The operating system is the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardware knowledge. Questions on the topic of operating system security should use this tag; you may also ...

learn more… | top users | synonyms (1)

-4
votes
0answers
72 views

Why does this registry key keep getting recreated even if I delete it?

When I open my registry editor I see this: C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ...
9
votes
1answer
492 views

Do randomized PID bring more security?

What is the concrete advantage of using random PIDs instead of traditional sequential ones? Some times ago, I've read an article in the french magazine MISC (no. 74 - July/August, 2014) publishing a ...
-3
votes
0answers
67 views

Malware available to the average person [closed]

What are the types of malware that are available to the average person? What are their capabilities? By average person I mean: Someone who doesn't have a deep understanding about ...
-3
votes
1answer
84 views

How can I check if someone tampered with the CCTV footage or system?

Recently I was staying in a hotel and I had some very important belongings stolen there in the hotel which is definite. The problem is that no one entered my room after I left the room (2 times for ...
0
votes
0answers
54 views

Question about the best Security oriented Operating System [closed]

I have a question out of curiosity about the best security oriented OS in the opinion of most in this forum. Of course there are TAILS and the less well known Ubuntu Privacy Release (UPR) which are ...
1
vote
1answer
111 views

NMAP Scan Returns Odd OS Detection [closed]

I am new to NMAP but I was using it to troubleshoot some issues I have been having. I ran a scan on a device and I know the device runs some sort of Linux or Ubuntu OS and I was attempting to figure ...
1
vote
1answer
74 views

How can an un-trusted device connected to the LAN network infect others operating systems?

I have a various devices on my LAN network (Linux, Windows, Android device..), sometimes i allow others to connect to my LAN through , it is not possible to verify the safety of their machines, Let's ...
0
votes
2answers
91 views

How could one say that older operating systems are more vulnerable?

Experiment conducted by me in Windows using Virtual Machine: I have collected all rogue security software that target a range of Windows versions and several latest malware (no older than a month) ...
0
votes
0answers
20 views

Can I run freepto or tails or Subgraph OS on rasberry pi? [migrated]

I am new to the pi, do you guys think I can I run freepto or tails or Subgraph OS on the pi? Since some of them are linux based I thought I would give it a try, but dunno. Thx in advance for your ...
3
votes
2answers
182 views

What information could be identified about a Virtual Machine which routed traffic via a VPN?

Background: I have a Virtual Machine which is running all it's traffic through a VPN (from within the Virtual Machine) so to obfuscate all web traffic. This Virtual Machine is running from within an ...
0
votes
1answer
110 views

Block OS fingerprinting without using iptables?

I have a Linux machine connected to a Windows 98 PC on port 104. Now I want to block the OS fingerprinting using nmap for the windows 98 PC. I tried using iptables (blocking that particular port) but ...
-1
votes
1answer
191 views

Why is Linux considered more secure than Windows? [closed]

Why is Linux considered more secure than Windows? Is there some sort of recent security report that proves it? I have come to believe that Linux has been safer so far, but now as we have Windows 10, ...
0
votes
2answers
73 views

Mac OS X vulnerabilities and not having the need for an antivirus?

I have just read news about Mac OS X vulnerabilities and wondered why would people say that you don't need an antivirus if you are using a Mac? There are vulnerabilities in other operating systems ...
1
vote
1answer
19 views

Are there any mechanisms to verify the correctness of a burned disc?

I was recently recommended a specific smartcard over on HardwareRecs.SE. As part of this, the answerer (our ursine overlord) stated that the cards in question don't offer a means to securely backup ...
-6
votes
6answers
190 views

Relative merits and risks of encryption and OS security [closed]

There are many aspects to computer security and many threats to address: poisoned DNS, worms, trojans, viruses, rootkits, firmware malware, etc. One of the biggest software vulnerabilities is buffer ...
0
votes
4answers
147 views

Isolated safe anonymous OS

I wonder about a setup where I can have a primary OS on my Laptop, but keep a second OS that is safe, anonymous, persistent and isolated (for sensivite data that may communicate with the outside ...
5
votes
2answers
75 views

How to secure shared user on build server?

We have a CI server which is installed as the builduser and all tasks are executed as that respective user at the OS level. We have many teams sharing the build server which means the build user and ...
12
votes
4answers
7k views

OpenBSD vs. NetBSD security

If I search for the two words: OpenBSD and NetBSD on http://www.exploit-db.com/ then I get 17 hits regarding security bugs on OpenBSD, and 8 hits regarding security bugs on NetBSD. So what are the ...
32
votes
10answers
7k views

Vulnerable OS's?

Which vulnerable OS's like for example DVL would you recommend for someone to use for the purpose of pentest/exploitation learning?
4
votes
1answer
329 views

Is there a GNU/Linux or BSD distribution dedicated to air-gapped computer?

I am currently in the process of setting up an air-gapped computer which will be dedicated to managing cryptographic key (including: generation of GPG key/subkey, management of a small CA, generation ...
1
vote
1answer
60 views

Is there a way to create separate environments on your computer with no way of detection?

I would like to know if there is a way to create two different systems/environments on your PC (Windows OS) that you will enter each by different username and password. When someone enters your ...
0
votes
2answers
24 views

Privilege escalation if the privileged ID is known

If I know the ID of a group, whose privilege is higher than mine, is it possible for me to execute programs using that group ID? If so, how do I do it? If not, why not? Will appreciate all answers.
15
votes
1answer
2k views

Download an OS image via torrent [duplicate]

If you take the Ubuntu alternative download page for example, there, you have the possibility to download the OS also via torrent. Being a peer to peer where files are stored on anyone's machine got ...
1
vote
3answers
87 views

Since when can't any program get MS-DOS and MS-Windows admin rights?

I'm certain that I read that in the 80s with 8-bit Intel processorn, any DOS program that was run with MS-DOS was run in administrative mode and could do anything that any C program could do. Now I'm ...
3
votes
1answer
60 views

OS fingerprinting [closed]

I have been asked to write a small tool that detects the running OS on a victim device. The tool should be able to fingerprint Linux versus Android versus iOS. Extra credit for version info. It needs ...
0
votes
2answers
83 views

Access to system32 [closed]

Is there a way anyone can access the system32 folder on Windows without being logged in? If so, how would he do that and how to prevent it.
1
vote
3answers
54 views

Securing online SQL database and server [closed]

I am trying to build a big project but lack the knowledge of security of servers and SQL. So, please help me by telling what necessary steps should i take. Block all remote access :- I have heard ...
0
votes
1answer
57 views

Do I need to change my host OS to something like Tails if I already have Tails running in a VM if I want to be protected on the interenet?

First let me say sorry if I sound like a script kitty, because I am. Now on to my question. So I want to be protected on the internet when I go on the deep web, do banking etc. I use Tails to protect ...
5
votes
2answers
73 views

How does a firewall software intercept network communication?

I have a basic idea of what a software-based packet filter does, and I'm not sure if it's entirely accurate. Basically, a packet filter is a loadable kernel module that is inserted into the network ...
3
votes
2answers
1k views

Is a monolithic kernel more secure than a microkernel for a small OS?

Upon building a kernel for a small CLI system what option is the best one? I don't know much about what microkernels can do so bear with me if I'm being ignorant: In one instance, there are ...
5
votes
2answers
191 views

Wiping a computer of personal information while keeping the operating system intact

I have a unique situation but will try form this as a generally applicable Q&A: I must leave my Operating System intact, but completely wipe my information from the computer. How can I do this? ...
7
votes
1answer
596 views

OSX HomeBrew Security Risks

I've been trying to harden my OSX 10.11 computer and one of the guides suggested installing Homebrew to get updates to things such as OpenSSL. While updates are great, it seems like Apple should be ...
3
votes
1answer
463 views

What do Msgsrvr and Scientia-ssdb do?

I'm having a task in a computer security class in school where I'm supposed to scan a host for open ports in order to find out what services are being run there. I have found out (among other things) ...
2
votes
0answers
70 views

Creating New Acc in Mac Mail 1st Connect to Server not SSL is uname & pw tx secure?

It appears that whenever you set up a new mail account on Mac Mail on OS X (or iPhone, iPad etc), that as soon as you enter the server and the mail account user name and password, Mac Apple-Mail tries ...
28
votes
1answer
7k views

iOS Encryption Details

Following on from this question, what resources are available relating to the technical specifics of how apple implement encryption on their iOS 4.x series devices? The Apple marketing material here, ...
3
votes
1answer
74 views

Operating system encryption of a Virtual Machine

I am a MacBook Pro user but sometimes I need to manage very sensitive data on Windows Seven. I am running Windows Seven on a virtual machine using Parallels Desktop v10.2.1. This software already has ...
49
votes
4answers
7k views

Old OS memory space protection - was it really that bad?

In his book Security Engineering, Anderson really focuses on how in the 90s and early 2000s programs would need to access memory that wasn't their own, and programmers programmed with the assumption ...
-2
votes
1answer
180 views

Can someone bruteforce my OSX? (Macbook)

Is it possible for someone to bruteforce or perform a dictionary attack on a Macbook? It's very easy to bypass security of a Windows box (Password Protection) , what is the difficulty level of ...
12
votes
4answers
1k views

When using multiple operating systems, can they affect each other?

Let's say I have two different OS on my PC, Windows 10 and Linux. It is well-known that Windows collects a significant amount of information and sends it to Microsoft's servers, but I wonder if it ...
0
votes
1answer
37 views

Who is the Mandatory Access Control Administrator

Would a mandatory access control implementation administered by a 'normal' user be discretionary since the user could change permissions as he sees fit? And if so, wouldn't root as a MAC admin, being ...
0
votes
0answers
61 views

Virtual Machine Introspection for VirtualBox

Is possible use Virtual Machine Introspection (VMI) for monitoring system calls and internal system operations in Oracle VirtualBox machine (if I use Linux as quest system) in this time? I have read ...
2
votes
3answers
1k views

Security in Windows 7 vs Ubuntu

I have two semi-related questions about the security-related reasons I hear for switching to Ubuntu over Windows 7 (or from other Windows OSs to other Linux distributions). Someone people say that ...
11
votes
8answers
2k views

Where to download OpenBSD release ISO's over HTTPS?

OpenBSD claims to be highly secure. So why doesn't it allow downloading the release iso's over HTTPS? Or I'm missing something? Can someone please explain this to me?
7
votes
3answers
1k views

How to hack a Win95 machine?

While playing with old operating systems, I came across that there are no remote code execution exploits available for Win95 machines, running just file share (no IIS or anything else). Win95 neither ...
1
vote
2answers
57 views

Does OpenBSD's security protect against identical vulns in other OSs?

I have been reading about OpenBSD and its more secure design. I was wondering therefore about the difference this makes to applications which can run on any number of OS. Lets take the example of a ...
-2
votes
2answers
673 views

What is the most “out-of-the-box” secure OS for a home user? [closed]

This question will encompass several topics and may also include user opinion. Here is the question, and how I want you to qualify it: Question: What is the most "out-of-the-box" secure OS for a ...
56
votes
9answers
10k views

Why don't OS's make keystrokes available to only the current app?

Seems like a relatively obvious way to prevent (software) keylogging would be to force only the current (in-focus) app to be able to receive keystrokes. There could be a way to make explicit ...
1
vote
1answer
101 views

Where does the list of trusted content authorities come from when using a web browser?

I was asked "how do browsers know whether or not to trust the certificate from the server it's connecting to" and thought it was a pretty good question. After doing some googling I found two answers: ...
2
votes
1answer
268 views

Security research on Operating system security measures, where to start?

I am researching on operating system security, And I don't know where to look for more information on this. I could find the following sources, but I need more guidance. Sources: Microkernel ...
9
votes
6answers
1k views

What is preventing the widespread common use of MAC-type systems?

Overall question What is preventing the uptake of MAC systems such as SELinux/AppArmor in corporate and desktop computing environments? Why don't you think it isn't already widespread? I do not ...