Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

8
votes
5answers
4k views

Can a virus on a flash drive run itself without autorun?

Someone told me that it's possible for a virus to run itself from Flash memories even if autorun.inf is not present or this feature is disabled using gpedit.msc. He said a virus can run itself as ...
8
votes
7answers
676 views

I found two usb sticks on the ground. Now what?

As from subject. I want to see what's inside. I am seriously interested in finding the owner if possible and returning them, but I am worried it could be an attempt at social engineering. I own a ...
8
votes
5answers
1k views

Downloading Microsoft Security Essentials via HTTPS

I want to download Microsoft Security Essentials on my brand new Windows 7 home PC. The official site presented to me is http://windows.microsoft.com/de-CH/windows/products/security-essentials, as I ...
8
votes
7answers
2k views

Do I really need a firewall?

I've been using the Nod32 security suite for some time now, and out of all the others that I've tried, it's great (low memory footprint, fast, fairly cheap). However, I've been installing a lot of ...
8
votes
5answers
365 views

Infer PGP private key using an encoded decoded sample

If I have both an encoded message and its original, is it possible to infer the private key?
8
votes
5answers
7k views

Is there a point to using theft tracking software like Prey on my laptop, if you have login security?

Hey, so I have a Thinkpad that I use in a variety of places (coffee shops, work, etc.). I don't generally abandon it, but I figure there's a chance I might get careless and it gets stolen at some ...
8
votes
5answers
2k views

How useful is hard drive encryption?

So, let's say you have a notebook, and you encrypt the entire hard drive. Whenever you boot it's gonna ask for a password, meaning nobody can access your data without the password. On the other hand, ...
8
votes
2answers
6k views

Finding the physical local path associated with a Share UNC folder

Let's say I am Admin on a server named "Server1" and a share exists using the following UNC path \\Server1\Share1 If I remote to Server 1 and log in as Admin, how do I find the physical drive ...
8
votes
3answers
13k views

Windows 7 equivalent for ntrights.exe

What is an equivalent for ntrights.exe on Windows 7? I need it to be able to be run from the command line.
8
votes
3answers
4k views

Does PDFTK respect PDF security flags?

I have a PDF File which says that document security is enabled. It says that the only things allowed are: Printing, Content Copying or Extraction, and Content Extraction for Accessibility. I'm trying ...
8
votes
9answers
787 views

Sensible Password Policy

I've been tasked with putting together the company security policy. As part of this I want to define what is a sensible but secure password (length, characters etc), how often they should be changed, ...
8
votes
2answers
6k views

Will microwaving a flash drive destroy the data on it?

After reading the answers on Permanently delete files from a flash drive, where the top rated answer was simply to pulverize it with a hammer, I wondered whether a microwave could be used to the same ...
8
votes
5answers
325 views

Media Sanitation

What is considered the minimum amount of overwrites to sanitize media? For example; there are 1, 2, 3, 7, and 35 overwrites methods to make data irrecoverable. Using standard recovery methods (such ...
8
votes
3answers
16k views

Disable Windows 7’s “Open File - Security Warning” dialog for exe on local drive?

I am trying to run Eclipse java-galileo-SR2-win32 when I get open-file-security-warning. The files are just extracted from a zip file and put into a directory ...
8
votes
5answers
5k views

How much data does Chrome really collect?

One of the companies I work for recently informed me that browsing the Intranet using Chrome is not accepted (nor supported) because it "collects data", therefore making it insecure. However, they ...
8
votes
2answers
2k views

How can I configure my wireless network for the strongest security?

There seem to be many security features in wireless routers from MAC address filtering to the authentication type and data encryption. WPA or WPA2 PSK? AES or TKIP? When I set up a new wireless ...
8
votes
2answers
1k views

Is it okay to use an administrator account for everyday use if UAC is on?

Since I switched to Windows 7 about 3 years ago, and now using Windows 8.1, I have become familiar with the concept of User Account Control and used my PC the following way: a standard account which I ...
8
votes
6answers
5k views

Port scan revealed port 1111 open. What is it?

I am new to systems administration and have a new server running a website with http (at port 80), https (at port 443) and ssh (at port 22). I did an nmap port scan using my personal laptop and other ...
8
votes
4answers
5k views

Why some recovery tools are still able to find deleted files after I purge Recycle Bin, defrag the disk and zero-fill free space?

As far as I understand, when I delete (without using Recycle Bin) a file, its record is removed from the file system table of contents (FAT/MFT/etc...) but the values of the disk sectors which were ...
8
votes
4answers
3k views

If I use an SSH tunnel to get around a firewall, what does the sysadmin see?

I use an SSH tunnel for the port my browser uses to access the internet. The result is I get around the firewall my network uses, which prevents me from using many sites I want to use (facebook, ...
8
votes
2answers
4k views

How does the “Steam” platform work? Is it DRM? Can I trust “Steam”-powered software? [closed]

UPDATE: This question lives on at gaming.stackexchange.com. So – I just bought the new game Supreme Commander 2. This question is not about the game, but about the online software ...
8
votes
2answers
26k views

How to get the real IP address of someone using a proxy?

I was researching digital goods and security when I stumbled upon this company. One of the services they provide is "Real IP". They claim to be able to get the real IP address of users even when ...
8
votes
1answer
6k views

Denyhosts keeps adding my IP address to hosts.deny

I have setup Denyhosts to run on my server, and have been using it succesfully for the last few weeks, to allow me to ssh into my server from my home dev machine. This morning, I accidentally typed ...
8
votes
4answers
18k views

Locking down a Windows 7 PC to just a browser

I have been tasked with building several PCs to act as secure kiosks that allow users to view and use an intranet site at my company. Our LP staff will cover physical security, so that is not a ...
8
votes
1answer
445 views

Can you fully remove a user's (administrator's) password in Windows 7?

I've recently sent my computer to be repaired and I am almost certain that I set a password to my account - the only account on the system. After the repair has been completed I've found out that my ...
8
votes
1answer
7k views

Permission to make symbolic links in Windows 7?

How can I grant a particular user the permission to create symlinks in Windows 7? I've searched through "Group Policy" and Google, but haven't found anything. On a side note, is there a way to ...
8
votes
3answers
374 views

How to Benchmark an AntiVirus Software

We just installed Windows 7 in our brand new PC that we build ourselves. There are heaps of antivirus software out there, avast, panda, avg, etc. We would like to balance between speed and security. ...
8
votes
2answers
5k views

Allow restricted users to install software on Windows

Is there any way in Windows XP, Vista or 7, where you can set a domain user as a restricted user, but then allow to install certain approved applications? For example, allow them to download and ...
8
votes
3answers
59k views

What is the modern day equivalent of Firesheep?

Firesheep came out on the scene in 2010 and rocked the world... and never made it to version 1.0. Mozilla has since released 15 major versions of Firefox and is incompatible with the extension. Is ...
8
votes
2answers
26k views

Grant permanent UAC permission to one program? [duplicate]

Possible Duplicate: Selectively disabling UAC for specific programs on Windows 7 Is there a way to grant permanent UAC permission in Windows 7 to a single program? I have an old program ...
8
votes
4answers
7k views

How to run Firefox in Protected Mode? (i.e. at low integrity level)

I noticed that Firefox, unlike Chrome and Internet Explorer, doesn't run in the Low Mandatory Level (aka Protected Mode, Low Integrity) Google Chrome: Microsoft Internet Explorer: Mozilla ...
8
votes
4answers
2k views

Encrypted WiFi with no password?

Is there any standard that allows a WiFi connection to be encrypted, but not require a password? i know that (old, weak) WEP, and newer WPA/WPA2 require a password (i.e. shared secret). Meanwhile my ...
7
votes
8answers
35k views

What is the default administrator password?

Sorry if this is an overly simplistic question, but I'm a bit stuck here. :) I need a windows machine for me to do some programming for class. Since I have my Macbook with me everywhere I go, I ...
7
votes
8answers
283 views

Why do browsers have so many possible exploits?

When browsing I am ocassionally given warnings about pages that host malware "that could damage my computer". I am seriously perplexed as to why, in 2010, browsers still have possible exploits and can ...
7
votes
2answers
3k views

Security threat caused by Dropbox?

Recently I received a security threat alert triggered by Dropbox, as seen in the screenshot below: What happened here? Or this is a false alert from Microsoft Security Essentials?
7
votes
5answers
1k views

Is it Possible for Hackers to steal password stored in your Browser

I was just wondering if XP passwords can be hacked then why cant a Hacker just hack my passwords stored in my browser. Is it possible for someone to know my browser saved password while I surf the ...
7
votes
10answers
8k views

How to intentionally mess up a Mac? [closed]

Inspired by this question: How to mess up a PC running Windows 7?, I'm interested in repairable ways that you could intentionally 'mess up' a Mac computer. Note from a Mod on the other question, that ...
7
votes
7answers
2k views

Looking for a USB Thumbdrive / Flash drive encryption solution (not TrueCrypt) [closed]

I am looking for a USB Thumbdrive / Flash drive encryption solution. I have searched the net but I have never come accross a solution which meets the following: Must handle at least 4GB volume If ...
7
votes
5answers
437 views

Advice for a Defcon Virgin

I have never attended a Defcon convention before and I am very excited to be attending this year. I need some help in making sure I am prepared for the event. - If I bring my laptop and connect it to ...
7
votes
4answers
2k views

Does disabling IPv6 decrease my surface area of attack and increase performance?

I have colleague that is on this whole kick of disabling IPv6 while leaving IPv4 on each new machine that comes in before deploying in our environment. He takes his personal anecdotal evidence and ...
7
votes
2answers
556 views

Is LastPass vulnerable to FireSheep attacks?

Say I was at Starbucks and wanted to use LastPass... would FireSheep users be able to steal the password/cookie/session?
7
votes
2answers
794 views

How do I browse a hard drive that has viruses?

I'm going to be connecting a notebook SATA drive to my computer via USB. This drive may be faulty so it may not work at all, however before it went supposedly "bad" it had a virus on it. My computer ...
7
votes
2answers
8k views

Windows Defender vs. Security Essentials in Windows 8

What is the difference between Windows Defender on Windows 8 and Microsoft Security Essentials? They practically look alike, so is there a need to install Security Essentials?
7
votes
1answer
3k views

How to report a malicious site to Google, Microsoft, Mozilla, etc. so that they will warn users

I completed a project a year ago. Now a few modification were needed. While trying to test the site, there was an index.html file with a malicious script which had an iframe to another site's jar ...
7
votes
4answers
5k views

Linux Group Permissions not being enforced correctly.

I am running Ubuntu 10.04 server and am having some very counter-intuitive experiences with users/groups. For example: sudo touch test_file # create empty file sudo groupadd test ...
7
votes
3answers
825 views

What kind of information can my University gather regarding my internet use on the University’s network?

I attend a large University and use their network for just about everything. Although I realize security measures probably differ from campus to campus, on a typical University-wide network, how ...
7
votes
2answers
2k views

How to scan and detect spying software

I have a friend who caught his landlord in his apartment using his laptop (he moved out afterward). The next time he tried to log in, his password was changed. I fixed the password problem but I got ...
7
votes
4answers
3k views

Would you setup a DMZ at home?

From a security point of view, what are the benefits of going the whole hog of setting up a DMZ at home if you plan on running a low traffic (unpopular) website from there? There are a number of ...
7
votes
7answers
2k views

Am I secure from network monitoring software if HTTPS is used?

I will be logging into my bank account and my personal email accounts at work. Its not banned at work, but I just don't want them to save/log a copy of whatever I do with these services. Especially my ...
7
votes
2answers
18k views

Lock your computer after 5 minutes of inactivity

I know you can automatically Sleep and Hibernate your computer with a timer. But these affect running programs and stop downloads ... so I was wondering if there is a way to automatically Lock your ...