The protection of computer systems and information from threats such as theft or data destruction.

learn more… | top users | synonyms (1)

4
votes
0answers
374 views

ESD considerations of an open-air/wood and plexiglas case

I am going to build a computer soon, and instead of buying a pre-built case I am planning to build my own case; either closed and built with wood and plexiglas, or open and built with just wood. My ...
3
votes
0answers
1k views

Proxy radar found in apache logs file

I was reading the logs of the apache server and I was shocked by seeing these logs! [Sun Oct 25 06:44:48.922248 2015] [mpm_prefork:notice] [pid 17635] AH00163: Apache/2.4.7 (Ubuntu) ...
3
votes
0answers
34 views

Debian 7 java Executable Flag Disappeared

I have an up to date Debian 7 server, also running Plesk 11. Yesterday exactly at the same time (2015-09-21 11:38:13 EET) the exec flag has been disappeared from all the java executables on the ...
3
votes
0answers
66 views

How could an unscrupulous company benefit from knowing my hard drive serial number?

I have recently run into some malware on my computer that has gathered up my computer's make and hard drive make and serial number, along with probably many other things. The malware installed itself ...
3
votes
0answers
65 views

ssh-add: how to automatically insert private key passphrase?

I'm using ssh-add to add a private key in order to call lftp after that. It happens that my private key contains a passphrase and I need to automatically fill it when required. I'm able to overcome ...
2
votes
0answers
347 views

Use EMV-enabled Credit Card (chip card) for Windows Smart Card log-in?

I have a USB Smart Card Reader and a Credit Card with Smart Chip (EMV) on it. So I was wondering if I can associate this card to my Windows Administrator profile (local user account) and use it as a ...
2
votes
0answers
61 views

UAC settings are automatically disabled at least once a day

I have a weird security risk that I have submitted to our IT Operations without any luck; at least once a day, our machines running Windows 7, 8.1 and 10 has the UAC settings disabled, and we discover ...
2
votes
0answers
41 views

Multi-factor authentication to 2012 RDS farm, preferably client certs?

Wonder if anybody can give me a steer on this. We use RDS quite heavily but I would like to enhance the security of it, VPN is an option but I would prefer to avoid if possible. Ideally what I'd ...
2
votes
0answers
72 views

OSX - Custom lockscreen incorrect password script

As you probably know, in Mac OS X you can enable a lock screen when waking from sleep, where the user enters their password. I am looking for a way of running an Automator.app workflow when an ...
2
votes
0answers
34 views

Prevent computer from connecting to outside LAN networks

I'm looking for a solution like Restrict Computer from Connecting to Outside Wireless Networks that would also work with wired connections. We have a consultant in our company that sometimes works ...
2
votes
0answers
232 views

“Windows Security” alert when moving files in My Documents/Desktop (local disk)

Every time I try to move a file to a different location in My Documents or on the Desktop by dragging it I get a "Windows Security" alert telling me "These files might be harmful to your computer". I ...
2
votes
0answers
95 views

bash Segfault by infinite recursion

I just noticed that the bash I'm using (4.2.25(1)) isn't protected against infinite function recursion. In such a case a Segfault happens (and the bash process terminates). To check this on your ...
2
votes
0answers
173 views

HIPS for Linux (ie, interactive SELinux/AppArmor)

Windows has a number of programs (generally referred to as Host-based Intrusion Prevention Systems) that offer protection against difficult security threats (such as zero-day exploits) by blocking ...
2
votes
0answers
103 views

Why is my bitlocker data drive unlocked for a few seconds after boot?

To specify: why is the data on my bitlocker encrypted drive available for a few seconds after logging in? After a few seconds the system 'notices' the drives are bitlocker encrypted and need to be ...
2
votes
0answers
134 views

Windows' Security warning on all files on local drives

Users usually can download portable software and use it from local drives withount any warning. (I mean small executables just as putty.exe or a portable application from PortableApps.com) However ...
2
votes
0answers
87 views

Convenient way to check AUR PKGBUILD against malicious code?

As is well known, one should take care when installing packages from the AUR, because the PKGBUILD may not do what you expect and may be malicious. For this reason, my workflow for installing and ...
2
votes
0answers
43 views

How can sensitive data written in a custom Outlook Form be protected?

We have an outlook form that is installed on some users machines, for use with their Exchange email account. All the emails sent using that form go to an internal functional/shared mailbox that is ...
2
votes
0answers
407 views

Make Chrome automatically load insecure content for specific pages/websites

Is it possible to have Chrome load content for specific web pages? I have this page that I go to all the time and I am tired of clicking on the shield each time(to load anyway). I don't want to have ...
2
votes
0answers
227 views

Host hacks when no access to hosts file

I would like to test website where public DNS name is not changed yet. In order to to do that I need to change hosts file on the workstation but the domain security policy prevents me to do so. Is ...
2
votes
0answers
116 views

How to allow a secure remote desktop login, yet keep things convenient?

So I want to have RDP on my main desktop machine and while I did this countless times already, I always used just the hardest possible random passwords. Which indeed works quite well on servers, as ...
2
votes
0answers
166 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
2
votes
0answers
61 views

Information about a given DSA Key

Reading the answer http://superuser.com/a/13189/246855 to the question What is better for GPG keys - RSA or DSA?, I decided to examine the 2048 bit DSA key I use to figure out which secure hash ...
2
votes
0answers
55 views

Differences between encrypting an actual PC vs a virtual one?

Are there any differences between using for example TrueCrypt to encrypt the system drive of an actual PC and a virtual one running on ESXi? Are there any security advantages/differences?
2
votes
0answers
151 views

Should i use AWS IAM or my root credentials for my webapp access to S3 bucket?

I have a webapp that requires uploading/deleting/reading files inside a S3 bucket. What I did was I created a brand new Amazon WebServices (aka AWS) account. Let's call this AWS account ...
2
votes
0answers
3k views

BSOD - “replacing invalid security ID with default security ID” - Cannot boot to windows, black screen

I was working away on my computer when it suddenly blue screened. It's maybe done that once many months ago. Upon Reboot it began running checkdisk, moving orphaned files and then it got to this ...
2
votes
0answers
16 views

Belarc BenchmarkSummary Error

Installed Belarc but when it is opened it does not display the report. It shows: unknown error BenchmarkSummary((Galceran-PC)).html Uninstalled and downloaded again from another source. Same Error. ...
2
votes
0answers
305 views

Security Warning on scripts, but only on desktop

Somehow over the weekend, my Windows 7 Enterprise (64-bit) computer at work seems to have developed an odd problem. I went to load a management console file (.msc) that I've had on my desktop for ...
2
votes
0answers
620 views

How to remove Ahnlab policy agent?

Anybody know how to remove the Ahnlab Policy agent? I was forced to install it so that I could connect to the campus network when I visited Korea. Now that I'm home, I would like to remove it. ...
2
votes
0answers
113 views

Do there exist any published security audits of FreeOTFE?

I see that http://www.freeotfe.org offers FOSS encryption software for Windows. This software also has a Wikipedia article devoted to it. However, it appears to have received less scrutiny than its ...
2
votes
0answers
187 views

Right way of installing Windows 8 and Ubuntu with encrypted file system

Here is problem. for which I am looking for solution My Current Installation on laptop and HDD Partition is as follows. 500 GB HDD -- C: 35 GB [Windows 8 Consumer Preview] -- D: 195 GB -- E: 195 GB ...
2
votes
0answers
78 views

Which Windows services and startup programs can I disable/modify to optimize performance/security?

For Windows Vista SP2 and Windows 7: I use this stand-alone (no LAN) computer at home exclusively to browse the internet, nothing else!.. I have another computer I use for development and testing ...
2
votes
0answers
983 views

John the ripper - not showing cracked passwords

I am using jtr to perform an audit on our admin passwords. It's cracked a few which showed on the screen, however when I try and get them to show again with the --show command, it says it hasn't done ...
2
votes
0answers
30 views

How does an Update Server verify that the request sent was the intended application?

If you have an update service that's running on a server listening for connections on some random port, how could one verify that any requests coming into that port are from the specific application ...
2
votes
0answers
77 views

Commandline to set perms on SQL's backup folder

I'm trying to get my webhost to grant me permissions to the daily backup folder used by sql server. I'd like to use FTP to access all files in that folder. i'd like to give the host a nice easy ...
1
vote
0answers
16 views

Linux : Looking for a distribution or configuration to turn debian/Ubuntu to access only Firefox without accessing data on disk or OS

We have to give a laptop to some people and what we are looking for is that the OS should be secure like bootloader disabled, home-folder encrypted, TTY's disabled and when the OS is active, no access ...
1
vote
0answers
41 views

Portable method for encrypting a usb partition that works on Windows and Linux

I am looking for a good (and secure) way to encrypt a single partition of a USB-drive that will work for both, Windows and Linux systems. At the moment I have a 64GB USB 3.0 that is split up into 3 ...
1
vote
0answers
43 views

Excel 2010 Password Protected Book Accepts More Than One Password

I use Excel 2010 64 bit (14.0.6023.1000) A workbook that is being protected by password "flu" and be unprotected by password "flu" OR " ab". Why is that? First of all, I thought beginning with Excel ...
1
vote
0answers
21 views

Is it secure to keep Guest account enabled in Windows 8.1 or 10?

I enabled guest account on Windows 8.1, because I wanted to create a network share with access for everyone without a password. The question is: Is this secure? Does enabling the guest account allow ...
1
vote
0answers
18 views

OS X Gatekeeper bypassed when application is owned by root

I understood that the purpose of OS X Gatekeeper was to block software without proper code signing. However, changing applications to be owned by root overrides this behavior. Enable Gatekeeper and ...
1
vote
0answers
73 views

How do you disable AUTH in sendmail?

I'd like to entirely disable AUTH on my home server's sendmail on Fedora 21, mostly because the constant fail2ban Emails are annoying, coming from constant CRAM-MD5 brute force attempts to get my ...
1
vote
0answers
7 views

Using and Verifying DNSSEC with DNS server

On a machine running Windows that is configured to use a DNS server that supports DNSSEC, what is the easiest way to verify DNS SEC is infact being used?
1
vote
0answers
84 views

samba setup for simple NAS - is it as secure as it could be?

I'm setting up a music server for my family. It is actually working, which is why I'm on (was on code review, bounced off as not really code) here. I'm not happy that I understand enough about how ...
1
vote
0answers
78 views

Medusa returns Segmentation fault or gives up on 1st try

For my thesis, which is about the use of software for computer forensics, I want to use Medusa to attack a server of my own, just to sniff the packets to see the data for port 80 (and therefore prove ...
1
vote
0answers
74 views

fail2ban ban multiply recidive hosts

We are using fail2ban on our web-facing servers to block IP addresses that repeatedly fail to authenticate properly. Our normal bantime hereby is one hour; IPs that have already been banned multiple ...
1
vote
0answers
59 views

Any risk of hosting a public website on my home network? Year 2015

I have read the following post but it was already 6 years ago so I'm wondering if anything has changed over the last few years in terms of security because I heard windows firewall has been improved ...
1
vote
0answers
10 views

Unlocking external disks upon login

AFAIk, FileVault 2 on OS X automatically unlocks/decrypts the startup disk on login. Could external disks/partitions be unlocked on login? If not FV2, are there other ways, e.g., scripts? Scripts ...
1
vote
0answers
140 views

How do I script the creation of Disposable Virtual Machines with vmware workstation?

I am Making a disposable (use for one task/website then delete) Virtual Machine (VM) it's a slow process to do it in VMware workstation. I want to automate it so it is like the quick ~5 second DispVM ...
1
vote
0answers
31 views

OpenSSL listen and decrypt automatically

I want to design an application to connect my server using OpenSSL and send encrypted data (encrypted with server public key) to specified port on server like 4433. All client using server public key ...
1
vote
0answers
104 views

PuTTY 0.64 to OpenSSH 6.2 Connection Failure

I am having a problem connecting a PuTTY 0.64 client to an OpenSSH 6.2 server. The only two clues I have are the following, from the session log: We believe remote version has SSH-2 channel request ...
1
vote
0answers
52 views

Route only HTTPS Connections through TOR

I want to create an tor router on my network using an extra computer I have (2011 Mac Mini). Since the exit node can read/modify traffic that is not end-to-end encrypted, I would only like to route ...