1
vote
1answer
24 views
Testing a chroot environment for privilege escalation vulnerabilities
I'm looking for holes in my current implementation of a chroot jail that I have implemented for a group of users. Is there anything I can do better here?
I utilized the following packages:
RHEL6
...
3
votes
2answers
63 views
Standards for encrypting passwords in configuration files?
My workplace has a standard that plaintext passwords are not allowed in application configuration files. This makes enough sense on its face, in case someone gets access to the config files they ...
2
votes
1answer
28 views
How to determine which security testing method to use if resources are limited
My resources are limited, and thus i am wondering what methodology can I apply to know where black box testing is best fit, where white box testing is best fit? Or even where pen testing is better ...
2
votes
2answers
49 views
How likely is an infection with an outdated skype on linux?
Today I found an article about a skype hotfix and noticed that the repo I use on my linux notebook:
deb http://download.skype.com/linux/repos/debian/ stable non-free
Doesn't have the new version, ...
0
votes
0answers
7 views
How does a company set up a private App store for BYOD scenarios? [migrated]
This answer mentions that it's possible for a corporation to set up a private App Store for iPhone, Android and possibly other devices.
How is this possible, and how can one implement this?
0
votes
0answers
17 views
How bad of a practice is it to mount tomcat's manager to Apache2?
If we take into account only security concerns, how bad of a practice is it to mount tomcat's manager to Apache2.
E.g.,:
JkMount /manager/html* ajp13_worker
I'm doing this because my company has ...
0
votes
1answer
31 views
Categories of attacks in Snort
Is there any category for Snort rules that classifies them according to attcks such as U2R, R2L, .. ?!!
Or how many well known attacks can it finds?!
0
votes
2answers
55 views
Where is cross-site scripting code processed?
Where does the snippet or Javascript get processed when we enter that in input box of HTML page or any URL?
Does it go to the server and come back or does the browser process it?
1
vote
2answers
76 views
Google Account Compromised - Possible Investigation?
This morning, I've not been able to login to my Google Account.
Google says, my account has been compromised and I had to walk through account credentials recovery and verify (SMS to verify phone ...
2
votes
3answers
84 views
Clicked on fake “Download Now!” ad on file transfer site (legal file for legit purposes) by accident; does anyone know what measures I should take?
I was sent a file by a coworker via "sendshare" - my first time using the service. The page loaded a bit slowly and the ads came in before the actual download link. I was in a hurry to get the file - ...
1
vote
1answer
48 views
Where do I find more information about a given hacking attempt requests to my website?
Having a report which shows me to which requests my website responded with a 404, I often find hacking attempts like this:
Some are recurrent and too explicit, like PHPMyAdmin-type requests ...
0
votes
0answers
36 views
how to write a good shellcode for higher file privileges
Good evening. I'm learning exploits from the book Hacking: The Art of Exploitation and this shellcode:
\x31\xc0\x31\xdb\x31\xc9\x99\xb0\xa4\xcd\x80
\x6a\x0b\x58\x51\x68\x2f\x2f\x73\x68\x68\x2f\x62
...
0
votes
1answer
22 views
symetric encryption and signature
asymetric key is normally used for signature for non repudiation.
But what if one uses EMV CAP in TDS mode as described here http://en.wikipedia.org/wiki/Chip_Authentication_Program ?
Is non ...
1
vote
1answer
39 views
Are Disqus and the likes a security risk?
Can commenting services like Disqus, IntenseDebate, etc. pose a security risk for corporations?
0
votes
0answers
21 views
PGP encryption/signature with BouncyCastle
I've implemented PGP encryption and signature using BouncyCastle on Java. It works, but all the examples I'm based on have hardcoded the algorithms for symetric encryption, hashing and compression.
...
2
votes
2answers
53 views
Is it true that encryption bit “strength”, although numerically identical, may actually be different depending on the algorithm?
I was reading recently that for AES, the encryption strength is actually the key size/length, so 128-, 192- or 256-bit. While, for SHA-2, the encryption strength is measured against the message digest ...
4
votes
3answers
69 views
What would the cryptographic impact be of knowing the output of /dev/urandom?
Another noob question, I know, but something I'm unsure about.
If I somehow magically knew the output of /dev/urandom at any given time, how much would that weaken a given encryption system? Or, ...
0
votes
2answers
50 views
What are best practices for implementing Remote Desktop within a corporation?
After the recent critical vulnerability: 'MS12-020: Vulnerabilities in Remote Desktop could allow remote code execution' I have been looking for a hardening checklist or in the scenario that I am an ...
-1
votes
1answer
38 views
Restore session in Firefox
Restore session in Firefox
What does this mean, is it related to the session concept which is stored on the web server?
If I stop the computer with my web-app, and then start it again before the ...
-1
votes
0answers
28 views
How to find the encryption of a cipher and apply it to another key
Guys Iam very new to cryptography so please help me out with this one
I have a Question Key-1 which + some encryption gives Answer key-1. I have to find the encryption to apply it to another Question ...
1
vote
2answers
76 views
Is scanning a site directory considered illegal penetration testing?
Does anyone know if using Dirbuster [link] to scan for unlisted directories and their contents is (possibly) legal in say the US?
1
vote
0answers
35 views
How often should an SSH key pair be changed? [closed]
Possible Duplicate:
How often should an SSH key pair be changed?
I've been using a passphrase-protected 1024-bit RSA key for passwordless SSH via ssh-agent between my own systems for years. ...
4
votes
5answers
74 views
How often should an SSH key pair be changed?
I've been using a 1024-bit RSA key for passwordless SSH between my own systems for years. More recently I've also started using it for passwordless access to my hosting providers and to source code ...
2
votes
0answers
41 views
Two-factor authentication w/ActiveSync?
Scenario:
ActiveSync
Authentication method:
certificate-based authentication AND AD domain username-password
Encrypted on device:
public & private key
AD username & password
...
-2
votes
1answer
63 views
Safest and most secure way for backing up private data
Here is what happened, I first collected my data into one folder,tar'd it, encrypted it with gpg, put it in truecrypt container, and after that started to copy the container to another place, but ...
23
votes
6answers
1k views
Risks of giving developers admin rights to their own PCs
I need to convince my internal IT department to give my new team of developers admin rights to our own PCs. They seem to think this will create some security risk to the network. Can anyone explain ...
4
votes
1answer
76 views
Are we under hacker control?
We have a Web Server that mount Centos. Onto that WS there is an Apache (version 2.2.3) and some sites.
You can log on only if you have a certificate (for root user) or via ftp (a restricted ...
6
votes
2answers
142 views
PHP - How to do safe input filtering in the light of multibyte encoding vulnerabilities?
For days now I try to get my head round how to write a secure web application in php, and it turns out to be particularly difficult. The more I read, the more I sink in deep swamps full of ...
2
votes
1answer
54 views
How to protect against exploitation of email addresses from an mistakenly expired domain?
I have a domain name that I have registered for a long time.
Due to a combination of bad luck and oversight, the domain name expired and was rebought by somebody else.
I am attempting to buy the ...
4
votes
2answers
54 views
iPhone - logging out user when app goes into background
Our (financial/banking) mobile app requires user to enter username/password in order to get data via webservice calls. Once user is logged in, credentials are stored in global variable until user logs ...
4
votes
3answers
190 views
How do I protect myself against 'hole 196'?
I came across this question a while ago and read about hole 196.
Is there something I can install on my laptop to protect it against WPA2 Hole196?
Software (such as Snort or DecaffeintID) can ...
1
vote
2answers
65 views
Are flash cookies still a threat and that persistent?
One year (or more) ago flash cookies were really a problem, because they could not be deleted from within a browser. They were not managed by the browser but by the flash player. Flash cookies were ...
0
votes
2answers
60 views
Can the salt for PBKDF2 be a hash of the user-entered password?
I want to derive a key from a password in a client application that will be used as a master key that decrypts a data key. As far as I understand the salt should be private knowledge. Would it be ...
8
votes
3answers
285 views
Is my computer at risk of being hacked when using public Wi-Fi?
I'm sitting at a cafe, using their public Wi-Fi. I don't go on sensitive sites; I basically go to a music site and listen to a live stream, for which there's no login. I don't check my email or visit ...
0
votes
1answer
61 views
Recover Word file password [closed]
I have a Word (.doc) file that I created a long time ago I believe in a Windows XP. The problem is I don't remember the password anymore and need to access the file. What would you recommend I do? I ...
2
votes
1answer
66 views
Why are handheld tape recorders used?
Pardon me for doing the following as I know it is cringed upon (the tv reference) but:
Is there any good reason for the usage of 'tape' recorders? Ex. taping a conversation between criminals, this is ...
1
vote
0answers
17 views
Assistance Cracking Classical Cipher [migrated]
Below is the cipher text I am trying to break and as you can see its rather short which is why I am having so much trouble.
WOYFN ZCMSH VUVTG BFUTW ABTZP FHIMF TFOSU UXFQC HKVKG MPUUQ MHRXI OVBRZ ...
0
votes
1answer
44 views
Changing malware trends in VM
I recently came (Dunno, since when it was happening) to know that malwares can detect if they are running inside a VM like Vmware, and thus can change their behaviour.
So my question is how the ...
3
votes
4answers
113 views
Is it safe to send a CSR via email?
I'm new to commercial SSL certificates and would like to know if a CSR that I generate is safe to send via email?
1
vote
1answer
106 views
Is using the same RSA key pair for both (signing and encryption) & (signing and encryption) a bad idea? [closed]
Possible Duplicate:
Why should one not use the same asymmetric key for encryption as they do for signing?
I'm new to IT Security. I still can't figure out why using the same RSA key pair ...
-1
votes
0answers
34 views
What is a “trustlet”? [closed]
Please check the picture on page 6 of this document.
I couldn't find an exact definition or interpretation of the term trustlet.
Could you provide more information?
Does it have anything to do with ...
0
votes
1answer
100 views
Wifi WPA cracking with reaver
Hello! This question for anyone who tried or succeeded to crack wifi wpa/wpa2 keys with backtrack linux and reaver. So, I wanted to test on my wifi router. I started everything as described here.
But ...
8
votes
1answer
155 views
What's the risk if I accidently type my password into a username field (Windows logon)?
I'm used to logging into my personal Mac which is a password-only field (like waking from sleep mode). Sometimes I have to use a Windows network on which I have an account, but of course I have to ...
2
votes
2answers
59 views
sanitizing input/output in php/codeigniter
I've been making some progress learning about web application security. Right now I'm trying to finalize my strategy for sanitizing input and output.
Background: Users can submit reviews to the site, ...
1
vote
0answers
44 views
OSSEC large scale deployment [migrated]
We have a data-center and as a happy OSSEC user I am trying to convince my management to use it for host intrusion detection. However I have never deployed it on more than a handful of servers and I ...
0
votes
0answers
53 views
Email draft was answered without being published [closed]
How can someone read my draft in an email link? Someone answered my draft when it was never posted. Is there software that allows someone on an email link to see drafts or forwards or blind copies?
0
votes
2answers
54 views
Will virus downloaded to guest OS affect Host OS? [closed]
Possible Duplicate:
How secure are virtual machines really? False sense of security?
If I download a file in Guest Windows XP machine in Vmware Workstation, which is a virus. Can it affect ...
-1
votes
2answers
49 views
What information is sought by malware researchers and those reverse engineering malware?
I have seen many write-ups on "malware research", what information are they trying to gather?
Is it the origins of the malware? Or its behavior patterns? Or something else?
3
votes
1answer
93 views
Security of GPG encryption with AES and MD5 if MD5 is broken
I have a file encrypted with gpg, using AES256 and MD5. Suppose that the MD5 hash function is broken, but not the AES cipher. Does that make it easy to crack decrypt the file?
1
vote
2answers
84 views
SSH : Remote Host Identification Changed
As part of my daily routine, I was SSH'ing to one of the corporate servers.
However this time I was presented with following message
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ ...
