New answers tagged security
0
If anyone else is wondering where is eject key or still trying to figure out a way to lock (actually sleep) the screen use below key combination:
Shift+Ctrl+Switch off/Power key
OR enable 'hot corners'.
1
There's currently no auto-lockout on failed password attempts on Mac.
Bear in mind any brute force attack is limited by how fast someone can type. It's not like they can hit it with 2000 tries a second.
See https://math.stackexchange.com/questions/739874/how-many-possible-combinations-in-8-character-password for number of possible combinations.
See also ...
1
Why yes, random stranger, there is in fact a way. Just use 7z:
> mkdir fsroot
> cd fsroot
> 7z x ../the-ext4.img
2
When I do NSLOOKUP for domains i use, i get a response that ALWAYS states "non-authoritative answer" This is extremely concerning. Among other reasons, I don't recall this happening previously.
non-authoritative answer is a perfectly normal response from NSLOOKUP.
Non-authoritative answer simply means the answer is not fetched from the ...
1
Currently any user could SSH in (or via a script) do "ls /home" and see all the accounts on the server. They can't do anything with that information of course, "ls /home/user" would fail, however I'm wondering how "ls /home" could just show the current user's folder.
Remove the 'read' permission from /home with chmod go-r.
(...
0
This is an uphill battle. The general solution is to use chroot jails and/or custom shells. Doing this does have limitations though.
IMHO, allowing shell access opens up a large can of security worms, and I wonder if you are undereatimating the risks of shell access.
1
When you are logged in from an administrator account and UAC is enabled,
most of the programs are executed with the permission of a standard user.
The degree of protection varies according to the UAC level that you
choose.
The UAC prompt is not an absolute protection, as hackers are pretty
good about convincing you to press "Yes".
Meaning that the ...
0
Solution as of v91.0.
Open the Chromebook Settings by clicking on the clock in the lower right and then the gear icon on the top of menu.
Click on Security aed Privacy on the left menu and then select Lock screen and sign-in.
Confirm in your password.
Turn on show lock screen when waking up from sleep.
0
A workaround is to go to the directory folder and delete the files in there
3
Connect the printer to a Windows computer directly via an USB cable. You can't upgrade via network.
If, when you connect the printer, a new CD drive called "Smart Install" appears in the explorer, you must disable the "Smart Install" feature in the configuration menus on the printer (Englsh/French).
"Setup Menu Service" / "...
1
ZD Net just now (July 7, 2021):
Microsoft PrintNightmare patch
Microsoft is offering patches for unsupported versions of Windows to
plug the so-called PrintNightmare bugs
The PrintNightmare bug is being tracked as CVE-2021-1675 and
CVE-2021-34527. It's a critical bug in the Windows print spooler with
exploit code in the public domain before Microsoft had a ...
0
Almost ten years laterXD
To show privileges "WhoAmI.exe /Priv" might do it, but "SecEdit.exe" could be worth a look at as well.
Hint: If the command "FSUtil" exits with errorlevel 1, you do NOT have admin privileges.
-1
SSH is a comunication protocol meant to be secure.
So why the comunication should be secure while the password transmission shouldn't ?
At most your password could be intercepted by malware on laptop that read pressed keys.
Find a solution to use ssh key as soon as possibile if security concern you and you wanna sleep relaxed.
0
It seems that WDAC doesn't have proper support for code signing certificates or something is just wrong with mine. I generated a self signed code signing certificate following Microsoft official documentation and now I am able to boot windows with my signed policy
3
The assumption in other answers here is that HTTPS is only used for browsing the web by general consumers. Granted, that a huge majority of HTTPS traffic is the web, but the two are only protocols, and there are edge cases (e.g. a REST based API) where HTTPS could be as specialist as FTP, in which case the argument for and against self-signed certs don't ...
0
This is a DVD Driver. If it is not working, check that the DVD is working and search the DVD maker for another driver.
Microsoft maintains a database of drivers. You might try using the Windows driver.
DVD Driver
PXHLPA64.SYS Information
This is a valid program that is required to run at startup.
This program is required to run on startup in order to ...
1
Is there any conceptual reason why we don't use SSCs on HTTPS, but seems to be fine (may be wrong here) for FTP secure?
I think you are wrong here, i.e. it is not acceptable.
But, FTP is a dying technology as for example shown by the major browsers removing support for it. There only comparably few FTP servers in the first place, at least compared to the ...
1
It all depends on the threat model, reason for using SSL and user base.
In the general/arbitrary case where external users are transferring mildly critical data across the wider Internet both certs should be signed by a 3rd party.
On the other extreme if only a handful of devs need it, a self signed cert can simply be accepted as a one off per ftp client ...
Top 50 recent answers are included
