The operating system is the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardware knowledge. Questions on the topic of operating system security should use this tag; you may also ...
6
votes
3answers
138 views
Is it safe to attach a potentially malicious hard drive to a Solaris machine?
We bring in hard drives from un-trusted sources and would like to ensure that they will not contain any harmful content.
What kind of risk is there for Solaris? As in, if Solaris is running, and I ...
6
votes
3answers
425 views
Remote return into libc attack
It is often shown that non-executable data segemnts are possible to bypass through return-to-libc attacks. It's evident on /bin/sh but is it also possible to invoke a remote shell?
6
votes
4answers
2k views
How to disable Firewire in OpenBSD/Linux to prevent attacks through Firewire?
Since Firewire lacks security, allowing a plugged-in device to access host memory, it's a good thing to fully disable it. If we're not using the BIOS to disable the Firewire port then how could we do ...
6
votes
1answer
1k views
Where and how do operating systems save passwords for user accounts?
Where do operating systems (e.g. Windows) save their passwords? Do they store them in plain text? Do they use hardware modules such as TPM? Are these methods generally considered secure?
5
votes
5answers
905 views
Where to download OpenBSD release ISO's over HTTPS?
OpenBSD claims to be highly secure. So why doesn't it allow downloading the release iso's over HTTPS? Or I'm missing something? Can someone please explain this to me?
5
votes
4answers
3k views
Monitoring system calls (in a reliable and secure way)
It there a reliable method of “monitoring” system calls under Linux?
There is strace for example to monitor system calls and signals. Is there a way for a process to dodge out of strace? If yes, is ...
5
votes
3answers
434 views
Can you extract memory contents from a hibernated Windows machine?
In a recent discussion about hardware hacks, attacks surrounding Windows hibernate popped up. I am not entirely convinced that it would be viable to get stuff out of the memory saved to disk.
When ...
5
votes
3answers
1k views
Is CentOS a good choice from a security perspective?
How secure is the CentOS Linux distribution? I noticed there were times when there were no up-to-date patches for some version of CentOS (e.g., 5.6). I read this on some mailing list that I can't ...
5
votes
2answers
104 views
Monitoring a specific application for creation or modification of files
I don't know if I'm looking for a file integrity monitoring software here.
Basically let's say we have firefox or chromium, let's say the user is watching a youtube video, then we'll find that video ...
5
votes
2answers
328 views
What is the background of the Reference Counter Overflow in Microsoft TCP/IP (MS11-083)?
How unique is this bug?
Is there a more sophisticated and well-studied attempt behind? Is it accidence? The article below says "continouos stream to UDP". What stream? Just an hour stream of zeros? ...
5
votes
5answers
904 views
Suggested reading list: OS exploits
In computer security, my areas of interest include x86 processors, binary exploitation and reverse engineering. I'm also interested in the certain aspects of the minix and the linux kernel(memory ...
5
votes
6answers
188 views
Is it useful to determine the name of the server software while doing a penetration test?
Getting the name of the server software through netcat or curl or any other method, is really useful?
I mean, OS fingerprinting is useful in order to tailor an attack. For example with regard to OS ...
5
votes
2answers
754 views
How effective is the Mac Open Firmware password protection?
I have used Mac's Open Firmware password protection before and I've always wondered how effective it actually is at protecting my stuff.
[assuming a good password]
Would does the firmware password ...
5
votes
1answer
608 views
Does Fedora 15 still use suid bits?
I heard that Fedora 15 will not use suid bits. Is that true?
Is the suid bit a security design bug?
5
votes
3answers
2k views
What differences are there between built-in Administrator and other Administrators?
Are there any significant differences in the rights, privileges, permissions, or other powers held by the built-in Administrator account, and those held by non-built-in Administrator accounts?
5
votes
1answer
282 views
What steps do you take to keep both your computer and internet browsing secure?
I am thinking about your browser setup, antivirus protection, vpn, browsing best-practices and so on.
5
votes
2answers
216 views
Secure OS deployment
I want to deploy operating system images on quite a lot of clients. I know that the images must contain the latest security patches, as well as hotfixes (assuming they are tested and approved for the ...
5
votes
2answers
207 views
Patching Mechanism and security holes
Let me clarify two methods of patching softwares and then I will go straight to the question:
I am using both MAC OS X and Windows and different mechanisms of these two famous operating systems in ...
5
votes
1answer
2k views
Windows task manager can see all processes as non administrator without permission
On Windows Server 2008 R2 operating as a standard user, when I open Task Manager I can see all the processes from different users on the system. I have the option to click "Show all processes" which ...
5
votes
1answer
355 views
Does sandboxie “grab” all the system calls?
Sandboxie: http://www.sandboxie.com
Does sandboxie "grab" all the system calls, e.g.: filesystem calls? Or it "grabs" all the low level calls from a process?
5
votes
2answers
247 views
How can I detect users that have requested AD Administrators to reuse an expired password?
There is a trend among companies I've worked at where administrators (or helpdesk folks) give a user a courtesy extension of the old expired password... rather than forcing the user to change it.
...
5
votes
1answer
1k views
How do I apply a security baseline to Windows 2008 R2?
I've setup a Windows 2008 R2 server with an Active Directory Domain Services role. I would like to apply the Specialized Security – Limited Functionality (SSLF) security baseline to it, but am unsure ...
5
votes
1answer
623 views
Windows mandatory access control: How to remove “mandatory level” label from the file?
1) How to remove "mandatory level" label from the file?
I have two files, for first icalcs return
Mandatory Label\Medium Mandatory Level:(NW)
for second icalcs doesn't return anything (that means ...
5
votes
1answer
82 views
OpenBSD, fbtab and X Window [closed]
The afterboot(8) man page of OpenBSD advises "You might wish to tighten up security more by editing /etc/fbtab as when installing X. "
I would like to know what entries in /etc/fbtab would
make sense ...
4
votes
6answers
673 views
Is there any asymmetrically encrypted file system?
Is there a file system providing a directory where everybody can write, but only the directory owner can read the files? In theory it could be done by encrypting using the public key while writing, ...
4
votes
2answers
2k views
How expensive is it to guess a 15 character password, and should I be worried?
I'm currently using AES encryption (at home) on GNU/Linux (one of LUKS AES-256 variants with xts) and on Windows 7 (Truecrypt) with a 15 characters password (alphanumeric lowercase only plus _).
...
4
votes
2answers
338 views
OSes that are mathematically proven to be 100% (or 99%) secure
Are there any? What are their names? Are they publicly available/downloadable/installable?
Thank you!
4
votes
6answers
1k views
Retrieving OSx Keychain passwords
I have a computer forensics style osx login.keychain file that I am trying to find the passwords from.
I have a very weak mac which I used crowbarkc on to try and brute force but the horsepower is ...
4
votes
4answers
296 views
Data categorization: Critical or not
I need to provide two means for securing data within my application. First is using the Operating System sandboxing model (I am talking about Mobile Phones OS) and the second using the OpenSSL AES ...
4
votes
2answers
124 views
Security test lab setup [closed]
I want to setup a testing lab in my basement for penetration/vulnerability testing & offensive/defensive security skills. I believe I have all the equipment that I need, and if I'll need something ...
4
votes
2answers
240 views
Securing data on laptop's hdd
I was wondering which is the best way to secure/encrypt data in the hard disk on a laptop that runs Ubuntu Oneiric? Setting LVM encryption?
I am mostly concerned about having my laptop lost or what ...
4
votes
3answers
115 views
OS Kernel Hashing
Has anyone had experience with or is aware of any products that hash the OS kernel? This would be used, ideally, for watching for system compromises, auditing, change management, etc. I am looking ...
4
votes
2answers
301 views
OpenBSD 32 or 64bit installer?
is the 64 bit or the 32 bit installer better? (not counting that if i have x>4 GByte RAM) - so i mean like is there any ASLR in OpenBSD?
...
4
votes
2answers
313 views
Added value of Windows Server 2008 over 2003 in terms of security
What is the added value of a Windows 2008 Server over Windows 2003 in terms of security?
Does Windows Server 2008 has enhanced/new security features compared to 2003?
4
votes
1answer
487 views
Why does Windows 7 require a password hint during setup?
Correct me if I am wrong, but I think Windows 7 is the only operating system out there that requires a hint for the first user created on the system (have not had a chance to check out Windows 8 ...
4
votes
4answers
330 views
Is online banking more secure on iOS than a desktop computer?
Does Apple's iOS provide a more secure environment for online commerce (banking or shopping) than Windows or Mac OS X? Since the only software that can run on iOS must be vetted by Apple, the ...
4
votes
3answers
503 views
SCADA Operating System & Security Exploits
So I have a basic question on the SCADA operating system, which the manufacturers do not disclose. From my experience I can see VxWorks running in some of them, and Windows or Linux in some of them.
...
4
votes
1answer
1k views
What are the security implications of enabling WINRM on all domain members?
As Powershell becomes more and more popular, it appears that using WINRM may end up being a better option than using PSEXEC from SysInternals for remote management. Given that WINRM is disabled by ...
4
votes
2answers
347 views
Digital Forensics and Pentesting: what now?
So, i want to enter the security field, and i'm leaning towards security auditing, digital forensics, and reverse engineering.
i'm in school right now, i'm studying x86 ASM, exploring Linux, and soon ...
4
votes
2answers
210 views
What does a MCSE need to learn to be proficient regarding *nix security?
I have a top notch Windows MCSE/MCSD (developer) who wants to broaden his skills with Linux security... but needs to update his skills from the Ultrix / Yellowpages days of 40 years ago.
What ...
4
votes
2answers
140 views
How is the password prompt going to protect me from ruining my computer?
On Unix based systems, I'm often prompted to enter my password before installing or running a program.
Why does this protect me?
If I'm running a kiosk, I understand that a password might prevent ...
4
votes
1answer
136 views
iPad as a secure access terminal
I administer a number of linux servers (hosted on EC2 and linode) which provide VPN termination for thirty-odd users. I'm considering ditching my Macbook running OSX / Ubuntu in favour of setting up a ...
4
votes
2answers
194 views
How is hibernation supported, on machines with UEFI Secure Boot?
I've been learning about UEFI Secure Boot, which attempts to prevent "bootkits" by locking down the boot process so that only signed bootloaders and kernels can be loaded.
Hibernation seems like a ...
4
votes
2answers
496 views
Blackberry QNX / Playbook encryption details
Now that Blackberry received FIPS 140-2 certification for one of it's QNX devices, does anyone have technical specifics on how data is encrypted on both mobile phones or the Playbook tablet?
I'm ...
4
votes
2answers
376 views
How to improve VPS security?
I’m using Linux based VPS hosting, and a firewall and mod_sec help to keep most hackers out. However, over the last couple of weeks I noticed several entries in mod_sec showing that an unknown domain ...
4
votes
1answer
238 views
Attacks against HIDS software running on the same machine
I am interested in the attacks that could be used to compromise or disable HIDS software such as Tripwire or Samhain. I understand that ideally checks should be run periodically and the database ...
4
votes
1answer
353 views
Security Risk of Disabling forceguest in non-AD Environment
Our application group is looking to deploy a product which requires that we disable forceguest in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa. We are running on a Novell network (I know, I ...
4
votes
3answers
593 views
Wrapping system call (in reliable and secure way)
It there reliable method of "wrapping" system calls under Linux ?
(Like LD_PRELOAD for wrapping shared library function calls.)
Is there reliable, secure method of "wrapping" system calls (and, maybe ...
3
votes
2answers
600 views
Backtrack Footprints
I have been hired to to penetration assessment (scanning,testing and so on) ( I am new to the industry and learned through Offsec pentration training.)
While training, I have been doing most of my ...
3
votes
3answers
820 views
Is dual-booting an OS more or less secure than running a virtual machine?
I run two operating systems on two separate disk partitions on the same physical machine (a modern MacBook Pro). In order to isolate them from each other, I've taken the following steps:
Configured ...
