0
votes
0answers
65 views

Netgear WNDR4000 open port 53

Why is port 53 open on the WAN side of the router? And more importantly how do I close it? Port 53 is not one of my forwarded ports. Discovered by doing nmap -pT:1-64 <my-external-IP> -Pn ...
9
votes
3answers
2k views

Windows XP Mode Vulnerabilities as of April 8th, 2014

EDIT I appreciate the answers I've gotten so far, but I might not have worded the question clearly enough. Is the Windows 7 side of the machine running in XP Mode exposed to any dangers it would ...
3
votes
4answers
171 views

How risky is it too offset Windows Update for a few days?

After Patch Tuesday, zero days become public vulnerabilities and can be taken advantage of by the crowd. Therefore it becomes doubly important to patch immediately and the obnoxious automatic Windows ...
2
votes
2answers
113 views

A possible case of hacked email account. What kind of an attack is this? [closed]

I own a Yahoo mail account. I am using this account for sending resumes and receive notifications from various job portals. But yesterday, I found that some 10-15 mails had been sent to random ...
0
votes
2answers
84 views

What is the least dangerous Java version? [closed]

(other than "none") My organization uses a necessary Java-based web app that will not be replaced in the near future, which runs on Java 1.4 and up. Should our (mostly Windows) users have Java 1.6, ...
1
vote
1answer
44 views

Is there a single site/org for responsible reporting of F/OSS application security vulnerabilities? [closed]

I believe I have found some security vulnerabilities in a popular open-source desktop application, and have contacted one of the application's project organisers via their website. I got in touch ...
0
votes
1answer
78 views

Vulnerability scanner for Windows?

Are there good (and preferrably free) vulnerability scanners for Windows? Please don't suggest update checkers - I know about Secunia PSI, FileHippo and CNET checker. Secunia PSI 1.5 used to do ...
3
votes
2answers
3k views

How does Kerberos' preauthentication increase security?

This FAQ entry (and the RFC itself) states that pre-authentication addresses a weakness in initial implementations of Kerberos that made it vulnerable to offline dictionary attacks. The FAQ state: ...
33
votes
10answers
1k views

Password Cracking Windows Accounts

At work we have laptops with encrypted harddrives. Most developers here (on occasion I have been guilty of it too) leave their laptops in hibernate mode when they take them home at night. Obviously, ...