The operating system is the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardware knowledge. Questions on the topic of operating system security should use this tag; you may also ...

learn more… | top users | synonyms (1)

1
vote
3answers
848 views

How to find the OS of the target machine

I am new to this field. Currently I am using Linux OS and my question is how can I find the OS of another machine to which I do not have a direct access. I am interested in any possibilities which ...
1
vote
2answers
2k views

SUN Remote Procedure Call Port 111 [closed]

I have found on my machine port 111 is open. This is listed as RPC. I understand there are possible attacks on this port. How can my machine be attacked if port 111 is open? How can I secure this ...
1
vote
1answer
487 views

Firefox Desktop Shortcut Being Renamed

On my Vista PC the Firefox shortcut icon is being randomly renamed. The name changes to some variation of a recently visited URL. This unwanted action has survived several version updates. Of course I ...
1
vote
2answers
101 views

Is it possible to defeat the OS detection capabilities of network scanning tools?

Network scanning tools such as nmap have the capability to infer operating system version based upon lower-level system details. EG: TCP/IP stack behavior, etc. Are there any known methods to trick ...
1
vote
1answer
342 views

If password is changed on Active Directory, can I ensure that PC must be restarted before logon with new password

Basically, if I have a Windows computer connected to a domain, how can I ensure that if the password is changed on Active Directory that the computer must be restarted before the new password takes ...
1
vote
2answers
101 views

the dangers of internet forums - what is FUD, what is not

I just visited a forum and a member knew what OS I was running without me saying anything (a not TOO common distro of linux). Now I'm not sure how he exactly he might have done it, or what information ...
1
vote
1answer
217 views

OS fingerprinting protection - why not by default?

This article describes how to fool nmap in it's OS fingerprinting detection. In short, nmap sends malformed packets to open and closed ports and listens to the responses. Because every OS implements ...
1
vote
1answer
594 views

What kind of hashing is generally used in log-in modules?

Do operating systems hash the log-in password? What hash function is used in Windows XP, 7, 8,Linux Ubuntu, Debian, MAC Lion OS X ,...? Where should I look to know these security considerations of an ...
1
vote
2answers
157 views

Intrusion Detected - OS Attack

I have recently gotten a prompt from my anti virus stating that there was an intrusion with an OS attack as describe in the link below: ...
1
vote
3answers
518 views

Debugging and DLL-Injection

Hi, I am currently reading Gray Hat Python to learn about Debugging and various interesting techniques for binary analysis. So far I have learned an amazing amount of stuff (just read about ...
1
vote
1answer
635 views

Different Security Issues Depending on OS? [closed]

I'm interested in learning more about OS specific security issues if there are any. I'm very new to this topic but I want to learn more about if there are specific security vulnerabilities associated ...
1
vote
2answers
485 views

Sun ILOM / Out of band management security concerns

I would like to get some outside opinion on this if possible, although I do not know what to ask. Sun ILOM is an Out-of-band management system. I understand it is a separate OS on the box that is ...
1
vote
2answers
65 views

Is it safe to create live usb on an infected system?

I am using Ubuntu 13.10. If my laptop is infected with malware, can I get rid of it by creating a live usb on it and using that live usb format and re-install the ubuntu ? I mean is it possible that ...
1
vote
1answer
32 views

Could see image of previous session after restarting and switching OS

(I have GNU/Linux and Microsoft Windows installed.) I played a game on Microsoft Windows, quit the game, restarted the PC, and selected GNU/Linux. On the login screen, the background image was ...
1
vote
2answers
68 views

Can a drive-by download attack crash the OS?

Are there cases where a serious drive-by download attack could crash the operating system or the browser ?
1
vote
2answers
70 views

Automatic vs Manual

When it comes to technologies that directly affect information security, how do you determine when it is better to use an automatic option instead of a manual option, and vice versa? I already feel ...
1
vote
1answer
345 views

Spoofing OS during browsing

I am using http://www.mybrowserinfo.com/ to gather some info about me while browsing. I want to change my OS to appear that its a Windows Xp machine.(No VM solutions please:D) If you have any ...
1
vote
0answers
47 views

Multiple Independent level of security vs Multi-level security

I am looking for a way to isolate two different networks from each other. Suppose we have 2 different network (public and private). I am looking for a way to connect to these two network via single ...
1
vote
0answers
53 views

DLL preloading attack - are IAT libraries affected too?

I'm about to distribute a dll library (there's also a linux version) to my users but I'm afraid of dll preloading attacks (i.e. someone substituting its malicious dll to get called by mine and gain ...
0
votes
3answers
2k views

Are file permissions set in Unix/Linux effective in Windows or Any other OS?

Consider some files and folder in Unix/Linux OS which are configured for only read access by root, if the hard drive stolen, and used in Windows Environment, are these permissions are still effective? ...
0
votes
4answers
72 views

Isolate dual system

Say I have a computer with 2 operating systems: one secure, one... not so much. Now say I want to use the insecure system to do some work I can't do on the secure one. What is the best way to isolate ...
0
votes
1answer
176 views

Have there been any instances of malware in custom ROMs for Android?

Have there been any instances of malware or spyware packaged in custom ROMs, for example a malicious email app pre-installed that records your server IMAP username and password and forwards it to a ...
0
votes
2answers
111 views

VM security, how to access main OS

Is there any way for me to access the main computer if the VM has been infected? Let's say that I am running Debian or ubuntu in a VM and the main computer uses Windows (or other way around just so ...
0
votes
3answers
76 views

Is there a way to make changes to a virtual machine, test it out, and automatically make same changes to normal machine?

Is there a way to install programs and make changes to a virtual machine and if they work ok have them applied to the "actual" machine? For example in this question when fiasco_averted says "...only ...
0
votes
1answer
60 views

What registry windows keys malware target often?

I wonder what are the main registry windows keys malware target often ? I would love to code a program that will check the state of those windows registry keys for eventual modifications by malware.
0
votes
2answers
170 views

How to identify a specific operating system with port scans?

According to the implementation of the TCP/IP stack an attacker is able to identify which operating system is running on a network device. Is there any paper or the like according on this topic?
0
votes
1answer
51 views

Trust a possibly compromised system for iso downloads

My only operational computer has shown some wierd signs like disapearing logs, rotated logs gone random files getting updated and so on. Tho this is my only operational computer and I have decided to ...
0
votes
1answer
53 views

Loading of fake Library attack

Let's supose i have an executable file a.exe and it uses stdlib for some operations. Let's suppose an attacker changes the system stdlib to a "malicious" stdlib. The implications of this might be ...
0
votes
1answer
106 views

Why doesn't the OS give every application a secret password?

As far as I understand if Dropbox wants to automatically run in the background without asking the user for a password it has to store the password somewhere on the harddrive and has currently no way ...
0
votes
2answers
63 views

Is there a way to prevent software from accessing hardware IDs?

I think this is related to this question, but I would like to know if there's also a way to prevent "third party" applications from seeing hardware IDs (motherboard, hard disks, and others), or giving ...
0
votes
1answer
107 views

Do the Linux binary blobs contain any intentional security holes?

This question covers the risks of accepting Binary blobs in one's distribution. This may be a very paranoid conspiracy question. But considering all the topics regarding the NSA in 2013 one cannot ...
0
votes
2answers
173 views

Preventing exploits like ROP and Return-to-libc in modern Operating systems

As I was reading about the advanced exploits such as Return Oriented Programming (ROP), Retun-to-libc, etc., I came across many defenses to these attacks including techniques like ASLR, kBouncer, ROP ...
0
votes
2answers
67 views

How to hide or obfuscate the type of OS?

I get the OS type of a remote host by: connecting to an open port (telnet <host> 22); using Nmap (nmap -A <host>). What are techniques and how to hide or change the information about ...
0
votes
1answer
40 views

What parameters to check to say that a computer running Windows is slow in responding because of infection?

When interaction between the user and the operating system is too slow (Windows become slow in responding to different user's request): what parameters could we check (and that we could use within a ...
0
votes
1answer
45 views

Can benign software modify Widnows DLL files?

On Windows (XP, 7, 8, NT ...): can .dll files be modified (in any manner) by benign programs/software already installed/running on the computer ?
0
votes
1answer
59 views

access control-intersection of subjects’ permissions

In the book named "operating system security", I read this paragraph: "Protection domains can also be constructed from an intersection of the associated subjects (e.g., Windows 2000 Restricted ...
0
votes
1answer
3k views

What is the most secure operating system out there? [closed]

Unfortunately, endpoint security is so terrifically weak that NSA can frequently find ways around it. -Edward Snowden Would it be safe to assume that every popular linux distro out there has a ...
0
votes
0answers
25 views

Pentesting ATM OS upgrade from win xp to win7

How to approach a ATM OS upgrade from winxp to win 7 pentesting. I am aware about the testing flow should most likely be as follows: 1. Architectural Review 2. Pentesting OS and Application 3. ...
0
votes
0answers
34 views

Bitlocker with bootloader on a seperate drive

I believe the answer to this may simply be it's not possible but all the same: Is it possible to have an OS partition protected by bitlocker loaded from a seperate drive with another bootloader ...
0
votes
0answers
8 views

Delay time clicking of contextual menu on the mouse [migrated]

I have such trouble: when i choose a folder/softwares and clicking second right clicker of mouse on the my desktop or elsewhere context window needs time to appear. Why needs it time to appear? what ...
0
votes
1answer
35 views

Recommened books for learning operation system [closed]

I see other similar question here. I want to become Malware analyst. I have learn to program in Python and C++(not on expert level but fairly good). Before I continue with Assembly language I want to ...
0
votes
0answers
37 views

Where is the scope of ISO7816 standard family in smartcard operating systems interoperability?

ISO/ICE 7816 defines a series of standards for using in smart cards. For example, part 4 of these series named "Organization, security and commands for interchange" (which it's last edition has ...
0
votes
0answers
18 views

Privacy of my files and messages while another device is connected to my iphone [duplicate]

If someone is connected to wifi through my device can they copy my files documents or messages to their device
-1
votes
2answers
81 views

How to use encryption on proprietary software

I wonder if it's possible to develop a secure point to point encryption application (a pgp message application for example) on a proprietary software. If such an application was developed, let say on ...
-1
votes
2answers
181 views

Android OS Security [closed]

I am somewhat confused in terms of how secure Android OS is and how updates work on Android. Are there security fixes on each release? How can I keep track for Android exploits and what are the most ...
-1
votes
1answer
491 views

Top Ten Security Weaknesses of a Networked Computer [closed]

I'm looking for a list of what you would consider to be the Top Ten Security Weaknesses of a Networked Computer, can be Windows or Linux specific but ones that apply to both are better. I'm not as ...
-1
votes
1answer
115 views

Possible ways to test security for Windows Phone 7 or iOS devices [closed]

I'm trying to test the security features of different types of OSs available, and I decided to narrow this down to the Windows Phone 7 and iOS operating systems. I will be testing both my Nokia 800 ...
-2
votes
3answers
37 views

OS/Host age as a security attribute

Assuming the following: Operating arbitrary software in a completely read only environment is impractical. (While some software will operate RO without issue, it can be nigh impossible for other ...
-2
votes
1answer
72 views

Proccess to exploit an OS vulnerability [closed]

What are the steps to use an exploit on an OS vulnerability? I tried the popular ms08-067 on an XP machine, following a guide found on the internet, discovering Metasploit etc., but I can't figure ...
-3
votes
2answers
115 views

What makes iOS more secure than other phone OS [closed]

Let's start off with an example. Here in Canada, credit card companies cannot upgrade you credit card limit. You need to make a request, that will then get analyzed and then, depending on your status ...