The tag has no wiki summary.

learn more… | top users | synonyms

-2
votes
1answer
85 views

Persisting data and programs by continually overwriting?

This is a sort of security-related thought experiment. In a (slightly odd) conversation I recently had, we got to discussing ways that a file could be kept the same, even when malicious users attempt ...
0
votes
1answer
210 views

Protecting Website Static Resources

If I have a website that is only accessible by authenticating at a login page, is it possible for a non-authenticated person to get access to static assets (images, css, javascript, ...)? I imagine ...
7
votes
6answers
383 views

How important is it to protect demo data by HTTPS enabled server?

If the application is not in production mode, there is no commercial contract signed with customer yet, and you just want to give a link to the customer (or give the demo yourself) so that they can ...
2
votes
2answers
842 views

Linux Memory Protection from buffer overflow

I am practicing Linux buffer overflow exploitation. when trying to exploit a vulnerability in crossfire, everything works well and I get the shellcode placed in the right place, and the program flow ...
0
votes
1answer
798 views

mprotect at kernel level

What would happen if a kernel-level process sets some of its memory pages as PROT_NONE with mprotect and another kernel-level process tries to read one of these protected pages? What is the ...
7
votes
5answers
6k views

How can I protect myself from Evercookies?

I recently learned about the existence of the Evercookie. Is there any way I can prevent an Evercookie being placed on my computer without disabling JavaScript or cookies entirely? I don't want ...
4
votes
2answers
287 views

Hardware Level Write Protection for a CD-R

Let's say you burn a CD-R and it is finalized. Later, if you put it into a CD drive with some OS running, is it possible for the OS to write to it ? Obviously, this shouldn't typically happen, ...
19
votes
3answers
2k views

Could my bank's two-factor authentication be hacked?

When I attempt to log in to my bank, an SMS code is sent to my phone. I then type this nine-character code into the bank's Web site, to login to my account. Is this vulnerable to attack, without ...
2
votes
3answers
10k views

How can I send and receive untraceable emails? [duplicate]

I have been receiving threatening emails from someone, and I don't want them to know my location for my safety's sake, but I need to send them a "Cease and Desist" notice. This person has great ...
2
votes
1answer
414 views

Linux Runtime Memory protection [closed]

I'm searching for a solution to protect process memory at runtime level in Linux (just like GameGuard in Windows). I googled many times but didn't get any useful information. Does anyone know any ...
2
votes
1answer
123 views

Security of data distributed to different cloud providers

This is an purely educational question: Suppose we have different cloud storage providers. Imagine a files as a stream of bits and we save each 'th byte on the ( module )'th cloud provider's storage ...
15
votes
4answers
1k views

What measures should be taken when losing an iPad

When losing a tablet that has been used to access email accounts , beside changing the passwords, is there anything more can be done? What are the most common problems that might occur if the iPad ...