New answers tagged security
1
If you don't mine removing all event listeners from the current page:
Open Chrome Dev Tools (Ctrl+Shift+I) and select Console
Type the following to remove all event listeners: $("*").off();
Alternatively, to remove all right-click listeners: $("*").off("contextmenu");
It's a good way to do that particular task without ...
0
To disable totally Print Screen, you may use the free
AutoHotkey.
Use the following script:
PrintScreen::Return
After installing AutoHotKey, put the above text in a .ahk file and double-click
it to test. You may stop the script by right-click on the green H icon in the
traybar and choosing Exit. If the script works well, to have it run on login
place it in ...
0
Disabling the Hotkeys should not help that much.
You can use softwares like ScreenWings, but Using that is like a workaround, because this will keep screenshot taking apps run, and even take screenshots, but it would be blank. And also it is blocked by many AV/Firewalls, so it is not guaranteed it will be safe.
And if you though disable PrtScn key, still ...
-3
You can block this annoying "antivirus" by third-party tools (don't worry, they totally clean and only do their purpose).
I think the first at all is this tool - Defender Control from sordum (very known bright developer). in this tool you can simple and fast click to stop the defender, and by click you can turn it back on again.
this is direct link ...
1
You should perhaps think in a different direction. Windows 10 Defender works very well, uses very little resource, and does not get in the way.
Open Windows Defender (System Tray, may be a hidden icon). On the first screen make sure all functions are green and there are no security errors. Now go to the Threat Protection settings and go Manage Settings and ...
1
You can install a second NIC on your Windows machine, and use it to communicate directly with the camera subnet. You should use a different subnet for the cameras and your regular LAN. If you don't want to change the cameras, change your LAN subnet.
Do not configure a gateway on the second NIC, or any of the cameras (which means you'll probably have go to ...
0
sshkey was setup from ServerA to ServerB,ServerC. i was successfully able to connect ServerA to ServerC.
SSH ServerA to ServerB wasn't working. getting Authentication failed.
Solution:-
for me, i could find user added to /etc/security/access.conf but still error.
So, move / remove file /etc/security/access.conf from serverB. And try again.
0
Although I marked @fratester's answer as accepted(cause it is the right answer to the question), I could have done this ssh tunneling thing in a native way that is much easier and secure and without worrying about the security issue I was worried about.
As @Bob commented check this link https://en.wikibooks.org/wiki/OpenSSH/Cookbook/Proxies_and_Jump_Hosts .
1
Once any node in your local network is infected, the whole network is compromised.
As all external communications pass through the main router, you are open to attack.
These attacks are called
Man-in-the-middle attacks
and can bypass HTTPS protections, steal passwords and much more.
If you suspect your router of being infected, factory reset it.
Check also ...
2
There is no such certificate to be copied.
You need to connect to the wifi network with the right credentials.
It is quite possible that your computer is known to the company by the
MAC address of its network adapter. In such a network,
no unregistered devices will be allowed without the administrator
allowing them in.
If you have a legitimate reason to ...
0
It may help to analyse the SSL certificate of your server to check if it has HTTPS enabled.
I suggest DigiCert.
1
Actually one could rephrase your question and ask: is it possible to mount this scenario into an attack which would not be possible if you would not disable host key checks.
The immediate idea is that an attacker re-routes the tunnel end to somewhere else and makes use of the fact that you execute the key based authentication there. Because this is the only ...
-1
Under standard conditions, the connection between your browser and the proxy is always plain HTTP, so no HTTPS here.
Note that for an HTTPS connection from your browser to a website, the proxy only routes through the HTTPS traffic without being able to decrypt and/or eavesdrop. In other words: HTTTPS is end-to-end encrypted even across proxies, and this ...
1
This Controlled folder access feature is new to Windows defender and Windows 10, and is experimental and very buggy. It protects folder Documents, Pictures, Videos by default and does not let any process access and write there. You should turn it off to get rid of this messages. Go to Windows Security > Virus and threat protection > Virus and threat ...
0
Your Apache service is presenting an expired certificate in the chain to clients. Specifically, this one which expired in May. As the linked page says, there is a replacement available which is valid until 2028.
Apache's configuration file points to a file containing the chain of certificates which it presents to the clients. This is configured with the ...
1
A simple solution might involve running a tunnel from your cloud server/VPS to your home network. That way only the IP of your VPS will leak. It is of course vital that the traffic you are generating is encrypted itself otherwise the payload will leak. For example, if you access a HTTP server at home by making a request to the VPS which will be (securely) ...
0
This is a nuanced answer, but essentially, yes it is almost certainly safe (from malware; I'd never buy a used disk; be sure to check the SMART stats).
Provided that your adversary is not a nation-state level actor or a powerful corporation, and you are not a highly-visible/desirable target, there is almost no likelihood that you have encountered malware ...
0
The biggest concern when purchasing a used SSD should be the wear of the device: you do not want to deal with a broken drive or one that dies with your data on it. If you have fully wiped it, you can expect the chances of it having malware to be negligible.
Hard drives and SSDs should generally not be bought used, because you do not want them to fail on you. ...
0
If you wipe it with the Samsung tool, that does the job of eliminating infections. This is the roughly same as full formatting a regular hard disk which removes infections and also root kit viruses.
Also check with the Samsung Magician (I have it here) to make sure the SSD is physically good.
A good quality (high end consumer) Samsung SSD is good for over 6 ...
3
Yes, most definitely.
It is absolutely possible for malware to spread through your LAN to your computer.
In fact, I’ve heard horror stories of malware that makes it past one person’s defenses to infect a single machine … and from that machine, move on to infect an entire small business’s network.
While most malware these days has to be “invited” in – by ...
1
The only potential security issue is with any configuration settings you have configured in the router, which may identify domains and IP addresses associated with you or your organization, and may contain user credentials including passwords.
However, as long as you perform a factory reset on your router, you will clear all such settings, so there should be ...
5
As part of uBlock Origin which many (over 10 million) people are using (including myself) and is the de-facto best ad-blocker available. You can simply disable javascript for the site, which allows you to select and copy-paste the text.
Just click this button:
0
Generally speaking, there are a few common ways to erase a storage device:
By overwriting storage blocks containing data with a bit pattern. This is the most common method for standard spinning hard drives.
On NAND flash devices, by performing a block erase operation that physically destroys data from memory cells.
On storage devices that keep track of used/...
6
To further specify your question, correct me if I'm wrong:
Assuming you let a machine sit idle after using it, is there an additional security benefit to logging off, in terms of network attacks?
The theoretical answer is "yes". Software that is running when you are logged in can pose a security threat by receiving network traffic that exploits ...
13
The primary benefit is that any data associated with your user session that's in memory will be unloaded from memory when you log out.
This sounds kind of stupid, until you consider that by default Windows caches credentials secured by your account password in memory on first use and does not tend to drop that cache until you log out. Such credentials ...
6
There are several things you need to know before:
Lock: It will lock the computer, but all the user's program will keep running. Lock can be triggered with Windows Key+L or CTRL+ALT+DEL > Lock.
Disconnect session: It is simillar to lock, will lock the computer and keep User programs running and let other users log in using Remote desktop or physically. ...
2
WPA2 (AES) and WPA (TKIP) can be used as mixed mode WPA2/WPA on a common SSID, allowing both clients to connect with the the same passphrase. In this case, the AP simply advertises both encryption protocols and the client can decide. However, WPA is not backwards compatible with WEP at all, and you can't mix WEP with the same configuration.
This question was ...
-1
That depends in the drivers of the the network adapter installed in the client.
The network adapter has to have to the drivers compatible with the security protocol of router. Such as if a network adapter has drivers for only WEP and WPA it cannot connect a WPA2 network, despite having the appropriate credentials.You will need updated drivers in this case.
...
2
My answer is based on the assumption that your version is Windows Home.
I have highlighted below some important parts of the message:
Reasons for failed automatic device encryption: Hardware Security Test Interface failed and the device is not Modern Standby, TPM is not usable.
This message arrives when device encryption is unavailable in Control Panel.
It ...
5
NoScript should help you with most websites which mess with context menus and other annoying things that mess with website experience. It auto-blocks all scripts which it considers unsafe. You can also manually experiment with it for specific sites. This should also prevent clipboard modification.
You can individually prevent specific scripts from running ...
0
Short answer:
You need to run reaver with a more sophisticated set of rules:
reaver -i wlan0 -c 1 -b TARGET_ROUTER_MAC -vv -L -N -d 15 -T .5 -r 3:20
You will lock the router after 3-4 tries anyway. Changing your adapter's MAC after 1-2 attempts won't help.
You'll need to reset the router to reset the locked state.
You can do that by running these 5 ...
0
Create a separate standard account for the other users and protect the administrator account with a strong password.
Now from the administrator account, deny read, wrote and execute permissions on the standard user for that drive (You can do this from Properties > Permissions tab). Now the other users logging in from the standard account cannot access the ...
0
You don't have a clue whether your friend installed a tracking cookie or a keylogger or any other malware. Since he is the person to have full control of his computer, it could become very time consuming to find out how to which degree the computer is compromised. In my opinion, there is only one satisfying solution: Give him back the laptop and do not ...
2
The router you are using has WPS patched in the firmware. These attacks were mainly successful with WPS V1.0.
There are a couple of things you can still try.
This router may be using a MAC lock, try randomizing the Mac address and see if it's the wireless adapter that has been locked out from attempts.
Disable NACK in reaver
Try wpspixie from within ...
1
Using this script finally worked for me: https://gist.github.com/bubenkoff/4043130
It allowed me to disable the Check Point Endpoint VPN Security firewall policy on macOS.
Getting the script
Download the script and save it somewhere as checkpoint.sh
Open a terminal and cd into the same directory of the checkpoint.sh file
Make the script executable with: ...
0
Use the original .msi installer. And on the contextual menu, click on Uninstall.
-1
it seems an issue related specifically to your workstation not global windows 8.1
have a look at https://community.letsencrypt.org/t/unable-to-get-local-issuer-certificate/101044 it explains full details which doesn't make sense to copy them all here :)
good luck
1
This sounds like a job for Group Policy software deployment. This gets around the issue of users lacking administrative rights.
By publishing a package, it will make the software available to users under Control Panel (as opposed to just automatically installing it).
From end users' perspectives:
Setup
See Microsoft's guide here (old article but still ...
1
This only works for the current user. I don't know how to specify a pid.
C:\WINDOWS\system32>whoami /priv
PRIVILEGES INFORMATION
----------------------
Privilege Name Description State
=============================== ========================================= ========
SeIncreaseQuotaPrivilege Adjust ...
2
Yes, if a firewall blocked executable calls another, then the called program will be able to connect the internet.
Suppose you have blocked a.exe. But a.exe does not connect the internet, the connection is done by b.exe. a.exe uses b.exe to connect the internet. And if you don't block b.exe, then a.exe will be able to connect the internet. You have to block ...
13
I have found all these extensions for Chrome.
One of them surely will work for you:
Enable Copy
(300,000+ users)
Absolute Enable Right Click & Copy
(80,000+ users)
Enable Right Click
(60,000+ users)
Allow Right-Click
(2,000+ users)
(Seems like this limitation has motivated many developers.)
1
I see two approaches.
Get a different boss. He obviously has no clue how complicated the task he demands really is, it's always the details, and I doubt he has had a look at them. Windows installations are extremely tricky to master in detail.
Still reading? Okay. It can be done.
The key point is to run your script as a "scheduled task" in the ...
0
You can use this:
var=`cat file | grep "There were" | cut -d' ' -f3`
Another way to do this:
var=`cat /var/log/secure | grep "Failed password" | wc -l`
7
I have been using the FF version of this extension and it works fine:
Absolute Enable Right Click & Copy
0
A router by definition has an interface on two subnets. An ISP-provided router will have an interface on its network and your network.
When you have a NIC on someone's network you can:
Try to get a DHCP address to discover subnet.
Run a rogue DHCP server yourself and get machines using a different DNS server and possibly record/redirect traffic through ...
0
Demand that they limit the router to NAT and possibly a DHCP server to serve you.
Then get your own router and set it to get ONE DHCP lease (=one IP) from their equipment (from their router or from a DHCP server outside it).
After that you're free to use your router's firewall, NAT and whatever more as protection against the <fill in nasty words here> ...
0
Apparently, this was a potentially-unwanted-app named PUA:Win32/CandyOpen - see https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=PUA%3aWin32%2fCandyOpen
And most likely, it was dropped by uTorrent as the payload files were signed by Bittorrent Inc.
Be warned.
3
Last time I checked, setting the password to blank offered some really good security properties.
If somebody got access as a service account, that person would be unable to elevate to the user account because blank passwords are refused in that security context.
Login over RDP doesn't work for the same reason.
Login over UNC shares doesn't work for the ...
-1
What you propose is equivalent to not locking your house when nobody's home, or buying an expensive sports car and then modifying it to use a push start and not need any kind of key to either get in or start the car.
There are ways that this can be made kind of secure (namely, turn off all remote access and all network services provided by the system, which ...
-1
Oh my, it's like opening the door to fort Knox. You've lost all the security that has been placed by not having a password, even a simple one.
If you go to a website that places malicious software on your device, and you go and turn the pc/laptop off, then they can turn it on and easily access anything they want. That happened to my Lenovo, so i had to get a ...
Top 50 recent answers are included
