Questions tagged [security]
The protection of computer systems and information from threats such as theft or data destruction.
0
votes
4answers
39 views
Is it possible to dual boot without sharing drives?
Is there any way to have dual boot set up on 2 different drives, say 2 different versions of windows that do NOT have access to the other drive? So that if one gets infected with malware, the other ...
-1
votes
0answers
28 views
is this an attempt to hack my pc? [on hold]
Please forgive me if this is in the wrong forums.
And if a moderator wishes to move the thread to the correct forum, please do so.
One of the few games I play online is Dayz and I loved it so much I ...
-1
votes
0answers
17 views
Home Server Setup software and hardware [on hold]
I'm looking to build my own home server, mainly to support development across my different machines. But for now I'm quite stuck on how to start picking hardware and software for the system.
Key ...
0
votes
0answers
7 views
How to install OSSEC on virtual machine in azure
I want to install Open Source Host based Intrusion Detection System(OSSEC) on virtual machine of Linux Operating system in Azure .There is no proper documentation on How to install OSSEC in Azure. Any ...
0
votes
2answers
60 views
How do you set Windows file permissions/security options non-recursively?
I somehow botched up my C:\ (root folder) security settings on Windows 10. They remained botched even after an in-place reinstall and somewhat botched after a full (no-save) reinstall. Right now if I ...
1
vote
0answers
21 views
How to disable Ctrl+Alt+Delete on Debian 9 (Stretch)?
I'm using Debian 9 (Stretch) and I read that for security reasons, it's preferable to disable the Ctrl+Alt+Delete keys combination.
However, I looked over some tutorials that says to comment some ...
0
votes
0answers
8 views
Is cntlm vulnerable to loop dos? [on hold]
I'm trying to determine if this is a risk with cntlm:
https://security.stackexchange.com/questions/11968/could-somebody-explain-connect-loop-dos
I can see the default configurations says to put a "...
1
vote
1answer
14 views
Self-signing SSL certificate to secure web traffic on ClearOS on LINUX
I am very much a beginner when it comes to SSL certificate for securing website traffic. I am currently running a Linux version of ClearOS web server. Everything works as it should, but now I want to ...
0
votes
0answers
23 views
If I read a file in the usb on a offline macbook, will the file be stolen? [closed]
If I read a file in the usb on a offline macbook but the macbook will connect to the internet once the usb is removed, will the file be stolen by others? The files were not saved in the mac
0
votes
0answers
32 views
How to isolate a Windows 7 Hosted Network from a LAN (to use it as a guest Wi-Fi)? [closed]
Is it possible to configure a Hosted Network on a Windows 7 PC to isolate this network from the LAN to which this PC is connected via a cable, leaving access to the shared Internet connection only?
...
0
votes
0answers
372 views
Windows or Ubuntu regarding CPU vulnerability [closed]
I am using a PC whith an AMD processor which has no Spectre V2 microcode updates.
Currently the PC is running Windows. Is it safer to use Ubuntu instead since Ubuntu uses Retpoline to address this ...
1
vote
2answers
76 views
LastPass email login vs recovery
I recently started using a password manager, specifically LastPass. I have understood how the app works internally to store, encrypt and give me access to my passwords. My question that does not feel ...
-1
votes
0answers
14 views
Email privacy and security, what should I do? [closed]
I currently use Gmail and because of all the privacy concerns I've been looking to move away from that service.
So far I've come to three possible solutions but I don't know if they are any good or ...
0
votes
2answers
1k views
How to password protect printing on a HP Officejet?
We discovered that our HP Officejet 6700 was directly accessible from the internet after someone printed a pamphlet about 'Serpent People in New York' (quite hilarious actually).
Ofcourse, we'd like ...
0
votes
0answers
6 views
Add Trusted Site (Local FileServer via IP) to Internet Options via Registry
I usually add my fileserver to my internet options, trusted site (via IP) and click "Automatically detect intranet". But i've been customizing an ISO and found a way to keep registry edits. How can I ...
-2
votes
0answers
24 views
How is it possible that one specific computer in our company has unrestricted internet access? [closed]
I work in a call center on the side. Since we are all college students we don't have preassigned computers, we just choose an unoccupied one. There is aspecific one which has unrestricted internet ...
0
votes
0answers
9 views
Shall syslog be used with udp, tcp, or tcp over TLS?
Of course, it depends the usage:
UDP port 514 has been used by sysadmins for years to monitor IT mostly for performance, usage, maintenance. Loosing some logs was not important to get the whole ...
0
votes
2answers
74 views
Expose remote desktop directly to the internet
I have a small server behind my router which runs Windows 10. It's pretty easy to set up remote desktop directly to the internet and expose the required port by changing the configuration of the ...
-2
votes
0answers
21 views
crunch - How to randomly capitalize based on a wordlist?
I want to create a wordlist containing all possible capitalizations letter by letter, with 1 to 4 digits at the end, using a wordlist I already have as a base.
For example, I've got
cooking
and I ...
0
votes
1answer
32 views
Is bitlocker a reasonable way to secure data on my laptop (windows 10) [closed]
I would like to use my company laptop at home. Due to stronger dataprotection rules in the EU my boss is a bit more security minded than a few years ago. He worries about client-data leaving the ...
0
votes
0answers
31 views
Setting up trustworthy local SSL certificate for Nginx [duplicate]
I have a local deployment of Nginx to dev-test a website with self-signed certificate and I am constantly getting into Chrome's:
Your connection is not private
NET::ERR_CERT_AUTHORITY_INVALID
...
2
votes
1answer
74 views
How to isolate a drive?
Question
At Linux boot, is there an option I can add to the “vmlinuz…” line that will prevent the OS from ever (at least in that session) being able to see or access NVMe SSDs - while keeping all ...
1
vote
1answer
31 views
LAN unstable upon connection initations
For a while now my internet has been very erratic, I've tried alot of things on the computer, and few on the router, but symptoms are as such :
-Connection drops upon site refresh -Connection drops ...
1
vote
0answers
34 views
How can I log web traffic of a given chrome exension, such as a tab manger?
Is it possible to audit or log the network traffic generated by a given Chrome plugin?
Why? It appears that tab manager plugins in Chrome require extensive permissions, since they all seem to require ...
1
vote
0answers
9 views
Play my YouTube's “Watch Later” playlist on another computer without signing in my whole Google account [migrated]
My current setup involves two laptops side by side, a Mac and a Windows 10 PC. I use the Mac as my workstation and the PC for gaming, casual web browsing and media consumption (Twitch, YouTube, etc). ...
0
votes
1answer
37 views
AWS EC2 FTP port 21 not opened on my instance but allowed in security groups
I try to launch a node js application on a ec2 instance. I authorize the port range in my security group:
I stop the instance totally and restart it just to be sure.
But if I launch the command
...
1
vote
1answer
29 views
SSH host key changed just after setting root password
This might sound super suspicious, but it just happened to me:
I run a rented Raspberry Pi as my own mail server and today I set a root password to eventually login as root directly. I did not yet ...
1
vote
1answer
29 views
Getting data off Bitlocker drive restrictions where Bitlocker uses TPM and no password
I'm exploring the security of Bitlocker when combined with TPM and secure boot (and no password for Bitlocker or BIOS), and am struggling with something -
Does/How does Windows protect the early boot ...
-2
votes
0answers
30 views
Who and how hacked my server?
On my server I saw that "syslogd" consumes quite a lot of CPU and runs as a local user "copy:copy" (a valid user in my system). A short investigation revealed that this "syslogd" it was started from ...
-1
votes
1answer
31 views
Distribution of Code Signing certificate - best practices? [closed]
Distribution of Code Signing certificate - best practices?
Note: I'm an absolute newbie when it comes to code signing and software certificates. I've tried to search and read about how to solve our ...
0
votes
2answers
32 views
How to resolve RPC server is unavailable error related to non-functionality of Windows Defender (Windows 10)
I have for days unsuccessfully tried to troubleshoot the RPC server is unavailable error on my PC running Windows 10 education (64 bit) which started appearing a couple of days ago:
I have tried an ...
-1
votes
0answers
27 views
Controlling Docker from an unprivileged user is a huge security hole, how to counteract?
Consider a web application developer who works through an unprivileged user account without any sudo permissions. Since the developer's tools do not require any root access, that is the most secure ...
0
votes
0answers
18 views
How to ensure that a malware has been removed completely from MacOS? [duplicate]
Recently, I downloaded the Photoshop Downloader and the installer seemed very suspicious. I was completely out of my mind as I proceeded with the installation and a popup asked me for permission to ...
1
vote
1answer
95 views
MacOS: mounting password-protected sparsebundle doesn't ask for password
I have an encrypted, password-protected sparsebundle that I occasionally mount and unmount from the terminal. I want the system to ask for the password every time I mount it, but for some reason it ...
0
votes
0answers
8 views
CBS.log - MpFilter [on hold]
My computer has been freezing up so I ran an sfc/scannow and the result was some corrupt files unable to fix. Looking at the CBS.log it list MpFilter 7 0 ; luafv 1 0; and Fileinfo 7 0
Are these ...
1
vote
1answer
28 views
What security features are offered by the BT Homehub 6?
A friend of mine requires tight security on her home network to deal with a child protection and safeguarding issue. As a trusted friend of the family, I was asked to help.
After some risk analysis, ...
-1
votes
2answers
75 views
Google Chrome shows https:// page as insecure, but when in incognito mode shows it as secure [closed]
I'm using the latest stable version of Chrome, version 70.0.3538.110 (Official Build) (64-bit).
When I open some websites via https:// , Chrome does not show a lock in the address line, and on the ...
0
votes
1answer
21 views
Network drive connection failed. Which app/service to unlock in my firewall?
I installed TinyWall firewall and now Windows 10 cannot reconnect the network drives. Which service is responsible for this?
-2
votes
0answers
32 views
how can I know that my husband/boyfriend has not installed any app or services to monitor my phone, laptop and my internet activities? [duplicate]
I have doubt that my boyfriend/husband/my in-laws has installed some services or app in my laptop, computer, phone and keep tracking me.
is it possible to find this out. ?
or do i need to format ...
0
votes
2answers
216 views
I found an attempted attack - what do I do? [closed]
I was looking at some Apache logs and came across what appears to be an attack
core:error] [pid 20356] (36)File name too long: [client xxx.xxx.xxx.xxx:56856] AH00036: access to
/${(#dm=@ognl....
-1
votes
1answer
45 views
Can Firefox script steal my files?
I use Xubuntu 18.04 and the way I use Firefox is this: I downloaded and unpacked Firefox in my home directory; then I "chmod a-w firefox" so that nothing in that directory can be modified.
Yesterday ...
0
votes
1answer
31 views
How can I audit su access through pam.d in RHEL 7
I am a system auditor with very limited knowledge of Linux OS. I am currently auditing a RHEL 7 server and found out that a group of users are authenticating through LDAP and using 'su' through PAM. I'...
1
vote
0answers
21 views
Unable to connect to vsftpd instance managed by xinetd on Centos 7
I am attempting to run an instance of vsftpd and have additional access controls and logging performed by xinetd.
On the VM running both services, I can successfully initiate a ftp connection and ...
-1
votes
3answers
97 views
What is the consequence/disadvantages of continuing to use Windows 7 and not upgrade to Windows 10? [closed]
Some have recommended me to stay in the latest version of the operating system, but I personally believe that everyone likes this while they continue to receive security updates. Windows 7 will ...
1
vote
1answer
89 views
SEToolkit Not Cloning Login Page
I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
1
vote
1answer
84 views
Is there a reason cipher /w fills up temporary files instead of writing to the raw disk?
The Windows command cipher /w can be used to securely wipe a hard drive's free space without the use of third-party tools or GUIs:
cipher works by creating a folder called EFSTMPWP on the root of the ...
7
votes
1answer
152 views
How to wipe free space in Windows natively
Due to the nature of how filesystems like NTFS work, files that are deleted "permanently" from within Windows aren't immediately deleted - they're simply marked as deleted from the Master File Table (...
1
vote
1answer
28 views
Setting up personal notebook for BYOD [closed]
Like most of the employee, I have a company issued notebook which can let me do most of the normal work (e.g. send/receive email, browse the web...).
However, much of my responsibility is involving ...
0
votes
2answers
34 views
Sharing Mac but making sure the data can only be read
I am required to find a way to share my entire Mac with a potential buyer, since there is a lot of code involved that we want to guard I need to find a way to share my Mac with them without them being ...
0
votes
1answer
20 views
Arent reparse points a massive security risk?
As far as i understand it, reparse points can be added to any file (not talking about symbolic links, but adding them to the ADS of existing files)
Wouldnt it then be possible to create an image.jpg ...
