The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

11
votes
5answers
19k views

Unable to delete a file or take ownership on Win7x64

I'm a developer and as part of the build process, a Microsoft dll is copied to a certain folder. That file copy is now failing as the target can't be overwritten. I decided to delete it by hand (...
11
votes
2answers
21k views

What does the RADIUS server do in a WPA2 Enterprise setup?

I'd like to upgrade my WiFi from "WPA2 Personal" to "WPA2 Enterprise" mode because I know that in principle, on a WiFi secured with "WPA2 Personal", devices who know the PSK can sniff on each other's ...
11
votes
4answers
4k views

Recommended offline on-demand virus scanners

I have never run full anti-virus on my Windows XP systems. Instead I use various anti-malware tools to manually perform scans every few weeks. This approach, combined with Windows updates and ...
11
votes
5answers
3k views

Does NAT provide security?

I'm following discussions about the IPv4->IPv6 transition, and IPv6 doesn't seem to like NAT at all. I've always thought that NAT was helpful in v4 for some security, I know it doesn't really hide ...
11
votes
4answers
12k views

Prevent installation of IE toolbars?

If there is one thing I would like to see become a standard feature in Internet Explorer it would be the ability to prevent installation of damn toolbars and for those preventative measures to be ...
11
votes
2answers
2k views

Mac OS X security export won't accept passphrase

I'm trying to export some items on my keychain like this: hostname:~ username$ security export -k login.keychain -t all -P "passphrase" but I always get this error: security: SecKeychainItemExport: ...
11
votes
3answers
301 views

A way to trigger an SELinux policy violation?

I'm studying the basic workings of SELinux and would find it useful to trigger a denial. My test machine is running CentOS 7, it's a basic server install without any extra services, and getenforce ...
11
votes
5answers
7k views

If Mac code signing is tampered with, what might fail?

What annoyances or real problems may occur when the digital signature of a Mac application is broken? Applications on a Mac can be digitally signed. When the signature is somehow broken, I know a few ...
10
votes
7answers
294 views

How to browse safely?

Just curious. What are the best practices and tools you use for safe Internet browsing? How to stay away from spywares, adwares etc? Update: For my work, I use Internet Explorer on Windows and ...
10
votes
4answers
39k views

Can someone explain the 'PasswordAuthentication' in the /etc/ssh/sshd_config file?

On this page, the explanation given is: The option PasswordAuthentication specifies whether we should use password-based authentication. For strong security, this option must always be set ...
10
votes
4answers
56k views

How do I remove a usage restriction from a PDF file?

I have made usage restrictions to a PDF file and protected it with a password. Now I would like to remove the protection to allow my self to do more with the document. Doing a Google search for "...
10
votes
11answers
5k views

Should I let my browser or the site remember my password, or neither?

What are the security implications of letting a web browser remember log-in information for me? Should I let a browser remember, like Firefox or Chrome, or should I let the site remember? I'm sure ...
10
votes
9answers
27k views

How can I safely open a suspicious email?

Suppose I receive an email that I highly suspect is some form of spam but I'm not 100% sure. Suppose also that I'm using form of webmail (like Gmail) with good spam filters, but this message made it ...
10
votes
4answers
2k views

How to secure my Windows 7 PC?

Hi I am going on vacation. I wanna secure my PC. Is there any way I can lock down my PC so that nobody can boot up it? Any BIOS level security? BTW. I am running Windows 7 Ultimate.
10
votes
3answers
5k views

Does PDFTK respect PDF security flags?

I have a PDF File which says that document security is enabled. It says that the only things allowed are: Printing, Content Copying or Extraction, and Content Extraction for Accessibility. I'm trying ...
10
votes
3answers
11k views

Should I Upgrade My Old Wireless Router?

I have an old wireless router, and I mean stone age old (5 years). There is nothing wrong technically with the router, it serves my wireless needs at home but it is really darn old. A search on ...
10
votes
2answers
647 views

If I purposely lock myself into a Standard User account, am I going to cause problems for myself later?

I'm an intermediate to lower-advanced level user --- I work in IT, do a bit of programming, etc. One of the things I'm a real stickler for in programming is "best" practices, or going out of the way ...
10
votes
7answers
2k views

Browser for paranoid people?

Is there a web browser out there that is more suited for paranoid people? Why would you choose it/ What feature would your ideal paranoia browser have? For instance i would want one which Sends NO ...
10
votes
3answers
5k views

Why are email transfers between mail servers often not encrypted?

Users can often choose if they want to access their email provider (such as Gmail) using a secure channel (e.g. using HTTPS). However, to the best of my knowledge, when it comes to mail-server-to-...
10
votes
14answers
57k views

How to disable Utility Manager (Windows Key + U)

How do I disable the Windows + U hotkey in Windows XP? Alternatively, how do I stop the utility manager from being active? The two are related. The utilty manager is currently providing a potential ...
10
votes
2answers
7k views

How can I check if a domain uses DNSSEC?

DNSSEC has been deployed on some topdomains now. But how could I see if a site/domain is using DNSSEC? Is it shown in the browser? or is there any windows or linux command to see it? or a tool for it?
10
votes
5answers
2k views

Top ten security tips for non-technical users

I'm giving a presentation later this week to the staff at the company where I work. The goal of the presentation is to serve as a refresher/remidner of good practices that can help keep our network ...
10
votes
5answers
553 views

Preventing malware from sniffing the sudo password

I often hear people citing sudo as one of the main barriers to malware infecting a Linux computer. The most commen argument seems to go along the lines of: Root privileges are required to modify ...
10
votes
6answers
6k views

What's the best way of keeping a PGP private key file generated by GnuPG?

What's the best way of keeping a PGP private key file generated by GnuPG? I will just store my public key online, in Gmail, on many of my computers. Where/how best to protect and store the private ...
10
votes
1answer
19k views

Removing wlan0mon created by Kismet

I have been playing with the aircrack-ng tools, and also Kismet to see how my networks appear. Kismet creates a monitor interface wlan0mon which it uses for scanning. With airmon-ng I can create and ...
10
votes
5answers
187 views

How can I make my OS appear as if it is running virtualized?

A lot of malware these days is able to detect when it is running virtualized under VMWare, VirtualPC, WINE, or even in a sandbox such as Anubis or CWSandBox. This essentially means that malware will ...
10
votes
3answers
1k views

Do end users need to do anything about the Heartbleed security bug? What?

I see in the news about the “Heartbleed” security bug. As an end user, do I need to do anything about it?
10
votes
3answers
3k views

Windows XP Mode Vulnerabilities as of April 8th, 2014

EDIT I appreciate the answers I've gotten so far, but I might not have worded the question clearly enough. Is the Windows 7 side of the machine running in XP Mode exposed to any dangers it would ...
10
votes
1answer
2k views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
10
votes
1answer
1k views

How to “jail” Java applications in OS X?

Is it possible to "jail" Java applications? My bank has an applet that requests "unrestricted access" to my computer. That makes me feels very uneasy. There should be a way to tell the java ...
10
votes
6answers
462 views

Thinking beyond passwords [closed]

I was having a discussion with a co-worker earlier this morning related to passwords and the future of computing. One of the topics we discussed was whether passwords could be replaced with visual or ...
10
votes
2answers
4k views

How do you hide installed plugins in Firefox?

How do you hide installed plugins in Firefox? This website shows that too much about you can be seen: http://centralops.net/asp/co/BrowserMirror.vbs.asp Most plugins don't need to be seen by content ...
10
votes
2answers
33k views

Grant permanent UAC permission to one program? [duplicate]

Possible Duplicate: Selectively disabling UAC for specific programs on Windows 7 Is there a way to grant permanent UAC permission in Windows 7 to a single program? I have an old program that'...
9
votes
11answers
3k views

Unix: How can I allow only one person to see my folder in the same fs?

I want to give an access to a dir for a friend. He has the access to the file system, where the dir is located. I don't want to set the permissions to all users. How can I allow only a person to see ...
9
votes
4answers
442 views

If a “forgot your password?” page emails your old password, is that definitive proof that they have stored it in plain text?

When a site emails your old password, as opposed to requiring you to reset it on the site, I'm wondering what that implies about their security measures. Does this mean that they store the password ...
9
votes
6answers
715 views

How do you protect your computer from Live CD's?

Linux has grown in popularity in the past few years. Many more people are using Live CD's now than they were say 3 years ago. And with this comes a new problem for network admins. How do you stop a ...
9
votes
9answers
779 views

Is email encryption practical enough?

All emails I have ever sent were sent as plain text. Like postcards, everybody on the way to the addressee could easily read and store them. This worries me. I know privacy is something of the past, ...
9
votes
7answers
14k views

How to send a batch file by email

Trying to send a batch file as an email attachment, I get the following error: mx.google.com rejected your message to the following e-mail addresses: foo@googlemail.com mx.google.com ...
9
votes
5answers
1k views

Downloading Microsoft Security Essentials via HTTPS

I want to download Microsoft Security Essentials on my brand new Windows 7 home PC. The official site presented to me is http://windows.microsoft.com/de-CH/windows/products/security-essentials, as I ...
9
votes
5answers
5k views

Are .docx or .pdf files potentially dangerous?

Just a general question of computer security - if I download a .pdf or .docx from an untrusted source, can it seriously harm my machine/give a malicious user access to my information? Or is it ...
9
votes
4answers
3k views

Why my Google search results are all directed via “http://www.ecosia.org/”?

Recently I noticed a website called "ecosia.org" which directs all my Google search results. What's happening to me?
9
votes
3answers
31k views

What is a kernel intrusion on my router?

I get a lot of "kernel intrusion" messages in my router's error log. Each one always shows the source IP, the destination IP (mine) and other details of the TCP connection. My Internet link has been ...
9
votes
5answers
418 views

Infer PGP private key using an encoded decoded sample

If I have both an encoded message and its original, is it possible to infer the private key?
9
votes
4answers
797 views

Is it possible to safely contain a virus - not letting it spread?

I need to run a program, but I don't trust the author. I think it is infected with spyware or viruses, malicious files. I scanned it, did n't find anything, but still not feeling good about it. So I ...
9
votes
3answers
2k views

Does Windows 8 include the Windows Help program (WinHlp32.exe)?

In 2011, Symantec reported on the use of the Windows Help File (.hlp) extension as an attack vector in targeted attacks. The functionality of the help file permits a call to the Windows API ...
9
votes
2answers
59k views

How do I access a shared folder using credentials other than the ones I logged in with?

I have a lab full of Windows 7 machines, and a shared login (user360) that all my students use. I also have a shared folder that they can all have read/write access to (for moving files around easily)...
9
votes
3answers
18k views

Disable Windows 7’s “Open File - Security Warning” dialog for exe on local drive?

I am trying to run Eclipse java-galileo-SR2-win32 when I get open-file-security-warning. The files are just extracted from a zip file and put into a directory "C:\Users\UserName\AppData\LocalLow\...
9
votes
4answers
4k views

Would you setup a DMZ at home?

From a security point of view, what are the benefits of going the whole hog of setting up a DMZ at home if you plan on running a low traffic (unpopular) website from there? There are a number of ...
9
votes
5answers
61k views

How to hide (remove) 'Owner' and 'Computer' information on PDF file?

I would like to share a PDF file on a forum anonymously. When I right click on file and go to 'Details' tab, it shows my computer name and owner name. How do I remove (hide) this information?
9
votes
4answers
11k views

Safe to use high port numbers? (re: obscuring web services)

I have a small home network and I'm trying to balance the need for security versus convenience. The safest way to secure internal web servers is to only connect using VPNs but this seems overkill to ...