Questions tagged [security]
The protection of computer systems and information from threats such as theft or data destruction.
4,757
questions
0
votes
1answer
40 views
Security threat after taking advice?
I was following some advice trying to fix some issues with my webcam and camera permissions. I followed the top comments answers but noticed some comments later speaking of potential security threats.
...
0
votes
1answer
22 views
Mouse slows down and wireless receiver message
My mouse suddenly slowed down. Then I must wait about a minute so that it will get back to its normal speed, then after using about 10 seconds it slows down again. I turned my computer off and on, ...
0
votes
0answers
12 views
Is it necessary to protect GRUB with a password if your volumes are encrypted with LUKS?
I understand there are vulnerabilities around somebody using grub to boot into single user mode and escalate privilages on your machine.
But is there any purpose in doing this if your volume is fully ...
0
votes
0answers
15 views
What for is zip's -P option when we have -e?
What for is unsecure -P option for zip when we have -e which does not leave the password in the command line history?
-P extract from man zip reads:
Use password to encrypt zipfile entries (if any). ...
0
votes
0answers
8 views
RDP logon failure with time based group membership
The scenario includes 2 user accounts, one is the ordinary user account used for logging in and checking email/skype etc, the other one is an administrative account used for managing infrastructre (...
0
votes
0answers
15 views
TPM 2.0 causes high temps and boot fail
So I just bought a TPM 2.0 module for my second PC which I mainly use for video editing and 3D animation, so it's a fairly high-end machine.
I installed the TPM module on the motherboard, and turned ...
0
votes
1answer
41 views
How to securely erase an SSD that doesn't support secure erase?
I'm selling a laptop that was used to handle my personal data, and want to wipe the SSD before getting rid of it. However, I just realized that my SSD doesn't support any of the Sanitize or Secure ...
0
votes
0answers
33 views
Preferred method for prioritizing execution of .exe file that may exist in multiple locations?
I use a password manager for all of my passwords. The preferred .exe is run from an encrypted USB-Drive. I have a backup on my laptop inside a VeraCrypt container, and another hosted on a server.
I ...
0
votes
0answers
13 views
what is the best way to store a li-ion battery used for tools safely [closed]
In order to avoid an emergency how does one store his batteries safely when not using them for a period of time
0
votes
0answers
43 views
How to approach clearing my network and all my devices to be malware-free [closed]
I am wondering what is the most secure way to reset all devices in my network (to become malware free), and step by step securing it back to it's former self, so I know for sure one device isn't ...
1
vote
0answers
12 views
/usr and /etc changed ownership to user “5640” and group “13023”. What happened?
after just installing samba on my Ubuntu server, I got warnings (from the samba installer) about strange ownership and permissions set for my /etc and /usr folders.
I checked and indeed /etc and /usr ...
0
votes
1answer
51 views
Raspberry Pi network topology for DNS, IDS & IPS
I have a Raspberry Pi on which I operate DNS, IDS/IPS servers. The way it is connected in the network and configured is as follows:
Internet -> Router -> Pi (eth0)
Pi is further configured as ...
0
votes
0answers
11 views
Secured folder in cloud storage
I'm thinking about security of data on my mobile phone (Android, or probably iPhone too) and see following problem - modern phones provide PIN/finger/face lock protection (what is not really secure ...
0
votes
0answers
19 views
How can you prevent root from removing the immutable flag?
I would like to prevent root from removing the immutable (or appendable) flag until reboot.
In the past this was possible with lcap CAP_LINUX_IMMUTABLE. But this possibility seems to have been removed....
0
votes
0answers
16 views
Get 502 status code after apply iptables
I add these rules to prevent DDOS but some times Nginx proxy gets 502:
#! /bin/bash
### 1
#/sbin/iptables -t mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP
### 2: Drop TCP packets ...
-5
votes
0answers
25 views
What can I do now that my bank (Nordea in Sweden) will permanently kill their “simplified login” feature, crippling all automation? [closed]
Currently, every hour, I auto-run a script which I painstakingly coded (they really don't make it pleasant/simple). This script does a series of HTTPS requests from my computer to log in to my "...
0
votes
0answers
43 views
Error: “boot configuration data setting 0x25000020 has changed for the following boot application \windows\system32\winload.efi”
Yesterday I got a suspicious message when starting uTorrent, it said "The install of 'some temporary file.tmp' failed (signer certificate mismatch)". The file was an exe file with .tmp ...
0
votes
0answers
12 views
Is there a simple way to stop execution of code from both local VM's, every device on local subnet, and hardware components on local machine?
I was wondering if it were possible to simply limit all code execution on Windows 10 to just currently logged on console user without anything other then whats necessary for Windows to boot and apps ...
0
votes
0answers
7 views
Date of creation for saved Wireless networks (WIN7) [duplicate]
is there any way accessing files related to the saved wireless networks in win7?
or in other word, is there any way to check time of creation for a saved wireless profile?
there is no much information ...
0
votes
1answer
88 views
Why iptables drop all packets?
I set this role for drop invalid packets:
iptables -t mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP
but it drop all packets.
this is all my iptables rules:
0
votes
0answers
24 views
Windows 10 home: security settings are empty, cannot enable Defender or Antivirus?
When checking my Windows 10 Home defender / security settings, I noticed the settings page was empty.
I don't mean the defender or antivirus was disabled (although I guess it probably is) but the ...
1
vote
1answer
37 views
Product still listed as enabled in Antivirusproduct class even though uninstalled 5 days ago
I uninstalled F-Secure 5 days ago and have restarted/powered down this device several times since. It seems that either the data returned by this query is outdated (and a refresh/reload may solve the ...
0
votes
0answers
9 views
Can I restrict the “access data for all web sites” Firefox add-on permission?
From Firefox documentation
Access your data for all websites
The extension can read the content of any web page you visit as well as data you enter into those web pages, such as usernames and ...
3
votes
2answers
814 views
How do I crack a double encrypted Hash
I created a hash which is encrypted like this: $What_i_made=BCrypt(MD5(Plain Text Password)) and I wonder if it can be cracked. Currently, I thought of two ways:
Brute force $What_i_made to get the ...
0
votes
1answer
16 views
Root console without a password with GRUB dual boot on Ubuntu 18.04.4
I just discovered that entering a recovery console (in Ubuntu 18.04.4 installed with a dual-boot alongside Windows) allows entering the root console without entering any password.
It seems to be a ...
1
vote
1answer
155 views
Chrome, Safari, and Airmail have stopped trusting random certificates, including ones for Google-owned sites
As of approximately June 13, 2020, some secure sites that I try to visit in Google Chrome are showing a Privacy error, specifically NET::ERR_CERT_AUTHORITY_INVALID. I am using Google Chrome Version 83....
0
votes
0answers
30 views
Is it required to sanitize parameters of curl (called from a bash script) filled with user inputs?
Is it safe to run curl in a bash script like this:
#!/bin/bash
response=$(curl --data-urlencode "user=$username" --data-urlencode "pass=$password" https://my-api-url)
with ...
0
votes
0answers
5 views
Data recovery; I cant access some specific data on my D drive. It says permissions issue [duplicate]
The problem is that since I was running a dual boot system on my pc, I accidentally deleted my windows 7 via system configuration. Since I cant log back into windows 7, I cant even access data on that ...
0
votes
1answer
31 views
How can I deploy a CA Certificate on several machines through network [closed]
Is there a way to deploy a CA's X509 certificate on several client machine's (Windows) in a Intranet environment?
0
votes
0answers
13 views
Router keeps broadcasting ARP who for unassigned IP
I was using wireshark and saw tons of ARP request for an unassigned IP from my ISP "all-in-one" device (sagem).
After looking at my network and rebooting the router with only the machine ...
0
votes
1answer
33 views
Protection for executables in Windows-10
I want to protect exe, dll from unintentional/accidental modifications. Assumption is that there is no anvtivirus on background but the LAN/environment is cyber-protected from outside. How can I ...
0
votes
1answer
32 views
What exactly is “/d/msdownload/update/software/defu/2020/06/am_delta_patch_1.317.1140.0_b3f0b7db16f7b0cfd8020b9ab4ae61349300d9d1.exe”?
Suddenly logged in my PHP localhost dev server:
[Fri Jun 12 17:19:09 2020] 127.0.0.1:58391 [404]: (null) /d/msdownload/update/software/defu/2020/06/am_delta_patch_1.317.1140....
0
votes
1answer
47 views
Resetting Windows 10 after system compromise by “Google” [duplicate]
My Grandad was having trouble logging into his Gmail account yesterday. He managed to find and call the "Google tech support helpline", who claimed to be from Google and claimed that his account has ...
0
votes
0answers
10 views
Swap encryption security - separate partition vs. LVM
So I asked a question yesterday about ways to encrypt my swap partition without having to type a passphrase during boot: https://unix.stackexchange.com/questions/592188/encrypting-swap-partition, but ...
0
votes
2answers
43 views
How to enable this so I can require sign in?
This morning I came to work with a "surprise", that my computer didn't lock automatically, though I thought I configured it to do so.
Then I went through everything just want to make sure. I found ...
0
votes
0answers
26 views
Secure Linux Proxy Authentication for Linux and Mac
I'm new to mac (read 2 weeks) but quite experienced with linux and windows.
Our corporate firewall requires traffic to pass through an authenticating proxy (read username/password required), which is ...
0
votes
0answers
9 views
Kaspersky Security Center moves devices out of groups
normally I manage devices usisng Kaspersky security center's group policies. so all devices are assigned to their groups.
However KSC suddenly moved them almost all to unassigned devices, There is ...
1
vote
1answer
44 views
Invalid Certificate for a NAS WebDAV. Dangerous?
I just set up a NAS cloud (WD MyCloud EX2) and I access to it via local network and https WebDAV for remote locations, as mobile phones and computers. My IP is Dynamic, so I use DynDNS.
The problem ...
0
votes
0answers
25 views
Should I still worry about spectre in 2020?
I use a laptop that has a 4th gen Intel CPU. I may soon beginn working on sensitve data.
Is Spectre something I should still worry about? Should I upgrade my laptop?
1
vote
0answers
20 views
Is Microsoft Forms adequately secure to collect personal health information?
I want to make a survey on a website using Microsoft Forms. Patients would input personal health information into this form, so I want it to be secure.
The Microsoft website indicates that Microsoft ...
0
votes
0answers
13 views
Security of other disks, if hard drive is shared with Virtual Machine
If I selected a portable drive that I wanted to share with my Hyper-V Virtual Machine through:
vmconnect > Local Resources > More... (under "Local devices and resources")
Could this cause a ...
2
votes
1answer
30 views
Disable playing audio when locked
If I'm playing a video (for example on YouTube) and put my computer in sleep mode, when it wakes up, it will keep playing audio and display the video title in the corner despite it being locked and ...
1
vote
1answer
93 views
Long list of threats in Windows Defender after using Kali Linux
I'm using Windows 10 v1909 and a month ago I downloaded Kali Linux on VMware on my PC.
I recently did a full scan of my PC with Windows Defender, which resulted in a long list of threats (100+, most ...
0
votes
0answers
21 views
Restrict web access of some clients to set of defined URL's
I would like to use my OpenBSD router/firewall to restrict access of my SmartTV and IOT devices to a small set of web domains. The devices already reside on a separate VLAN and the whole endeavor is ...
1
vote
0answers
26 views
Can a Windows 10 user be prevented from opening executables on a whole partition?
Is there a way to prevent a Windows 10 user (or the whole system) from opening any executable files on a whole partition? (E.g. just on the D:\ drive including all sub-folders.)
It would ...
0
votes
1answer
34 views
Securely remotely access files on a HDD attached to a router?
I'm looking for a simple but genuinely secure way to remotely access files on a hard drive attached (via USB 3) directly to my router. (Currently using ASUS RT-AX56U.)
Many routers with USB ports ...
0
votes
1answer
14 views
Apache2 Logs - Single user agent shows as an escaped string
first time caller long time listener.
I've been playing around with hosting my own web server via Apache on an Ubuntu VM. I've been reviewing the access.log file, and noticed a discrepancy I can't ...
2
votes
1answer
141 views
How do I safely examine an XLSM file from an untrusted source?
I have an XLSM file from an untrusted source. It is likely that the content is benign, but to be sure, I want to examine the VBA code inside first.
How do I examine the file's source code without ...
0
votes
0answers
10 views
Segarazo Virus and problems on laptop [duplicate]
I have Win 7 64-bit laptop. I used to get a problem in Program Files which I never installed, it would install itself back when I uninstalled. It is Segurazo anti-virus. It says I have a subscription. ...
0
votes
0answers
18 views
IPTables: How to filter network access by application?
I see how IPTables can control network access by IP address and port, but how do you filter by application? (So, for example, YUM and Firefox can access TCP ports 80 and 443, but not the myriad other ...
