The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

4
votes
0answers
3k views

Proxy radar found in apache logs file

I was reading the logs of the apache server and I was shocked by seeing these logs! [Sun Oct 25 06:44:48.922248 2015] [mpm_prefork:notice] [pid 17635] AH00163: Apache/2.4.7 (Ubuntu) ...
4
votes
0answers
380 views

ESD considerations of an open-air/wood and plexiglas case

I am going to build a computer soon, and instead of buying a pre-built case I am planning to build my own case; either closed and built with wood and plexiglas, or open and built with just wood. My ...
3
votes
0answers
99 views

How can I safely remove an RSA 4096 ransom-ware virus?

My dad's computer got infected with an RSA 4096 ransom-ware virus. For those who don't know it is a virus that encrypts all the files on your PC using an RSA 4096 encryption key. Then you need to use ...
3
votes
0answers
37 views

Debian 7 java Executable Flag Disappeared

I have an up to date Debian 7 server, also running Plesk 11. Yesterday exactly at the same time (2015-09-21 11:38:13 EET) the exec flag has been disappeared from all the java executables on the ...
3
votes
0answers
478 views

Use EMV-enabled Credit Card (chip card) for Windows Smart Card log-in?

I have a USB Smart Card Reader and a Credit Card with Smart Chip (EMV) on it. So I was wondering if I can associate this card to my Windows Administrator profile (local user account) and use it as a ...
3
votes
0answers
132 views

Why is my bitlocker data drive unlocked for a few seconds after boot?

To specify: why is the data on my bitlocker encrypted drive available for a few seconds after logging in? After a few seconds the system 'notices' the drives are bitlocker encrypted and need to be ...
3
votes
0answers
68 views

ssh-add: how to automatically insert private key passphrase?

I'm using ssh-add to add a private key in order to call lftp after that. It happens that my private key contains a passphrase and I need to automatically fill it when required. I'm able to overcome ...
3
votes
0answers
3k views

How to close suspicious port 999 garcon, is it malware?

On Mac OSX, I ran the command nmap localhost and I found I have this suspicious open port: 999/tcp open garcon Then I tried to see if there is an associated process, but nothing shows up with ...
2
votes
0answers
39 views

Preventing ransomware attacks by detecting suspicious levels of file system activity

Assume a Windows 8/10 home/small office system with 3-4 users and a few TB of file share (say 6TB in a suitable RAID). Most files are static, but sometimes files get moved round or modified. But if ...
2
votes
0answers
81 views

UAC settings are automatically disabled at least once a day

I have a weird security risk that I have submitted to our IT Operations without any luck; at least once a day, our machines running Windows 7, 8.1 and 10 has the UAC settings disabled, and we discover ...
2
votes
0answers
45 views

Multi-factor authentication to 2012 RDS farm, preferably client certs?

Wonder if anybody can give me a steer on this. We use RDS quite heavily but I would like to enhance the security of it, VPN is an option but I would prefer to avoid if possible. Ideally what I'd ...
2
votes
0answers
1k views

How to set up a password to protect bitlocker key with tpm?

My computer is a dell xps12 (2013) laptop running on windows 8.1 pro, uefi and secure boot enabled. I successfully enabled tpm and encrypted system partition with bitlocker. I was a bit surprised it ...
2
votes
0answers
75 views

OSX - Custom lockscreen incorrect password script

As you probably know, in Mac OS X you can enable a lock screen when waking from sleep, where the user enters their password. I am looking for a way of running an Automator.app workflow when an ...
2
votes
0answers
45 views

Prevent computer from connecting to outside LAN networks

I'm looking for a solution like Restrict Computer from Connecting to Outside Wireless Networks that would also work with wired connections. We have a consultant in our company that sometimes works ...
2
votes
0answers
268 views

“Windows Security” alert when moving files in My Documents/Desktop (local disk)

Every time I try to move a file to a different location in My Documents or on the Desktop by dragging it I get a "Windows Security" alert telling me "These files might be harmful to your computer". I ...
2
votes
0answers
124 views

bash Segfault by infinite recursion

I just noticed that the bash I'm using (4.2.25(1)) isn't protected against infinite function recursion. In such a case a Segfault happens (and the bash process terminates). To check this on your ...
2
votes
0answers
220 views

HIPS for Linux (ie, interactive SELinux/AppArmor)

Windows has a number of programs (generally referred to as Host-based Intrusion Prevention Systems) that offer protection against difficult security threats (such as zero-day exploits) by blocking ...
2
votes
0answers
146 views

Windows' Security warning on all files on local drives

Users usually can download portable software and use it from local drives withount any warning. (I mean small executables just as putty.exe or a portable application from PortableApps.com) However ...
2
votes
0answers
102 views

Convenient way to check AUR PKGBUILD against malicious code?

As is well known, one should take care when installing packages from the AUR, because the PKGBUILD may not do what you expect and may be malicious. For this reason, my workflow for installing and ...
2
votes
0answers
44 views

How can sensitive data written in a custom Outlook Form be protected?

We have an outlook form that is installed on some users machines, for use with their Exchange email account. All the emails sent using that form go to an internal functional/shared mailbox that is ...
2
votes
0answers
424 views

Make Chrome automatically load insecure content for specific pages/websites

Is it possible to have Chrome load content for specific web pages? I have this page that I go to all the time and I am tired of clicking on the shield each time(to load anyway). I don't want to have ...
2
votes
0answers
248 views

Host hacks when no access to hosts file

I would like to test website where public DNS name is not changed yet. In order to to do that I need to change hosts file on the workstation but the domain security policy prevents me to do so. Is ...
2
votes
0answers
120 views

How to allow a secure remote desktop login, yet keep things convenient?

So I want to have RDP on my main desktop machine and while I did this countless times already, I always used just the hardest possible random passwords. Which indeed works quite well on servers, as ...
2
votes
0answers
168 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
2
votes
0answers
62 views

Information about a given DSA Key

Reading the answer http://superuser.com/a/13189/246855 to the question What is better for GPG keys - RSA or DSA?, I decided to examine the 2048 bit DSA key I use to figure out which secure hash ...
2
votes
0answers
56 views

Differences between encrypting an actual PC vs a virtual one?

Are there any differences between using for example TrueCrypt to encrypt the system drive of an actual PC and a virtual one running on ESXi? Are there any security advantages/differences?
2
votes
0answers
153 views

Should i use AWS IAM or my root credentials for my webapp access to S3 bucket?

I have a webapp that requires uploading/deleting/reading files inside a S3 bucket. What I did was I created a brand new Amazon WebServices (aka AWS) account. Let's call this AWS account ...
2
votes
0answers
3k views

BSOD - “replacing invalid security ID with default security ID” - Cannot boot to windows, black screen

I was working away on my computer when it suddenly blue screened. It's maybe done that once many months ago. Upon Reboot it began running checkdisk, moving orphaned files and then it got to this ...
2
votes
0answers
16 views

Belarc BenchmarkSummary Error

Installed Belarc but when it is opened it does not display the report. It shows: unknown error BenchmarkSummary((Galceran-PC)).html Uninstalled and downloaded again from another source. Same Error. ...
2
votes
0answers
311 views

Security Warning on scripts, but only on desktop

Somehow over the weekend, my Windows 7 Enterprise (64-bit) computer at work seems to have developed an odd problem. I went to load a management console file (.msc) that I've had on my desktop for ...
2
votes
0answers
638 views

How to remove Ahnlab policy agent?

Anybody know how to remove the Ahnlab Policy agent? I was forced to install it so that I could connect to the campus network when I visited Korea. Now that I'm home, I would like to remove it. ...
2
votes
0answers
114 views

Do there exist any published security audits of FreeOTFE?

I see that http://www.freeotfe.org offers FOSS encryption software for Windows. This software also has a Wikipedia article devoted to it. However, it appears to have received less scrutiny than its ...
2
votes
0answers
187 views

Right way of installing Windows 8 and Ubuntu with encrypted file system

Here is problem. for which I am looking for solution My Current Installation on laptop and HDD Partition is as follows. 500 GB HDD -- C: 35 GB [Windows 8 Consumer Preview] -- D: 195 GB -- E: 195 GB ...
2
votes
0answers
81 views

Which Windows services and startup programs can I disable/modify to optimize performance/security?

For Windows Vista SP2 and Windows 7: I use this stand-alone (no LAN) computer at home exclusively to browse the internet, nothing else!.. I have another computer I use for development and testing ...
2
votes
0answers
1k views

John the ripper - not showing cracked passwords

I am using jtr to perform an audit on our admin passwords. It's cracked a few which showed on the screen, however when I try and get them to show again with the --show command, it says it hasn't done ...
2
votes
0answers
31 views

How does an Update Server verify that the request sent was the intended application?

If you have an update service that's running on a server listening for connections on some random port, how could one verify that any requests coming into that port are from the specific application ...
2
votes
0answers
77 views

Commandline to set perms on SQL's backup folder

I'm trying to get my webhost to grant me permissions to the daily backup folder used by sql server. I'd like to use FTP to access all files in that folder. i'd like to give the host a nice easy ...
1
vote
0answers
13 views

splwow64 deleting %TMP% permissions

Repeatedly I've had problems as a result from having all permissions set on the %tmp% folder (C:\Users\<username>\AppData\Local\Temp) (Win10) deleted. As default the users/groups SYSTEM, the ...
1
vote
0answers
18 views

Block all inbound traffic except one IP using windows firewall rules

I have no problem doing this in linux. I just write an iptable to block all traffic and another one after to allow a specific IP. However it doesn't look to be that easy on Windows. I did the exact ...
1
vote
0answers
29 views

Force Desktop OneDrive to Prompt for Password

I use the Windows 8 implementation of "Desktop OneDrive" to create and access files stored in my OneDrive account. My OneDrive login is also my Windows login so that when I'm using my computer all my ...
1
vote
0answers
42 views

Unlock Samsung SSD 840 PRO with hdparm

My Samsung SSD 840 PRO is locked with a password set by using the BIOS. Every time I turn on the computer, I have to type in the password. Cause there is a BIOS bug, I am not able to change the ...
1
vote
0answers
55 views

Disable Checkpoint Endpoint Security Policy

I have the same problem as this (How to disable the security policy with check point VPN-1 secure client?) but with an other client from checkpoint. I have the Checkpoint Endpoint Security Version ...
1
vote
0answers
20 views

How can throughput be greater than the bandwidth? Is this a valid reason?

I asked this question on networking engineers but it was closed as off topic since it wasn't for professional application. Hope it fits better here. I'm studdying for the CISSP secuirty exam and a ...
1
vote
0answers
23 views

SRP not blocking EXE

I wanted to use SRP (Software Restriction Policies) on my Windows 7 Professional for whitelisting. For now I have just set the default level to dissallowed no additional rules just the 2 which are ...
1
vote
0answers
161 views

Secure wifi connection with FreeRADIUS, MySQL, EAP-PEAP, TLS

I'm trying to setup a wireless network as shown in the picture and I'm struggling how to secure it. Picture of Wifi Network: My basic question is: How I can securely store passwords into MySQL ...
1
vote
0answers
17 views

Do you need a server for Endpoint Antivirus Protection?

So i'm looking into a a few antivirus software packages for a small business with no more than 5 computers. Stumbled across endpoint protection, but was wondering if you needed a server to deploy ...
1
vote
0answers
68 views

undocumented SID structure on windows 10 [S-1-19-512-4096]

regarding this question: Cannot write on WindowsApps directories and restore files After hitting to wall trying to restore some files inside this directory c:\Program Files\WindowsApps\ on windows ...
1
vote
0answers
73 views

Self-Encrypting Drive (SED) and S3-suspend (sleep)

since my laptop is aging, but I love its 4:3 screen, I don't like relying on external media (also no USB 3 ports), and SSDs are too small for my budget, but I want full encryption (previously ...
1
vote
0answers
25 views

Prove that a user exported data from Quickbooks

An employee leaving the company has exported our entire customer list and a record of all of the individual product sales to each customer from Quickbooks. I know that we should have had access ...
1
vote
0answers
40 views

OpenVPN Confusion - Server and client on one machine?

I have searched all over the internet and tried so many things.. but I cannot seem to figure this out. I have a Raspberry Pi. I have an ethernet, but I have access to a wireless if I needed it. ...