The operating system is the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardware knowledge. Questions on the topic of operating system security should use this tag; you may also ...

learn more… | top users | synonyms (1)

0
votes
0answers
25 views

Can the instruction set be targeted directly?

Can malware directly manipulate the instruction set or is it restricted to the functions/services of the os/kernel?
20
votes
6answers
8k views

Why does the government/military not use special operating systems?

Why does military and government not use special operating systems? I mean, if they do not use generic operating system based on Windows, Linux and Mac and create their own operating system, they will ...
2
votes
2answers
80 views

Is Qubes OS more secure than running a set of activity related VMs?

I'd like to skip the argument about Linux being more secure than Windows, and purely focus on the security boundaries between Host OS and VMs. Is Qubes OS theoretically more secure than say - Windows ...
15
votes
7answers
3k views

Can hackers detect my operating system?

I've seen people demonstrating the use of backtrack to attack VMs. In one of the components of backtrack, it shows the operating system of the targets. Since support for Windows XP is ending soon, i ...
-1
votes
1answer
144 views

Why doesn't the OS give every application a secret password?

As far as I understand if Dropbox wants to automatically run in the background without asking the user for a password it has to store the password somewhere on the harddrive and has currently no way ...
3
votes
2answers
350 views

How does binary code execution vulnerability work on a modern OS?

In a modern OS I think that: the .text section where binary assembled CPU instructions are stored cannot be modified the .data/.bss section is marked as no-execute so that the information there will ...
5
votes
2answers
747 views

Can UNIX Domain Sockets be locked by user ID?

If I created a folder /tmp/me with permissions 700, and started a process under me that starts a listen socket under /tmp/me/socket. I currently assume that a connection to that socket originated ...
11
votes
6answers
4k views

Can viruses actually inject their code in other processes?

Can a virus really inject its own code into a process so it stays on your computer permantly? The only way to actually remove it is to reinstall your OS. My question is how can it do that without ...
5
votes
1answer
36 views

Ring 1 and Ring 2 Memory Protection Architecture

I have heard that Ring 1 and Ring 2 memory protections are basically no-longer used within modern systems. However, when I checked into things, all I found was that these rings are somehow associated ...
4
votes
2answers
212 views

What information could be identified about a Virtual Machine which routed traffic via a VPN?

Background: I have a Virtual Machine which is running all it's traffic through a VPN (from within the Virtual Machine) so to obfuscate all web traffic. This Virtual Machine is running from within an ...
0
votes
1answer
162 views

Block OS fingerprinting without using iptables?

I have a Linux machine connected to a Windows 98 PC on port 104. Now I want to block the OS fingerprinting using nmap for the windows 98 PC. I tried using iptables (blocking that particular port) but ...
-4
votes
0answers
87 views

Why does this registry key keep getting recreated even if I delete it?

When I open my registry editor I see this: C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([...
9
votes
1answer
522 views

Do randomized PID bring more security?

What is the concrete advantage of using random PIDs instead of traditional sequential ones? Some times ago, I've read an article in the french magazine MISC (no. 74 - July/August, 2014) publishing a ...
-3
votes
1answer
118 views

How can I check if someone tampered with the CCTV footage or system?

Recently I was staying in a hotel and I had some very important belongings stolen there in the hotel which is definite. The problem is that no one entered my room after I left the room (2 times for ...
2
votes
1answer
117 views

NMAP Scan Returns Odd OS Detection [closed]

I am new to NMAP but I was using it to troubleshoot some issues I have been having. I ran a scan on a device and I know the device runs some sort of Linux or Ubuntu OS and I was attempting to figure ...
1
vote
1answer
78 views

How can an un-trusted device connected to the LAN network infect others operating systems?

I have a various devices on my LAN network (Linux, Windows, Android device..), sometimes i allow others to connect to my LAN through , it is not possible to verify the safety of their machines, Let's ...
0
votes
2answers
100 views

How could one say that older operating systems are more vulnerable?

Experiment conducted by me in Windows using Virtual Machine: I have collected all rogue security software that target a range of Windows versions and several latest malware (no older than a month) ...
-1
votes
1answer
280 views

Why is Linux considered more secure than Windows? [closed]

Why is Linux considered more secure than Windows? Is there some sort of recent security report that proves it? I have come to believe that Linux has been safer so far, but now as we have Windows 10, ...
0
votes
2answers
76 views

Mac OS X vulnerabilities and not having the need for an antivirus?

I have just read news about Mac OS X vulnerabilities and wondered why would people say that you don't need an antivirus if you are using a Mac? There are vulnerabilities in other operating systems ...
1
vote
1answer
19 views

Are there any mechanisms to verify the correctness of a burned disc?

I was recently recommended a specific smartcard over on HardwareRecs.SE. As part of this, the answerer (our ursine overlord) stated that the cards in question don't offer a means to securely backup ...
-6
votes
6answers
195 views

Relative merits and risks of encryption and OS security [closed]

There are many aspects to computer security and many threats to address: poisoned DNS, worms, trojans, viruses, rootkits, firmware malware, etc. One of the biggest software vulnerabilities is buffer ...
0
votes
4answers
157 views

Isolated safe anonymous OS

I wonder about a setup where I can have a primary OS on my Laptop, but keep a second OS that is safe, anonymous, persistent and isolated (for sensivite data that may communicate with the outside world)...
5
votes
2answers
78 views

How to secure shared user on build server?

We have a CI server which is installed as the builduser and all tasks are executed as that respective user at the OS level. We have many teams sharing the build server which means the build user and ...
12
votes
4answers
7k views

OpenBSD vs. NetBSD security

If I search for the two words: OpenBSD and NetBSD on http://www.exploit-db.com/ then I get 17 hits regarding security bugs on OpenBSD, and 8 hits regarding security bugs on NetBSD. So what are the ...
32
votes
10answers
7k views

Vulnerable OS's?

Which vulnerable OS's like for example DVL would you recommend for someone to use for the purpose of pentest/exploitation learning?
5
votes
1answer
344 views

Is there a GNU/Linux or BSD distribution dedicated to air-gapped computer?

I am currently in the process of setting up an air-gapped computer which will be dedicated to managing cryptographic key (including: generation of GPG key/subkey, management of a small CA, generation ...
1
vote
1answer
62 views

Is there a way to create separate environments on your computer with no way of detection?

I would like to know if there is a way to create two different systems/environments on your PC (Windows OS) that you will enter each by different username and password. When someone enters your ...
0
votes
2answers
26 views

Privilege escalation if the privileged ID is known

If I know the ID of a group, whose privilege is higher than mine, is it possible for me to execute programs using that group ID? If so, how do I do it? If not, why not? Will appreciate all answers.
15
votes
1answer
2k views

Download an OS image via torrent [duplicate]

If you take the Ubuntu alternative download page for example, there, you have the possibility to download the OS also via torrent. Being a peer to peer where files are stored on anyone's machine got ...
1
vote
3answers
89 views

Since when can't any program get MS-DOS and MS-Windows admin rights?

I'm certain that I read that in the 80s with 8-bit Intel processorn, any DOS program that was run with MS-DOS was run in administrative mode and could do anything that any C program could do. Now I'm ...
3
votes
1answer
74 views

OS fingerprinting [closed]

I have been asked to write a small tool that detects the running OS on a victim device. The tool should be able to fingerprint Linux versus Android versus iOS. Extra credit for version info. It needs ...
0
votes
2answers
88 views

Access to system32 [closed]

Is there a way anyone can access the system32 folder on Windows without being logged in? If so, how would he do that and how to prevent it.
1
vote
3answers
58 views

Securing online SQL database and server [closed]

I am trying to build a big project but lack the knowledge of security of servers and SQL. So, please help me by telling what necessary steps should i take. Block all remote access :- I have heard ...
0
votes
1answer
57 views

Do I need to change my host OS to something like Tails if I already have Tails running in a VM if I want to be protected on the interenet?

First let me say sorry if I sound like a script kitty, because I am. Now on to my question. So I want to be protected on the internet when I go on the deep web, do banking etc. I use Tails to protect ...
5
votes
2answers
77 views

How does a firewall software intercept network communication?

I have a basic idea of what a software-based packet filter does, and I'm not sure if it's entirely accurate. Basically, a packet filter is a loadable kernel module that is inserted into the network ...
3
votes
2answers
1k views

Is a monolithic kernel more secure than a microkernel for a small OS?

Upon building a kernel for a small CLI system what option is the best one? I don't know much about what microkernels can do so bear with me if I'm being ignorant: In one instance, there are ...
5
votes
2answers
211 views

Wiping a computer of personal information while keeping the operating system intact

I have a unique situation but will try form this as a generally applicable Q&A: I must leave my Operating System intact, but completely wipe my information from the computer. How can I do this? ...
7
votes
1answer
719 views

OSX HomeBrew Security Risks

I've been trying to harden my OSX 10.11 computer and one of the guides suggested installing Homebrew to get updates to things such as OpenSSL. While updates are great, it seems like Apple should be ...
3
votes
1answer
479 views

What do Msgsrvr and Scientia-ssdb do?

I'm having a task in a computer security class in school where I'm supposed to scan a host for open ports in order to find out what services are being run there. I have found out (among other things) ...
2
votes
0answers
71 views

Creating New Acc in Mac Mail 1st Connect to Server not SSL is uname & pw tx secure?

It appears that whenever you set up a new mail account on Mac Mail on OS X (or iPhone, iPad etc), that as soon as you enter the server and the mail account user name and password, Mac Apple-Mail tries ...
28
votes
1answer
7k views

iOS Encryption Details

Following on from this question, what resources are available relating to the technical specifics of how apple implement encryption on their iOS 4.x series devices? The Apple marketing material here, ...
3
votes
1answer
76 views

Operating system encryption of a Virtual Machine

I am a MacBook Pro user but sometimes I need to manage very sensitive data on Windows Seven. I am running Windows Seven on a virtual machine using Parallels Desktop v10.2.1. This software already has (...
49
votes
4answers
7k views

Old OS memory space protection - was it really that bad?

In his book Security Engineering, Anderson really focuses on how in the 90s and early 2000s programs would need to access memory that wasn't their own, and programmers programmed with the assumption ...
-2
votes
1answer
193 views

Can someone bruteforce my OSX? (Macbook)

Is it possible for someone to bruteforce or perform a dictionary attack on a Macbook? It's very easy to bypass security of a Windows box (Password Protection) , what is the difficulty level of ...
12
votes
4answers
1k views

When using multiple operating systems, can they affect each other?

Let's say I have two different OS on my PC, Windows 10 and Linux. It is well-known that Windows collects a significant amount of information and sends it to Microsoft's servers, but I wonder if it "...
0
votes
1answer
45 views

Who is the Mandatory Access Control Administrator

Would a mandatory access control implementation administered by a 'normal' user be discretionary since the user could change permissions as he sees fit? And if so, wouldn't root as a MAC admin, being ...
0
votes
0answers
66 views

Virtual Machine Introspection for VirtualBox

Is possible use Virtual Machine Introspection (VMI) for monitoring system calls and internal system operations in Oracle VirtualBox machine (if I use Linux as quest system) in this time? I have read ...
2
votes
3answers
1k views

Security in Windows 7 vs Ubuntu

I have two semi-related questions about the security-related reasons I hear for switching to Ubuntu over Windows 7 (or from other Windows OSs to other Linux distributions). Someone people say that ...
11
votes
8answers
2k views

Where to download OpenBSD release ISO's over HTTPS?

OpenBSD claims to be highly secure. So why doesn't it allow downloading the release iso's over HTTPS? Or I'm missing something? Can someone please explain this to me?