The operating system is the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardware knowledge. Questions on the topic of operating system security should use this tag; you may also ...

learn more… | top users | synonyms (1)

1
vote
3answers
39 views

Security in Windows 7 vs Ubuntu

I have two semi-related questions about the security-related reasons I hear for switching to Ubuntu over Windows 7 (or from other Windows OSs to other Linux distributions). Someone people say that ...
0
votes
1answer
34 views

Is there a solution for runing processes in encrypted mode on runtime?

Is there any solution for securely running encrypted processes on an untrusted machine over the WAN? In public clouding, you can split your processes and send process request over the WAN, but you ...
7
votes
2answers
397 views

How nmap guesses the operating system?

nmap has the capability to guess the operating system with the option -O. I was highly surprised that it can find the correct kernel or service pack. * How nmap guesses the operating system? * What ...
3
votes
1answer
144 views

Hardware encrypted external HDDs

I'm planning to buy an external HDD with hardware encryption, namingly the WD My Passport Ultra 2TB. On the WD website the information about the encryption is sadly scarce so I'm asking here. How ...
1
vote
2answers
57 views

Can a detached hard disk reveal the system information of machine from which the hard disk is detached?

Can an internal hard disk (on which Ubuntu or any other OS is installed) that I detached from the PC or laptop (Keeping the OS as it is) and connected to some other PC or machine reveal the info of ...
0
votes
0answers
99 views

Pentesting an ATM OS upgraded from Windows XP to Windows 7

How to approach penetration testing of a ATM OS that was upgraded from Windows XP to Windows 7? From what I gather, the testing flow should be as follows: Architectural Review Pentesting OS and ...
2
votes
2answers
135 views

Is a monolithic kernel more secure than a microkernel for a small OS?

Upon building a kernel for a small CLI system what option is the best one? I don't know much about what microkernels can do so bear with me if I'm being ignorant: In one instance, there are ...
0
votes
0answers
43 views

Bitlocker with bootloader on a seperate drive

I believe the answer to this may simply be it's not possible but all the same: Is it possible to have an OS partition protected by bitlocker loaded from a seperate drive with another bootloader ...
0
votes
1answer
107 views

Why doesn't the OS give every application a secret password?

As far as I understand if Dropbox wants to automatically run in the background without asking the user for a password it has to store the password somewhere on the harddrive and has currently no way ...
6
votes
2answers
1k views

What does “sandboxing” mean for Chrome OS? [duplicate]

I read about Chrome OS in the security section, and I was wondering what the meaning of "sandboxing" that they keep mentioning is. Is this sandboxing like Selinux or Apparmor ?
1
vote
2answers
79 views

Is it safe to create live usb on an infected system?

I am using Ubuntu 13.10. If my laptop is infected with malware, can I get rid of it by creating a live usb on it and using that live usb format and re-install the ubuntu ? I mean is it possible that ...
0
votes
1answer
40 views

Recommened books for learning operation system [closed]

I see other similar question here. I want to become Malware analyst. I have learn to program in Python and C++(not on expert level but fairly good). Before I continue with Assembly language I want to ...
2
votes
1answer
43 views

Could see image of previous session after restarting and switching OS

(I have GNU/Linux and Microsoft Windows installed.) I played a game on Microsoft Windows, quit the game, restarted the PC, and selected GNU/Linux. On the login screen, the background image was ...
1
vote
2answers
185 views

Intrusion Detected - OS Attack

I have recently gotten a prompt from my anti virus stating that there was an intrusion with an OS attack as describe in the link below: ...
1
vote
2answers
118 views

the dangers of internet forums - what is FUD, what is not

I just visited a forum and a member knew what OS I was running without me saying anything (a not TOO common distro of linux). Now I'm not sure how he exactly he might have done it, or what information ...
1
vote
2answers
119 views

How to hide or obfuscate the type of OS?

I get the OS type of a remote host by: connecting to an open port (telnet <host> 22); using Nmap (nmap -A <host>). What are techniques and how to hide or change the information about ...
0
votes
1answer
45 views

What parameters to check to say that a computer running Windows is slow in responding because of infection?

When interaction between the user and the operating system is too slow (Windows become slow in responding to different user's request): what parameters could we check (and that we could use within a ...
0
votes
1answer
53 views

Can benign software modify Widnows DLL files?

On Windows (XP, 7, 8, NT ...): can .dll files be modified (in any manner) by benign programs/software already installed/running on the computer ?
0
votes
1answer
75 views

What registry windows keys malware target often?

I wonder what are the main registry windows keys malware target often ? I would love to code a program that will check the state of those windows registry keys for eventual modifications by malware.
1
vote
2answers
112 views

Is it possible to defeat the OS detection capabilities of network scanning tools?

Network scanning tools such as nmap have the capability to infer operating system version based upon lower-level system details. EG: TCP/IP stack behavior, etc. Are there any known methods to trick ...
-2
votes
1answer
102 views

Proccess to exploit an OS vulnerability [closed]

What are the steps to use an exploit on an OS vulnerability? I tried the popular ms08-067 on an XP machine, following a guide found on the internet, discovering Metasploit etc., but I can't figure ...
1
vote
2answers
73 views

Can a drive-by download attack crash the OS?

Are there cases where a serious drive-by download attack could crash the operating system or the browser ?
0
votes
0answers
46 views

Where is the scope of ISO7816 standard family in smartcard operating systems interoperability?

ISO/ICE 7816 defines a series of standards for using in smart cards. For example, part 4 of these series named "Organization, security and commands for interchange" (which it's last edition has ...
3
votes
1answer
127 views

How does binary code execution vulnerability work on a modern OS?

In a modern OS I think that: the .text section where binary assembled CPU instructions are stored cannot be modified the .data/.bss section is marked as no-execute so that the information there will ...
1
vote
2answers
71 views

Automatic vs Manual

When it comes to technologies that directly affect information security, how do you determine when it is better to use an automatic option instead of a manual option, and vice versa? I already feel ...
11
votes
4answers
1k views

Are exploits platform dependent?

Looking over an overview of the newest published IE exploit, I noticed what I think is assembly. I don't know anything about exploit development, but I know a little about assembly. Seeing that ...
-3
votes
2answers
122 views

What makes iOS more secure than other phone OS [closed]

Let's start off with an example. Here in Canada, credit card companies cannot upgrade you credit card limit. You need to make a request, that will then get analyzed and then, depending on your status ...
3
votes
4answers
199 views

One computer with multiple OSs in different drives

I use my personal computer for both programming work and gaming at my free time(and sometimes penetration testing) all these in different operating systems each. The problem is that I dont really ...
2
votes
1answer
65 views

After restoring from a (valid) full disk backup can malware still persit?

In the comments to this question it is mentioned that even after a backup recovery malware still can persist. Do I understand that correctly? How is this possible? If Acronis True Image is used to ...
0
votes
2answers
65 views

Is there a way to prevent software from accessing hardware IDs?

I think this is related to this question, but I would like to know if there's also a way to prevent "third party" applications from seeing hardware IDs (motherboard, hard disks, and others), or giving ...
-2
votes
3answers
37 views

OS/Host age as a security attribute

Assuming the following: Operating arbitrary software in a completely read only environment is impractical. (While some software will operate RO without issue, it can be nigh impossible for other ...
0
votes
4answers
75 views

Isolate dual system

Say I have a computer with 2 operating systems: one secure, one... not so much. Now say I want to use the insecure system to do some work I can't do on the secure one. What is the best way to isolate ...
2
votes
1answer
65 views

Are files created in Chrome OS developer mode tracked by Google?

If I enable developer mode, then open a shell and create /some/directory/temp.txt, it is invisible to me through the Chrome Filesystem API. But does this mean that it's also invisible to Chrome OS ...
1
vote
0answers
55 views

Multiple Independent level of security vs Multi-level security

I am looking for a way to isolate two different networks from each other. Suppose we have 2 different network (public and private). I am looking for a way to connect to these two network via single ...
-1
votes
2answers
83 views

How to use encryption on proprietary software

I wonder if it's possible to develop a secure point to point encryption application (a pgp message application for example) on a proprietary software. If such an application was developed, let say on ...
0
votes
2answers
226 views

How to identify a specific operating system with port scans?

According to the implementation of the TCP/IP stack an attacker is able to identify which operating system is running on a network device. Is there any paper or the like according on this topic?
2
votes
1answer
165 views

What does Msgsrvr and Scientia-ssdb do?

I'm having a task in a computer security class in school where I'm supposed to scan a host for open ports in order to find out what services is being run there. I have found out (among other things) ...
2
votes
2answers
998 views

Major differences between Kali and SecurityOnion

Curious about the major differences between Kali Linux and SecurityOnion. Do you think it would be easy or useful to replicate what has been done with SecurityOnion on Kali? Why is there such a ...
7
votes
5answers
1k views

Forensic research: What OS to use [closed]

I have been given an assignment from my school, in wich I have been given a Virtual image of a compromised system. The first thing I need to do is setup a environment to wich we can mount the image. I ...
0
votes
1answer
117 views

Do the Linux binary blobs contain any intentional security holes?

This question covers the risks of accepting Binary blobs in one's distribution. This may be a very paranoid conspiracy question. But considering all the topics regarding the NSA in 2013 one cannot ...
2
votes
2answers
484 views

Basic Security Knowledge [closed]

Perhaps I am being both naive and overly ambitious in my first post but I have a huge interest in learning about network and system security and am at a loss as to where to begin. I realize that stack ...
2
votes
4answers
825 views

Tails like OS for Smartphones

In Jacob Applebaum's latest talk at the 30c3 conference, he advised all journalists to use Tails or similar OS for their laptops. Does anyone know of a similar OS or functionality for Smartphones? ...
13
votes
7answers
2k views

Can hackers detect my operating system?

I've seen people demonstrating the use of backtrack to attack VMs. In one of the components of backtrack, it shows the operating system of the targets. Since support for Windows XP is ending soon, i ...
1
vote
1answer
56 views

Trust a possibly compromised system for iso downloads

My only operational computer has shown some wierd signs like disapearing logs, rotated logs gone random files getting updated and so on. Tho this is my only operational computer and I have decided to ...
2
votes
1answer
3k views

Where does Active Directory store user hashes?

During a penetration test for a client, having an infrastructure with multiple (5) Active Directory Servers (Win Serv 2008 R2)... I found a nice exploit to drop a system shell in one of the servers, ...
0
votes
0answers
18 views

Privacy of my files and messages while another device is connected to my iphone [duplicate]

If someone is connected to wifi through my device can they copy my files documents or messages to their device
4
votes
3answers
532 views

Is Chrome in Metro Mode more secure than Chrome in Desktop Mode?

With Windows 8, Microsoft introduces the Metro Apps which run in a sandbox environment, and therefore should be more secure. I would be interested to know if this higher security that the metro apps ...
2
votes
0answers
62 views

Creating New Acc in Mac Mail 1st Connect to Server not SSL is uname & pw tx secure?

It appears that whenever you set up a new mail account on Mac Mail on OS X (or iPhone, iPad etc), that as soon as you enter the server and the mail account user name and password, Mac Apple-Mail tries ...
3
votes
0answers
113 views

BSD encryption advantages [closed]

If someone who knows about the BSD project has a moment to answer this, I'm wondering a few things about the encryption used. It's more than what I'm finding in the docs and on Wiki/Google (even the ...
0
votes
1answer
67 views

access control-intersection of subjects’ permissions

In the book named "operating system security", I read this paragraph: "Protection domains can also be constructed from an intersection of the associated subjects (e.g., Windows 2000 Restricted ...