Questions tagged [security]
The protection of computer systems and information from threats such as theft or data destruction.
0
votes
0answers
9 views
Switching google authenticator app from one phone to another [on hold]
I have a google authenticator on my Iphone 7. I checked how to change the phone, but my iPhone is not listed in my google account somehow. So I can't use the switch phone option. Also I have heard ...
1
vote
0answers
13 views
How can I get Thunderbird to trust a _non_ self-signed certificate for which I don't have the issuing CA?
A contact is trying to establish encrypted and signed communication with me using S/MIME. She has a certificate from her organization, which was issued from a non-public CA. It is not a self-signed ...
1
vote
1answer
50 views
Can I safely delete the /System/Library/Keychains/SystemRootCertificates.keychain?
I'd like to delete: /System/Library/Keychains/SystemRootCertificates.keychain
Is that safe?
22
votes
2answers
4k views
Will I be more secure with my own router behind my ISP's router?
My ISP has been accessing my router, (to fix or update something). The ISP’s router is GigaHub 823G-2 (FTTH conection) and my router is a TP-Link TPTD-W8968. They accidentally changed my SSID and ...
0
votes
0answers
29 views
Safe gaming, banking and development on the same machine
I'm looking for a way to keep a gaming pc and a work pc. Currently i have a quite powerful machine: i7, 32gb ram, 2x420gb ssd internal (and some other external ssd)
Basically the gaming pc will be ...
0
votes
0answers
17 views
Error x509: certificate has expired or is not yet valid when login from Drone CI
I tried to setup Gitea with Drone as the following guides here and here. The key is self signed by this command.
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/apache2/ssl/...
0
votes
0answers
12 views
How can I cache a passphrase for use in a script that uses gpg2 --symmetric with STDIN?
I am working on a computer program that stores and retrieves secrets and needs to run without user interaction on the server.
I have successfully set everything up in my system to use gpg-agent to ...
0
votes
1answer
21 views
Can access default gw, but not rest of subnet
I'm using a somewhat weird setup which (so I would think) allows me to connect to the subnet while spoofing my IP and MAC (in test environment, doing cyber security college ^^). However, the router ...
0
votes
0answers
8 views
Application behavior different when exe launched from a UNC path
I have a custom application that needs to connect to a remote database (MS SQL).
I have a copy of the .EXE and all related .DLLs in a folder on my c: drive. When I run it from there, it connects. ...
0
votes
0answers
17 views
Do Windows Security Updates (KBs) also include patches for vulnerabilities fixed by earlier Security Updates?
I was examined a Windows 7 (x86) machine's installed Security Updates and found that it had Security Updates installed in 2017 (KB3124280) and 2018 (KB4012212).
It then came as a surprise that the ...
0
votes
0answers
31 views
Need help setting up virtual isolated network with 2 VMs
Good afternoon. I've been searching everywhere for about an hour and I can't seem to figure this out. I'm currently in school learning about malware analysis, so I'm wanting to set up a secure way ...
0
votes
0answers
30 views
Should I be concerned? My terminal says that someone's iPhone is connected to my Mac
Recently I've been using a lot of public WiFi and fidgeting with my network settings to use network proxy tools like Burp.
Today I opened my terminal and saw this a foreign device as the user:
...
0
votes
1answer
49 views
fill /dev/random via bitcoin exchange value [closed]
I have written the following random numbers generator. I would like to know how safe this is and if it is suitable for use in computer engineering. For me, the result looks very random, but would like ...
0
votes
0answers
20 views
Transfer a file securely from an industrial HMI
this is a general question that is an extension of the question : Allow only a specific USB device that has not been answered yet.
I have a computer that is part of an industrial machine. It has only ...
-1
votes
0answers
31 views
UWP Apps: Who is the user?
I am trying to understand the information I am seeing about the security token that Windows associates with UWP apps.
(I am using Process Hacker to view this information).
Take Edge as an example.
...
0
votes
0answers
12 views
Is a cpanel username a secret that should not be exposed in a repo?
I've created a super simple deployment solution to pull a static site from a public repo that only I have access to. Per the documentation sent to me by my host Namecheap, cpanel runs a very simple ...
0
votes
2answers
50 views
Removing child block
Something is interfering with my computer which shuts off the internet between certain times. It occurs at the same time each day, and no other computers are affected, so I suspect someone has ...
0
votes
0answers
15 views
security passwords min-length <x>
Dear superuser members,
I have been trying to set a minimum length for passwords stored in routers, switches and ASA simulated in Cisco Packet Tracer 7.2. I have read in many threads that the command ...
0
votes
0answers
14 views
Converting exported private key from Microsoft SQL Server to PEM and back to PVK
I have need to backup the cert and private key for SQL TDE and store that on a KeySecure key management system.
I can do the backup and get the files, and have no issue with converting the ...
0
votes
0answers
28 views
How can I use subjectAltName (SAN) in rsyslog for TLS-TCP authentication?
I am trying to setup Rsyslog for my application with TLS-TCP authentication and gnutls streamDriver. It works properly when the streamDriverPermittedPeers on my client's rsyslog.conf, matches the CN ...
0
votes
0answers
19 views
Whitelisting network access for a specific program in Windows
I'm normally a Linux user, but in a while I'll need to use a Windows 7 system for a bit (not something I look forward to). I am using Tor Browser for anonymity. On Linux, I can use Netfilter to ...
1
vote
0answers
22 views
How to prevent an IP range having access outside the local network (i.e. block internet access) on TP-Link Archer
I have the TP-Link Archer VR900. I have set up interface groups so my wired network has a separate IP range to everything else.
I want to be able to block internet access from clients in this group ...
0
votes
0answers
30 views
NameError: name 'VulnCheck' is not defined
When I try to run the following python script below in order to verify if our environment is vulnerable to CVE-2019-9670, I get the following error message:
Traceback (most recent call last):
File "...
1
vote
0answers
21 views
How To Prevent Apps on macOS from Moving Themselves to the Applications Folder?
Some apps, like "Skype Meetings App" and "Join.me" surrepticiously copy themselves to your applications folder without asking or even so much as a notification.
How can this be prevented?
Isn't ...
0
votes
0answers
23 views
How can i change the sshd_config file to work with a QNAP TS-251+?
So I own a QNAP TS-251+, and QNAP is notorious for rewriting the config files for all their services to the default every time the device restarts. I wanted to change the sshd_config file so that I ...
0
votes
0answers
16 views
How to prevent windows user from modifying Chrome browser extensions
Peace to all, I am setting up security for chrome browser on user PCs.
I enabled a group policy in Chrome to disable uninstalling extensions by users and setup windows permission to deny write to ...
0
votes
0answers
67 views
Kubuntu asking for root access to update proxy
I have Kubuntu 18.10 installed on my PC with the latest KDE/Plasma backports. A dialog popped up last night right after login, requesting administrator privileges to set the system proxy for software ...
0
votes
0answers
22 views
Domain without DNS on allows user all access to secure files
Setup:
2 Domains running on same network
Domain A works great
Domain B with no DNS can be accessed by users with trusted accounts (same name) from Directory A
User from Domain B with no trusted ...
0
votes
1answer
32 views
iptables ignored? Ubuntu SSH Break in Attempts besides Firewall Rules
I noticed that a btmp file appeared in my home directory.
It seems that there were automated break-in attempts on my server.
However, my server has firewall rules (iptables) in place that should ...
0
votes
1answer
60 views
Allow only a specific USB device
I was wondering if there was a way to secure the transfer of data from a computer to another by USB (one that should not be accessed by anything else than this USB drive).
So a way to allow a ...
0
votes
1answer
36 views
How to upload data in ElasticSearch(TLS secured via search Guard) using Excelastic
I have ElasticSearch v6.2.4 installed. It worked perfectly fine but recently because of security reasons I installed Search Guard plugin which provide TLS and authentication features to ElasticSearch ...
0
votes
0answers
14 views
WSO2 IoT Server Mutual Authentication between device and server
Is it possible to enable Mutual SSL Authentication between server and device. As per WSO2 docs, this feature is available but the not the default way. Currently the server is using a one-way ...
1
vote
0answers
87 views
Security folder missing from the registry HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Security
I need to add a DWORD value in
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Security
but the Security folder is missing in the registry. I have Office365.
Could someone please help me?
0
votes
1answer
7 views
ESLint plugin won't flag unsafe methods
I've installed ESLint along with a number of security plugins to attempt some javascript analysis, however when i feed it a small amount of vulnerable javascript, i get no output.
I installed ESLint ...
0
votes
0answers
28 views
Is a reverse proxy good security for a CRM? (Dolibarr)
When running Dolibarr from a docker instance, how, generally, is security handled? Or, what's a good overall approach?
I would think there needs to be an additional layer of login simply to protect ...
0
votes
0answers
50 views
How to re-obtain ssh access to remote server
I was working on my website using Linux Terminal on VirtualBox and was able to secure access to the remote server without password authentication. All I needed to type was "ssh {sudo user}@{IP}". ...
1
vote
1answer
105 views
Checksum Fail – Fedora 29 or spin KDE Plasma
I tried checksum Fedora Workstation 29 and Fedora KDE Plasma but it's always fail. Am I doing something wrong, is the tutorial incomplete or the file in the server is corrupted?
Details:
I use ...
0
votes
1answer
18 views
Java application requiring LD_PRELOAD setting due to signal chaining says LD_PRELOAD is null
I am troubleshooting the failure of a larger java program on a server. However, I have been able to reproduce the problem with a super basic java program that just outputs the environment variable ...
1
vote
2answers
92 views
Facebook Sandbox Browser
How can I make firefox operate as a site-specific browser?
The goal is security through compartmentalization. Specifically, to thwart facebook's attempts to track & store all of my internet ...
-2
votes
1answer
97 views
Mozilla Firefox Quantum v.66 - blocking all pages - Is there no solution to use the new version?
OS: Windows 10 Pro, 64 bit
Browser: Firefox 66.0.1
After last update to firefox v.66 i got only problems. It is blocking almost all pages.
I read about the security issue here: Expect an increase in ...
-1
votes
0answers
34 views
SSL on Azure Virtual machine
We are have installed the Secure Sockets Layer on Virtual machine but the URL not showing secure.
Following are the case.
Domain and Secure Sockets Layer is from domain provider.
Domain pointed ...
0
votes
1answer
9 views
Symfony installation in shared hosting
With SSH i install a symfony project in public_html/myname directory. I assign the domain name to point at myname/web directory. is there fault with that way ? maybe a security issue or something ...
0
votes
1answer
37 views
nginx secure TLS configuration result in SSL_ERROR_NO_CYPHER_OVERLAP
I followed a guide from 01/2018 to harden my nginx 1.10.3 TLS configuration.
Now I'm getting SSL_ERROR_NO_CYPHER_OVERLAP in Firefox 66.0.1 and https://www.ssllabs.com/ssltest says Assessment failed: ...
0
votes
1answer
34 views
Integrity Measurement - TPM-bypass
I am digging into Integrity Measurement Architecture and try to enable it on an embedded device.
I have enabled the IMA related configuration flags and compiled the kernel. I can now see xattr ...
1
vote
1answer
45 views
Browser replacing expired intermediate certificate with new root certificate
I'm connecting to an specific web server via firewall but when I do that the firewall alerts that the root certificate is expired, when I bypass the firewall all browser see no problem with the ...
0
votes
1answer
39 views
Security - Password Managers confusion
I'm shopping around for a good password manager (yes, I'm picky) and today I ran into an interesting issue:
I have my passwords stored in Google Password manager.
For couple of sites I use LastPass ...
0
votes
2answers
192 views
How to remotely sign out from Backup and Sync?
Suppose I have a laptop with Google Chrome and Backup and Sync installed and my Google account logged in for both of these applications. Then, if my laptop gets stolen, I want to remotely sign out my ...
-1
votes
1answer
92 views
Find my stolen Mac mini by MAC address
My Mac mini was stolen from my office and I think it was stolen by one of my colleagues. All of them are software engineers and I think the thief will install a fresh version of macOS on the stolen ...
0
votes
0answers
31 views
Is there a way to keep my personal Windows OS installation entirely separate from my work OS installation that is joined to the domain?
I've had a hard time finding a concrete answer to this, even when asking the IT professional at my work. There is an accepted answer here, but I can't tell if that will actually work.
I recently ...
0
votes
0answers
29 views
BLACK DUCK - Open Source Scan result misleading
My company started using Black Duck version 2018.12.4 and i would like to understand if i made a mistake or if i found a bug.
I did the follwing:
Start Black Duck Scanner Desktop with Scanner CLI ...
