The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
2answers
67 views

How does software developer protect their code against binary patching?

Supposing we have a software that checks on a remote server online if the input entered by a user (a license key) is valid. The server sends in a socket to the client True or False if the license is ...
-1
votes
2answers
42 views

What is meaning of the term Whitelisting in antivirus?

How exactly does whitelisting work and what does it mean in terms of antivirus software?
0
votes
0answers
30 views

How does quarantine feature work internally in antivirus? [duplicate]

I'm struggling to find out the internal encryption and details of quarantined file. if any body knows the information please share.
4
votes
1answer
51 views

How does “password / keyboard-input protection” work?

I do own Kaspersky Internet Security (KIS) and BestCrypt Volume Encryption (BCVE) (unrelatedly) and both offer some mechanism (KIS) to "protect my passwords while I enter them". Kaspersky primarily ...
25
votes
2answers
4k views

What is protection ring -1?

Due to the Lenovo firmware ThinkPwn bug I'm trying to understand privileges and rings. If the kernel is Ring 0 and SMM (System Management Mode) is Ring -2, what could be in between that is Ring -1?
1
vote
1answer
45 views

Disk encryption with OTP to protect source code

We have to ship a hard- and software prototype to a customer for a first field test. The software is just not ready (protected - too much Python code) for distribution without the possibility, that ...
16
votes
5answers
9k views

Would removing spaces in a string protect against SQL injection?

I was curious if it's possible to protect against an SQL injection attack by removing all spaces from an String input? I have been reading up on SQL Injection at OWASP, but they don't mention ...
-2
votes
1answer
42 views

How to protect EXIF data against editing/deleting in jpeg file?

Is there any option to protect EXIF data against editing or provide password protection? I came accross the idea of creating executable file from image file, so that someone can view image the way is ...
5
votes
1answer
60 views

Ring 1 and Ring 2 Memory Protection Architecture

I have heard that Ring 1 and Ring 2 memory protections are basically no-longer used within modern systems. However, when I checked into things, all I found was that these rings are somehow associated ...
5
votes
3answers
59 views

When testing out security vulnerabilities on sites such as OWASP Projects, should we be in a secured/protected environment?

I was curious if there is any need to secure/protect ourselves when doing projects on sites like OWASP to learn about vulnerabilities or "Wargames/Challenges" such as what's posted in these links How ...
0
votes
1answer
36 views

What is LinkedIn's “email challenges” feature?

A LinkedIn blog post about the recent password dump says: We take the safety and security of our members' accounts seriously. For several years, we have hashed and salted every password in our ...
2
votes
0answers
65 views

How exactly does “Apache Shiro's” hashing work when using a Desktop-Client

I was looking at this question How does storing hash passwords work? and every answer essentially says that Hashing is done via the server, or most of it should, as that is the safest way to do it. ...
5
votes
2answers
118 views

What are the risks of sending sensitive documents that are on physical media and password protected via postal carrier using registered mail?

Background The company I work for is extremely risk averse when it comes to adopting the use of cloud services for improving business flows. We currently use a very famous search company's business ...
2
votes
1answer
62 views

How to identify and patch a hardware vulnerability?

Software and systems vulnerabilities are often patched with updates, or by avoiding the use of some OS or softwares that have multiple flaws. Regarding hardware vulnerabilities, I do not have a lot of ...
21
votes
4answers
4k views

Keylogger web application protection

I'm trying to improve security in a web application. The application has an admin site and keyloggers are a concern that I'm trying to solve. Can the application do something that can prevent ...
7
votes
4answers
1k views

How to trace the actions performed by a virus?

Is that possible to trace the actions performed by a virus? Run Time , stolen data and the files consulted and get the relative impact on my pc.?
-4
votes
3answers
113 views

Is there a way to secure a Linux machine in a way that no one else (but me) can access its contents? [closed]

And I mean, even if someone tries rooting with a Live CD, even if one takes the HDD away and plug it in somewhere else, etc... I want to be able to give a client a machine with a service running, but ...
9
votes
2answers
187 views

How do large companies protect their private (code-signing) keys?

Some time ago I read the canonical answer of our ursine overlord concerning CAs and their private (root) keys. More recently I stumbled across the question on the question on how to manage code ...
-5
votes
1answer
139 views

The problem I have with wikipedia showing IP addresses to the world? [closed]

I went on wikipedia, then went to the edit history of an articles I edited. To my surprise, my IP address, along with other people's IP addresses are on the articles edit history page. Why would ...
2
votes
0answers
234 views

Is possible to prevent input emulation with SetWindowsHookEx in specific application?

The one of technique of input emulation protection with automation toools like AutoIt or ACTools used most of simple game bot programs is SetWindowsHookEx usage WH_KEYBOARD_LL flags. This solution is ...
28
votes
2answers
3k views

Is it possible for my password to have more than one password combination?

Can my password have more than one password combination? I read up on physical combination locks (the lock you open with numbers) and I learned that a combination lock can have about 40 or more ...
24
votes
2answers
2k views

How trustworthy is `sudo apt-get install (package name)` in Ubuntu?

One of the easy ways to install a program in Ubuntu Linux is to type a command in the terminal, but how do I know that the program is coming from a trusted source and not from somewhere dangerous? ...
46
votes
6answers
7k views

How do large companies protect their source code?

I recently read the canonical answer of our ursine overlord to the question on How do certification authorities store their private root keys? I then just had to ask myself: How do large companies (e....
40
votes
7answers
15k views

Somebody hacked my router and changed my wifi SSID

One of my neighbours hacked the password of my router and he uses my limited internet package. I change the wifi SSID almost daily, but he can hack it easily. Today, he changed the SSID to a hate ...
1
vote
2answers
42 views

Security precautions for beaglebone?

I am currently operating a beaglebone as the control PC of a scientific instrument. In order to increase its potential, it is connected to the internet, currently without password, i.e. everyone who ...
0
votes
2answers
69 views

Protecting data on server from illegal physical access

I am running Ubuntu (14.04) server and I saw this question: How do I reset a lost administrative password? I wondered, because my server virtual machine is on the ESXi server, I don't know if ...
3
votes
0answers
78 views

What are some ways of protecting a VM image?

I am looking to distribute a linux VM image (with a modified linux kernel to suit or product's needs) that runs some proprietary software that will already be on the VM I distribute. The goals is to ...
2
votes
3answers
58 views

Is accessing carelessly not protected data of any service unlawfull? [closed]

The following scenario: I just visited the webpage of an phisshing company of an german service which is here in germany acting at least not unlawfull, but just trying to get money for not even giving ...
0
votes
1answer
63 views

Convert customer tracking system from web access to REST

Intro:In our company there is a service tracking website for our clients, where they can monitor the progress made in their cases with us. Our users are required to log in to that website (admin ...
2
votes
3answers
169 views

What prevents a coder from brute forcing a wifi?

I know that a coder is able to connect to a wifi through code so my question is: Is there anything that will make it difficult to brute force a wifi password?
4
votes
1answer
146 views

Building a project on ARM Cortex-M, anything I can do to keep IP secure? Dealing with Chinese knockoffs and sick of it

Chinese have decided to ripoff a PIC product I make. Switching to ARM for other reasons anyhow, mainly that Microchip is a joke, either STM32 or NXP LPC, exact chip is open still. There are sites ...
0
votes
1answer
67 views

Does a 'mailto:' hyperlink spoil any preceding email obfuscation efforts in PDF?

Assume there is a PDF file which contains the example@example.com email address as an image (the classic obfuscation method). However, what if this image is made clickable with a hyperlink which ...
1
vote
0answers
18 views

Is it possible to low level format an Virtual Machine? [closed]

I just came to wonder, if you can low level format the disk of an Virtual Machine, maybe you guys can help me with that?
0
votes
2answers
158 views

How much personal information should I provide to an identify theft monitoring company?

I've been provided credit monitoring and identity theft protection services from the company CSID. Their CyberAgent internet surveillance tool claims to "monitor thousands of websites and millions of ...
23
votes
8answers
5k views

Is there a way to make a WEP-secured AP uncrackable?

For some days, I was feeling that my Internet bill was booming. Then, I recently found out that a boy near my house was accessing my router to use the Internet. Then, I read some articles how to crack ...
-1
votes
5answers
131 views

Security software to shutdown PC unless specific approach? [closed]

For future refence: In light of answers and critique, my question should have been: 1. How does one make sure a physical attacker with access to a powered, but locked FDE PC fails his/hers attempt to ...
93
votes
10answers
12k views

Prevention measures against laptop seizure at US borders

Since laptop and other electronic device seizures at US borders became legal without a warrant (including making copies of data), 7% of ACTE's business travelers reported being subject to a seizure as ...
0
votes
2answers
108 views

Security devices other than firewall and IDS [closed]

I was just studying about firewalls and IDS/IPS and had a doubt. Are these the only two major security devices that a company invests in? or are there other equipment and security controls?
0
votes
1answer
158 views

.htaccess protected folder except IP

I created an e-shop with e-books and they are stored in specific folder which is protected by a .htaccess file : Order deny,allow deny from all allow from 127.0.0.1 The IP is the IP of the webpage, ...
1
vote
2answers
6k views

Copy protection in SD cards

I have created a map for using in GPS devices. The map is copied to a microSD card and then, GPS can read the map data from the card. My question is, how can I create copy/clone protection of my data ...
1
vote
1answer
180 views

What else can be done for better security against keylogging softwares? [duplicate]

I've been hearing about keyloggers for the past two years, but never took them seriously. Now, as I've started net banking and managing social networking accounts, I'm very much concerned about safety....
-1
votes
1answer
92 views

Issue regarding vulnerability of cookies [closed]

If someone somehow manages to copy all the cookies from my PC, can they be misused to get my private information or can information be extracted through them? If yes, please suggest some ...
0
votes
2answers
2k views

Is my WiFi connection protected?

In my college the WiFi is open type connection and before I connect to it using my laptop with windows 8.1, it displays message "Other people might be able to see info you send over this network " (...
6
votes
1answer
846 views

How to protect from caller-id spoofing?

Yesterday, I listened about caller-id spoofing and was left astonished as its misuse can result in severe consequences for victim. Please tell me how to protect myself from this prank and is there ...
3
votes
2answers
244 views

Is it possible to dump an exe from ram and create a distributable exe from it?

Is it possible to dump the ram and get an exe and use that ram dump to distribute an app? If so, is this something that is a practical concern and if so how best should a developer protect against it? ...
1
vote
1answer
54 views

Protecting the root ca bundle

Applications (e.g. Firefox) often include a root ca bundle file containing trusted certificates. How can I protect those files from malicious agents trying to modify them? I think signing is not an ...
0
votes
1answer
34 views

Can attackers substitute/place my queries to/from provider?

Can attackers substitute/replace my queries to/from provider? I mean I do HTTP query and its modified on provider-side so query goes modified to a server or reversal situation, when I get modified ...
1
vote
2answers
144 views

How to secure Epson Beamer?

I work in a school and we have several Epson Beamers but some of our students have download an application for their mobile (with infra-red and WiFi connection) and they now have remote control and ...
0
votes
1answer
194 views

Office password protection crack

would just like to have a check on the password protection/encryption of MS office 2007 and above. It is said that its not that easy to crack the password protection except by brute force, since 2007 ...
10
votes
3answers
4k views

SQL Injection if table structure/db structure not known

could an attacker who'd just found out that you're using mysql make an SQL Injection attack with only this information? If you don't know Any table/db name how come you can find it out? Is that even ...