Tag Info

New answers tagged

0

Darth Android's answer is correct. But to answer your last question, you can compress encrypted files without compromising security. Compression is a form of encryption, so a compressed encrypted file is technically more secure. However, it is inefficient - which is probably why MS doesnt allow it.


0

NTFS file compression and file encryption are mutually exclusive because of the way NTFS compression is performed. You can use only one of these options at a time on a file. http://support2.microsoft.com/default.aspx?scid=kb;en-us;Q223093 I'm guessing more specific details are not public.


0

You can encrypt a compressed file but compressing an encrypted file should be useless. I'm going to give you an insanely oversimplified version but you should be able to get the idea. I have the text: Griffin is the coolest ever. Griffin is the coolest ever. Griffin is the coolest ever. Griffin is the coolest ever. Griffin is the coolest ever. ...


3

Technically, you can run data both through an encryption operation and through a compression operation; however, this will usually not result in actually smaller data, which is probably why Microsoft designed NTFS to make the mutually exclusive and Windows blocks you from doing both (this is speculation, only Microsoft can really answer why they designed the ...


1

If you genuinely think you've been hacked - disconnect your internet connection, call the police, turn off your PC and leave it alone - they'll need it for evidence. if you choose not to involve the police, still disconnect your internet (while you rebuild) and factory restore or reformat your machine. It is impossible to make a computer boot from a remote ...


1

You can combine download process and check the signature in one piped process like this: wget -qO- http://someaddress/filename.gpg|gpg >filename


0

There's a nice tutorial for setting up your own certificate authority at datacenteroverlords.com. The process for creating your own certificate authority is pretty straight forward: Create a private key Self-sign Install root CA on your various workstations Once you do that, every device that you manage via HTTPS just needs to have ...


37

It is unsafe, because cURL defaults to basic authentication where HTTP protocol sends your password in clear text. When you specify the username:password string, it gets converted to a BASE64 string in the HTTP header: GET / HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 Accept: text/html Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ= Anyone able to ...


20

It is not secure. Command line parameters are visible to all users.


1

Apologies for posting a mere suggestion as an answer - I do not have enough reputation, yet to comment. Could it be that - for whatever reason - your Mac boots into a different keyboard layout that does not match the physical keyboard and at least one of the characters in your password is affected by that? Maybe logging into the temp account resets the ...


0

Problem resolved, thanks to a fellow co-worker of mine. Here's what I had to do: chown the /home/andrew/.ssh directory for andrew chmod the /home/andrew/.ssh directory to be the following: drwx------ 2 andrew root 4.0K May 21 18:03 .ssh chmod the /home/andrew/.ssh/authorized_keys file in the /home/andrew/.ssh directory to the following: -rw-r--r-- 1 ...


-2

Try using pushd command to refer to the directory path in remote machine. For example, if your remote machine having the exe to be executed is called abc-pc and the folder containing the file is shared with name my-share, then in the cmd prompt of your machine you can type c:>pushd \\abc-pc\my-share R:\ By using above method windows creates a ...


-1

Keep in mind the default permissions enforced by sshd with StrictMode. See the second answer in this post for a more detailed explanation.


2

Looks like your authorized_keys file is invalid. You did the cat command while connecting to the server as root, therefore the file will be owned by the root account and not andrew. You need to chown andrew /home/andrew/.ssh/authorized_keys Also for future reference, you'd be better off including (and looking at) the SSHD log output from the server with ...


2

You can Software Restriction Policies: https://technet.microsoft.com/en-us/library/bb457006.aspx How ever, nothing prevents user from renaming file. You may also try AppLocker (https://technet.microsoft.com/en-us/library/ee424371(v=ws.10).aspx) which is more powerful than SRP, but renaming is still possible.


0

Although Karan's comment to your post about removing HKCR\.scr will work, it is easy to bypass. All one would have to do is rename mystify.scr to mystify.exe and it will run. FYI, Windows screensavers are really just .exe executable files. The only real way to stop executables (like .exe) from running, is to disable the Read & Execute permission from ...


2

fn_layer8" src="http://223.224.131.144:80/l8/Layer8Servlet Layer8 press release Layer8 creates new operator-owned advertising real-estate for more revenue-generating opportunities [...] Flash Networks [...] is proud to count among its customers top-tier mobile carriers including Bharti Airte [...] So what you have is an ISP injecting ...


0

I think you might have a malware infection (as uncommon as that is on Linux). I would scan with an anti-malware/anti-virus program. The Ubuntu documentation has information about Anti-Virus software in Ubuntu.


3

No it is not transferable. The EULA states the following: "Bitdefender hereby grants you and only you the following non-exclusive, limited, non assignable, non-transferable, non-sublicensable and royalty-bearing license to use Bitdefender Product." also: "GRANT OF LICENSE. Bitdefender Product is protected by copyright laws and international ...


1

While it is certainly possible to retrieve the unencrypted memory from a laptop that has been in sleep, it isn't trivial. So unless you are worried about nation-state level attacks, you can be pretty certain your data is safe from an attack when you are not present. That statement is, however, dependent on you having a strong pass-phrase and also that you ...


0

The best that I could find is this: https://support.microsoft.com/en-us/kb/2001849 From the article: Note: It is necessary to edit the registry directly because there is no user interface on Windows client SKUs to configure a server certificate.


0

Thanks to Daniel and Julian for their helpful comment. You have put me on the path to having a clearer understanding as to what these messages are and their implications. Thanks both.


0

I fixed this on a Chromebook by uninstalling and reinstalling Secure Shell... It worked like a charm.


2

After almost an entire day of experiments and investigation, I think I might have identified the nature of this strange behaviour. The biggest clue (and originally, the most concerning discovery, for obvious reasons) was the relation of the activity of those random devices, with almost 100% certainty, to browser being open. That's right: the Bluetooth ...


0

For me, this seems to be the directory entry on a FAT filesystem, not the actual contents of the file. Just defragment the drive to get rid of deleted file entries from directories.


0

I've found an answer: Just in the .plist get rid of: <key>KeepAlive</key> <true/> And now it's gonna kill all instances of the job when using launchctl unload


1

You will be able to see the events in the Event Viewer why your account is being locked out. It is Event ID 644. Make sure that your Security Audit is set to Success/Failure though to see these errors inside the DC's event log. Additional, Event ID 529 which is a failed logon attempt should list everywhere that has the wrong credentials saved.


1

Keep in mind that as I use Kaspersky AV, Google is verified by my AV certificate. I have used 3 sites as examples. Google, Live.com and PayPal To manually double-check a site certificate is to do this: Google: Live.com PayPal Always hit More Information to verify that the certificate hasn't been spoofed.


4

You can start Chromium with the --no-displaying-insecure-content command-line option. Visit SSL Labs with and without this switch, and check the last result on the page "Mixed Content Handling", especially the Images result, which should change. To persist this in configuration in preferences, locate your Preferences JSON file, ...


0

ssh-keygen -f "/root/.ssh/known_hosts" -R 192.168.1.123 This should replace the existing keys under known_hosts.old and create a new one. This solution worked for me in the same scenario


3

If you encrypt the file or files that you don't want anyone else to access, then those files can only be opened from your account. Admins would only be able to see metadata about the files, like the filename, created, modified dates, etc. You want to be VERY careful that you don't lose your username/password combination or you'll never be able to open the ...


3

Your device uses NTFS - The Encrypting File System (EFS) is a component of NTFS and may allow you to encrypt your files. It's not something I've looked into much or even played with, but you may want to read about it. Otherwise users should NOT have admin access - if she gets infected with an encrypting virus, she could easily infect your files and key ...


7

Administrators are just that, they administer the computer, above regular users. The correct way would be to make the two "Limited" users - One for you, one for her. Create a third Administrative user that is used just for installing programs and doing system wide changes. You can even configure Windows 8 Pro to allow regular users to install Windows ...


0

Easiest way would likely be to write up a bash or perl /python script that does that in the background: (something like this) /usr/bin/bash /usr/bin/dialog --yesno "Agree = 'OK' Disagree = 'Cancel' Agree = 'OK' Disagree = 'Cancel'" if ( test 1 -eq $? ); then sleep 10 exit 1 fi exit 0 fi


0

Changing the user agent will not have any impact on performance or security. I wonder why doing so changes the behavior of the client anyway. It is possible that, apart from sending the user agent in the HTTP request, IE tries to behave differently when executing JavaScript or parsing HTML (i.e. maybe after you have changed the user agent it wont get in the ...


0

When you change the user-agent in a browser, changes the way web servers recognize you, not the way the browser works.


0

As @BigChris said, The VPN should be OK once the tunnel is up, but only if the host servers are actually secure, and haven't got malware or bugs in the OS. Rule of thumb: if you think a hotspot is insecure, it probably is. If you have mobile data available, use the hotspot function on your phone to create a temporary connection, connect to the VPN, then, ...


0

Essentially you can do this but as stated earlier: you will require a host machine. In other words: you must create a connection between your Raspberry Pi and some host system. Then you will need to have your Raspberry Pi tunnel all its internet traffic through the host system. This article will provide you with a step-by-step guide on how to set up a Linux ...


0

In order for your internet traffic to appear to come from another IP address, you will need to have another IP address to come from. As you surmised, a VPN service provides this. Your internet traffic is tunnelled over a VPN to a third party, then goes to the internet from that third party. And the traffic between you and the third party is encrypted. ...


0

XSS would affect users to your site, not your site. That being said, since you're one of the users of your own site, it's possible your laptop or workstation or whatever was infiltrated and from it, passwords, cookies, token, etc stolen and then the attacker turned around and pwned your server. But there's probably another explanation.


4

The purpose of HTTP Strict Transport Security, which is described in detail in RFC 6797, is to ensure that requests are sent securely as determined by the respective site's policy. It is not a security protocol in and of itself; it simply instructs the web browser to force the use of secure transport (HTTPS) rather than insecure transport (HTTP) for a ...


0

I have created a work-around "fix" for this issue using a Greasemonkey userscript (in Firefox). You can now have bookmarklets on all CSP and https:// sites, plus have your bookmarklets in a nice, easily-editable library file instead of being individually squished into a bookmark. See: ...


0

You can change the ownership to your folder to your only (remove all other users). But trick only prevents others administrators until they retain ownership. If they don't know how to change ownership, you are safe.


0

If you want to protect files from other admins or restrict them to spesific group, you want to use ACL's. But All administrators can take ownership of files. In domain or local security policy, change take ownership of files permission to spesific group and their members. Second method is smoother but dangerous.. If you use EFS, nobody can steal, view, ...


0

Here is a method using M2Crypto and python: f = open(CERT_FILE) cert_buffer = f.read() f.close() from M2Crypto import RSA, X509 cert = X509.load_cert_string(cert_<wbr>buffer, X509.FORMAT_PEM) pub_key = cert.get_pubkey() rsa_key = pub_key.get_rsa() cipher = rsa_key.public_encrypt('<wbr>plaintext', RSA.pkcs1_padding) print cipher ReadRSA = ...


2

Yes, as you suggested, you could send them a string of bytes ( in this context we might call it a challenge text) and have them encrypt it with their server's SSL/TLS private key and send back the ciphertext, then you can verify it by decrypting it with the public key from their SSL/TLS server cert. Or you could generate a string of bytes, encrypt it with ...


0

You can have them send you an email from that domain, or do a whois (CLI or use https://www.whois.net/) and see if their contact is listed, or you can have them upload a verification page to their site. url/yeaIownthis.html with some password on it or something.


2

Turn on bitlocker. It is Microsoft native encryption tool. http://www.pcworld.com/article/2308725/a-beginners-guide-to-bitlocker-windows-built-in-encryption-tool.html Create a non admin account for them to use a give them access to that account.


0

What made this issue particualy difficult to diagnose is that this wasn't reproducible under Default Web Site. When I placed the same application under C:\inetpub\wwwroot\subfoldeer\phpapplication under DefaultAppPool identity. It was very easy for me to simply add Full Control to C:\inetpub\wwwroot\subfolder\phpapplication\data for DefaultAppPool and it ...


0

Yes it's possible. All the MS Office products have a feature that allow you to insert screenshots, screen clippings, etc. directly from within the application. It would be a shared library function. That said, it's not unreasonable to think that malware might be exploiting this function, but I'm sure there are better ways to go about it. ...



Top 50 recent answers are included