found the installation ...
0
votes
0answers
17 views

Apache2 directory protection

I've installed MediaWiki on my webserver and just came across a major issue with directory permissions. (My use case here is MediaWiki, but really the question applies to any web application.) The ...
1
vote
1answer
187 views

Ranked Order of Security for Encryption Algorithm Preferences: For GPG

GPG & PGP negotiate the encryption & hashing algorithm to use based on the recipient key's prioritized list of supported algorithms. The problem is DES/MD5 are forced to be included as the ...
17
votes
3answers
1k views

How is uniqueness of MAC addresses enforced?

Again and again I read that devices are uniquely identified by their MAC addresses. But how are MAC addresses determined? (And do they tell us anything about the device which they represent?)
2
votes
1answer
104 views

Strange temporary “Access denied” error accessing encrypted files

After a system reboot (Win7 x64), an application reported that it couldn't access a file in an EFS-encrypted directory. Accessing via programs gave "Access denied". Permissions were normal and fine. ...