Tag Info

New answers tagged

1

If you really want just a minimal level of protection (i.e. you don't care that the data is still there and accessible in plain text for anyone that knows how to look for it), then you could repartition your drive to hide/expose the "secret" data. For example, create 2 partitions with known start/end blocks (or cylinders). Keep track of the starting/ending ...


0

This is the typical Adobe bloat-ware garbage similar to the Google Chrome install everyone misses and don't understand where Chrome came from and why it's now the default browser. Anyway, when I ran that installer it gave me the same window. When I unselected the "Include Norton Security Scan" check box, the button switched to Next. Once clicked it finished ...


0

I would suggest the following: Go to http://www.ninite.com and download an installer from there with only Shockwave. Run the installer. You should be able to install that, as it will bypass any annoying popup and just install Shockwave. I am assuming you're on a Windows machine, as this will not work on more exotic OS's. Hope this helps!


1

Besides adding them to the local store at 'Trusted Publishers' and 'Trusted Root Certification Authorities', you have to edit the Group Policy, either locally or on the domain level to allow trusting. For SCUP/WSUS updates using a code signing cert I used a GPO to "Allow signed updates from an intranet Microsoft update service location" under ...


0

There is another easy way Simply touch a "config" file under /root/.ssh and add the parameter StrictHostKeyChecking no Next time when you login to a server, they rsa key will be added to known_hosts and won't ask for "yes" for authenticity confirmation


1

Yes. Secure your keys by using a passphrase. ssh-keygen -p -f ~/.ssh/id_rsa This will add a passphrase to an existing key created without one. You will have to enter the passphrase when you use the key, and this could (or should!) be a different password from your main user account, in case that gets compromised. Also: Encrypt your OS X volume Encrypt ...


1

If AV unable to clean the files mean, mostly it will be spyware or malware. Those can me removed by doing boot scanning. If the system was booted, it will be difficult to access those files, even if we change the permission. Hence I recommend to run boot scan to remove those spyware. There are lot of spyware cleaner are available which can do on boot scan ...


1

Here are some of the ways to retrieve password data in some of the most used web browsers: I'm running Firefox 34.0.5. On this browser, to view your stored passwords, just go to Menu button -> Options -> Security -> Saved Passwords... -> Show Passwords. I'm also running Chrome 39.0.2171.71 m. On this browser, type chrome://settings/passwords in ...


0

I had the same issue with some files in the windows directory, most likely caused by a virus. running sfc /scannow fixed the problem for me


0

speed Often people find it is much faster to (a) download a large file from some untrusted "nearby" content delivery network (CDN), mirror site, torrent peers, etc. and also download the corresponding short checksum file (often SHA256; older software often used MD5) from a few trusted sources. They find it unbearably slow to (b) download the entire large ...


7

Sometimes the checksums are provided securely, but the download is not. Since MD5 is broken, the security MD5 checksums provide are weaker than more secure checksums, but before MD5 was broken, a securely provided MD5 (e.g. one that was signed with PGP or GPG or Gatekeeper, or fetched over HTTPS) that matched the MD5 of the download was strong evidence that ...


0

This is what I use, nmap, and an address using CIDR block notation of the network you want to scan. First you need to install nmap as it may not come pre-installed with you distro. On Ubuntu: sudo apt-get install nmap Next figure out your network address by using ifconfig: ifconfig ifconfig output for the interface I want to scan: wlan1 Link ...


0

I have heard this [MD5 checksum] is to allow [...] also for any malicious changes to be easily detected. Well, you haven't heard totally wrong. Digital signature is actually what's used to detect malicious changes. For some important reasons, hashing is a fundamental part of digital signature, in that only the hash is actually signed, not the entire ...


1

While a folder can indeed have alternate data streams, the message you want won’t appear. You can try this yourself. Create a file with the following contents, named internet.ini or whatever: [ZoneTransfer] ZoneId=3 Then, create a regular file, like a Word document and execute the following command in a Command Prompt: type internet.ini > ...


9

Your assumption is correct. There is an exception though. If the server providing the file and the page where the hash is are not managed by the same entity. In that case the software developer may want to say "hey people download this from that place but only believe if hash = xxxx". (This might be usefull for CDN's as an example). Having this said, this ...


1

Hashes indicate whether your version of the file (the "download") differs from the server's version. They offer no guarantee to the authenticity of the file. Digital signatures (asymmetric encryption + hash function) can be used to verify that the file has not been modified by anyone who does not have the corresponding private key. The file's creator ...


1

You can't modify the MD5 checksum without also modifying the file. If you download the file, then download the hash, and then your computation of the file's has doesn't match what is given, either the hash or the file is wrong or incomplete. If you want to "tie" the file to something external, such as author, machine, etc. it needs to be signed, using a ...


2

How can MD5 checksums provide any protection against deliberately altered files if there is no way of knowing if the checksum itself has been compromised? You are entirely correct. The goal, then, would be to make your "if" wrong — if we know that a secure cryptographic hash of a file isn't compromised, then we know that the file isn't compromised ...


13

The solution used by some package management systems such as dpkg is to sign the hash: use the hash as input to one of the public key signing algorithms. See http://www.pgpi.org/doc/pgpintro/#p12 If you have the public key of the signatory, you can verify the signature, which proves the hash is unmodified. This just leaves you with the problem of getting ...


83

I have heard this is to allow [...] for any malicious changes to be detected also. Well you heard wrong, then. MD5 (or SHA or whatever) checksums are provided (next to downloads links, specifically) only for verifying a correct download. The only thing they aim to guarantee is that you have the same file as the server. Nothing more, nothing less. If the ...


1

How can MD5 checksums provide any protection against deliberately altered files if there is no way of knowing if the checksum has not been compromised either? This is a really good question. In general, your assessment of MD5 manipulation is spot on. But I believe the value of MD5 checksums on downloads is superficial at best. Perhaps after you ...


4

This is the precise reason posted checksums often carry a disclaimer saying "This cannot protect against malicious modification of the file". So, the short answer is "they can't provide any protection whatsoever against a deliberately altered file" (although, if the page is delivered over HTTPS, HTTPS itself protects against modification; if the file isn't ...


4

This is really a problem. Showing checksums on the same site as the file to download is insecure. A person who can change the file can also change the checksum. The checksum should be shown through a complete separated system but this is hardly feasible, because how to tell the user in a safe way where the checksum can be found. A possible solution is the ...


1

The 'right' way to do it is likely to use a tape bulk eraser - You're likely going to want a handheld model for cost reasons, though specialised models for dat probably exist. These seem to be very rare at the moment. Most of the ones I'm finding on the internet are desktop models and insanely expensive. A quick bit of research on google suggests that they ...


1

This question is essentially a bit like the old "how can I protect my virtual assets so noone may copy them?". The short answer: You can't. The big question is: Why would you want super secure encryption? In non-corporate environments, there's typically no reason to, unless you plan to do shady things, and even then it's questionable. If you've got ...


1

Apply the princie of "separation of concerns": let developeds develop (on the D and T environments of a DTAP roadmap) and support employees manage the A and P environments. In general, the support employee adheres to the same privacy policy rules and agreements as a "normal" application user. Setup representative, but dummy data on the D, T and A ...


1

1)What are the steps to reduce the risk of corruption and failures? Truecrypt does not add or take away any risk of corruption or drive failure, other than: If the Truecrypt volume header at the beginning of the disk gets overwritten, the volume is unrecoverable. Do what Truecrypt says and make a recovery disc and store it in a safe place. If you ...


-1

What are the steps to reduce the risk of corruption and failures? Create an image of every sector of your HDD. This way if you have a reason to restore your image you have everything you need in order to do so, even if your using full disk encryption, imaging software does not really care since its already decrypted at that point. Will TrueCrypt ...


1

Your "protection" will diminish as you will be unable to receive updates. You may still be protected from some threats, but newer ones will be able to get in undetected. If you must use this software, you will have to follow their requirements. There are free alternatives which are easy to find on the net.


0

I haven't found the exact cause of the "Anonymous logon" access to my machine. But I saw those random logon from many machines from the same vlan (same sub network). It really sound to be non dangerous and moreover part of the Operating System to discover its neighbors shared resources. We also can prevent that by turning on some policy or I think by ...


1

It should still work without registration. That's their way of getting information for promotions. After the trial period the software will go inactive and no longer function.


0

From Oracle.com » Exception Site List Wildcards are not supported. If only a domain is provided, any RIA from that domain is allowed to run. A domain can have multiple entries, for example, https://www.example.com and http://www.example.com. A port number is required only if the default port is not used. This means you are correct that there is no ...


11

Windows updates will not protect you from software you yourself ran. If you are tricked in to running a malicious program it can unleash its payload. You also state "if I keep myself logged in as a regular user without administrator privileges" but if you get a UAC prompt from a program and type in administrator credentials it does not matter that you ...


1

This question is very opinion based so you are going to get a lot of different responses. If you think that windows defender does a good enough job at defending against viruses? Then yes, You shouldn't have to worry about it. Personally, I have problems with just windows defender. I find that it does not do a good enough job of catching threats before ...


1

Yes, of course. You are right. Every system which is dependant only on a password as input will be strong as the password is. There are multiple possibilities how to make the encryption stronger: Certainly use a good quality password. The strength depends on multiple factors like: how much worth are your data, how much would a possible attacker invest into ...


1

In a word, yes - whenever you use symmetric encryption, it's only as strong as the passphrase you choose, so you need to choose one that is long and difficult to brute force. There's no definitive guideline on exactly how long it needs to be but 20-30 characters is what you should be aiming at if you're looking for maximum security.


0

Here is a fix. Go to the icon that has 3 horizontal lines in the top right corner, right under the X -> go to stting near the bottom -> scroll down and click "show advanced setting" -> under the privacy section, uncheck the 5th box that says "enable fishing and malware protection"


0

If it is running locally, you could try to see the process (process explorer on Windows or ps on Linux). You could also derive it from disk (and cpu) activity patterns. Finally, you could analyse the traffic yourself to see if there is a data stream sending your behaviour to a remote machine. See some suggestions here. If it is running on your network ...


-2

download (usbfix.exe) then connect the usb and all other drivers that has the same problem then open then usbfix then select (research) to see affected file or (clean) to delete affected files. Note meanwhile cleaning u will be asked few questions, read before u do anything. And make sure u turn off your untiviruses then continue by clicking OK then NO.. ...


2

I just microwaved a MicroSD that was defective (could read data, but couldn't write or format anymore) and I was trying to destroy it in a way that you could still read what the card is per SanDisk instructions. I tried 10 seconds, 30 seconds twice, 1 minute, 1 minute 15 seconds, and finally 5 minutes. I could still access all the data that was on there as ...


0

In addition to Frank's answer, if you need to remove the share, go to Control Panel > Folder Options > View tab. Scroll down to the bottom and uncheck "Use Sharing Wizard (Recommended)". Then remove the share on Users folder.


0

I believe that your school computer network is configured with AD. Where the systems added in the AD can connect it and do browsing and data transfer inside the LAN. For adding your machine in the network you have to ask your school system administrator. In some case check whether you have set any static ip in your machine (mostly it wont be). Change the ...


1

I want to advise that the controls are based on MAC address but you state: I also changed my MAC address to the one of my school computer but I have the same problem. Could it be that you are changing the MAC address to a system that already had an IP so the router won’t let you login? Meaning you would have to shut down the other computer before ...


0

Probably, only Mac Addresses that are known are allowed to browse the internet. It's a policy that's used in many, many schools.


2

Try booting Windows in safe mode and see if problem persists there. To boot into safe mode, restart the computer and start tapping [F8] as soon as you see the boot logo. If problem still persists even in safe mode, it's time to backup all your files, format the hard drive and reinstall Windows from scratch. If you can't backup your files because Windows ...


1

Yes and no. It's certainly possible to make a MTA talk SMTP over a nonstandard port – but only if the server on the other end is expecting that. And you'll find that nobody, ever, listens for SMTP on port 80 – so your server would spend most of its time trying to talk with someone's Apache. For server-to-server mail exchange (MX), it's port 25, ...


-2

This may be no longer true. The bits on the platters are encrypted with a random key once generated by the firmware and stored in the controller electronics. So if you exchange the platters or the drive electronics you have no chance to recover the original data (Backup becomes even more important in this case). The user password is simply used to ...


2

This answer is somewhat speculative, due to lack of knowlege of your specific router and it's configuration. The log message may mean that the router logged the packet as being let through it's NAT and/or firewall on the basis that it matches the criteria for a rule related to the RDP protocol. If the target machine were off, the router may still attempt ...


0

In Win7. While accessing Shared Folder with different credential still FAILED and DENIED even using correct USERNAME and appropriate password, make sure your 'Credential Manager' is free from inappropriate cached. Thank you. :)


0

can a hacker access in some way the PHP source of this PHP page? Yes. If yes, how can I prevent this? Well, that requires knowing about how they could access. A hacker could get access to your server by SSH (in case of a virtual private server), or they could steal or brute-force your FTP(S) credentials if you're on a shared hosting plan. Then ...



Top 50 recent answers are included