Questions tagged [security]
The protection of computer systems and information from threats such as theft or data destruction.
0
votes
1answer
12 views
Google Chrome shows https:// page as insecure, but when in incognito mode shows it as secure
I'm using the latest stable version of Chrome, version 70.0.3538.110 (Official Build) (64-bit).
When I open some websites via https:// , Chrome does not show a lock in the address line, and on the ...
0
votes
1answer
13 views
Network drive connection failed. Which app/service to unlock in my firewall?
I installed TinyWall firewall and now Windows 10 cannot reconnect the network drives. Which service is responsible for this?
-2
votes
0answers
29 views
how can I know that my husband/boyfriend has not installed any app or services to monitor my phone, laptop and my internet activities? [duplicate]
I have doubt that my boyfriend/husband/my in-laws has installed some services or app in my laptop, computer, phone and keep tracking me.
is it possible to find this out. ?
or do i need to format ...
0
votes
0answers
10 views
Could we possibly access resources on a server protected by security tokens? [on hold]
I am thinking of archiving some resources in a web Flash game. Instead of traversing throughout the game to have them downloaded according to game client's requests, I wonder if I could traverse by ...
0
votes
0answers
39 views
I have reason to believe I've found a virus transmitted by a widely-used application. How do I professionally assess & properly publicize the issue? [on hold]
My new laptop was inflicted with a virus in relatively quarantined conditions. I say “quarantined” because I believe the circumstances surrounding its infection warrant the projection of a very ...
0
votes
2answers
131 views
I found an attempted attack - what do I do?
I was looking at some Apache logs and came across what appears to be an attack
core:error] [pid 20356] (36)File name too long: [client xxx.xxx.xxx.xxx:56856] AH00036: access to
/${(#dm=@ognl....
-1
votes
1answer
35 views
Can Firefox script steal my files?
I use Xubuntu 18.04 and the way I use Firefox is this: I downloaded and unpacked Firefox in my home directory; then I "chmod a-w firefox" so that nothing in that directory can be modified.
Yesterday ...
0
votes
0answers
19 views
Confining untrustworthy apps in Windows 10 without VM or closed source third party software [on hold]
I want to install some software that might be untrustworthy (like flashers and utilities for no-name chinese phones that were published on a nameless website), but I don't want to risk my data or ...
0
votes
1answer
26 views
How can I audit su access through pam.d in RHEL 7
I am a system auditor with very limited knowledge of Linux OS. I am currently auditing a RHEL 7 server and found out that a group of users are authenticating through LDAP and using 'su' through PAM. I'...
-1
votes
0answers
16 views
How to always deny user account control dialogue from certain application on Windows 10? [closed]
Looks like the compatibility tool kit only allow you to approve the permission, I want to deny it.
1
vote
0answers
16 views
Unable to connect to vsftpd instance managed by xinetd on Centos 7
I am attempting to run an instance of vsftpd and have additional access controls and logging performed by xinetd.
On the VM running both services, I can successfully initiate a ftp connection and ...
0
votes
3answers
94 views
What is the consequence/disadvantages of continuing to use Windows 7 and not upgrade to Windows 10? [closed]
Some have recommended me to stay in the latest version of the operating system, but I personally believe that everyone likes this while they continue to receive security updates. Windows 7 will ...
1
vote
1answer
70 views
SEToolkit Not Cloning Login Page
I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
1
vote
1answer
68 views
Is there a reason cipher /w fills up temporary files instead of writing to the raw disk?
The Windows command cipher /w can be used to securely wipe a hard drive's free space without the use of third-party tools or GUIs:
cipher works by creating a folder called EFSTMPWP on the root of the ...
7
votes
1answer
120 views
How to wipe free space in Windows natively
Due to the nature of how filesystems like NTFS work, files that are deleted "permanently" from within Windows aren't immediately deleted - they're simply marked as deleted from the Master File Table (...
1
vote
1answer
27 views
Setting up personal notebook for BYOD [closed]
Like most of the employee, I have a company issued notebook which can let me do most of the normal work (e.g. send/receive email, browse the web...).
However, much of my responsibility is involving ...
0
votes
2answers
33 views
Sharing Mac but making sure the data can only be read
I am required to find a way to share my entire Mac with a potential buyer, since there is a lot of code involved that we want to guard I need to find a way to share my Mac with them without them being ...
0
votes
1answer
19 views
Arent reparse points a massive security risk?
As far as i understand it, reparse points can be added to any file (not talking about symbolic links, but adding them to the ADS of existing files)
Wouldnt it then be possible to create an image.jpg ...
0
votes
2answers
52 views
Why is . in the path by default?
Many says for security reasons the current directory is not in the $PATH variable and Linux does not look in the current directory to see whether a specific command is available from that directory. ...
0
votes
0answers
24 views
How to handle random attacks on my home router/services
It seems that I am being constantly targeted by foreign entities for various attacks. Unfortunately, it doesn't seem like my router, netgear r7800, has any "auto-ban" functionality to mitigate these ...
2
votes
1answer
65 views
Linux User and Group permissions strategies for DIY Family NAS
I am quite new to linux, but I've managed to build my own DIY NAS (Odroid CS2, Ubuntu 18.04), set up Samba, SSH etc. and I am now at the stage of access and folder management.
I do understand what ...
0
votes
0answers
20 views
TCPView Chaos due to Google Chrome
Since using Chrome with TCPView I've noticed the browser opens many, many processes each of which only sends a small amount of data before closing.
This spams the out put window with connections on ...
-3
votes
1answer
41 views
Is a laptop with Bitlocker rendered useless for a thief? [closed]
I have had 2 laptops stolen and it really pisses me off. I work too hard for my money for some thieving A-hole to enjoy the spoils off it while depriving me of what I rightfully owned. So, I am trying ...
6
votes
1answer
151 views
Security considerations for buying a used OSX machine?
Im looking at a used OSX machine, but have concerns over security of a used machine. The machine in question is a 2012 Macbook Pro laptop, with a removable HD and Ram and battery, this is one of the ...
-1
votes
0answers
11 views
Does Chrome link prefetching option (prediction service) prefetch all links on the page?
Chrome offers a "prediction service" for faster page loading. It might load some links on a page before you even click on them:
Use a prediction service to load pages more quickly: Browsers use an
...
1
vote
0answers
18 views
Tightly Couple SSH keys with a single Machine
I do have a ssh private key in my dev machine through which I can ssh into my production server. One security problem is that I can copy this ssh private key to any personal machine or say some ...
0
votes
0answers
44 views
How to make sure the client supports tls version only >= 1.2?
Here is the the client hello message packet intercepted from the client side. It supports TLS version from 1.0 to 1.2.
How to configure it correctly in client side to support TLS version >= 1.2 so ...
0
votes
0answers
21 views
The red recording icon remained on in a tab while using Lyrebird. Is this a bug?
Lyrebird uses small snippets of your voice to supposedly recreate your voice digitally (not very well, I might add). I recorded some snippets of my voice and then walked away, leaving the tab open. I ...
1
vote
0answers
38 views
PAM SSH authentication pam_exec
I am trying to bypass SSH password authentication if some shell script return success code (0).
this is my configuration. Please help to fix this if possible or suggest me if need change solution
...
0
votes
0answers
30 views
Search KeePassXC for password?
I got a weird spam/ransom email claiming that I've been compromised by the leak of a password that I definitely recognize as one that I have used (it is an 8 character random string, so they didn't ...
0
votes
0answers
14 views
SuSE pam.d Configuration to Monitoring With SCOM
I want to monitor a SuSE server by SCOM. The server has a SCOM user and SCOM server knows the username and password.
But the SCOM tries to login with that user and Failures count on pam_tally2 always ...
0
votes
0answers
13 views
Allow JavaScript from certain secondary domains based on primary domain
Really what I want to do is, for example, be able to trust scripts from *.cloudfront.net only when loaded from *.amazon.com or *.atlassian.net. These services seem to run through storage buckets like ...
0
votes
2answers
33 views
How to find out what application has been running
I just saw a new application appear briefly on taskbar and disappear immediately, without any input from me. How do I find what it was? What logs should I look at?
1
vote
2answers
146 views
Why produce a shared session key before authentication in SSH?
I wanted to understand how SSH exactly works and I stumbled upon this article: https://www.digitalocean.com/community/tutorials/understanding-the-ssh-encryption-and-connection-process
The author ...
0
votes
3answers
98 views
Secure my network by subnetting?
So I play around with home servers a good bit (mostly for learning purposes). The problem is that I do all of this on my home network, While I tend to never open ports on my router and keep everything ...
0
votes
1answer
37 views
Security, recovery etc of Letsencrypt certificates
I'm looking for a description how to property secure, backup, restore etc Letsencrypt certificates, and how to recover if a server containing such certificates was hacked. Does such a description ...
-4
votes
3answers
94 views
Why is Secure Boot needed if there is already UEFI lock?
As far as I know, enabled Secure Boot feature in UEFI stores signed keys in NVRAM for OSs' kernel images to check it's corruptness on boot level. But nothing prevents me to boot the Setup Menu and ...
0
votes
2answers
52 views
Are programs like Symless Synergy and ShareMouse secure?
I have a real need for this type of program, but I am wondering if it is secure when sending commands between the 2 systems? Symless charges $10 extra ($39 for Pro, instead of $29 for standard) for ...
0
votes
0answers
26 views
TightVNC: How to list all connected users
I'm using TightVNC (Version 2.8.5) to connect to machines.
While using it the clipboard between my Computer and the remote Computer is transfered in both directions. I need that function, so it's ok ...
0
votes
0answers
172 views
Know security mode of a Bluetooth Device
I want to allow only "secure" Bluetooth devices to be used on Windows 10.
Everyone talks about the Security Mode of Bluetooth but I did not find how we can check the Bluetooth Mode of a device or ...
27
votes
5answers
12k views
Can a malicious website access the contents of files on a computer?
This might be paranoid, but if I go to a malicious website, can they tell what is inside a PDF on my desktop or what is inside my images on my hard drive?
I have a Chromebook and a Windows machine.
0
votes
1answer
20 views
Azure security status: security KB Deployment status and Detailed status
I tried to find the definitions and ended up here:
https://docs.microsoft.com/en-us/windows/deployment/update/update-compliance-security-update-status
but I'm unable to find a list of terminology.
...
0
votes
1answer
104 views
The Kaspersky Internet Security safelink indicator/URL Advisor icon is missing?
I'm using Kaspersky Internet Security 2018. When I google something, I usually rely on Kaspersky Internet Security safelink indicator to prevent clicking the virus link.
But recently when I google, ...
0
votes
0answers
6 views
Suricata Oinkcode rule modification
I have an IDS network at work and I have setup in suricata variables file (vars.yaml):
$HOME_NET network: internal server and workstation subnets
$EXTERNAL_NET network: everything not defined as $...
0
votes
1answer
54 views
How to get the list of keys pressed in say an hour in the past
How to get the list of keys pressed in say an hour in the past. I have a Debian 9 Stretch.
Not sure. I googled a bit. All results are about programming. I don't think that is needed. There was be ...
1
vote
1answer
83 views
Is it possible to fake 'received' field in the e-mail?
I've received some strange e-mail recently. The e-mail has different From and Reply-To fields. It has also To set to Undisclosed recipients but it's not crucial.
At first I thought it's fake, but ...
0
votes
0answers
11 views
Improve Linux Security by using specific groups for database and server
To improve security I want to create 2 groups, as following:
database_group
can start,restart,stop the Postgresql server
can modify the Postgresql configuration files from /etc
can't uninstall, ...
2
votes
2answers
68 views
Are WiFi adapters secure? [closed]
I know old and outdated routers are security risks, but what about old WiFi adapaters? Can using an old WiFi adapter pose a security risk?
1
vote
1answer
24 views
How to verify sks-keyservers HKPS certificate?
I’m trying to make sense of how PGP is supposed to be used securely, but coherent and helpful information on the subject is surprisingly hard to find.
So, SKS keyservers provide their HKPS ...
0
votes
0answers
29 views
Disable secure boot when confirmation code unreadable
I want to disable Secure boot, but my screen is broken and I'm not able to see the first number of BIOS confirmation.
The screenshot is from a YouTube video, which is a tutorial of how to disable ...
