Questions tagged [security]

The protection of computer systems and information from threats such as theft or data destruction.

Filter by
Sorted by
Tagged with
0
votes
0answers
13 views

In MacBook Terminal login history, does console mean that someone physically logged into my MacBook?

To see your login history, you can go into the Terminal and type last. I see logins as "Console". Does this only mean that my computer was physically logged into with my username and ...
0
votes
0answers
17 views

Why/how does including . in PATH pose a security risk? [duplicate]

I was reading this answer to understand the inner workings of bash when I saw this: You should never have . in your PATH as it poses a security risk, among other problems. and couldn't figure out ...
0
votes
0answers
9 views

Test of cybersecurity for my postfix mail server [closed]

i finished to create my postfix mail server with anti-spam spamassassin and anti-virus clamav and it work perfectly, i added to my domain spf,dkim and dmarc . so new i'm searching how can i do test ...
-1
votes
0answers
26 views

Local Password Manager Storage [closed]

I am working on designing a local password manager and I am stuck on the storage portion. Right now, my thought is to store each user's email, salt, and salted and hashed master password in one ...
0
votes
1answer
26 views

SSL for subdomain

Can anyone please tell me, we have an SSL certificate for *.example.com but now we need separate SSL certificate for abc.example.com only for one subdomain. Is it possible? *.example.com which is ...
-1
votes
1answer
22 views

How can I install programs for all users in Windows 10? [duplicate]

I want to set up my PC with a new Windows 10 installation and have a couple of standard accounts and an admin account. I would like to install my programs (not Windows Store apps, which I don't use) ...
0
votes
0answers
16 views

How to be secure using proxychains

I am trying to use proxychains with kali linux. I am using a wsl environment with kex. I wrote a script that finds proxy servers of a given type and adds them to the .conf file I’m a bit shaky on the ...
0
votes
0answers
16 views

Why AppLocker automatic rule generation can't read these folders?

Windows 10 Enterprise latest version, Running AppLocker automatic rule generation on drive C:\ and after it completed its scan, I am getting a message that these folders were skipped. I need to know: ...
-2
votes
1answer
48 views

Hiding a folder from the app called everything

I live in a family of mostly adult people who tend to check my laptop for any games or such, I've been hiding. I have a brother too who keeps checking my computer from time to time. I want to hide my ...
0
votes
0answers
15 views

Give access to laptop's internal HDD to other Windows users

I replaced my laptops HDD with SSD, I have tons of data on that HDD and I use that drive as external backup, I tried to access it from Windows 7 PC and I had no problems, here is picture how ...
0
votes
0answers
11 views

Is changing e-mail password standardized? [migrated]

I need to use a certain email account managed by a server I don't have access to. I have the credentials, I can log in using a client such as Mozilla Thunderbird or Evolution. However, I was not able ...
1
vote
1answer
56 views

Should I do anything after formatting my computer because of malware infection?

Yesterday I realised that, after installing some software last weekend, Microsoft Defender was detecting several file on my Windows 10 document's temp folder. Some of them were deleted by the ...
1
vote
0answers
16 views

How should eMMC RPMB shared keys be stored?

Storing data in the eMMC Replay Protected Memory Block (RPMB) requires use of a shared key. RPMB read/write operations utilize the shared key to generate a Hashed Message Authentication Code (HMAC). ...
0
votes
1answer
52 views

Microsoft 365 E5 security add-on can't remove autofill email addresses in Outlook 2016

Microsoft 365 E5 security add-on blocks the ability to remove autofill addresses. Had a ticket open with Microsoft for 4 weeks about it and they could not resolve the issue. Any ideas? Steps to remove ...
3
votes
1answer
47 views

Convert SMBv1 to newer SMB without modifying the server

A friend who is a medical doctor has a medical imaging device that exports small jpg files by providing a Samba share. It runs a heavily modified version of Windows 2000 and only supports SMBv1. SMBv1 ...
0
votes
0answers
15 views

Get hash after decrypt (code) signature with the public key

I am new to code signing. After signing my message I get a public key and pkcs7 certificate. I am trying to manually compare the hash of my massage with the hash I get after decrypting the signature ...
0
votes
0answers
12 views

firewalld: Remove all pre-existing (default) rules

I have a set of machines with RHEL 8+ and SLES 15+ OS installed. I found out that firewalld is the daemon that controls the iptables firewall and its rules. When I run iptables -L and iptables -t nat -...
0
votes
1answer
44 views

Possible detection of CVE: 2021-04-23 logged in event viewer (23/04/2021 @15:54:16)

A Possible detection of CVE: 2021-04-23 logged in event viewer (23/04/2021 @15:54:16) I am currently scanning my machine, but will Win Defender be able to remove the infection? Randomly I've been ...
0
votes
0answers
12 views

Media Player Controls appear randomly, as if there is user input detected, but there is not?

Firstly, I have no remote access software installed, I regularly run Malwarebytes as well as use two Firewalls, and am pretty knowledgeable about never installing anything that can compromise my PC. ...
-2
votes
1answer
55 views

Is it safe to use SMBv1 client/server after patching it, on Windows 10?

As you may know, after numerous ransomware attacks, Microsoft decided to disable SMBv1 by default on Windows OS's. However despite releasing a patch (MS17-010) to address those attacks, it seems that ...
9
votes
1answer
2k views

Disabling Access to Google Chrome Saved Passwords in a Secure Way

Is there a way to disable all access to saved passwords in Google Chrome in a secure way such that no one else can re-enable access to them? For example, say that I am allowing someone else to use my ...
0
votes
1answer
23 views

Resetting Secure Boot Keys

What will happen if I choose the "Reset To Setup Mode" option in the AMI Aptio Setup? Will I irrevocably lose all the keys there are including the factory ones? Or the factory keys cannot be ...
0
votes
0answers
60 views

BitLocker activated on it's own after Windows 10 update

I got my user a new laptop two months ago (HP EliteBook 850 G7) with Windows10 Pro and one SSD drive. I installed all the important software, never set up Bitlocker, don't think I was even prompted to ...
0
votes
0answers
10 views

Spawning child processes from root using runuser command

I am working as an intern for an online coding platform startup (similar to LeetCode or HackerRank). The backend is written in Nodejs. Instead of running the code in a sandbox of some sort, the lead ...
1
vote
2answers
42 views

I clicked on a link which turned out to be a malicious advert. Should I format my computer?

I accidentally visited a sketchy website and clicked on a link which I think was a malicious advert. After that I think the site tried to download something on my computer but my antivirus blocked two ...
0
votes
0answers
12 views

How would I enable U2F as an Optional form of login authentication for ubuntu?

I recently purchased a HYPERSECU u2f authentication key for logging myself into sites like Google, etc with a USB dongle. I plan to use this as a method for logging into my laptop. I've seen this ...
0
votes
0answers
12 views

Passing arguments to YourPhone app to send message from PC to my cell from security app than can run on alerts

I'm wondering if it's possible to pass arguments to YourPhone app to send message from my PC to my cell from my security app than can then run YourPhone on alerts. For instance, on an alert from my ...
0
votes
2answers
48 views

Remove all login security on Windows 10

I am incredibly annoyed by Windows 10 forcing me to setup a pin, or otherwise asking for my Microsoft password. I would like to disable all sort of login security, I want my computer to start and open....
0
votes
1answer
29 views

Can Hacker See My VPN Data If he have my Credentials?

I have a little question in my mind related to any VPN. As we all know VPN connect through server with private or public encryption key to share encrypted tunnel. My Question is If unfortunately my ...
0
votes
1answer
52 views

Is there a way to whitelist domains in google chrome for iframes?

Based on the Chrome settings here - https://www.chromium.org/updates/same-site/test-debug that where basically turned on in Chrome (and pretty much every other major browser) users that work with me ...
0
votes
0answers
81 views

Security Onion 2.3 The IP being routed by Linux is not the IP address assigned to the management interface?

I have just installed Security Onion 2.3 and I faced some issue with network configuration, first of all I have 2 interface 1- Host Only for Management 2- Nat with internet connection but I receive ...
-6
votes
2answers
65 views

Why are wireless not secure? [closed]

I would like to ask Why are wireless networks not considered secure despite the presence of some safeguards such as encryption, reliability, SSID, use VPN, and integrity? thank you.
0
votes
1answer
29 views

How to properly limit access of an IP to a certain time of day on a Netgear R7000P router

I am pulling my hair out trying to set up what I thought was a simple thing: At bedtime, block internet for my 10-year-old's laptop, a school-issued Chromebook. I don't have the ability to install ...
1
vote
1answer
79 views

why am I getting an error when trying to generate rsa 128

For Educational purpose, I'm trying to create RSA 128 key pair using Openssl. when trying the following command I get an error with "key size too small" $ openssl genrsa 128 Generating RSA ...
0
votes
0answers
53 views

ssh-key based login asks for password after specifying non-port-forwarded port

I've set up port forwarding on my router to a specific port on my server. I've disabled password-based authentication on my server, and have used a firewall to only allow a non-22 port for ssh. When ...
0
votes
0answers
22 views

Is a L2TP/IPsec VPN with a preshared key safe?

Basically, since living in a country with internet restrictions, I use IPvanish VPN and the only way to use it is trough L2TP/IPsec with preshared key. My question is ; How unsafe is this method ? Can ...
0
votes
0answers
8 views

How to prevent docker container from accessing my local network?

I have some website in Docker containers running on my NAS and exposed to the outside world via port forwarding. I thought that is rather save, because even if the container gets hacked, no big deal. ...
0
votes
1answer
20 views

How do i regain access and permissions to an entire drive?

iwanted to upgrade my windows but didn't want to format my data drive coz it's huge and i couldn't transfer to external HD so i formatted the windows drive and installed new version of windows and now ...
0
votes
1answer
52 views

Double NAT port forwarding with pfSense and subnet - Is it safe?

I would like to expose an application server (virtual machine) to the internet for developing/learning purposes. I cannot physically separate my main home network from my server lab. My hypervisor is ...
0
votes
0answers
14 views

Is there any safe way to set passwords for a HDD or folder in windows 10 home?

Is there any safe way to set passwords for HDD or a folder in windows 10 home? The bitlocker is not available in this version. I see some software that allows you to do that but not really sure if it ...
0
votes
0answers
23 views

Dropbox URL gives access to file content

I am very surprised that I linked on a Dropbox URL stored in my web browser's history and, without being logged in, I could see the content of the file. I have created a new file to test it and, just ...
1
vote
0answers
20 views

How to get MS Edge to automatically sign into a web site?

I have multiple security cameras set up that record to an NVR appliance, which has a web server built into it for viewing camera footage. I'm trying to set up a wall-mounted TV so that people can ...
1
vote
0answers
58 views

How to verify if my network is under a man-in-the-middle attack?

What happened? When I tried to pull from one of my repos, I got the following error: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@...
0
votes
1answer
17 views

Options for setting up a secure file transfer server

I need to set up a http server (which will have a valid ssh certificate) for securily sharing files between a company and many clients, with the following criterias: each client will have their own ...
0
votes
1answer
41 views

Unauthorized access to a server over ssh when client-server connection is ssh-key based

Specifically as it pertains to opening up the server from a LAN/WLAN to the internet via port-forwarding. I'm new to networking. I'd like to access a home server from outside my LAN/WLAN via port-...
0
votes
0answers
56 views

Is it safe to change ownership of several sub directories in /usr/local on MacOS Big Sur?

When trying to install some support for FORTRAN on my macBook running Big Sur and using brew I get an error that some /usr/local folders are not writeable and am asked to use chown to change ownership ...
0
votes
1answer
15 views

Temporarily enable GCP Administrator Privileges on a dated computer mostly locked behind a group policy?

So I have an older computer (Its running windows 10 but its using the same system, settings, and group policy it had like 4 years ago) and I want to gain temporary full administrator access (I want to ...
1
vote
0answers
112 views

OCSP not working consistently with NGINX

Host: Ubuntu 20.04.2 (5.4.0-67-generic) x64 Server: NGINX 1.18.0 (Ubuntu) CA: Let's Encrypt Having a really hard time getting OCSP to work consistently. Any help would be appreciated. Thanks in ...
0
votes
0answers
38 views

High CPU load on SYN flood

When being under SYN flood attack, my CPU reach to 100% in no time by the kernel proccess named ksoftirqd, I tried so many mitigations but none solve the problem. This is my sysctl configurations ...
2
votes
1answer
63 views

How to use Fiddler with Windows Defender Application Guard on Edge browser

I'm on latest Windows 10 Enterprise edition (personal PC). I have latest Fiddler and Edge browser installed (stable and canary channels). Fiddler's root certificate is installed and trusted, it can ...

1
2 3 4 5
99