The operating system is the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardware knowledge. Questions on the topic of operating system security should use this tag; you may also ...

learn more… | top users | synonyms (1)

0
votes
0answers
17 views

How to encrypt a USB to be used with MAC & Win

I would like to find out if it is possible to encrypt a USB flash drive (or only password protection) which could work with dual OS ( Mac & Windows ). Is there a free software that i could use to ...
11
votes
9answers
2k views

Where to download OpenBSD release ISO's over HTTPS?

OpenBSD claims to be highly secure. So why doesn't it allow downloading the release iso's over HTTPS? Or I'm missing something? Can someone please explain this to me?
0
votes
1answer
41 views

Does stack (UNIX x86, x86-64, ARM) grow up or down, buffer overflow tutorials wrong explained?

when I read something about buffer overflows on the stack, the most or some tutorials show me examples about overwriting local variables (pointers) and then overwriting pointers in the global offset ...
0
votes
0answers
33 views

Minimalistic operating system for enhancing ssh security?

As we know, although the SSH protocol is sound in theory, it can be compromised when the implementation is faulty or the underlying operating system is compromised in other ways that indirectly ...
11
votes
1answer
559 views

Do randomized PIDs bring more security?

What is the concrete advantage of using random PIDs instead of traditional sequential ones? Some times ago, I've read an article in the french magazine MISC (no. 74 - July/August, 2014) publishing a ...
5
votes
2answers
230 views

What information could be identified about a Virtual Machine which routed traffic via a VPN?

Background: I have a Virtual Machine which is running all it's traffic through a VPN (from within the Virtual Machine) so to obfuscate all web traffic. This Virtual Machine is running from within an ...
0
votes
0answers
6 views

Using Windows installers created in SCCM on a custom boot menu [migrated]

I'm wanting to place several Windows Installers on an external HD and have a custom boot menu on it so one of those builds can be selected. Each of these are Windows 7 builds which have been created ...
25
votes
2answers
4k views

What is protection ring -1?

Due to the Lenovo firmware ThinkPwn bug I'm trying to understand privileges and rings. If the kernel is Ring 0 and SMM (System Management Mode) is Ring -2, what could be in between that is Ring -1?
10
votes
6answers
4k views

Can viruses actually inject their code in other processes?

Can a virus really inject its own code into a process so it stays on your computer permantly? The only way to actually remove it is to reinstall your OS. My question is how can it do that without ...
0
votes
1answer
185 views

Block OS fingerprinting without using iptables?

I have a Linux machine connected to a Windows 98 PC on port 104. Now I want to block the OS fingerprinting using nmap for the windows 98 PC. I tried using iptables (blocking that particular port) but ...
0
votes
0answers
26 views

Can the instruction set be targeted directly?

Can malware directly manipulate the instruction set or is it restricted to the functions/services of the os/kernel?
20
votes
6answers
9k views

Why does the government/military not use special operating systems?

Why does military and government not use special operating systems? I mean, if they do not use generic operating system based on Windows, Linux and Mac and create their own operating system, they will ...
2
votes
2answers
126 views

Is Qubes OS more secure than running a set of activity related VMs?

I'd like to skip the argument about Linux being more secure than Windows, and purely focus on the security boundaries between Host OS and VMs. Is Qubes OS theoretically more secure than say - Windows ...
15
votes
7answers
3k views

Can hackers detect my operating system?

I've seen people demonstrating the use of backtrack to attack VMs. In one of the components of backtrack, it shows the operating system of the targets. Since support for Windows XP is ending soon, i ...
-1
votes
1answer
145 views

Why doesn't the OS give every application a secret password?

As far as I understand if Dropbox wants to automatically run in the background without asking the user for a password it has to store the password somewhere on the harddrive and has currently no way ...
3
votes
2answers
380 views

How does binary code execution vulnerability work on a modern OS?

In a modern OS I think that: the .text section where binary assembled CPU instructions are stored cannot be modified the .data/.bss section is marked as no-execute so that the information there will ...
5
votes
2answers
760 views

Can UNIX Domain Sockets be locked by user ID?

If I created a folder /tmp/me with permissions 700, and started a process under me that starts a listen socket under /tmp/me/socket. I currently assume that a connection to that socket originated ...
5
votes
1answer
60 views

Ring 1 and Ring 2 Memory Protection Architecture

I have heard that Ring 1 and Ring 2 memory protections are basically no-longer used within modern systems. However, when I checked into things, all I found was that these rings are somehow associated ...
-3
votes
1answer
163 views

How can I check if someone tampered with the CCTV footage or system?

Recently I was staying in a hotel and I had some very important belongings stolen there in the hotel which is definite. The problem is that no one entered my room after I left the room (2 times for ...
2
votes
1answer
119 views

NMAP Scan Returns Odd OS Detection [closed]

I am new to NMAP but I was using it to troubleshoot some issues I have been having. I ran a scan on a device and I know the device runs some sort of Linux or Ubuntu OS and I was attempting to figure ...
1
vote
1answer
80 views

How can an un-trusted device connected to the LAN network infect others operating systems?

I have a various devices on my LAN network (Linux, Windows, Android device..), sometimes i allow others to connect to my LAN through , it is not possible to verify the safety of their machines, Let's ...
1
vote
2answers
108 views

How could one say that older operating systems are more vulnerable?

Experiment conducted by me in Windows using Virtual Machine: I have collected all rogue security software that target a range of Windows versions and several latest malware (no older than a month) ...
-1
votes
1answer
408 views

Why is Linux considered more secure than Windows? [closed]

Why is Linux considered more secure than Windows? Is there some sort of recent security report that proves it? I have come to believe that Linux has been safer so far, but now as we have Windows 10, ...
0
votes
2answers
85 views

Mac OS X vulnerabilities and not having the need for an antivirus?

I have just read news about Mac OS X vulnerabilities and wondered why would people say that you don't need an antivirus if you are using a Mac? There are vulnerabilities in other operating systems ...
1
vote
1answer
19 views

Are there any mechanisms to verify the correctness of a burned disc?

I was recently recommended a specific smartcard over on HardwareRecs.SE. As part of this, the answerer (our ursine overlord) stated that the cards in question don't offer a means to securely backup ...
-6
votes
6answers
199 views

Relative merits and risks of encryption and OS security [closed]

There are many aspects to computer security and many threats to address: poisoned DNS, worms, trojans, viruses, rootkits, firmware malware, etc. One of the biggest software vulnerabilities is buffer ...
0
votes
4answers
164 views

Isolated safe anonymous OS

I wonder about a setup where I can have a primary OS on my Laptop, but keep a second OS that is safe, anonymous, persistent and isolated (for sensivite data that may communicate with the outside world)...
5
votes
2answers
82 views

How to secure shared user on build server?

We have a CI server which is installed as the builduser and all tasks are executed as that respective user at the OS level. We have many teams sharing the build server which means the build user and ...
12
votes
4answers
7k views

OpenBSD vs. NetBSD security

If I search for the two words: OpenBSD and NetBSD on http://www.exploit-db.com/ then I get 17 hits regarding security bugs on OpenBSD, and 8 hits regarding security bugs on NetBSD. So what are the ...
32
votes
10answers
7k views

Vulnerable OS's?

Which vulnerable OS's like for example DVL would you recommend for someone to use for the purpose of pentest/exploitation learning?
5
votes
1answer
351 views

Is there a GNU/Linux or BSD distribution dedicated to air-gapped computer?

I am currently in the process of setting up an air-gapped computer which will be dedicated to managing cryptographic key (including: generation of GPG key/subkey, management of a small CA, generation ...
1
vote
1answer
62 views

Is there a way to create separate environments on your computer with no way of detection?

I would like to know if there is a way to create two different systems/environments on your PC (Windows OS) that you will enter each by different username and password. When someone enters your ...
0
votes
2answers
26 views

Privilege escalation if the privileged ID is known

If I know the ID of a group, whose privilege is higher than mine, is it possible for me to execute programs using that group ID? If so, how do I do it? If not, why not? Will appreciate all answers.
15
votes
1answer
2k views

Download an OS image via torrent [duplicate]

If you take the Ubuntu alternative download page for example, there, you have the possibility to download the OS also via torrent. Being a peer to peer where files are stored on anyone's machine got ...
1
vote
3answers
90 views

Since when can't any program get MS-DOS and MS-Windows admin rights?

I'm certain that I read that in the 80s with 8-bit Intel processorn, any DOS program that was run with MS-DOS was run in administrative mode and could do anything that any C program could do. Now I'm ...
3
votes
1answer
79 views

OS fingerprinting [closed]

I have been asked to write a small tool that detects the running OS on a victim device. The tool should be able to fingerprint Linux versus Android versus iOS. Extra credit for version info. It needs ...
0
votes
2answers
89 views

Access to system32 [closed]

Is there a way anyone can access the system32 folder on Windows without being logged in? If so, how would he do that and how to prevent it.
1
vote
3answers
58 views

Securing online SQL database and server [closed]

I am trying to build a big project but lack the knowledge of security of servers and SQL. So, please help me by telling what necessary steps should i take. Block all remote access :- I have heard ...
0
votes
1answer
58 views

Do I need to change my host OS to something like Tails if I already have Tails running in a VM if I want to be protected on the interenet?

First let me say sorry if I sound like a script kitty, because I am. Now on to my question. So I want to be protected on the internet when I go on the deep web, do banking etc. I use Tails to protect ...
5
votes
2answers
79 views

How does a firewall software intercept network communication?

I have a basic idea of what a software-based packet filter does, and I'm not sure if it's entirely accurate. Basically, a packet filter is a loadable kernel module that is inserted into the network ...
3
votes
2answers
1k views

Is a monolithic kernel more secure than a microkernel for a small OS?

Upon building a kernel for a small CLI system what option is the best one? I don't know much about what microkernels can do so bear with me if I'm being ignorant: In one instance, there are ...
5
votes
2answers
232 views

Wiping a computer of personal information while keeping the operating system intact

I have a unique situation but will try form this as a generally applicable Q&A: I must leave my Operating System intact, but completely wipe my information from the computer. How can I do this? ...
7
votes
1answer
819 views

OSX HomeBrew Security Risks

I've been trying to harden my OSX 10.11 computer and one of the guides suggested installing Homebrew to get updates to things such as OpenSSL. While updates are great, it seems like Apple should be ...
3
votes
1answer
488 views

What do Msgsrvr and Scientia-ssdb do?

I'm having a task in a computer security class in school where I'm supposed to scan a host for open ports in order to find out what services are being run there. I have found out (among other things) ...
2
votes
0answers
71 views

Creating New Acc in Mac Mail 1st Connect to Server not SSL is uname & pw tx secure?

It appears that whenever you set up a new mail account on Mac Mail on OS X (or iPhone, iPad etc), that as soon as you enter the server and the mail account user name and password, Mac Apple-Mail tries ...
28
votes
1answer
7k views

iOS Encryption Details

Following on from this question, what resources are available relating to the technical specifics of how apple implement encryption on their iOS 4.x series devices? The Apple marketing material here, ...
3
votes
1answer
79 views

Operating system encryption of a Virtual Machine

I am a MacBook Pro user but sometimes I need to manage very sensitive data on Windows Seven. I am running Windows Seven on a virtual machine using Parallels Desktop v10.2.1. This software already has (...
50
votes
4answers
7k views

Old OS memory space protection - was it really that bad?

In his book Security Engineering, Anderson really focuses on how in the 90s and early 2000s programs would need to access memory that wasn't their own, and programmers programmed with the assumption ...
-2
votes
1answer
204 views

Can someone bruteforce my OSX? (Macbook)

Is it possible for someone to bruteforce or perform a dictionary attack on a Macbook? It's very easy to bypass security of a Windows box (Password Protection) , what is the difficulty level of ...
12
votes
4answers
1k views

When using multiple operating systems, can they affect each other?

Let's say I have two different OS on my PC, Windows 10 and Linux. It is well-known that Windows collects a significant amount of information and sends it to Microsoft's servers, but I wonder if it "...