Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

9
votes
3answers
1k views

Does Windows 8 include the Windows Help program (WinHlp32.exe)?

In 2011, Symantec reported on the use of the Windows Help File (.hlp) extension as an attack vector in targeted attacks. The functionality of the help file permits a call to the Windows API ...
9
votes
3answers
15k views

Windows 7 equivalent for ntrights.exe

What is an equivalent for ntrights.exe on Windows 7? I need it to be able to be run from the command line.
9
votes
1answer
204 views

Security concerns of displaying ssh private key

I've made I huge mistake, or at least I think it is: I've "catted" my private SSH key cat ~/.ssh/id_rsa I'm now afraid that I've created a security hole, allowing other users to see my private key ...
9
votes
14answers
50k views

How to disable Utility Manager (Windows Key + U)

How do I disable the Windows + U hotkey in Windows XP? Alternatively, how do I stop the utility manager from being active? The two are related. The utilty manager is currently providing a potential ...
9
votes
4answers
37k views

putty 0.61 : why do I see “Access Denied” message after I enter my login id?

I use putty to login to my RHEL 5.3 server. I'm prompted to enter my login as "login as " and I enter my login Id. as soon as I press ENTER, I see a "Access Denied" message following which I'm ...
9
votes
4answers
11k views

Lock Mac after N mins of inactivity?

Is there a mac app that can lock the screen after N minutes of inactivity? Preferably N mins after the screensaver has kicked-in. Locking when the screensaver comes on is annoying - I want my ...
9
votes
1answer
7k views

What makes the address bar in IE turn green?

What aspect of a site's SSL certificate causes IE's address bar to turn green? I'm working on a site which already uses SSL successfully, but am interested to know if there are different levels of ...
9
votes
2answers
5k views

How can I check if a domain uses DNSSEC?

DNSSEC has been deployed on some topdomains now. But how could I see if a site/domain is using DNSSEC? Is it shown in the browser? or is there any windows or linux command to see it? or a tool for it? ...
9
votes
3answers
655 views

My Spam Trap Caught A Company - How Legitimate Is Their Response?

I have my own domain (lets call it MyDomain.com), and my email account is set up such that all mails sent to @MyDomain.com will end up in the same mailbox. So, think of a word, put it in front of ...
9
votes
6answers
6k views

Port scan revealed port 1111 open. What is it?

I am new to systems administration and have a new server running a website with http (at port 80), https (at port 443) and ssh (at port 22). I did an nmap port scan using my personal laptop and other ...
9
votes
1answer
636 views

“Panic Password” on Linux

I run Linux on my netbook with an encrypted home directory (decrypted when I log in). One idea I had (partly from Cory Doctorow's Little Brother) was to have a password that I could enter which would ...
9
votes
5answers
183 views

How can I make my OS appear as if it is running virtualized?

A lot of malware these days is able to detect when it is running virtualized under VMWare, VirtualPC, WINE, or even in a sandbox such as Anubis or CWSandBox. This essentially means that malware will ...
9
votes
1answer
818 views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
9
votes
4answers
3k views

Uses for Windows 7 fingerprint reader

I just bought a Thinkpad T410s. It comes with a finger print reader. I'm using it on Windows 7 Pro 64-bit for loging in. Anyone have any other practical and useful ways to use it? For example, for ...
9
votes
3answers
50 views

A way to trigger an SELinux policy violation?

I'm studying the basic workings of SELinux and would find it useful to trigger a denial. My test machine is running CentOS 7, it's a basic server install without any extra services, and getenforce ...
9
votes
2answers
2k views

How do you hide installed plugins in Firefox?

How do you hide installed plugins in Firefox? This website shows that too much about you can be seen: http://centralops.net/asp/co/BrowserMirror.vbs.asp Most plugins don't need to be seen by content ...
8
votes
6answers
591 views

How do you protect your computer from Live CD's?

Linux has grown in popularity in the past few years. Many more people are using Live CD's now than they were say 3 years ago. And with this comes a new problem for network admins. How do you stop a ...
8
votes
5answers
5k views

Can a virus on a flash drive run itself without autorun?

Someone told me that it's possible for a virus to run itself from Flash memories even if autorun.inf is not present or this feature is disabled using gpedit.msc. He said a virus can run itself as ...
8
votes
7answers
693 views

I found two usb sticks on the ground. Now what?

As from subject. I want to see what's inside. I am seriously interested in finding the owner if possible and returning them, but I am worried it could be an attempt at social engineering. I own a ...
8
votes
5answers
1k views

Downloading Microsoft Security Essentials via HTTPS

I want to download Microsoft Security Essentials on my brand new Windows 7 home PC. The official site presented to me is http://windows.microsoft.com/de-CH/windows/products/security-essentials, as I ...
8
votes
5answers
8k views

Is there a point to using theft tracking software like Prey on my laptop, if you have login security?

Hey, so I have a Thinkpad that I use in a variety of places (coffee shops, work, etc.). I don't generally abandon it, but I figure there's a chance I might get careless and it gets stolen at some ...
8
votes
6answers
2k views

Do I really need a firewall?

I've been using the Nod32 security suite for some time now, and out of all the others that I've tried, it's great (low memory footprint, fast, fairly cheap). However, I've been installing a lot of ...
8
votes
5answers
2k views

How useful is hard drive encryption?

So, let's say you have a notebook, and you encrypt the entire hard drive. Whenever you boot it's gonna ask for a password, meaning nobody can access your data without the password. On the other hand, ...
8
votes
3answers
4k views

Does PDFTK respect PDF security flags?

I have a PDF File which says that document security is enabled. It says that the only things allowed are: Printing, Content Copying or Extraction, and Content Extraction for Accessibility. I'm trying ...
8
votes
4answers
6k views

Linux Group Permissions not being enforced correctly.

I am running Ubuntu 10.04 server and am having some very counter-intuitive experiences with users/groups. For example: sudo touch test_file # create empty file sudo groupadd test ...
8
votes
9answers
822 views

Sensible Password Policy

I've been tasked with putting together the company security policy. As part of this I want to define what is a sensible but secure password (length, characters etc), how often they should be changed, ...
8
votes
3answers
17k views

Disable Windows 7’s “Open File - Security Warning” dialog for exe on local drive?

I am trying to run Eclipse java-galileo-SR2-win32 when I get open-file-security-warning. The files are just extracted from a zip file and put into a directory ...
8
votes
4answers
8k views

Will microwaving a flash drive destroy the data on it?

After reading the answers on Permanently delete files from a flash drive, where the top rated answer was simply to pulverize it with a hammer, I wondered whether a microwave could be used to the same ...
8
votes
5answers
328 views

Media Sanitation

What is considered the minimum amount of overwrites to sanitize media? For example; there are 1, 2, 3, 7, and 35 overwrites methods to make data irrecoverable. Using standard recovery methods (such ...
8
votes
2answers
23k views

Lock your computer after 5 minutes of inactivity

I know you can automatically Sleep and Hibernate your computer with a timer. But these affect running programs and stop downloads ... so I was wondering if there is a way to automatically Lock your ...
8
votes
5answers
5k views

How much data does Chrome really collect?

One of the companies I work for recently informed me that browsing the Intranet using Chrome is not accepted (nor supported) because it "collects data", therefore making it insecure. However, they ...
8
votes
2answers
2k views

How can I configure my wireless network for the strongest security?

There seem to be many security features in wireless routers from MAC address filtering to the authentication type and data encryption. WPA or WPA2 PSK? AES or TKIP? When I set up a new wireless ...
8
votes
2answers
2k views

Is it okay to use an administrator account for everyday use if UAC is on?

Since I switched to Windows 7 about 3 years ago, and now using Windows 8.1, I have become familiar with the concept of User Account Control and used my PC the following way: a standard account which I ...
8
votes
4answers
5k views

Why some recovery tools are still able to find deleted files after I purge Recycle Bin, defrag the disk and zero-fill free space?

As far as I understand, when I delete (without using Recycle Bin) a file, its record is removed from the file system table of contents (FAT/MFT/etc...) but the values of the disk sectors which were ...
8
votes
4answers
3k views

If I use an SSH tunnel to get around a firewall, what does the sysadmin see?

I use an SSH tunnel for the port my browser uses to access the internet. The result is I get around the firewall my network uses, which prevents me from using many sites I want to use (facebook, ...
8
votes
2answers
4k views

How does the “Steam” platform work? Is it DRM? Can I trust “Steam”-powered software? [closed]

UPDATE: This question lives on at gaming.stackexchange.com. So – I just bought the new game Supreme Commander 2. This question is not about the game, but about the online software ...
8
votes
2answers
29k views

How to get the real IP address of someone using a proxy?

I was researching digital goods and security when I stumbled upon this company. One of the services they provide is "Real IP". They claim to be able to get the real IP address of users even when ...
8
votes
1answer
1k views

How can I prevent file execution in a specific folder in Windows 7?

I don't want to inadvertently execute programs in my "Downloads" folder. How do I do that in Windows 7 Home Premium?
8
votes
3answers
2k views

Remote into Linux workstation behind a firewall

Let's say I have a Linux workstation at work, behind a firewall. So even though I may have a remote access server set up on it (such as the most excellent NoMachine NX Server), I can't access it from ...
8
votes
1answer
7k views

Denyhosts keeps adding my IP address to hosts.deny

I have setup Denyhosts to run on my server, and have been using it succesfully for the last few weeks, to allow me to ssh into my server from my home dev machine. This morning, I accidentally typed ...
8
votes
2answers
9k views

Is Gtalk communication encrypted?

What is the level of security offered by gtalk against eaves-dropping?
8
votes
4answers
23k views

Locking down a Windows 7 PC to just a browser

I have been tasked with building several PCs to act as secure kiosks that allow users to view and use an intranet site at my company. Our LP staff will cover physical security, so that is not a ...
8
votes
1answer
1k views

How can I encrypt the swap file under Windows 7?

Mac OS X has the ability to use "secure virtual memory", meaning that anything from RAM that is swapped out to disk is encrypted. This improves security by making sure no passwords / keys are ever ...
8
votes
1answer
459 views

Can you fully remove a user's (administrator's) password in Windows 7?

I've recently sent my computer to be repaired and I am almost certain that I set a password to my account - the only account on the system. After the repair has been completed I've found out that my ...
8
votes
4answers
33k views

Multiple instances of conhost.exe

My desktop has two instances of conhost.exe running in the background at all times. Some googling brought up a few articles, like this one, but they don't explain why I have multiple instances of ...
8
votes
1answer
493 views

How to migrate my old PGP key to a more secure algorithm?

I have an old PGP using old GnuPG algorithm defaults. According to Best encryption and signing algorithm for GnuPG: RSA/RSA or DSA/Elgamal?, those algorithm settings are no longer sufficient, so I ...
8
votes
3answers
396 views

How to Benchmark an AntiVirus Software

We just installed Windows 7 in our brand new PC that we build ourselves. There are heaps of antivirus software out there, avast, panda, avg, etc. We would like to balance between speed and security. ...
8
votes
2answers
5k views

Allow restricted users to install software on Windows

Is there any way in Windows XP, Vista or 7, where you can set a domain user as a restricted user, but then allow to install certain approved applications? For example, allow them to download and ...
8
votes
2answers
46k views

How can I use Event Viewer to confirm login times filtered by User?

I'm required to log my start and finish times at work. Occasionally I forget to do this and had a bright idea that checking the Security events log would allow me to retrospectively ascertain my ...
8
votes
2answers
28k views

Grant permanent UAC permission to one program? [duplicate]

Possible Duplicate: Selectively disabling UAC for specific programs on Windows 7 Is there a way to grant permanent UAC permission in Windows 7 to a single program? I have an old program ...