Tag Info

New answers tagged

0

As others mentioned Without physical security, you can't have strong protection. So I don't know of any very strong, robust security measure for your situation I guess the following could give you some protection Change BIOS settings to boot only from the harddisk, so you can't boot from other devices. Make sure to disable network boot, which is ...


0

Yes, it is perfectly acceptable to remove the hard drive before sending it in. I know this to be true for Dell and HP. Ask your manufacturer yourself to be sure. They do not need the hard drive to repair any issues, assuming it is a hardware issue.


1

Opening the laptop and removing hardware will void the warranty in most cases. Big PC sellers state this in their terms. The repair people need to test your system as is, with all the hardware that's included. Encryption is the best way forward. See this answer about data protection: http://superuser.com/a/238837/380115


1

Your only choices are to remove the hard drive or to encrypt the data on it. You'll want to check with the manufacturer and extended warranty people to make sure removing the hard drive will not void any warranties. Many people wind up fixing computers themselves because of this issue.


0

Changing the environment variable SEE_MASK_NOZONECHECKS as mentioned by other answers is the way to go. I will explain here more details. It has advantages because it does not only take away the "downloaded by internet" flag away as the "ICACLS myfiles.* /L /SETINTEGRITYLEVEL MED" command or similar methods, but also work, if files are started from an unsafe ...


0

Am I secure? If its bad, whats better? Microsoft's PPTP is unconditionally insecure. Use an IPSec or IKEv2 VPN with client certificates for the best security posture. Also, use something like ike-scan to verify portions of the configuration. I also question some of the closed source firewall solutions because they do things like hard-coding passwords ...


4

This can be done using Group Policy settings for Control Panel. Open Group Policy Navigate to the Control Panel setting. Windows Server 2008 and above: User Configuration -> Policies -> Administrative Templates - > Control Panel Windows Server 2003: User Configuration -> Administrative Templates - > Control Panel Click on the container called ...


0

I am also looking for an answer. Let's see if I can explain it a better way. If boot an HP or Dell computer, and immediately press F9, to bring up the boot menu, you will see a number of choices: CD-ROM EFI Boot Hard Drive USB - Vendor Model USB vendor model could be Corsair - Voyager 8GB. This has nothing to do with USB ID, numbers, signatures, ...


2

Adding to previous answers & comments... Which do you want, convenience or security? Convenience - just throw out the obvious bits, the ones you can find; let someone else have a rummage through the bits you missed later, at their leisure. Reasonable Security - Boot from another drive. Secure Erase the entire internal HD at the 'most secure' setting ...


1

If you want to sell to a stranger, you can delete all your stuff manually, reset your applications, and write over your free space with the Disk Utility in OX. Zero out isn't that secure compared to other methods. As a middle ground I recommend a factory reset and maybe a zero out or whatever you have time for on the free space when you're done just for ...


1

If you're preparing the Mac for sale, I recommend these steps: Boot off an external drive. Erase your internal hard drive with "zero out data" selected. Do a clean re-install of OS X.


0

First off, if you want to use pfSense properly, your diagram needs to look like this: ISP Cable Modem <--> pfSense Box <--> Linksys Router / AP <--> Windows Clients In this manner, you can use the pfSense box a true firewall/edge router. Here's the answers to your questions: Q1) No. You must connect the ISP Cable Modem to the WAN port on your ...


1

While the laptop might be ultra-low power, you should consider just picking up a refurbished SFF PC like a Core2Duo. Look for something made within the last 5 years as it's more likely to have good "idle" power saving levels. Your firewall will spend a lot of time idle. You can pickup refurb boxes from NewEgg/Amazon for $60-$100, plus a NIC for another ...


0

These rules were confirmed to be redundant by the Snort mailing list in this exchange.


4

Paypal and most other sites with logins utilize a secured connection of their own and, when properly configured, will encrypt all communication between your browser and their server on their own. VPNs are protected tunnels connecting computers. If a computer in the VPN connects to a secured site, the security of the site will run IN ADDITION TO the ...


1

You're right, if your so-called "friends" have physical access to your computer and want to "hack" into it &/or steal your data, nothing short of physically locking it away from them will work. With any other software or BIOS method they could remove the hard drive & "fiddle" with it on another computer, or install a hardware keylogger to discover ...


0

I use something along these lines: set FILE=%TEMP%\tmp echo connect your.host.name> %FILE% (echo 0)>> %FILE% echo yourUserName>> %FILE% echo yourPassWord>> %FILE% "C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpncli.exe" -s < %FILE% (Update: Why the parentheses around echo 0? This should remind you that 1> or ...


3

Yes - in addition to the SSL downgrade type attacks etc mentioned by @Mark, you may want to rethink "The chances of going to a malicious website is nil.". Even if you do not go to a malicious website, Malware is often hidden in adverts for legitimate sites, and you could still be hit while browsing a reputable site (add blockers can help here, but probably ...


2

Yes, you really do need to install security and other updates as quickly as you can. Whilst you have taken some good steps to securing your PC, you are still running applications that themselves may become vulnerable. Browser: security vulnerabilities are often found in browsers MS Office: If you have this installed there are a number of common attack ...


2

You've eliminated the common sources of security holes. The problem is that when the next exploit targeting a less-common source happens (eg. the EMF printer escape vulnerability or the SSL downgrade attacks), you'll get hit by it because you'll be far behind on your updates.


0

I'll mirror TD.512 a little bit - the BIOS passwords are a good idea, however it's very dependent on the features your BIOS supports. I also don't know if pulling the button battery or changing a jumper would wipe that out. For #4-6, this gets a little harder to defend against. There are LiveCDs out there that can change a user password or activate the ...


1

Here are some things you can do: Enter the BIOS/UEFI and set a password Turn Password on boot on if available, turn BIOS level HDD password on Within Windows, use a program such as Predator-USB to secure the PC. To block execution of programs, you can use Faronics Anti-Executable which will effectively disable running anything that you haven't allowed to ...


0

Well, I wasn't in such debacle since windows XP, but I managed quite successfully to do just that back then. It's not a priority now, as im on unlimited mobile internet, but when I was travelling around Europe it was essential to give access to specific programs only. XP is nice for exactly that. Windows 8 not so much. There may be a third-party ...


0

You've been p0wned. It can be extremely difficult to get rid of this. You may download the package rkhunter, update it, rkhunter --update disconnect your pc from the network, run it: rkhunter -c If it reports the presence of a rootkit, your best chance is to re-install the OS. In fact, the presence of a rootkit in general indicates a savvy ...


0

The simplest way is to disconnect the network. If you don't like live tiles, uninstall all of the universal apps that provide them (you will need to complete this using PowerShell as some cannot be uninstalled by hand). OneDrive is optional so remove it. Automatic updates can also be turned off though that may leave you vulnerable to malware unless you are ...


1

There is no such service. There never was, either. The only thing that could cause problems is Windows not having a driver for the storage controller the drive is connected to. With virtually everything being AHCI, it's mostly a non-issue today, though.


0

Are there any applications on your system listening on those ports? Since you mention "PC", I'll assume it is a system running Microsoft Windows. Obtain a command prompt and issue netstat -an | find portnumber, where portnumber is one of the relevant port numbers, commands to determine if your system is listening for connections on those ports. E.g., below ...


1

Source Port 4433 Details 4433 tcp applications Backdoor.Acidoor (2003.02.25) - a backdoor trojan that gives a hacker unauthorized access to your computer. By default, it uses ports 4432 and 4433. The existence of the file Extapp.exe is the sign of a possible infection. Axence nVision also uses this port Versile Object Protocol ...


0

You might want to check for following : Firewall logs : Source IP/MAC address (Logs for given time when you suspect torrent/remote connection) --> what kind of router or firewall you are running : Usually Soho's have logging disabled to reduce CPU usage - I am unsure in your case if router is set to log activities. --> Try going in for static ip on this ...


0

Here is the official word from Microsoft TechNet, The C:\Users folder is shared when any sub folders from C:\Users\<username>\ is shared. The article is stale and mostly unhelpful, but worth knowing to complete the story.


0

I found the solution: was because of a Windows Update Security Package KB3061518, after uninstalled and reboot the pc the website goes now.


0

In firefox, After typing about:config in the url bar and clicking the check box "I'll be careful, I promise, that should display a screen listing preferences. Click on the search line at the upper right and type or paste tls and then pause while the list is filtered. If you scroll down, you should find and be able to find security.tls.version.min, right ...


0

Found possible solution from link: Press Windows + R to display Run command. On the Run command Type Regedit. Browse to: HKEY_LOCAL_MACHINE->SOFTWARE->Microsoft->WindowsNT->CurrentVersion->Winlogon From there Set Value of Legal NoticeText and LegalNoticeCaption to 1. Close The window. Next, go to Run command, By pressing Windows + R Key. ...


1

This is likely because of NAT or PAT or security. The Vigor is a type of security appliance with no WiFi AP functionality. The TPLink is a WiFi AP with some security features. Try and see what IP address your endpoints are getting when using these two different gateways. Log into the Vigor and try and tweak the security config to allow required ...


1

It depends. What's the use for the "small site"? If it's going to be used by other people, I would highly recommend using standard ports. As mentioned in most of the answers, using a nonstandard port requires that the port is specified by the user (e.g. for port 81 -> yoursite.com:81). If you use a standard port, the browser infers the port from the ...


2

I did not want to upload my pdf to a dodgy site and wait in queue, so instead I spend some time googling. I found this free open source utility. I ran it on the file like thist qpdf --decrypt input.pdf output.pdf And the restrictions were removed. Note that the original pdf was not password protected.


0

ExitOnForwardFailure yes is a good adjunct to the other suggestions. If it connects but can't establish the port forwarding it's just as useless to you as if it hadn't connected at all.


0

I do not know the products you are using but you must understand which way the traffic goes (specifically : where it is initiated from). if your Synology connects to your IP camera and gets some data from it then you will be able, with the VLAN and firewalling mentioned in other answers to completely segregate the vulnerable network. In other words, ...


0

Yes they can, but only if the users whose password was changed is a Domain Administrator. Domain Administrators can reset passwords without knowing the original, the user will lose any encrypted settings like saved credentials if you do this, but it does work. Here is the MSDN page explaining the process.


0

It shouldn't be possible as when you go to type in your old password in the 'Change a password' dialog, it will only accept the one that AD has in the system. Unless they used a tool like Password Changer (loads available on Google) in my eyes it shouldn't have been able to change.


0

Setting up a VLAN, as described by Julian Knight, is part of the solution. You might also however add some extra precaution with your firewall. Set up the firewall so that only a MAC address of your cameras can connect from the given position. This command is OS-specific. If you were to run Linux on your gateway, for instance, it would be while ...


0

I think the main problem is likely to be the piggy-backed switches. Without managed switches, you will not likely be able to create a segregated virtual network (a VLAN) without including other devices connected to the large switch. What you should try to achieve is to send all of the insecure devices to a single port on your router and define a VLAN ...


1

What do you think? Is it wiser to generate the keys (SSH, GnuPG, or other) locally and then transfer the private keys over SSH, or am I just being paranoid about the whole thing? This does not really make a difference, at least if the system administrators didn't tamper with the software stack (but why should they, getting hold of the private keys ...


0

Safari starts a process for each tab: the processes are named with the URL you are visiting. To have an overview sort the process hierarchically: you will see that these processes are owned by Safari: For example:


3

Solution : Edit registry to : [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "LegalNoticeText"="Warning this is my message" "LegalNoticeCaption"="My caption" "DisableCAD"=dword:00000001 DisableCAD may not be needed Infos & Debug : Check your different value under : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows ...


0

For me it worked after setting the "Interactive logon: Do not require CTRL+ALT+DEL" group policy to Disabled.


1

A more complex password will help, as the common attacks on WPA are offline dictionary attacks - you may wish to download the common dictionaries to confirm your password isn't in them. If there are a limited number of devices Mac filtering might be appropriate and using a fixed IP address. The other measures would be physical ones; - restrict the signal ...


0

It sounds like your local group policy isn't being applied. Are you attached to a domain that might be overriding it? For testing purposes, I'd recommend setting the keys in the registry directly, as shown in this guide: http://www.techrepublic.com/blog/windows-and-office/adding-messages-to-windows-7s-logon-screen/


0

Since someone else just answered this ... unencrypted VNC is like leaving your front door open, using XP is like locking a flimsy door, and Hamachi, eh, its a lazy man's VPN but not THAT bad. It sounds like you haven't actually locked VNC to the VPN, and it's still openly accessible over the internet. What you need to do if you want passwordless VNC (eugh, ...


0

Here are some steps to improve the configuration: Well, now we need these safety mechanisms to protect XP more than ever. There should be one administrator account per machine, maximum, and this should not be the default “Administrator” account that comes with Windows out of the box – it should an account name only you, the machine owner knows. That way ...



Top 50 recent answers are included