prevention of an attack vector (e.g. XSS, HPP, CSRF)

learn more… | top users | synonyms

0
votes
0answers
20 views

Linux service on UDP ports under MITM or fuzzing attack

I am rather new to this forum but I will try my best to explain my situation. I run a game server for an outdated game called Project Reality. The community is rather small and the remaining servers ...
11
votes
3answers
1k views

How dangerous is it to use CSS styles from an untrusted source?

I'm a moderator at a forum. We want to have a new style for the forum. We're thinking about announcing a competition to the users to come up with the best CSS design; we would adopt the best ...
0
votes
2answers
201 views

What can I do about being heavily port scanned?

I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to ...
82
votes
12answers
26k views

Why do sites implement locking after three failed password attempts?

I know the reasoning behind not letting infinite password attempts - brute force attempts is not a meatspace weakness, but a problem with computer security - but where did they get the number three ...
2
votes
2answers
894 views

CSRF Login: can Attacker Login using valid credentials?

Consider the picture below (taken from page 21 here). Is this possible? If so, how can I prevent it?
1
vote
2answers
94 views

Does unsecure delivery of keys and certs make a VPN useless?

I had to install an OpenVPN service onto a fresh, disconnected computer, but the keys and certs were delivered through an insecure computer with a highly suspect connection. Let's assume that the ...
0
votes
3answers
124 views

Protect WordPress from brute force attacks?

One of my WordPress sites is being constantly attacked with brute force. I have the WordFence and Clef plugins installed. The number of login attempts is limited to just one. The password is very ...
4
votes
1answer
116 views

How does reuse attack protection (RAP) work?

The grsecurity folks just released a test patch for the 4.5 Linux kernel which includes Return Address Reuse Attack Protection or RAP, a protection technique against return-oriented programming (ROP). ...
106
votes
4answers
11k views

How does ransomware get on people's computers?

I've noticed increased frequency of ransomware questions around Stack Exchange. Some of the people I remotely know had their devices recently infected as well. I'm starting to be concerned. When ...
0
votes
1answer
37 views

Does posting my computer name publicly make my system vulnerable?

I am wondering if it is paranoia and/or privacy overkill to block out one's computer name when posting terminal output in public forums? I don't know enough about networking to know if it's possible ...
1
vote
1answer
56 views

Attack Challenge/Response Authentication by requesting challenges

If a client/server application uses a challenge/response pattern for authentication, e.g. SCRAM or alike, it often involves the usage of nonces (client nonce and server nonce) for preventing replay ...
15
votes
8answers
10k views

Why is ARP poisoning killing all network activity?

Using ettercap and ARP poisoning, I was able to eavesdrop on other connections, but suddenly I was unable to make any connection to the Internet. To restore Internet connectivity, I had to restart my ...
0
votes
1answer
51 views

Review of a protocol

I am wondering if anyone could give a second opinion whether the following is secure or not. I have a system which consist of a mobile device, FTP server and a PC. The mobile device is to upload ...
2
votes
3answers
3k views

CORS & CSRF Prevention for an REST based API

I'm currently trying to wrap my head around how to prevent CSRF. My first solution was to use a token which is suggested everywhere. That would of course fix this problem: <img ...
11
votes
5answers
3k views

Why do hackers scan for open ports?

So, whenever you hear of the mean little hackers who hack websites you hear of "port scanning". I understand what it is (looking for all open ports / services on a remote machine), however that begs ...
9
votes
4answers
1k views

Gmail account hack prevention and recovery

I am doing a research on how to prevent my gmail account from being hacked and what are the options of claiming it back. The associated phone number and recovery email can be changed, in fact I ...
2
votes
0answers
276 views

How can I protect my home/office computer against row hammer?

Row hammer seems to affect ECC memory less, but ECC is still not immune. I have heard of software mitigations like ANVIL, but that doesn't seem to be 100% row-hammer-proof either. What software or ...
1
vote
1answer
48 views

Timestamp vs Replay attack

1) A → B : username, timestamp, h(password) 2) A → B : username, h(password), h(timestamp) Can above two formula prevent from suffering replay attack? I think 1 is immune from replay attack but i ...
3
votes
1answer
64 views

Two factor brute force protection

If I implement two factor authentication using TOTP, I (obviously) have to protect against simple brute force attacks of the TOTP value. If I ask for the TOTP value after successful password login, ...
3
votes
1answer
30 views

SHA 1 no impact to root certificate

I ran a scan on a server and the results of the authentication for digital certificate was as follows : Certificate 1 (root) signature algorithm: Sha256withRSA Certificate 2 (chain of trust) ...
2
votes
2answers
48 views

IP Restricted OTP like Web Admin Authentication Safe or Not

I created a web admin panel with the following security implementation. It is located on a sub directory of the web, which will trigger a 404 Error when tried to access (just like the link is ...
5
votes
4answers
1k views

Is this an attack and how can I fix it?

I don't know where to start in searching the forum for existing threads that might cover my issues. I recently received a spoof email pretending to be from a client for whom I've just started to do ...
13
votes
4answers
2k views

Is it possible to prevent a physical attack on full disk encryption?

I've been researching into some methods to ensure that disk encryption keys can't be stolen, and one that I've come across is called TRESOR. With this kernel patch, you can create a partition that is ...
1
vote
0answers
30 views

OpenID Connect in browser audience verification

With OpenID Connect it's required to validate the ID Token audience claim to make sure the access token was issued for this specific client in order to prevent the Confused Deputy Problem. Now, in a ...
2
votes
3answers
73 views

Should it considered a risk if an organization's server OS and version information is leaked? [duplicate]

I am assuming that it should be considered a risk because there may be several security issues of various OSes known to hackers. If a hacker gets access into the victim's network, the extra knowledge ...
0
votes
1answer
48 views

Does using Tails make one a target? Is it possible to identify users of security-focused operating systems like Tails?

I'm wondering if Tails takes countermeasures to prevent the techniques that http://panopticlick.eff.org/ uses from identifying Tails users as such. (Presumably adversaries could identify users that ...
0
votes
0answers
55 views

Prevention of sinkhole attacks

I have read about many approaches to launch and detect sinkhole attacks in wireless (sensor) networks. Yet I couldn't find any (good) articles to read about the prevention/avoidance of sinkhole ...
1
vote
2answers
264 views

Where can I get a list of “bad” IP addresses that are likely to be used by attackers or spammers? [closed]

Is there an open source project or a list of "bad" IP addresses or ranges that are likely to be used by attackers or spammers? UPDATE: ideally I want it to be a service call so I can call it using ...
3
votes
3answers
61 views

Collect infected email attachments

I am having catch-all mailboxes for a lot of domains. The mails I receive for them are either spam or have viruses or trojans attached. So far I am just throwing them away, but I wondered if it ...
0
votes
1answer
65 views

Can my car be hacked? [closed]

I was reading this article about car hacking and the fact that there are a half million vulnerable cars scared the living daylights out of me! I did some research and many sources claim that car ...
-6
votes
1answer
58 views

Can an ip be forced to connect? If so, how is it done, and how can I prevent it? [closed]

Can an IP be forced to receive data from another IP (specifically IPv6 for both)? If so how does this work, and how can I prevent this from happening to me? Does that have any way to be broken? If so ...
1
vote
2answers
69 views

How to protect my email and social media accounts?

Someone been hacking my account. It seems the person is expert hacker. I have had changed my password multiple times. They seems to know personal details of my life and things on my gmail and facebook ...
157
votes
2answers
21k views

What is DROWN and how does it work?

There is a new recent attack "on TLS" named "DROWN". I understand that it appears to use bad SSLv2 requests to recover static (certificate) keys. My question is: How? How can you recover static ...
1
vote
2answers
100 views

Prevent Session Hijacking, where an attacker steals Session ID(cookie) from the browser physically

Consider a case, where an attacker has physical access of user's machine for 20-30 seconds. The attacker can use this time to steal user's cookie (say using EditThisCookie plugin) and send the cookies ...
4
votes
2answers
480 views

If I send 4mbps of data to a friend with 4mbps connection, will I DoS him?

Suppose my friend has a connection of 4mbps. If I just send him 4mpbs of random data with my server, wouldn't it block his connection? Even if the router has firewalls and closed ports, isn't enough ...
0
votes
1answer
49 views

Event: ET SCAN Nmap NSE Heartbleed Request

Last night I got this incident on my siem tool: Event: ET SCAN Nmap NSE Heartbleed Request. Incident triggered from blacklisted IP to our open VPN server. Clicking on the signature content it ...
3
votes
3answers
45 views

Is there a reason to create a database user without schema privileges?

One of the common things seen people setup is database users (for use by an actual application) that only have SELECT/UPDATE/INSERT/DELETE permissions. A separate user (that additionally has ...
2
votes
3answers
75 views

Can a curl request to an arbitrary url made sufficiently safe?

This is a follow up of another topic (Is allowing unfiltered curl request from a website a vulnerability?) on which I am doing some private research. Given: A publicly reachable webservice that ...
17
votes
3answers
863 views

What prevents people getting charged over NFC in crowded places?

I don't have an NFC-enabled device and I couldn't find any information about this in Google. What is it that protects me against an attacker with a portable NFC terminal charging payments by just ...
-1
votes
1answer
69 views

Oversized XML attack in axis 1.4

How can we prevent oversized XML attack in webservice implemented with Apache Axis 1.4?
12
votes
5answers
6k views

QR codes that can't be copied - possible?

I assume this is impossible, but I need to find a barcode (that can contain a url, i.e., a QR style one). It has to be photographed by our smartphone app, but the image will not be changed over a ...
1
vote
3answers
9k views

What is a salami attack?

Can someone give a clear definition of a Salami Attack? In the book Security in Computing (4th Edition) by Charles P. Pfleeger. It is stated as a attack to data integrity and I quote the passage: ...
2
votes
3answers
3k views

How dangerous is game guard?

Game guard is an anti-cheating application used with MMORPGs . I have read that such applications acts as rootkit over the pc. How dangerous it is to play MMORPGs that uses this application? How ...
60
votes
8answers
14k views

Should I change the default SSH port on linux servers?

Is there any advantage in changing the SSH port, I've seen people do that, but I can't seem to find the reason why. If you have a strong password and/or a certificate, is it useful for anything? ...
1
vote
3answers
79 views

Securely verifying a user based on bio metrics [duplicate]

So we all have cameras on our phone, and we all have faces on our bodies(hopefully). We all also have a want to keep our data safe and secure. To that end many companies have tried to make secure ...
0
votes
0answers
88 views

How necessary is CAPTCHA (or similar) in REST APIs?

I'm currently implementing a REST API designed to be consumed by multiple platforms (iOS, Android, HTML5/Javascript), and I'm trying to protect my service and reduce (AWS) costs by preventing bots ...
20
votes
8answers
11k views

Can malware be attached to an image?

I have a small number of employees who use a company computer but these people aren't very tech savvy. They use an email client and a messaging client. I'm pretty sure they wouldn't click on .exe or ...
3
votes
2answers
148 views

Preventing man in middle attack (LAN)

I am working on a local area chat application which would simply establish connection between two sockets on the LAN and proceed with communication. Now focusing on security, my main concern is to ...
3
votes
0answers
50 views

ASCII Armoring in a little endian system

With regard to the question: How does ASCII-Armoring help to prevent buffer-overflow attacks?: How the armored region prevents the attack? If the most significant byte of the return address is 0x00 ...
-1
votes
1answer
43 views

How to secure the cloud hosted web server safe from attack ? [duplicate]

We have got a web server (Apache) hosted externally. It has got multiple times attacks from the hackers (The Index file getting changed) even after getting moved from another location also. Kindly ...