The tag has no usage guidance.

learn more… | top users | synonyms

3
votes
0answers
27 views

How to mitigate risk of X11 buffer ghosting on window resize and X server shutdown

The Buffer "Ghosting" Phenomenon It is possible to observe contents of (old and currently used) graphics buffers on a monitor under certain circumstances, posing an information disclosure risk, when ...
1
vote
1answer
43 views

Windows command line does not check for revoked certificates: How bad is it?

I recently updated my D-link wifi dongle driver. However, I had to do this through the command line because Microsoft revoked the D-link certificates after a leak. The executable would simply not ...
0
votes
0answers
32 views

Rootkit driver to change executed instructions

Say I have a process that has a bunch of functions I want to NOP out. From userland, I want anyone viewing the virtual memory to see the normal instructions. However physical memory, and in the end ...
0
votes
0answers
44 views

How to prevent injection of Layered Service Provider (LSP) module in application with kernel-level?

LSP technology is often exploited by spyware and adware programs in order to intercept the communication across the Internet. For example, malware may insert itself as an LSP in the network ...
3
votes
0answers
36 views

Where could the iOS security key be stored on the hard drive, *if printed* when enabling 2 Factor?

Apple allows people to print out their recovery key when enabling two factor. Taking the assumption that the local spooler may not do a great job of protecting, secure erasing, and eliminating traces ...
4
votes
3answers
75 views

How risky is to use non-free wireless network driver?

Intel wireless network adapter in my computer requires a non-free driver to work. I don't want to install non-free software to my debian system. However it is a notebook and without wireless network ...
1
vote
0answers
188 views

How to monitor kernel mode driver traffic (ESEA client)

E-Sports Entertainment Association (ESEA) is an alternative method of finding players to match up against in (among others) Counter Strike GO. They are known for having the best anti-cheating measure ...
0
votes
0answers
18 views

Is SctpDrv considered “safe”?

Is "SctpDrv" considered to be a "safe" 3rd party kernel driver? I'd like to use it and distribute it to clients but I am not sure if it is reputable and malware free. ...
0
votes
1answer
452 views

How does driver install with an expired cert?

I'm working on making a silent installer of WinpkFilter driver. In my silent installation, I'm always getting a (not so silent) prompt that says "Windows can't verify the publisher of this driver ...
2
votes
1answer
63 views

Security implication of non-free drivers

I was wondering what the security implications are of using non-free drivers on a linux laptop. Especially for graphics and wifi.
3
votes
2answers
199 views

Can a Vulnerability Management tool highlight BIOS and driver-level vulnerabilities?

Several known vulnerabilities affect BIOS (Reference URLs below). So my question is, are the Vulnerability Management tools (such as Nessus, NeXpose, Qualys, etc) technically capable of highlighting ...
1
vote
0answers
186 views

Does Windows 8 UEFI Trusted Boot protect SSDT table from modification?

I read from a link that says: Trusted Boot takes over where Secure Boot leaves off. The bootloader verifies the digital signature of the Windows 8 kernel before loading it. The Windows 8 kernel, ...
5
votes
2answers
1k views

What are the implications of including binary blobs in the Linux kernel?

According to this there are compelling reasons for caution when installing obfuscated binaries. Knowing this, how can running binary blobs as a part of the Linux kernel be acceptable from a security ...
12
votes
2answers
834 views

Is OpenGL a security problem?

Today, almost all desktop and most mobile operating systems and devices support some version of OpenGL. I'm wondering about the security implications of that: In many cases, the GPU has complete and ...