Security in terms of "computer security", such as protection of information, protection from theft or data destruction.

learn more… | top users | synonyms (1)

8
votes
5answers
106k views

Access denied even though I'm an Administrator?

My user account on Windows 7 is part of the Administrators group which has a full control permissions on C:\inetpub\wwwroot: However, when I try to create a folder in it, I get the "access denied" ...
8
votes
3answers
12k views

Windows 7 equivalent for ntrights.exe

What is an equivalent for ntrights.exe on Windows 7? I need it to be able to be run from the command line.
8
votes
3answers
4k views

Does PDFTK respect PDF security flags?

I have a PDF File which says that document security is enabled. It says that the only things allowed are: Printing, Content Copying or Extraction, and Content Extraction for Accessibility. I'm trying ...
8
votes
9answers
771 views

Sensible Password Policy

I've been tasked with putting together the company security policy. As part of this I want to define what is a sensible but secure password (length, characters etc), how often they should be changed, ...
8
votes
1answer
8k views

What is the default username and password for SonarQube?

What is the default username and password for a fresh installation of SonarQube? Or how do you create a user?
8
votes
5answers
323 views

Media Sanitation

What is considered the minimum amount of overwrites to sanitize media? For example; there are 1, 2, 3, 7, and 35 overwrites methods to make data irrecoverable. Using standard recovery methods (such ...
8
votes
3answers
15k views

Disable Windows 7’s “Open File - Security Warning” dialog for exe on local drive?

I am trying to run Eclipse java-galileo-SR2-win32 when I get open-file-security-warning. The files are just extracted from a zip file and put into a directory ...
8
votes
1answer
6k views

Will microwaving a flash drive destroy the data on it?

After reading the answers on Permanently delete files from a flash drive, where the top rated answer was simply to pulverize it with a hammer, I wondered whether a microwave could be used to the same ...
8
votes
5answers
5k views

How much data does Chrome really collect?

One of the companies I work for recently informed me that browsing the Intranet using Chrome is not accepted (nor supported) because it "collects data", therefore making it insecure. However, they ...
8
votes
2answers
2k views

How can I configure my wireless network for the strongest security?

There seem to be many security features in wireless routers from MAC address filtering to the authentication type and data encryption. WPA or WPA2 PSK? AES or TKIP? When I set up a new wireless ...
8
votes
2answers
1k views

Is it okay to use an administrator account for everyday use if UAC is on?

Since I switched to Windows 7 about 3 years ago, and now using Windows 8.1, I have become familiar with the concept of User Account Control and used my PC the following way: a standard account which I ...
8
votes
6answers
4k views

Port scan revealed port 1111 open. What is it?

I am new to systems administration and have a new server running a website with http (at port 80), https (at port 443) and ssh (at port 22). I did an nmap port scan using my personal laptop and other ...
8
votes
4answers
4k views

Why some recovery tools are still able to find deleted files after I purge Recycle Bin, defrag the disk and zero-fill free space?

As far as I understand, when I delete (without using Recycle Bin) a file, its record is removed from the file system table of contents (FAT/MFT/etc...) but the values of the disk sectors which were ...
8
votes
4answers
2k views

If I use an SSH tunnel to get around a firewall, what does the sysadmin see?

I use an SSH tunnel for the port my browser uses to access the internet. The result is I get around the firewall my network uses, which prevents me from using many sites I want to use (facebook, ...
8
votes
2answers
4k views

How does the “Steam” platform work? Is it DRM? Can I trust “Steam”-powered software? [closed]

UPDATE: This question lives on at gaming.stackexchange.com. So – I just bought the new game Supreme Commander 2. This question is not about the game, but about the online software ...
8
votes
2answers
24k views

How to get the real IP address of someone using a proxy?

I was researching digital goods and security when I stumbled upon this company. One of the services they provide is "Real IP". They claim to be able to get the real IP address of users even when ...
8
votes
1answer
6k views

Denyhosts keeps adding my IP address to hosts.deny

I have setup Denyhosts to run on my server, and have been using it succesfully for the last few weeks, to allow me to ssh into my server from my home dev machine. This morning, I accidentally typed ...
8
votes
4answers
16k views

Locking down a Windows 7 PC to just a browser

I have been tasked with building several PCs to act as secure kiosks that allow users to view and use an intranet site at my company. Our LP staff will cover physical security, so that is not a ...
8
votes
4answers
3k views

How to hide Browser Plugin Details in firefox for more privacy?

I'm trying to trick the results in this page to have more privacy/anonymity: https://panopticlick.eff.org/index.php?action=log&js=yes So far the best I could do is change the user agent, with the ...
8
votes
1answer
435 views

Can you fully remove a user's (administrator's) password in Windows 7?

I've recently sent my computer to be repaired and I am almost certain that I set a password to my account - the only account on the system. After the repair has been completed I've found out that my ...
8
votes
3answers
368 views

How to Benchmark an AntiVirus Software

We just installed Windows 7 in our brand new PC that we build ourselves. There are heaps of antivirus software out there, avast, panda, avg, etc. We would like to balance between speed and security. ...
8
votes
2answers
5k views

Allow restricted users to install software on Windows

Is there any way in Windows XP, Vista or 7, where you can set a domain user as a restricted user, but then allow to install certain approved applications? For example, allow them to download and ...
8
votes
2answers
25k views

Grant permanent UAC permission to one program? [duplicate]

Possible Duplicate: Selectively disabling UAC for specific programs on Windows 7 Is there a way to grant permanent UAC permission in Windows 7 to a single program? I have an old program ...
8
votes
4answers
7k views

How to run Firefox in Protected Mode? (i.e. at low integrity level)

I noticed that Firefox, unlike Chrome and Internet Explorer, doesn't run in the Low Mandatory Level (aka Protected Mode, Low Integrity) Google Chrome: Microsoft Internet Explorer: Mozilla ...
8
votes
2answers
2k views

How do you hide installed plugins in Firefox?

How do you hide installed plugins in Firefox? This website shows that too much about you can be seen: http://centralops.net/asp/co/BrowserMirror.vbs.asp Most plugins don't need to be seen by content ...
7
votes
8answers
280 views

Why do browsers have so many possible exploits?

When browsing I am ocassionally given warnings about pages that host malware "that could damage my computer". I am seriously perplexed as to why, in 2010, browsers still have possible exploits and can ...
7
votes
5answers
15k views

How much information can my ISP see?

Is it possible for my ISP to see the passwords that I enter on websites and in chat programs? And what about SSL websites that start with https, do they encrypt my username and password before ...
7
votes
2answers
3k views

Security threat caused by Dropbox?

Recently I received a security threat alert triggered by Dropbox, as seen in the screenshot below: What happened here? Or this is a false alert from Microsoft Security Essentials?
7
votes
5answers
1k views

Is it Possible for Hackers to steal password stored in your Browser

I was just wondering if XP passwords can be hacked then why cant a Hacker just hack my passwords stored in my browser. Is it possible for someone to know my browser saved password while I surf the ...
7
votes
10answers
7k views

How to intentionally mess up a Mac? [closed]

Inspired by this question: How to mess up a PC running Windows 7?, I'm interested in repairable ways that you could intentionally 'mess up' a Mac computer. Note from a Mod on the other question, that ...
7
votes
7answers
2k views

Looking for a USB Thumbdrive / Flash drive encryption solution (not TrueCrypt) [closed]

I am looking for a USB Thumbdrive / Flash drive encryption solution. I have searched the net but I have never come accross a solution which meets the following: Must handle at least 4GB volume If ...
7
votes
5answers
435 views

Advice for a Defcon Virgin

I have never attended a Defcon convention before and I am very excited to be attending this year. I need some help in making sure I am prepared for the event. - If I bring my laptop and connect it to ...
7
votes
4answers
2k views

Does disabling IPv6 decrease my surface area of attack and increase performance?

I have colleague that is on this whole kick of disabling IPv6 while leaving IPv4 on each new machine that comes in before deploying in our environment. He takes his personal anecdotal evidence and ...
7
votes
2answers
537 views

Is LastPass vulnerable to FireSheep attacks?

Say I was at Starbucks and wanted to use LastPass... would FireSheep users be able to steal the password/cookie/session?
7
votes
2answers
792 views

How do I browse a hard drive that has viruses?

I'm going to be connecting a notebook SATA drive to my computer via USB. This drive may be faulty so it may not work at all, however before it went supposedly "bad" it had a virus on it. My computer ...
7
votes
2answers
8k views

Windows Defender vs. Security Essentials in Windows 8

What is the difference between Windows Defender on Windows 8 and Microsoft Security Essentials? They practically look alike, so is there a need to install Security Essentials?
7
votes
1answer
3k views

How to report a malicious site to Google, Microsoft, Mozilla, etc. so that they will warn users

I completed a project a year ago. Now a few modification were needed. While trying to test the site, there was an index.html file with a malicious script which had an iframe to another site's jar ...
7
votes
3answers
772 views

What kind of information can my University gather regarding my internet use on the University’s network?

I attend a large University and use their network for just about everything. Although I realize security measures probably differ from campus to campus, on a typical University-wide network, how ...
7
votes
2answers
2k views

How to scan and detect spying software

I have a friend who caught his landlord in his apartment using his laptop (he moved out afterward). The next time he tried to log in, his password was changed. I fixed the password problem but I got ...
7
votes
4answers
3k views

Would you setup a DMZ at home?

From a security point of view, what are the benefits of going the whole hog of setting up a DMZ at home if you plan on running a low traffic (unpopular) website from there? There are a number of ...
7
votes
4answers
4k views

Linux Group Permissions not being enforced correctly.

I am running Ubuntu 10.04 server and am having some very counter-intuitive experiences with users/groups. For example: sudo touch test_file # create empty file sudo groupadd test ...
7
votes
7answers
1k views

Am I secure from network monitoring software if HTTPS is used?

I will be logging into my bank account and my personal email accounts at work. Its not banned at work, but I just don't want them to save/log a copy of whatever I do with these services. Especially my ...
7
votes
2answers
17k views

Lock your computer after 5 minutes of inactivity

I know you can automatically Sleep and Hibernate your computer with a timer. But these affect running programs and stop downloads ... so I was wondering if there is a way to automatically Lock your ...
7
votes
10answers
979 views

VPN for a small organization

I am in charge of a small office network that has < 10 users. I want to be able to offer them access to the network from their home internet connections. At the moment we have a regular ...
7
votes
2answers
7k views

Turn off “unknown publisher” message for older Windows application?

Anyone know how to turn off or suppress the "unknown publisher" message for a specific application? The application is a legacy version of Delphi that we use to update a LOB application. I thought ...
7
votes
3answers
2k views

Remote into Linux workstation behind a firewall

Let's say I have a Linux workstation at work, behind a firewall. So even though I may have a remote access server set up on it (such as the most excellent NoMachine NX Server), I can't access it from ...
7
votes
2answers
3k views

Why are email transfers between mail servers often not encrypted? Why aren't users warned about it?

Users can often choose if they want to access their email provider (such as Gmail) using a secure channel (e.g. using HTTPS). However, to the best of my knowledge, when it comes to ...
7
votes
3answers
6k views

What are Windows ACLs?

What are Windows ACLs and why are they important?
7
votes
4answers
976 views

Is it safer to use a chroot jails, a jail shell or a combination?

A friend of mine has a xandros-based Acer netbook, and has been looking to get some remote administration and help from me while she is travelling around the world. I've set up an account on her ...
7
votes
1answer
2k views

non-interactive ssh sudo… prompts for the password in plain text

I'm running some non-interactive ssh commands. The ssh authentication is taken care of fine through the ssh agent, but if I run a command that requires sudo then the password prompt in my terminal is ...