Questions tagged [security]

The protection of computer systems and information from threats such as theft or data destruction.

Filter by
Sorted by
Tagged with
0 votes
0 answers
3 views

How to avoid/disable Android removing permissions and data from unused apps? [migrated]

The most annoying thing I know is the feature where Android removing permissions and data from unused apps. OK, fine they deem it a security thing, but I want it off. So annoying to have spent ten ...
  • 1,114
0 votes
0 answers
8 views

What is the recommended way to have OCI on top of user emulation? [closed]

consider a treat model where the contents of the virtual instance is extremely hostile. Both on memory access abuse, cpu instructions exploits and network. Not to mention attempts to abuse convenience ...
  • 4,645
0 votes
1 answer
13 views

WLAN: how to configure entropy file in wpa_supplicant.conf

wpa_passphrase creates network login information for wpa_supplicant.conf. wpa_supplicant takes an option -e to store entropy across restarts. I understand internally stored entropy as a way to make ...
-3 votes
0 answers
25 views

Why does Xdebug force Windows users to submit their personal data to install it? [closed]

On https://xdebug.org/docs/install : There are a few precompiled modules for Windows, they are all for the non-debug version of PHP. You can get those at the download page. Follow these instructions ...
  • 1
1 vote
0 answers
22 views

How to convert PKCS12 keys in a way that MD5 isn't used?

I received a PFX file from a company in order to use their VPN. For openfortivpn I needed two PEM files to pass with --user-cert=cert.pem --user-key=key.pem, so I used openssl pkcs12 -in REDACTED.pfx -...
  • 133
-1 votes
0 answers
10 views

Can Excel Desktop external reference Edit-Protected Workbook, (without Enabling Editing for security reason)?

Because Office 365 Enterprise Apps have yet attained sufficient quality when getting Table from Image, I found a online OCR Service who provide much accurate Table from Image but unfortunately in ...
0 votes
0 answers
26 views

Can an infected android phone infect the computer that is used to erase it and then back again

I have this odd question. So lets say if an android phone was infected and you are trying to do a clean erase by loading a completely new rom on it through the USB connection from laptop. Can the ...
1 vote
0 answers
15 views

Is this DMA protection in Group Policy different from Kernel DMA protection?

There is a Bitlocker DMA protection and then there is Kernel DMA protection. the latter is better and enabled by default on capable hardware, the former is only suggested to be used when hardware ...
  • 369
-1 votes
0 answers
15 views

iPad Security During Repair - how did it magically become unlocked? [migrated]

WiFi iPad has a secure PIN set, Fingerprint, and Auto-lock. Doesn't have face unlock turned on. Charging port broke, and iPad was used until it was out of battery and wouldn't turn on. Unit was taken ...
  • 763
1 vote
1 answer
53 views

Being asked for domain password by IT admin

I'm a user, in an org of around 950 people, with a new Android smart phone being set up by our IT team. To set up apps (e.g. Outlook, Teams) on the phone, the service desk analyst has asked me to send ...
  • 143
0 votes
0 answers
26 views

Can't set permissions for a user as admin to run a program?

Using windows 10. Have a program TOP Server 6, a UPC-OA program, that I want a user called Operator to be able to run. This user is part of the user group Users. Under the server_config.exe (the ...
-1 votes
0 answers
22 views

Secure boot disabled in bios [closed]

I put my ideapad into BIOS mode, trying to turn on my secure boot but the secure boot status still remains DISABLED. Please I need help
-2 votes
0 answers
20 views

Disabling Firefox Security Risk Warning for Invalid Certificates

Imgur Pic This is a duplicate of this Disabling the security certificate unknown warning in Firefox. Basically I don't want to ever see this warning again. But unfortunately, that is not something ...
  • 17
0 votes
1 answer
32 views

Use Flags or Extensions to Completely Disable Privacy and Security? [closed]

I want to COMPLETELY DISABLE privacy and security features within my browser. I'm an SEO so when I go to analyze and audit websites, I want to the browser to not interfere in anyway with the operation ...
0 votes
1 answer
36 views

How can I apply my group policies on top of Microsoft security baselines?

I took a clean fresh VM, applied my group policies on it, backed up the C:\Windows\System32\GroupPolicy folder. now I want to apply it to a different VM where I've already applied the Windows 11 22H2 ...
  • 369
0 votes
0 answers
23 views

Windows 11 - Security features deactivated after a restart - how to find the cause?

I noticed that security features included with Windows 11 Home Edition were deactivated today after a reboot. The reboot was a scheduled reboot, I enabled this when configuring the system. I noticed ...
1 vote
2 answers
38 views

What excatly are the risks of not installing Windows Security Update at all?

We've been told that you should always install Windows Security Updates, but what exactly would happen if you don't? Can modern versions of Windows (7 and later) be infected simply by connected to the ...
1 vote
0 answers
24 views

What is this script that's injected in every webpage I visit, and if malicious how to get rid of it?

I found this script when inspecting webpages and I have no idea where this is coming from or if this is malicious. Is this malicious, how can I find out where it came from and how to get rid of that? ...
0 votes
0 answers
15 views

Allow debian user to execute only one particular python script

Context I have a Raspberry Pi that needs to be opened to a network of untrustworthy users. The service it provides can be resumed in performing simple operations on a large history of data. This means ...
0 votes
0 answers
24 views

How to REQUIRE password for authentication (Microsoft Live Account login)

How do I lock-down my Microsoft account such that a password is required to login? https://login.microsoftonline.com/ I logged-into my Microsoft Live account for the first time in some years, and I ...
0 votes
0 answers
15 views

Setting up a 2 DMZ configuration, simulating an attacker in the middle zone, pinging hosts after the second firewall is not possible

I am setting up a network with a 2 DMZ configuration and decided to put an attacker within the middle zone of both firewalls. I am trying to ping some of the hosts that are located after the second ...
0 votes
0 answers
20 views

Lighttpd: Redirect to 404 on any request of /.git

How do I make Lighttpd return a 404 whenever it gets a request for anything under "/.git"? I tried this but I think I'm misunderstanding something as it won't start up with this: # don't ...
  • 494
1 vote
1 answer
75 views

How do I know if I'm being hacked?

I'm building a small site on a LAMP server and hadn't logged in for a few days. I logged in today to make some changes and after checking the error log I can see that I've had the following error ...
0 votes
0 answers
29 views

Why am I able to login into Cockpit web UI even though I disabled PAM and password authentication?

I have these settings on my remote machine under /etc/ssh/sshd_config PermitRootLogin no PermitRootLogin prohibit-password PasswordAuthentication no ChallengeResponseAuthentication no UsePAM no The ...
  • 1
0 votes
2 answers
48 views

How do I get rid BitLocker of the system drive if I can't even login to Windows?

I put my system drive on BitLocker. I don't have TPM. I have to enter a password. Due to unrelated reason, the system cannot boot anymore. And it's very annoying that it reboot again reboot again ...
  • 4,397
0 votes
0 answers
34 views

Prevent user side to print RDP Session

I'm doing a project with some virtual machines, where I'm going to run a program where users can't save print on their machines. I already removed the Snipping tool from the server and the print ...
0 votes
0 answers
29 views

AWS SES Access Key and Secret keeps getting used by spammers

I have a Laravel application running on an Amazon EC2. I also use SES to send out my emails. I keep my AWS Access Key and Secret inside my .env file, stored on the app level I have configured an IAM ...
  • 101
0 votes
0 answers
9 views

Remove/Change Android password [migrated]

A friend gave me an old Android tablet (Medion Junior Tab S7322) which dates back into the Android 4.4 days and asked, if I can get access to his pictures on the internal storage, because she forgot ...
  • 690
0 votes
2 answers
54 views

What "site" is Windows talking about?

Got this alert from Windows 11 (up to date) Image borrowed from Windows support "Do you want to allow files from this website to be copied to your computer?" I wish I could answer the ...
  • 605
0 votes
1 answer
112 views

"You […] need to provide administrator permission" - how to fix

When I try to rename (or move) a folder, I get Folder Access Denied, and You'll need to provide administrator permission to rename this folder. There are three options: Continue, Skip, or Cancel. See ...
  • 707
0 votes
1 answer
18 views

Allow non-root user setfacl on root-owned file

I have an application manager that needs to call setfacl to (dis-)allow execution of a certain file by certain users. This application runs as a non-root user admin (and for a plethora of reasons, I'd ...
  • 103
1 vote
0 answers
38 views

Evaluating if a user has physically used their computer

Trying to generate campus building occupancy statistics and exploring relying on computer activity data to do so. Approach has been to use log activity (local Windows logs or EDR logs) and check for ...
  • 11
0 votes
0 answers
7 views

Is there a way to control the order in which Netsparker performs a security scan on APIs?

Our CIS team says they can't control the order in which they execute API calls for their security scan. I'm not familiar with Netsparker, is this so? There's no way to control the order of the calls? ...
1 vote
1 answer
40 views

Can a malware infect my main drive when I'm using a different OS on a external drive?

I've installed Linux Mint to an external drive to visit sites I find suspicious. My main drive has Windows 11 installed on it with a Microsoft account and a password. So my question is: Can a malware ...
0 votes
0 answers
17 views

What is the meaning of official, unofficial, community, third-party, first-party and outdated package distributors?

I'm reading this github package installer page and they mention different type of status for each package source. What is the meaning of those? Should I not trust unoffical or third-party ones?
  • 101
0 votes
1 answer
21 views

Is it possible to find out (retrospectively) when a file was deleted from standard Windows 7 logs?

My mother-in-law has a problem at her workplace: when she came back after a day off, a folder with important files was gone from the desktop, the trash bin also emptied, with several weeks' worth of ...
  • 3
1 vote
0 answers
45 views

how to prevent Windows OS password resetting methods e.g. utilman.exe

I came here because topic is serious about my windows system, here is last day somehow I abled to reset my windows password by doing.. This Windows Commands Using bootable Windows OS Open Commands ...
  • 111
0 votes
2 answers
21 views

Can you disable Windows Mail and 'one step login' via Windows Credentials?

Can you disable Windows Mail and 'one step login' via Windows Credentials? When I start up my desktop and login with my (simple) password, I can start up the windows mail program (that comes with the ...
  • 3
0 votes
0 answers
16 views

Having a certificate authority on a dedicated hardware like SBC

I configured an OpenVPN server on Digital Ocean according to their guide. As the guide mentioned, having an OpenVPN server and a certificate authority on the same machine is a major security risk, so ...
0 votes
1 answer
122 views

Samba server on Red Hat - "client signing = mandatory" bug

My Samba version is 4.10.16 and I've got a problem with setting client signing variable to mandatory. It is properly set in /etc/samba/smb.conf, but testparm show client signing = required. My RH ...
  • 11
0 votes
2 answers
101 views

Is it a good practice to block all inbound traffic on Windows?

Windows firewall has many inbound rules which allow access to many ports and services. Should this be a security concern? If a Windows device is not used as a server, is it a good practice to disable ...
  • 1
0 votes
1 answer
31 views

Using a consumer grade router alongside an ISP provided modem router [closed]

I find myself in a position where my current ISP is unable to provide high speed internet. This situation will likely change in time. The ISP has provided a very basic router with a built in modem ...
  • 157
0 votes
1 answer
35 views

Test that mysql shell with --ssl-mode=REQUIRED to given --host REALLY works without first providing username, password, database-name?

I'm looking for a possibility in the mysql client to only test whether the --ssl-mode=REQUIRED directive to a given --host is 100% ensured, without potentially spoiling username, password and database ...
  • 315
0 votes
1 answer
29 views

Prevent users from logging in with local admin

We are looking to implement the principal of least privilege accounts in our company. Our software development team requires administrator rights to perform their work so we're considering creating a ...
  • 101
0 votes
1 answer
67 views

Arch: unable to write to pipe (Broken pipe) when installing selinux-refpoicy-arch

I'm setting up selinux on my arch system, every library successfully built and the modules were installed, but attempting to apply the reference policies supplied by selinux-refpolicy-arch fails after ...
  • 11
1 vote
0 answers
24 views

How does the application permission system work on macOS?

How does the permission system work? Usually, when an app tries to do something, e.g access the camera or the microphone, it has to ask the OS, which then asks the user. And also, if an app tries to ...
  • 25
0 votes
1 answer
146 views

Command line runas to really, really run as administrator [duplicate]

I am logged on as user and want to "runas" to run some command script as administrator. This does not work: ">runas /user:administrator mybatch.cmd" : mybatch.cmd executes but ...
0 votes
1 answer
66 views

Can an RDP client prevent “Windows 10 Keylogger” from accessing what is typed on client computer during a session to a remote computer?

The “improve inking and typing” setting in Windows 10 allows Microsoft to send themselves processed samples of what is typed on a machine (not sure if it is processed to remove details as it’s typed ...
0 votes
0 answers
13 views

Unchecking app on the protected network connections (under firewall advanced settings - windows defender properties) disabling firewall

So I'm trying to get Hamachi app to connect two PCs via RDP and the only way to do this without disabling firewall was by unchecking the app under protected network connections, but by doing so, I'm ...
  • 1
0 votes
0 answers
201 views

Why Opera browser gets NET::ERR_CERT_INVALID error for a website with self-signed certificate and does not allow to get in?

Test link: https://self-signed.badssl.com/ So, it says: Your connection is not private Attackers might be trying to steal your information from self-signed.badssl.com (for example, passwords, ...
  • 199

1
2 3 4 5
106