New answers tagged

1 vote

Why does Pass-the-ticket work?

See the article Pass the ticket which explains the attack. Briefly, the request for accessing a service, called Service Ticket (ST), contains enough information about the user to allow the destination ...
user avatar
  • 411k
1 vote
Accepted

Why does Pass-the-ticket work?

Regarding stealing tickets using Mimikatz: Your Kerberos ticket cache generally stores both the ticket and the corresponding session key in the same place, and the term 'ticket' is often used as ...
user avatar
  • 380k
0 votes

How do you find what program is installing third-party Chrome extensions?

Open a new chrome profile so that the notifications of the extension being added are there. Then go to chrome://extensions and then turn on developer mode at the top copy and paste the extension ID (...
user avatar
  • 1
2 votes
Accepted

console.log (Marketo Munchkin) appeared on my drive

Here's the explanation and solution for the appearance of the console.log file created by SketchUp: https://www.dedoimedo.com/computers/sketchup-console-log.html tl;dr: There's an (outdated) chromium ...
user avatar
  • 36
2 votes

Are the new vulnerabilities found in Chrome also in Edge?

Microsoft Edge is based on Chromium and also has a Guest Mode. Would the two security vulnerabilities also affect Edge? Microsoft has already documented and patched both vulnerabilities. CVE-2022-...
user avatar
  • 39.3k
0 votes
Accepted

Are the new vulnerabilities found in Chrome also in Edge?

It depends on where the flaw is. If the flaw is in the page rendering engine itself (and it usually is), then it will be common for all Chromium-based browsers. If the flaw is in some Chrome-specific ...
user avatar
  • 1,435
0 votes

What generates this message: "*** SECURITY information for hostname ***"?

It would seem that the Sudo program or whatever it is sent this message as an alert that there was an invalid password attempt while trying to use sudo. When I run sudo visudo, there is a setting ...
user avatar
1 vote

Does Asus router require internet on initial setup?

For all current Asus routers (regardless if they run the stock Asus firmware or the AsusWrt alternative) you can connect to it without any internet connection. This goes for both the initial setup as ...
user avatar
  • 28.1k
0 votes

Cert's altnames are totally unexpected resulting in SSL verification failure

Using Google's (8.8.8.8) or Cloudflare's (1.1.1.1) DNS service solved the issue. Thus it was probably either a scuffed DNS server, bad TTL setting or something like that with my ISP.
user avatar
  • 111
0 votes

Running as an admin, is it possible to create a non-administrative scheduled task?

You can run a scheduled task as non-admin but there are a few things you need to consider. The user you are running as cannot be admin. If the lucas user is your own user that has admin privileges, ...
user avatar
  • 56k
0 votes
Accepted

What is the impact of deactivating the PCR 4 "Boot manager" from my Bitlocker Group Policy

PCR 4 is the register that logs the exact hashes of all *.efi files involved in the boot process. Meanwhile, PCR 7 is the register that logs which CA certificates were used to validate Secure Boot ...
user avatar
  • 380k
1 vote

Can a website detect if the same physical FIDO key is used for multiple accounts?

A website has no way of knowing where the certificate that was used is physically located on the user's computer, meaning from which device it was read. The answer is No.
user avatar
  • 411k
1 vote
Accepted

Where does Gnome Evolution save the "NSS Certificate" password?

The password isn't for your PKCS#12 file, but for the whole private-key database. Evolution uses NSS for certificate storage, with the database located at ~/.pki/nssdb/ – which is also shared with ...
user avatar
  • 380k
0 votes

Windows 11: prevent everything except administrator account access to D drive?

There are many elevation of privilege attacks each year, so an attacker could gain administrative privileges and will be able to access d: So protection by NTFS permissions is ok, but encrypting d: as ...
user avatar
0 votes

How secure is my BitLocker-encrypted disk after a fresh Win10 install?

When you use a Microsoft account to logon with and your device has supported hardware, Windows activates Bitlocker automatically and uploads a 48-digit numerical recovery password to your Microsoft ...
user avatar

Top 50 recent answers are included