New answers tagged security
1
vote
Why does Pass-the-ticket work?
See the article
Pass the ticket
which explains the attack.
Briefly, the request for accessing a service, called Service Ticket (ST),
contains enough information about the user to allow the
destination ...
- 411k
1
vote
Accepted
Why does Pass-the-ticket work?
Regarding stealing tickets using Mimikatz:
Your Kerberos ticket cache generally stores both the ticket and the corresponding session key in the same place, and the term 'ticket' is often used as ...
- 380k
0
votes
How do you find what program is installing third-party Chrome extensions?
Open a new chrome profile so that the notifications of the extension being added are there.
Then go to chrome://extensions and then turn on developer mode at the top
copy and paste the extension ID (...
- 1
2
votes
Accepted
console.log (Marketo Munchkin) appeared on my drive
Here's the explanation and solution for the appearance of the console.log file created by SketchUp:
https://www.dedoimedo.com/computers/sketchup-console-log.html
tl;dr:
There's an (outdated) chromium ...
- 36
2
votes
Are the new vulnerabilities found in Chrome also in Edge?
Microsoft Edge is based on Chromium and also has a Guest Mode. Would the two security vulnerabilities also affect Edge?
Microsoft has already documented and patched both vulnerabilities.
CVE-2022-...
- 39.3k
0
votes
Accepted
Are the new vulnerabilities found in Chrome also in Edge?
It depends on where the flaw is.
If the flaw is in the page rendering engine itself (and it usually is), then it will be common for all Chromium-based browsers.
If the flaw is in some Chrome-specific ...
- 1,435
0
votes
What generates this message: "*** SECURITY information for hostname ***"?
It would seem that the Sudo program or whatever it is sent this message as an alert that there was an invalid password attempt while trying to use sudo.
When I run sudo visudo, there is a setting ...
- 101
1
vote
Does Asus router require internet on initial setup?
For all current Asus routers (regardless if they run the stock Asus firmware or the AsusWrt alternative) you can connect to it without any internet connection.
This goes for both the initial setup as ...
- 28.1k
0
votes
Cert's altnames are totally unexpected resulting in SSL verification failure
Using Google's (8.8.8.8) or Cloudflare's (1.1.1.1) DNS service solved the issue. Thus it was probably either a scuffed DNS server, bad TTL setting or something like that with my ISP.
- 111
0
votes
Running as an admin, is it possible to create a non-administrative scheduled task?
You can run a scheduled task as non-admin but there are a few things you need to consider.
The user you are running as cannot be admin. If the lucas user is your own user that has admin privileges, ...
- 56k
0
votes
Accepted
What is the impact of deactivating the PCR 4 "Boot manager" from my Bitlocker Group Policy
PCR 4 is the register that logs the exact hashes of all *.efi files involved in the boot process. Meanwhile, PCR 7 is the register that logs which CA certificates were used to validate Secure Boot ...
- 380k
1
vote
Can a website detect if the same physical FIDO key is used for multiple accounts?
A website has no way of knowing where the certificate that was used
is physically located on the user's computer, meaning from which device
it was read.
The answer is No.
- 411k
1
vote
Accepted
Where does Gnome Evolution save the "NSS Certificate" password?
The password isn't for your PKCS#12 file, but for the whole private-key database.
Evolution uses NSS for certificate storage, with the database located at ~/.pki/nssdb/ – which is also shared with ...
- 380k
0
votes
Windows 11: prevent everything except administrator account access to D drive?
There are many elevation of privilege attacks each year, so an attacker could gain administrative privileges and will be able to access d:
So protection by NTFS permissions is ok, but encrypting d: as ...
0
votes
How secure is my BitLocker-encrypted disk after a fresh Win10 install?
When you use a Microsoft account to logon with and your device has supported hardware, Windows activates Bitlocker automatically and uploads a 48-digit numerical recovery password to your Microsoft ...
Top 50 recent answers are included