Computer software, or just software, is a collection of computer programs and related data that provides the instructions for telling a computer what to do and how to do it.

learn more… | top users | synonyms

-13
votes
0answers
32 views

Hacking ur own phones [on hold]

I have mobile's which i gifted it to my girl friend and since past few weeks i don't know about her whereabouts, i know all her gmail, yahoo passwords & Imei no of all the three phones i gave her ...
0
votes
1answer
85 views

How can Stolen Laptop tracking softwares survive OS reinstall?

Some softwares such as Computertrace claim that it can survive on a laptop even if the thief successfully reinstalls the operating system, reformats the hard drive, or (in some laptop models) swaps ...
0
votes
3answers
108 views

Hardware encryption for Flash Drives

Could someone tell me the difference between Hardware encryption and Software encryption? (With regards to flash drives, if it makes any difference). From what I understand, software encryption is ...
52
votes
5answers
4k views

Should security-critical code be reused or rewritten?

Usually, in programming, reusing code is always a better idea than writing your own implementation of an algorithm. If an implementation has been around for a long time and is still used by lots of ...
1
vote
1answer
55 views

Is it a security risk to have 'Control + j' functionality enabled in a production instance of PeopleSoft?

The control + j feature within PeopleSoft outputs a list of potentially interesting data for a potential attacker. The feature is generally used to aid in debugging. Here is a the [censored] output ...
2
votes
1answer
56 views

Should reverse connections be used to bypass NATs?

I'm planning on doing a demonstration on how remote administrative tools work for my schools computer security club. I plan on writing a RAT in C++ and demonstrating/explaining how it works. I ran ...
0
votes
0answers
81 views

Asking for more information about AlienVault.com using Spiceworks, viability of “suspicious IP” alert

Website here: alienvault.com I've been trying out Spiceworks for about a week, seeing what use I get out of it. Today I log in and see an alert: "(my computer) has established a connection to ...
1
vote
1answer
118 views

Malware infected ATMs in China via specialized device

Hackers inserted a specialized device which was connected to the notebook into the card reader slot on the ATM and installed malicious software. 100 thousand US dollars were stolen from at least seven ...
0
votes
2answers
48 views

Software validation process

Two days ago I asked that question: Are web browser able to use camera without permission? and I got an answer saying : "there have been multiple vulnerabilities in Flash, Chrome and even Facebook" ...
1
vote
1answer
78 views

Examples of software web clients (web browsers, IM clients, etc) written in “secure” / managed languages

After reading this article ("Everything is broken" by Quinn Norton) I was about to ask a question similar to this one (Why are security-crucial software written in unsafe languages?)... but actually I ...
0
votes
1answer
62 views

Do software systems become more secure every year? [closed]

It seems to me that computer software is becoming more secure every year - there are fewer zero-day exploits to be found, many hacker-proof concepts are becoming widespread (such as virtualization and ...
2
votes
2answers
179 views

Obstacle in Implementing a Time Limited/Number of Use Limited Software

How does one implement a trial period in a product properly, e.g. a trial period that lasts 30 days, or limits the number of product uses to 10? Storing the entries, even in an encrypted form, isn't ...
0
votes
1answer
432 views

How to combat and prevent a lpcloudsvr302 and bk-coretag.js Virus?

I recently came across a computer that was infected with a lpcloudsvr302 and a bk-coretag.js Virus. I did some research about the two Viruses and realized that their is no reliable source that helps ...
1
vote
2answers
164 views

How does NASA get hacked? [closed]

I have come across several news websites which claim that NASA websites get hacked many times a year. A 15-year-old computer hacker caused a 21-day shutdown of NASA computers that support the ...
3
votes
2answers
110 views

Crypto software: overwrite sensitive buffer

Is it common to implement crypto software in such a way that sensitive buffers are overwritten before free'ing memory? For example when they contain a private key or the plaintext message.
0
votes
1answer
74 views

Worthy security related certifications for a software engineer [closed]

I am a software engineer with an interest in expanding my knowledge in the security field. In addition to security.stackexchange and OWASP, I am currently reading the book "The web application ...
4
votes
1answer
191 views

API to change passwords?

After I learned last week that the login data of some of my accounts was leaked, I had to change my passwords for more than 30 sites. That was tedious! As luck would have it, some days later we ...
0
votes
1answer
145 views

Digital Signature Software

What is the digital signature software? What it takes to digitally sign software? I'm using the Kaspersky antivĂ­rus and the software I wrote, in Delphi, is flagged by the antivirus software due to ...
0
votes
1answer
19 views

security management and security engineering difference [closed]

Is there a difference between "security management" and "security engineering"? I read about security engineering in some places and security management in others, but I really can't find what the ...
-1
votes
1answer
68 views

Implementing a product key system?

Say I have a piece software that allows people to download a trial version that can then be unlocked. Would the following steps below be an effective way to implement a key system for unlocking the ...
1
vote
1answer
81 views

How to prepare a report on security weakness in our software [closed]

I am part of an in-house development team that provides the software that is used in our company's factories across the world for production as well as for order management, and which also enables the ...
2
votes
3answers
147 views

Which Secure Development Lifecycle model to choose? [closed]

We are going to secure our software development life cycle and have been researching for a good model to start with. I have found 3 major models (methodologies?) which are : Cigital SDLC (7 touch ...
0
votes
1answer
95 views

Are there software solutions take encrypted credit card data taken straight off a square credit card reader and insert them into a standard web form? [closed]

Does anyone know how you can take the encrypted output of a square card reader and insert it directly into a standard web form?
3
votes
1answer
193 views

security clearance for programmers

I am programmer by day and night, I work within security at the moment working on some security products. I have noticed a few non software engineering based roles which require security clearance. I ...
1
vote
2answers
130 views

Which exploit types does software diversity have a benefit against?

This classical paper of Paul van Oorschot: Revisiting Software Protection, mentions in section 3.4 that by employing software diversity "an exploit crafted to succeed on one instance will not ...
2
votes
2answers
93 views

How should we announce vulnerabilities in our application?

I have asked about security release notes Considerations for security release notes I need additional clarification about security vulnerabilities announcement. We create major release of our product ...
6
votes
1answer
116 views

Considerations for security release notes

I need help with understanding how to manage security release notes for our product. We create major release of our product about each half years and security or maintenance releases each month. What ...
0
votes
4answers
14k views

What is the difference between antivirus and firewalls

I need a brief explanation about the differences between antiviruses and firewalls
3
votes
1answer
1k views

How does time-limited trial software work? [closed]

I'm curious about how time-limited (e.g. 30-day trial) software works. I know how serial keys are generated and designed, but the time-limiting part is more complicated to understand, because it is ...
-9
votes
2answers
2k views

Remotely destroy all the data from a laptop having windows? [closed]

How can i remotely destroy all the data from a laptop having windows 7 as the OS? Is there a way to do that?
-4
votes
2answers
326 views

Is it possible to make a living selling exploits? [closed]

Is it possible to make a living (say $75k+ a year) finding and selling vulnerabilities? It doesn't matter (for the sake of this question) whether it means selling purely to a bug bounty program or ...
2
votes
3answers
626 views

Top 10 dangerous mistakes in C programming? [closed]

What is the top dangerous mistakes in C programming? for example misusing a strcpy causes a stack-overflow and code injection. I'm looking for at least 10 bad programming pattern in C.
1
vote
3answers
885 views

How can this web page access the USB? [closed]

A friend bought a "smart" headset (working with voice commands). I had to install a software on Windows to be able to configure this headset. After downloading the software from the page, this page ...
1
vote
1answer
166 views

Software library for 1-2 oblivious transfer?

I'm looking for software libraries that support 1-2 oblivious transfer of a single bit between two parties. Googling seems to bring up lecture notes, explanations, and research papers but not ...
-2
votes
1answer
14k views

How to run any application through a proxy with PUTTY? [closed]

Maybe I did not search for it the right way but I could not find the solution. Maybe I am misinformed but if I understand correctly I could use PUTTY to run any Windows applications through a proxy ...
4
votes
1answer
197 views

High Interaction Honeypot design

I've been writing a high interaction honeypot which has required some interesting design decisions, for instance I want the honeypot to get attacked not the underlying infrastructure/ software. Fun ...
4
votes
2answers
101 views

How to be sure content was generated on a specific software?

I am developing an open source software. This software generates content that is sent to a server for publishing. Anyone can get this software and generate content. The API for publishing at the ...
1
vote
1answer
126 views

Enforcing software expiration on virtual machines

It is possible for virtual machine guests to bypass the software expiration timers for paid software. This example shows one way to do this on VMWare. A simpler method is for the user to "revert to ...
5
votes
3answers
2k views

Is KeePass a good defense against keyloggers?

KeePass is a program in which you can store your password and copy and paste them into websites. Does anyone know if it is safe against key logging software? Does key logging software pick up what you ...
4
votes
3answers
431 views

Application to monitor software activities

I am doing black box testing on a software which is installed in my local machine. I want to analyze and see the list of files and registry entries that software create/modify/delete. Basically ...
4
votes
2answers
1k views

Security test lab setup [closed]

I want to setup a testing lab in my basement for penetration/vulnerability testing & offensive/defensive security skills. I believe I have all the equipment that I need, and if I'll need something ...
-12
votes
1answer
471 views

Can a cracked antivrus software do the job? [closed]

Some of my friends say that their cracked antivirus software updates regularly, and does the job as same as a legitimate software would do. Is this possible? How do they bypass the activation key ...
3
votes
2answers
721 views

Does there exist software that will scan a filesystem for possible files containing PHI?

I don't need a list of software (I know shopping questions are off topic), but my google-fu is failing me at this. Basically looking for software that will scan a filesystem looking for files that may ...
5
votes
3answers
383 views

how can an attacker use a fake temp file to compromise a program?

I am taking a security class. The class notes say that an attacker can observe a pattern in temp file names and then make their own temp file to compromise a program. They say that if a temp file is ...
6
votes
3answers
4k views

Need a software that can monitor and log network traffic of installed applications [closed]

I need to monitor and log network activities of a specific software installed on my system. I know there are lots of network monitoring software out there, even system explorer has one built in. I ...
7
votes
2answers
1k views

Software security V.S Hardware security

In theory, perfect software applications are possible but in real life, they don't exist. When attackers know the software, they can send payloads to exploit vulnerabilities and run any arbitrary code ...
0
votes
0answers
25 views

Secure delete with urandom? [duplicate]

What recovery techniques (if any) exist that can recover data from a mechanical HDD if the user has filled the disk with a single run of dd if=/dev/urandom of=/dev/[disk]? Or in other words: is this ...
5
votes
5answers
5k views

Affordable web application attack tools

I've been using Burp Intruder (part of Burp suite), but in the free edition of Burp Suite the Intruder functionality is Time-throttled. As a student pen tester however, I can't justify the cost of ...
5
votes
5answers
29k views

Cracking CISCO ASA Passwords

I've got a copy of a Cisco ASA config and i want to crack the following example passwords I've got the following lines in the config ASA Version 8.4(2) ! hostname ciscoasa enable ...
0
votes
4answers
437 views

Dynamic tools to detect vulnerabilities in software applications written in c?

I am doing a project on detecting vulnerabilities in Windows 7/8 for software applications. Some of which some have source code available and some do not. Please suggest some technique that can help ...