Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

1
vote
3answers
87 views

Why limit internet access while connected to a remote desktop?

I work in the nuclear industry, and sometimes we have some strange (but understandable) standards for information security. I have encountered one which seems odd and would like to know the potential ...
4
votes
1answer
90 views

Is it good idea to use a access point MAC address as wifi password?

I realized that one network I'm connecting with is using a MAC address of one of its interfaces. If an attacker would know that fact, could he somehow obtain the MAC address wirelessly and break ...
2
votes
0answers
26 views

Reasonable means of security in commercial dealings [closed]

I am writing a paper from a legal standpoint and I'm suggesting legislation for a new duty of care for private companies in the safeguarding of customer's personal information. This will not apply to ...
1
vote
1answer
48 views

MitM attempt resulting in ICMP redirects

I am trying to 'man in the middle' a device on my wifi network. I have configured it to use my Linux machine (also in the wifi network) as a default gateway. On the Linux (attack) host, I switched on ...
1
vote
1answer
39 views

Is Windows 10 [Password protection on wakeup] set to 'Required' relevant when machine is asleep?

I like to just hit the spacebar and have the machine ready without the extra fuss (many times a day.) No one untrusted has physical access to the machine, but it wakes up at ~3am and does updates and ...
47
votes
8answers
26k views

Are powerline ethernet adapters inherently secure?

I have 2 Zyxel PLA407 powerline adapters. Router is downstairs connected to one adapter, other adapter is upstairs about 30 feet away connected to a desktop. I have a house, not an apartment or ...
0
votes
3answers
98 views

Is it possible to obtain the WPA key of a wireless network while connected to it with an Ethernet cable?

I know that there are ways to view saved WPA keys, but I am trying to figure out how to get the WPA key of an access point while connected to the same domain over Ethernet. Also, what if the router ...
5
votes
3answers
114 views

Full Disk Encryption and Network security

I very recently had a job interview in which the interviewer asked me how full disk encryption helped improve network security? Initially I believe they are seperate and not linked, FDE is local to ...
3
votes
2answers
137 views

Preventing man in middle attack (LAN)

I am working on a local area chat application which would simply establish connection between two sockets on the LAN and proceed with communication. Now focusing on security, my main concern is to ...
-4
votes
1answer
80 views

How to stop ip hacking? [closed]

Some people I met in a chat room about 2 months ago hacked me and have been stalking me and sending me stupid messages ever since. I've recently formatted my computer (December 22) in an attempt to ...
13
votes
2answers
3k views

Is this a secure data exchange scheme for a game?

I am writing a multiplayer game. I have a central server which processes everything. For data exchange I use HTTPS protocol. Because this is a game I cannot use computationally expensive systems like ...
1
vote
2answers
191 views

Should i use peer block to better secure my computer?

Should i be using peer block to secure my computer or is there a better way to accomplish the same task? I dont file share, my curiosity of peer block came from my research of security of my ...
1
vote
3answers
97 views

Is there a way to isolate every device on my network?

As it is every device on my network and every app on those devices could be hacking my other devices on my network. The app I just downloaded to my iPhone might be looking for known exploits in my ...
24
votes
7answers
39k views

Is it still unsafe to email credit card number nowadays?

We all know not to do it, but someone emailed my credit card number and cvv code to my gmail. I'm wondering if the risk is so low I don't have to call to cancel my card. The email is sent from a ...
2
votes
1answer
37 views

Wired Deauth-Like Attacks

[story] Good Evening Guys, I just got out of a lan house which uses a system named Geto (Geto Lan House Management System 4.0), and I was wondering if it is hackable. [/story] While searching for ...
2
votes
2answers
246 views

How to capture WhatsApp API requests using Fiddler?

I am trying to capture WhatsApp network requests and not able to do it using Fiddler. This is what I did: Installed Fiddler. Exported Root certificate and installed on my Android device. I modified ...
5
votes
4answers
11k views

Router Ports open

What ports on my home router should be open, say if I'm only using it for browsing the internet. Right now these four are open, 23/tcp open telnet 53/tcp open domain 80/tcp open http ...
3
votes
7answers
56k views

How to bypass restrictive mac address filtering on home network (not malicious)

Background A short sketch of my situation before I formulate my question: I am on a large home network, which is privately administered by a couple of admins. The network consists of a lan and a ...
65
votes
2answers
63k views

Is it a bad idea for a firewall to block ICMP?

This question was inspired by this answer which states in part: The generic firewall manifest file finishes off by dropping everything I didn't otherwise allow (besides ICMP. Don't turn off ICMP). ...
2
votes
3answers
331 views

Is it possible to protect against rogue mobile base stations? [closed]

I just read the answer to this question Mobile numbers capture and transmit data and it sounds surprisingly simple for calls/SMS (and data?) to be intercepted by a fake base station. From what I ...
0
votes
0answers
32 views

Tools or scripts to automatically block IP's from threat feeds via IPTables?

Are there any tools or scripts that can automatically take IP addresses from STIX, TAXII, CybOX, MAEC, or other threat feeds and automatically reconfigure IPTables to block addresses found in those ...
3
votes
1answer
31 views

Airodump-ng -1 DB networks

I'm using airodump-ng to test my network's integrity and when I put Airodump-ng into monitoring mode, I see some networks with no ESSID and the PWR is -1. What are these networks? Are these hidden ...
4
votes
4answers
225 views

Can you use two hardware firewalls?

There is a rule that says "don't use/install more than one firewalls on one computer " (software firewalls to be exact) which means if you have a network and it has five computers you can only ...
3
votes
1answer
63 views

What's the best way to block all external proxy IP's which could be used for pivot points or as a DDOS Source?

At the simplest form - the question is to block external proxy due to an emergency situation due to which management have forced technical teams to get a solution to block all the external proxy or ...
1
vote
4answers
134 views

How to find public IP, if it replaced by NAT IP?

I designed a network architecture in cloud. I placed first IPS and then firewall (with Nat). I want to know if some attacks gone to internal networks which are not blocked by IPS. But I think these ...
2
votes
1answer
51 views

What is the benefit of an SSH tunnel vs a Netcat shell for remote communication?

On the (few) penetration tests that I've done so far, I've typically created a reverse shell with Netcat to run commands on the target machine. Now, it looks like a lot of people like to use an SSH ...
0
votes
2answers
66 views

How would one design security in internet/network-facing industrial devices running for decades where malfunction could cost lifes? [closed]

The current trend goes to make every device accessible from the internet for convinience/economic reasons/... (sometimes even including the control station of a power plant). But many industrial ...
4
votes
1answer
112 views

How often should I check for unknown open ports

I wan to run a cron job on each of my hosts that sends a list of all open ports to a central db on which I will run auditing and forensic queries. My question is how often should this job run so I ...
1
vote
3answers
2k views

Can a network admin see my computer's screen if I'm logged into their wifi network?

I had a friend try to convince me today that simply by signing into a wifi network, without any physical access to your computer, the network admin can see your computer's screen. Obviously this is ...
1
vote
0answers
48 views

How to prevent arp spoofing? [duplicate]

I'm not sure I can handle doing it manually so is there a reliable program I can download that will automatically change the settings on my computer for me to prevent ARP spoofing. Will it matter if I ...
0
votes
1answer
40 views

Decrypting intercepted wpa2 traffic [duplicate]

If you have the wpa2 network key/password how difficult/time-consuming is it to decrypt the trrafic.
2
votes
1answer
194 views

Network setup for malware analysis lab in a corporate view

I am planning to setup a malware analysis lab in the Incident Response team of the company I work for. As I am basically a malware analyst I some how managed to get up with the malware analysis lab ...
1
vote
1answer
89 views

Can network admin detect an MiTM attack?

I am on a WiFi network with a SonicWall router (I'm guessing this comes with an IDS). If someone on my network launches an MiTM attack on me, will the network admin be able to detect this? Does an ...
0
votes
1answer
34 views

Network traffic analyzer for Video [closed]

I am going to be streaming video on an open network. I need the simplest network traffic analyzer that would enable me to know when the video is stopped and started from another system on the same ...
3
votes
3answers
7k views

What are the main differences between the network-level and the application-level regarding information security?

I'm fresh new to the field of security, so I'm sorry if this question seems stupid to you. What are the main differences between the network-level and the application-level regarding information ...
10
votes
1answer
282 views

How can I detect real location of the user through their IP address?

There were many ways to detect the user's IP, for instance we could get it through a single click link or through any other medium of communication where we could get the user's IP. But the tedious ...
6
votes
1answer
514 views

How to detect malicious code sending information to attacker's server in linux

Suppose you have some malicious code on your linux laptop, for example a rootkit or trojan or something like that. Now restrict your attention to the case that the malicious code does transfer some ...
16
votes
1answer
4k views

Is it even possible to hack a television channel?

In spite of all the hacking news in the recent few years I never heard of someone who managed to hack a TV channel. What makes them so secure?
4
votes
1answer
49 views

Which protocols employ cover traffic

Do the protocols employed by wpa 2 and vpns use "cover traffic". A constant busy signal that would not allow for meta data analysis. If not is there a service that does this for you.
0
votes
2answers
117 views

Is hack.chat safe from packet sniffing?

So I recently found this tool called hack.chat. It's a disposable, browser-based IM system. If I were to use this at a friends house, public network, or at work, it is possible for someone on the ...
3
votes
2answers
125 views

Intercepted encrypted traffic

If your internet connection is encrypted, will snoopers still be able to tell when you are active; for example, clicking a link as opposed to merely reading a webpage. Will a snopper be able to see ...
12
votes
1answer
2k views

What's are the advantages of L2TP/IPSEC over plain IPSEC?

As the title says, my firewall (Sonicwall) can do either IPSEC or L2TP/IPSEC for VPN connections. One advantage of L2TP/IPSEC I can see is that the client computer get allocated its own IP address on ...
4
votes
2answers
4k views

What's the difference between an application-level and circuit-level gateway?

From Wikipedia, I understand that circuit level gateways look at TCP handshakes to filter illegitimate traffic and that application level gateways somehow filter application specific traffic. But I ...
4
votes
0answers
168 views

Is the GTK or MIC in the unencrypted portion of a WPA protected frame?

In order to decrypt traffic you must have all 4 portions of the WPA Handshake. In WPA protected data frames, is there an unencrypted portion of that frame that has some sort of identifiable value to ...
3
votes
0answers
104 views

Distinct databases with the same Kerberos Authentication server

Should two deployed applications within a private network requiring distinct databases (for storing their own users credentials) require distinct Authentication servers (implementing Kerberos)? Or is ...
1
vote
1answer
125 views

Traffic anonymization through routing - software and algorithms

I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
0
votes
1answer
529 views

JUNIPER Junos Pulse - how to apply policy to device

We'd like to set up and use Juniper Junos Pulse on iphone and ipad for access to Corporate mail. We have juniper SA and have prepared the policy, but how do we apply the policy to the devices?
1
vote
1answer
80 views

What was the purpose of this attack if one took place?

Background Windows 7 Home Edition HP desktop (no av/no firewall/ remote assistance enabled) two external drives attached/no documents on internal drive connected to fios wifi (wep ...
1
vote
2answers
94 views

Router or Switch can defend against ARP spoofing attack?

I'm learning about ARP spoofing attacks. Can a router or switch defend against ARP attacks?
2
votes
2answers
91 views

Locate server by latency it has to other servers

I just thought about how one can locate a server he has administrative privileges on. My "best" idea till now is to ping a huge amount of servers and then measure the latency of the host to these ...