Tag Info

New answers tagged

0

What made this issue particualy difficult to diagnose is that this wasn't reproducible under Default Web Site. When I placed the same application under C:\inetpub\wwwroot\subfoldeer\phpapplication under DefaultAppPool identity. It was very easy for me to simply add Full Control to C:\inetpub\wwwroot\subfolder\phpapplication\data for DefaultAppPool and it ...


-2

The snake oil jargon is annoying and misleading imo. It is a self signed cert, big deal. It still encrypts traffic. I suppose for someone with no understanding of SSL it might make sense to name an unsigned cert "snake oil" in order to alarm them into getting a clue about SSL (even though they are running their own web server, so maybe not to crazy to just ...


0

Yes it's possible. All the MS Office products have a feature that allow you to insert screenshots, screen clippings, etc. directly from within the application. It would be a shared library function. That said, it's not unreasonable to think that malware might be exploiting this function, but I'm sure there are better ways to go about it. ...


0

The largest allowance I know of from any online AV scanner is 140MB by MetaScan. According to this this about.com article VirusTotal allows 128MB and MetaScan allows 140MB Your only option might be to install AV on your system and scan it locally.


1

This clearly demonstrates a MAC policy where an equivalent DAC could have been bypassed on a base install of CentOS 7. By default (in CentOS at the time of writing) unprivileged, non-system users are logged in as the 'unconfined_u' role. However we can change our system so that our unprivileged user 'alice' is placed into the 'user_u' role instead. The ...


0

Three potential possibilities: Are you securing Google Apps or Gmail?, if so you can phone authentication only as per support. In addition to Google Authenticator you can opt for hardware key based authentication like YubiKey. Switch out Google Authenticator for alternative that will support phone call, SMS and app based authentication like DuoSecurity.


3

To demonstrate SELinux's utility in bug detection for third-party / your own developer's code, here's a memory protection test (modifying the first code example here): #include <fcntl.h> #include <stdio.h> #include <sys/mman.h> int main (void) { // open file read-write, get a memory-mapped pointer with private access, write ...


0

Maybe it is useful to change the default port of your instance Have you seen http://blogs.msdn.com/b/dataaccesstechnologies/archive/2010/03/03/running-sql-server-default-instance-on-a-non-default-or-non-standard-tcp-port-tips-for-making-application-connectivity-work.aspx?


1

Unless you have changed your policies in the Boolean tab of system-config-selinux (or in /etc/selinux/policy), then the default should respond to the following (N.B., you may also want to install setroubleshoot for a deeper dive): mkdir -m 755 -p /install/ks cp /root/anaconda-ks.cfg /install/ks chmod 644 /install/ks/anaconda-ks.cfg Then, ...


0

You should create a script that adds/removes a security group rule, granting access to your current IP. Use a web API to get your current IP address. Something like http://api.ipify.org/?format=json Use the result to call the AWS CLI: http://docs.aws.amazon.com/cli/latest/userguide/cli-ec2-sg.html Something like this should work: aws ec2 ...


3

Yes. If you have administrative rights to the computer, you can access other user's files. Windows does not encrypt user data by default. All you need to do is at the lock screen, hit Switch User and then log in with an account that has administrative privileges. Or if the computer is a member of a domain, you can access them over the network by going to ...


0

This will not be an issue if you have access to Security Groups settings for EC2 panel on the Amazon Web Services console. Whenever logged you can go to the security group bound to your EC2 instance, configure Inbound access and add or change the SSH rules. There is also a convenient dropdown that says "My IP" so it will automatically fill the space with ...


-1

What you want to do would be very close to what MOST hotels do these days namely Hilton. 1) on the router settings page enable guest LAN 2) in the authentication area give the password an expiration period OR use a landing page ( sign in page with a simple ToS and a "click to connect" button. 3) use Any level of router supported encryption ciphers for ...


0

Even with a dynamic IP, it should be possible to select a range that you'll fall within, either by checking over time what IP you get, or by asking your ISP about the specific IP pool. Once that is done, you can set up a default deny, and allow your IP range this way: iptables -A INPUT -s 192.168.0.0/16 -j ACCEPT ...ofcourse substituting the IP values ...


0

Couple options come to mind. 1) Ask your local ISP for a static IP whitelist that IP and use it from the local machine. 2) allow it ONLY from your router's Stated IP Range as your are likely to only used a few from that router connection. For Ex. whitelist 123.456.78.90/21 for ssh. 3) if option 1 or 2 are not possible you COULD use the console gui to ...


2

Your host file can be hacked by replacing the legit IP address with a malicious one. The host file is basically a local DNS, where your machine matches the name of the site you type in into the IP address the computer uses to send you to a website. Google host file for the pathway, or if you have the time (and you should) go here for an enlightening and ...


0

First off, what is a Linux distribution? This is what Wikipedia says: A Linux distribution (often called a distro for short) is an operating system made as a software collection based on the Linux kernel and, often, on a package management system. To put it bluntly, a distro is a Linux kernel plus some software. That's it. The software can be ...


0

If he backed up or downloaded all of your data to his phone you cant do any thing , if its not the case just re-login to your whatsapp on your phone (this also stops him from further accessing your data) .


1

Thanks to @GZBK for pointing me to the wipe package. For future readers in this thread, I want to quote several parts of wipe's man page. Journaling filesystems (such as Ext3 or ReiserFS) are now being used by default by most Linux distributions. No secure deletion program that does filesystem-level calls can sanitize files on such filesystems, ...


4

Shift+Delete just avoids moving the file to the trash, however it does not do any attempt to securely delete the file. To do a secure deletion, you can install the Nautilus Wipe package. For information this is the Nautilus counterpart of the command-line wipe package.


0

Your ISP has a peering agreement with Google. While it IPs are owned by and inside your ISPs network, the servers are Google's. https://peering.google.com/about/ggc.html


0

If you are on a corporate network, this won't work. Corporations have all sorts of automatic logins. I looked at either event 4648 or 4624, and logons are successfully logged even when people are not in the office (and no, no one is sneaking in to log in to PCs). There are thousands of them. I just logged in to the PC one time, and there are 10 activity ...


1

I found the problem. When you add any site or server to 127.1.1.1 that caused the problem. For example: 127.1.1.1 superuser.com


1

Use rdp certificate authentication. @Scott Chamberlain described this http://superuser.com/a/750943/440206: Yes but you will need to install and configure your Remote Desktop Session host to use a Remote Desktop Gateway to do it. Once you are using a Remote Desktop Gateway you can set up Remote Desktop Connection Authorization Policies (RD ...


0

You could look into DirectAccess for secure access to your network: DirectAccess allows remote users to securely access internal network file shares, Web sites, and applications without connecting to a virtual private network (VPN). An internal network is also known as a private network or intranet. DirectAccess establishes bi-directional ...


0

I would suggest, when you know for sure that the AV is wrong, is to disable it while you are doing the work it's complaining about. I only recommend this if you are 100% sure you are doing something right. Once it's disabled, try editing your HOSTS file again. Save it, and close the etc folder, and the HOSTS file, then re-enable your AV. Does it complain ...


0

Did you install mouse whitout borders recently? May it is changing Ctrl+Alt+Del behavior, even after you change status manually. Please let me know if you installed this or similar software.


1

Go to your remote share directory from the machine that its installed on. Right-click on it. Select properties. Open security tab. Click advanced. Click change permissions. If you don't see your name in there, click add; if you do, then double-click on your user. Make sure, if full control and allow are not already checked, that at least the traverse, ...


0

It's the scenario #1 that can be exploited. If you can replace some characters in the firmware and/or in the signature file, and those files are not rejected during a firmware upgrade, then the signature check isn't actually performed and you can be tricked to upload malicious code on your NAS box disguised as firmware upgrade.


0

First of all, firmware should only be uploaded by people trusted with the entire system. Allowing someone to upload firmware is basically the same as allowing them to do whatever with the system, as the firmware can potentially be altered to benefit Robbie Rotten. As for your case, I cannot say for sure because I do not know the specifics of your hardware, ...


1

Not sure, but through firmware It certainly is possible, so only download firmware (and drivers and upgrades for apps that came with your device) from a trustworthy site. That does not mean your PC (or external device) is infected, though. It also depends how the firmware is installed -- if you must execute an application on your PC to install the update, it ...


0

This problem usually occurs after a clean installation, due to SID changes. Taking ownership of those folders/files should grant you full access. Detailed instructions are available in the following Microsoft article page. Take Ownership of a File or Folder


0

The Wikipedia page for TrueCrypt references this link as the final release repository for the last official TrueCrypt release before the project was killed. Note that this link is from Gibson Research Corporation, a private, for-profit security research firm. I am not endorsing GRC's products in any way. The source code for TrueCrypt is freely available, ...


-3

Im afraid its true, TrueCrypt has been cracked according to a number of official sources and is no longer considered a secure means to encrypt emails and such. PGP ( Pretty Good Protection ) used to be one of the better ways to encrypt stuff as it had a key sent first then the message and without both emails then you couldnt decrypt it. If I send anything ...


0

I guess it don't solve your problem, just like me. I could solve with this aproach: http://www.sevenforums.com/tutorials/612-secure-logon-press-ctrl-alt-delete-log.html using OPTION THREE -- Through Local Security Policy. I hope it can help you too.


0

A. If you type "C:" (or any other drive) in the Microsoft Internet Explorer address box you will be shown the contents and if proper NTFS file permissions are not in place users will be able to delete, rename, read any files on the disk. This is usually a problem if you have a locked down environment where users do not normally have access to Explorer etc ...


0

First I thought that was a libmagic bug. I've sent an email to homebrew developers and they fixed versions of suricata and libmagic. But the issue still appeared. So one of them pointed me in right direction: in suricata.yaml the correct path to magic-file should be set up. If the libmagic dependancy was installed from homebrew: magic-file: ...


0

I suppose you can add an init script checking for a particular USB device serial number or even a particular file on the thumb drive (is that what you call dongle?) and halting the system if the required element wasn't found. This page references various config files and scripts used during startup process. Personally I would start by creating an init.d ...


0

The partition on it is not marked as EFS, is it? I had a problem with this recently, using my UEFI bootable usb stick to transfer a file to a win7 laptop.


0

Install UNLOCKER http://www.emptyloop.com/unlocker/ scann the file & delete it with unlocker (lower left corner "No Action")


27

@duDE explains how Ctrl+Alt+Del guarantees the legitimate logon desktop will be displayed and how the guarantee benefits security. I'll try to answer the second part of your question by explaining that the true safety is provided by the concept of a secure desktop, for which the key sequence is just a guarantee of enjoying that security. In Windows there ...


4

One reason is that it was very hard to limit to specific mechanisms. That is, allowing Negotiate means allowing everything that SPNEGO supports, which is usually Kerberos but also possibly NTLM. And while Kerberos is quite secure, letting any website to automatically talk NTLM is downright dangerous as it would send your Windows credentials in easily ...


85

what exactly is secure about it? Exactly secure is the fact that Ctrl+Alt+Del is the only one key sequence that OS never allows to be redirected. No third party application can respond to this key combination to fake logon window and keylog your password for example.


0

Well the thing is you don't keep the password for Group policy. But you can work around it. If you are the admin of the computer and don't want other user to change the setting than just log in on that user account and Run the following code on Command prompt. REG add "HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}" /v ...


0

returns a giant red padlock with a NET::ERR_CERT_DATE_INVALID response TLS (HTTPS) certificates are valid for a specific time, usually for 1-3 years starting with the moment they were issued. The error message is saying that the website's certificate is not valid for the current date according to your computer's clock. When that happens for many ...


-1

I am going to assume 1 of 2 scenarios and the a few solutions that fix both: Scenario 1) You have no option to manually install (from bank enrollment site) See if its possible to manually download it and install VIA Custom Install and uncheck/ disapprove install to undesired browsers. Scenario 2) You use the "Express Install" in which auto assume and ...


0

There are numerous ways this could have been changed. One way to find out more details would be to review the Event Logs and see if you can pinpoint when and by what application this change was made. The symptom can usually be fixed using this Fix It from Microsoft. This Fix It is for Windows XP, Vista and 7. Detailed steps involved in the Fit It above can ...


1

I used to run penetration teams and can say that using default anything, including workgroups is always a security concern. That being said, if you have any “Audit” requirements, you can bet they will flag the default settings.


1

This appears to be a bug in either binwalk or libmagic. Check what version of those packages you have installed. You may need to downgrade them. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754317


0

I just found this thread via a G-SEARCH for "Win 7 disable location." Thank you for the above info. I believe I have resolved much of the privacy issue by installing ZenMate (https://zenmate.com). I just tested my laptop with http://www.ip2location.com ... which displayed that my IP Address was successfully "stealthified" to another location. Here is ...



Top 50 recent answers are included