The tag has no usage guidance.

learn more… | top users | synonyms

39
votes
7answers
10k views

Somebody hacked my router and changed my wifi SSID

One of my neighbours hacked the password of my router and he uses my limited internet package. I change the wifi SSID almost daily, but he can hack it easily. Today, he changed the SSID to a hate ...
2
votes
1answer
33 views

How to identify and patch a hardware vulnerability?

Software and systems vulnerabilities are often patched with updates, or by avoiding the use of some OS or softwares that have multiple flaws. Regarding hardware vulnerabilities, I do not have a lot of ...
2
votes
1answer
240 views

Malware infected ATMs in China via specialized device

Hackers inserted a specialized device which was connected to the notebook into the card reader slot on the ATM and installed malicious software. 100 thousand US dollars were stolen from at least seven ...
9
votes
2answers
144 views

How do large companies protect their private (code-signing) keys?

Some time ago I read the canonical answer of our ursine overlord concerning CAs and their private (root) keys. More recently I stumbled across the question on the question on how to manage code ...
21
votes
4answers
4k views

Keylogger web application protection

I'm trying to improve security in a web application. The application has an admin site and keyloggers are a concern that I'm trying to solve. Can the application do something that can prevent ...
7
votes
4answers
993 views

How to trace the actions performed by a virus?

Is that possible to trace the actions performed by a virus? Run Time , stolen data and the files consulted and get the relative impact on my pc.?
-4
votes
3answers
101 views

Is there a way to secure a Linux machine in a way that no one else (but me) can access its contents? [closed]

And I mean, even if someone tries rooting with a Live CD, even if one takes the HDD away and plug it in somewhere else, etc... I want to be able to give a client a machine with a service running, but ...
1
vote
2answers
44 views

What is the difference between Trusted boot and Kernel Patch Protection (PatchGuard)

I have understood that Trusted boot and Kernel Patch Protection (or PatchGuard) are ways that Windows uses to protect itself from rootkit infections. But I cannot find a comparison of these two ...
-5
votes
1answer
102 views

The problem I have with wikipedia showing IP addresses to the world? [closed]

I went on wikipedia, then went to the edit history of an articles I edited. To my surprise, my IP address, along with other people's IP addresses are on the articles edit history page. Why would ...
2
votes
0answers
167 views

Is possible to prevent input emulation with SetWindowsHookEx in specific application?

The one of technique of input emulation protection with automation toools like AutoIt or ACTools used most of simple game bot programs is SetWindowsHookEx usage WH_KEYBOARD_LL flags. This solution is ...
1
vote
2answers
4k views

Copy protection in SD cards

I have created a map for using in GPS devices. The map is copied to a microSD card and then, GPS can read the map data from the card. My question is, how can I create copy/clone protection of my data ...
28
votes
2answers
3k views

Is it possible for my password to have more than one password combination?

Can my password have more than one password combination? I read up on physical combination locks (the lock you open with numbers) and I learned that a combination lock can have about 40 or more ...
24
votes
2answers
2k views

How trustworthy is `sudo apt-get install (package name)` in Ubuntu?

One of the easy ways to install a program in Ubuntu Linux is to type a command in the terminal, but how do I know that the program is coming from a trusted source and not from somewhere dangerous? ...
45
votes
6answers
6k views

How do large companies protect their source code?

I recently read the canonical answer of our ursine overlord to the question on How do certification authorities store their private root keys? I then just had to ask myself: How do large companies ...
0
votes
1answer
1k views

mprotect at kernel level

What would happen if a kernel-level process sets some of its memory pages as PROT_NONE with mprotect and another kernel-level process tries to read one of these protected pages? What is the ...
3
votes
1answer
7k views

IPS fail close vs IPS fail open, what are the risks and benefits?

If a desicion is to be be made on selecting a mode of fail for an inline IPS that is protecting servers, what are the criteria that should be considored for selecting one of the failure modes: 1- ...
1
vote
2answers
34 views

Security precautions for beaglebone?

I am currently operating a beaglebone as the control PC of a scientific instrument. In order to increase its potential, it is connected to the internet, currently without password, i.e. everyone who ...
0
votes
1answer
61 views

Convert customer tracking system from web access to REST

Intro:In our company there is a service tracking website for our clients, where they can monitor the progress made in their cases with us. Our users are required to log in to that website (admin ...
0
votes
2answers
63 views

Protecting data on server from illegal physical access

I am running Ubuntu (14.04) server and I saw this question: How do I reset a lost administrative password? I wondered, because my server virtual machine is on the ESXi server, I don't know if ...
3
votes
0answers
59 views

What are some ways of protecting a VM image?

I am looking to distribute a linux VM image (with a modified linux kernel to suit or product's needs) that runs some proprietary software that will already be on the VM I distribute. The goals is to ...
2
votes
3answers
55 views

Is accessing carelessly not protected data of any service unlawfull? [closed]

The following scenario: I just visited the webpage of an phisshing company of an german service which is here in germany acting at least not unlawfull, but just trying to get money for not even giving ...
2
votes
3answers
164 views

What prevents a coder from brute forcing a wifi?

I know that a coder is able to connect to a wifi through code so my question is: Is there anything that will make it difficult to brute force a wifi password?
4
votes
1answer
130 views

Building a project on ARM Cortex-M, anything I can do to keep IP secure? Dealing with Chinese knockoffs and sick of it

Chinese have decided to ripoff a PIC product I make. Switching to ARM for other reasons anyhow, mainly that Microchip is a joke, either STM32 or NXP LPC, exact chip is open still. There are sites ...
0
votes
1answer
61 views

Does a 'mailto:' hyperlink spoil any preceding email obfuscation efforts in PDF?

Assume there is a PDF file which contains the example@example.com email address as an image (the classic obfuscation method). However, what if this image is made clickable with a hyperlink which ...
1
vote
0answers
15 views

Is it possible to low level format an Virtual Machine? [closed]

I just came to wonder, if you can low level format the disk of an Virtual Machine, maybe you guys can help me with that?
19
votes
3answers
2k views

Could my bank's two-factor authentication be hacked?

When I attempt to log in to my bank, an SMS code is sent to my phone. I then type this nine-character code into the bank's Web site, to login to my account. Is this vulnerable to attack, without ...
0
votes
2answers
136 views

How much personal information should I provide to an identify theft monitoring company?

I've been provided credit monitoring and identity theft protection services from the company CSID. Their CyberAgent internet surveillance tool claims to "monitor thousands of websites and millions of ...
4
votes
3answers
218 views

Why don't sites implement a system where a wrong password causes a 3 second delay?

I am into bitcoin right now, and the password threats scare me a little... Not so much for me, because I use LastPass and generate new passwords at 20 characters and it includes symbols, upper and ...
23
votes
8answers
5k views

Is there a way to make a WEP-secured AP uncrackable?

For some days, I was feeling that my Internet bill was booming. Then, I recently found out that a boy near my house was accessing my router to use the Internet. Then, I read some articles how to crack ...
3
votes
2answers
215 views

Is it possible to dump an exe from ram and create a distributable exe from it?

Is it possible to dump the ram and get an exe and use that ram dump to distribute an app? If so, is this something that is a practical concern and if so how best should a developer protect against it? ...
-1
votes
1answer
89 views

Issue regarding vulnerability of cookies [closed]

If someone somehow manages to copy all the cookies from my PC, can they be misused to get my private information or can information be extracted through them? If yes, please suggest some ...
1
vote
1answer
179 views

What else can be done for better security against keylogging softwares? [duplicate]

I've been hearing about keyloggers for the past two years, but never took them seriously. Now, as I've started net banking and managing social networking accounts, I'm very much concerned about ...
-1
votes
5answers
129 views

Security software to shutdown PC unless specific approach? [closed]

For future refence: In light of answers and critique, my question should have been: 1. How does one make sure a physical attacker with access to a powered, but locked FDE PC fails his/hers attempt to ...
6
votes
1answer
749 views

How to protect from caller-id spoofing?

Yesterday, I listened about caller-id spoofing and was left astonished as it's misuse can result in severe consequences for victim. Please tell me how to protect myself from this prank and is there ...
93
votes
10answers
11k views

Prevention measures against laptop seizure at US borders

Since laptop and other electronic device seizures at US borders became legal without a warrant (including making copies of data), 7% of ACTE's business travelers reported being subject to a seizure as ...
0
votes
2answers
98 views

Security devices other than firewall and IDS [closed]

I was just studying about firewalls and IDS/IPS and had a doubt. Are these the only two major security devices that a company invests in? or are there other equipment and security controls?
2
votes
1answer
81 views

How to protect personal data requested by Certificate Authorities from data theft?

I recently uploaded images of my passport and driver's license to a Certificate Authority (CA) to apply for SSL certificates. The submission was rejected because I have added watermarks to prevent ...
0
votes
1answer
142 views

.htaccess protected folder except IP

I created an e-shop with e-books and they are stored in specific folder which is protected by a .htaccess file : Order deny,allow deny from all allow from 127.0.0.1 The IP is the IP of the webpage, ...
-2
votes
1answer
349 views

What are common problems that reveal PHP code? [closed]

What is the best method for securing PHP scripts that contain database passwords? From what I've read, PHP can be revealed when an error occurs and is not caught. Is there any way to reveal PHP by ...
0
votes
2answers
2k views

Is my WiFi connection protected?

In my college the WiFi is open type connection and before I connect to it using my laptop with windows 8.1, it displays message "Other people might be able to see info you send over this network " ...
1
vote
2answers
135 views

How to secure Epson Beamer?

I work in a school and we have several Epson Beamers but some of our students have download an application for their mobile (with infra-red and WiFi connection) and they now have remote control and ...
1
vote
1answer
50 views

Protecting the root ca bundle

Applications (e.g. Firefox) often include a root ca bundle file containing trusted certificates. How can I protect those files from malicious agents trying to modify them? I think signing is not an ...
0
votes
1answer
33 views

Can attackers substitute/place my queries to/from provider?

Can attackers substitute/replace my queries to/from provider? I mean I do HTTP query and its modified on provider-side so query goes modified to a server or reversal situation, when I get modified ...
0
votes
1answer
181 views

Office password protection crack

would just like to have a check on the password protection/encryption of MS office 2007 and above. It is said that its not that easy to crack the password protection except by brute force, since 2007 ...
48
votes
10answers
35k views

Can a steel woven wallet prevent RFID scanning of credit card information?

According to the Popular Mechanics article RFID Credit Cards and Theft: Tech Clinic, the fact that many new credit/debit cards have a RFID chip embedded on it, there is a risk (albeit, small according ...
8
votes
3answers
3k views

SQL Injection if table structure/db structure not known

could an attacker who'd just found out that you're using mysql make an SQL Injection attack with only this information? If you don't know Any table/db name how come you can find it out? Is that even ...
2
votes
2answers
505 views

Old floppy disk protection

can somebody explain in detail how old floppy disks copy protection works? Someone told me that it was based on an error on a trace of the floppy that was read only during the copy (and never when the ...
0
votes
2answers
106 views

Impossible to make connections through closed ports?

If you have closed all your ports on your internet protocol, you cannot make a connection to that internet protocol. So how do attackers (DoS or any other means that need a connection) make a ...
1
vote
1answer
149 views

Securing iOS applications communication from client side

Many of you have heard about instagram flaw that facebook has not fixed yet, The flaw allows the attacker to hijack the session by sniffing the session cookie on Instagram iOS app since it does not ...
0
votes
1answer
600 views

jquery $.post CSRF protection

How can I protect the following code from CSRF? $.post("lib/newEmployee.php",{employee_id: employee_id, employee_name: employee_name}, function (output){ //code }); ...