Questions tagged [restrictions]
The restrictions tag has no usage guidance.
24
questions
41
votes
1
answer
33k
views
Which properties of a X.509 certificate should be critical and which not?
RFC5280's section 4.2 states
Each extension in a
certificate is designated as either critical or non-critical. A
certificate-using system MUST reject the certificate if it encounters
a critical ...
- 7,868
37
votes
6
answers
110k
views
Is it possible for a hacker to download a php file without executing it first?
I have a php website where everything is in the public_html\ folder, including an includes folder with config and classes. I told my developer to move it away from public folder but he said there is ...
- 471
8
votes
2
answers
2k
views
Is restricting a Google API key for an Android app useless?
According to Google, one can add the SHA-1 certificate fingerprint and the name of the package in the Google Developers Console to restrict the usage of his API key to his Android app, so that ...
- 81
6
votes
2
answers
1k
views
Is IP restriction enough or should I SSL my web authentication?
I want to connect to my home install of phpmyadmin. I restricted the connection for this to my 2 IPs.
But I don't really understand this whole OSI layering. I do know that the IP is saved in the ...
- 193
5
votes
1
answer
7k
views
Why is `cd` restricted in rbash/restricted bash?
The bash manual says:
A restricted shell behaves identically to bash with the exception that
the following are disallowed or not performed:
Changing directories with the cd builtin.
Why is ...
- 153
4
votes
1
answer
7k
views
UUID in URL - how safe from accidental discovery is my proposed solution?
Here is what I want to do:
We create reports for customers, normally we send them as pdf to our customer who then shares them with colleagues across his company.
We want to switch now to digital ...
- 51
4
votes
2
answers
191
views
What access does installing custom certificate file give?
I recently installed a custom CA certificate from a trusted authority to access some blocked resources. Android popped up with a message "The network can be monitored"
This made me question what can ...
- 143
3
votes
4
answers
727
views
Securing Data at Rest in Android
Here's a situation.
I am the author of an app that allows my customers to stream videos on their local android device. I also allow them to download the video and store it locally on their android ...
- 1,522
3
votes
1
answer
197
views
How do they determine that "It's likely that you're behind VPN or proxy" if I have my own custom VPN? [closed]
I have my own VPN server on a remote server on VPS. On some websites, very unknown and small ones, I've faced up to a restriction stating "It's likely that you're behind VPN or proxy, you're not ...
- 31
2
votes
1
answer
397
views
PDF User Password always give access to the Owner Password, even when encrypted with AES-128
I've been messing around with qpdf, and noticed something that seems huge: that a document's Owner Password is essentially useless, as it can be easily unset, and therefore that only the User Password ...
- 989
2
votes
1
answer
242
views
Folder Access restriction in Shared Hosting
In a shared hosting I use (where I don't have access to httpd.conf files) I want PHP files in "MyTargetFolder" to not have ability to access anything in upper directories.
It needs some configuration ...
- 2,727
2
votes
1
answer
525
views
How safe are networking ACLs based on IP-address?
As far as I know, a determined attacker would have no major issues in hacking the IP address of the packets contained by his (web) request.
Therefore, I cannot see how an Access Control List (such as ...
- 123
2
votes
1
answer
106
views
Block AzureRM PowerShell Module
Is there a way to block AzureRM PowerShell module commands from being executed by certain Azure AD users somewhere in Azure group policy? Or is there a way to do this with PowerShell tools?
- 23
1
vote
2
answers
579
views
Blocking access to social media on Windows
I would like to block websites like Facebook, YouTube and other social sites as part of my job and would need your advice on how to manage that. There are about 120 PCs in the building. Is something ...
- 13
1
vote
1
answer
974
views
How can I implement DVD copy protection?
I want to make a DVD movie which will be playable on a standard DVD player, but I want to make it copy restricted.
I know it is practically impossible, but I just want security to protect it from ...
- 111
1
vote
0
answers
2k
views
How do I convert any arbitrary .EXE to .DLL, in order to bypass program restrictions?
On a computer that blocks third-party programs, I figured that you could use use PowerShell and C#'s DllImport() function to import a native C program as a DLL and run it, and the program would simply ...
- 137
1
vote
0
answers
96
views
Implementing user access restriction Bluetooth LE
I have been working on a system that needs simple access restriction to a bluetooth module. I was going to use a set pin code, but it turns out that Bt LE no longer uses pairing pins. What would be ...
- 254
1
vote
0
answers
156
views
Device Control Policy
I want to blacklist all the external storage devices and only allow specific brand of device such as SanDisk. I had blacklisted the external storage devices by using USBSTOR* and whitelist all the ...
- 101
0
votes
3
answers
1k
views
Prevent users from copying sensitive data
I got a strange requirement as part of a recent project that our company is involved with. The project involves sensitive information and hence the data is restricted to only the team members involved ...
0
votes
1
answer
3k
views
How to globally limit Bluetooth functionality on Android and iPhone
I recently got my parents a Bluetooth speaker, and they are very new to the smartphone arena. What I would like is to disable all of the Bluetooth functionality in their phones except for the ability ...
- 101
0
votes
1
answer
1k
views
How is it possible to bypass single-site restriction set by ISP? [duplicate]
What's going on in this video?
https://www.youtube.com/watch?v=lXVqdezJf1A
Here, the ISP restricts access to all other sites but one (twitter.com) when the user's account balance is insufficient. In ...
- 133
0
votes
0
answers
146
views
Secure Registry Keys
Is it possible to restrict access to the registry keys, just like Microsoft does on some of the keys(ex. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend)?
I was able to get a similar ...
0
votes
0
answers
132
views
How to implement internal certification mechanism for my web applications?
Our company develops web applications and uses them on the internal network. We need to set up a mechanism to control and monitor internal network traffic so that only approved applications on the ...
- 1
-1
votes
1
answer
146
views
How do VPN providers exactly encrypt traffic from client to their server?
I'm thinking to build a VPN for personal use on a VPS but am unable to understand one thing. How exactly VPN providers encrypt data from client to their server? Suppose if I simply configure IP of my ...
- 1