Questions relating criminal activity, performed (or aided) with the usage of a computer system.

learn more… | top users | synonyms

62
votes
9answers
8k views

Can attackers get anything with DoS attacks except crashing the service?

A DoS (short for "denial of service") attack is a form of attack used on web services which aims to "crash" the service. Is there any motive of this form of attack besides crashing the service / ...
34
votes
13answers
7k views

Laptop Anti-Theft Measures

A law firm I've been in contact with has recently been broken into 3 times in the past 4 months. In spite of a number of laptops and other equipment containing sensitive information being stolen, the ...
8
votes
2answers
170 views

Magnet to wipe HDD [duplicate]

This question is for HDD, not SDD. Would a Neodymium magnet like this one be strong enough to wipe the contents of a hard disk drive? How long would such an act take to destroy any data so it's not ...
8
votes
2answers
529 views

Are social security numbers useless by themselves?

If 453.7 million social security numbers have been issued to date. And there are only 1 billion = 1000 million distinct 9 digit integer pairs. Then that means if I were to make up any 9 digits, that ...
7
votes
3answers
1k views

Why aren't ransomware deployers arrested? [on hold]

Why aren't people who use ransomware to extort money from people arrested? Using ransomware is illegal, presumably. The idea that Bitcoin is anonymous is a myth. Given this, it seems like they ...
7
votes
2answers
635 views

Why do so many cracking attempts originate from China?

I recently put a Linux server online and it didn't take long until I had the first attempts to brute-force the SSH login. It's not that I am worried about that - I trust the security of my server. But ...
6
votes
1answer
168 views

Realistic: Exploiting a computer on BIOS/ hardware level in less than an hour? (Infinite preparation time)

I wonder how hard it it to infect a laptop or netbook in 60 minutes or less in a way the victim cannot easily clean their machine by wiping hard disk drives. Let's assume the following: The ...
5
votes
1answer
1k views

Whats the best custom compression method to use when I have SSL?

Suppose I have an application which does encryption using SSL and provided you cannot control what cipher suite is being negotiated, and assuming that I have some custom compression over the data ...
5
votes
2answers
184 views

Are there any known cases were antivirus software have deliberately ignored malware?

Are there any known cases were antivirus companies for some reason have choosen to make their product allow/ignore malicious software? The reason could be government coercion or former trustworthy ...
4
votes
3answers
250 views

Is gzipping content via TLS allowed?

So I have these few compression directives at http level in nginx: gzip on; gzip_http_version 1.1; gzip_vary on; I read that this should be avoided because of CRIME/BREACH attack, is this correct?
3
votes
5answers
12k views

How to Investigate Wi-Fi Intrusion and where to look for evidence?

I'm trying to figure out how to configure a network so that I can tell what an intruder did (in the past) while on the network after they are detected. eg. If someone with a wi-fi enabled laptop ...
3
votes
2answers
283 views

Is revealing your residence physical address when browsing the web a security risk?

I live in a large apartment building that provides a wireless service for residents. All of that traffic goes through a proxy server, and the domain name on that server contains the name of the ...
3
votes
1answer
96 views

Clarification on organized cyber crime concept

We had a small presentation by my colleagues on 'Organized Cyber Crime' and they presented the topic with a supporting case on The Ashley Madison Hack. Well, I disputed the case presentation by saying ...
2
votes
2answers
99 views

What prevents criminals from buying a new PC and going on public wifi? [closed]

Imagine this scenario: A criminal wants to commit a crime online. He buys a brand new pc, finds an open WIFI, connects to TOR network, and commits a crime. How would authorities possibly detect/find ...
2
votes
3answers
265 views

Is it possible to make cracking a password pointless to an attacker with database access?

I've been reading information on making passwords secure, but what are the reasons an attacker would want to put effort into getting the original password? If an attacker does indeed have a copy of ...
2
votes
1answer
70 views

What effect on internet crime did the more recent developments in encryption have? [closed]

I'm doing a presentation on the effect of encryption on internet enabled/based crime, what would people say is the largest development in encryption of say the last 5-10 years what and what kind of ...
1
vote
1answer
59 views

Is there a vulnerability when TLS is decrypted, then encrypted with OpenSSL that is vulnerable to BEAST or CRIME?

Assume that the following TLS proxy exists User <-----> Load Balancer that decrypts, encrypts <------> WebServer Where the web server is running a vulnerable version of OpenSSL. Can ...
1
vote
1answer
2k views

Someone borrowed my phone and Im scared its hacked [closed]

I am from Australia and I use a iPhone 4. Today, a young guy asked to borrow my phone, since he was out of credit and since I was trying to be a good samaritan, let him borrow my phone (also we were ...
1
vote
2answers
2k views

Clients breaking after avoiding RC4-MD5

As per http://projects.webappsec.org/w/page/13246945/Insufficient%20Transport%20Layer%20Protection , we have been recommended to stop using RC4-MD5. The clients supported by our Application are IE ...
0
votes
1answer
160 views

Mobile Broadband, e-Fraud & Anonymity Against My Website [closed]

I was wanting to know if the blend in the title of this post provides e-criminals an open field to explore. What I mean is this: say a fraudster goes and buys a pay-as-go SIM card from a certain ...
0
votes
0answers
46 views

Can someone explain “two tries” in the CRIME attack on TLS

Ok, so I understand most of the attack, but when it comes to DEFLATE I'm not sure how two tries helps us get over the constraint that we see bytes where DEFLATE outputs bits. So basically, lets say ...
-2
votes
1answer
71 views

Privacy vs monitoring cyber crime [closed]

So , how does the police find/monitor criminals' actions (eavesdropping) that do cyber crime(pornography , drug trafficking etc..) without breaking their privacy, and succesfully catch em and provide ...
-9
votes
1answer
243 views

Viable way to ruin a milk corporation? [closed]

Hack into their system and change the "Sell by" date so that it is immediately bad. How long do you think until they notice, if you pull it off?