Questions tagged [software]

Computer software, or just software, is a collection of computer programs and related data that provides the instructions for telling a computer what to do and how to do it.

Filter by
Sorted by
Tagged with
0 votes
2 answers
115 views

Is it possible to make whitelisted software do custom, malicious things?

Let's say there's a keylogger secretly installed in an employee's computer. The keylogger recorded a bunch of information, but the well-configured firewall blocked the keylogger from sending that ...
No Name's user avatar
  • 217
-1 votes
1 answer
199 views

bruteforce local software's password

There is a lot of online tools to bruteforce online server like hydra and offline with hashes like hashcat. Yet it seems very weird that there is not a single offline bruteforcing app for software. ...
the shadow's user avatar
0 votes
0 answers
95 views

Check BadUSB or similar threats via software [duplicate]

I recently purchased a fake USB flash drive for its cool and beautiful case. I know that the seller modified the firmware so that it shows a different capacity to the operating system, but I am not ...
fflianjie fflianjie's user avatar
1 vote
0 answers
69 views

Where to find updated best practice on using unmaintained or legacy software on a patched OS?

I assume most of the security issues with old software are that scripts or .exe will run against the bugs in the software. and that the firmware on the device OS bugs aren't patched. Or some parts of ...
maskin's user avatar
  • 129
-1 votes
2 answers
360 views

Is end-to-end encryption really secure?

If a software uses end-to-end encryption and the encryption key of a client never leaves the device, isn't it still relatively "simple" to get the encryption keys of clients? A hacker just ...
Mointy's user avatar
  • 99
4 votes
1 answer
158 views

Is it possible to see the previous contents in a word file?

I have a word document where I have turned off the tracking history so technically no one could track my previous changes. What if I send the word document via email? Could someone possibly use a ...
Lisa's user avatar
  • 41
0 votes
1 answer
111 views

Are computers exposed when software is installed on a system?

As a neophite in security, I'm very curious to understand if companies can audit computers that their software is being installed on during the installation process, and report back to their servers? ...
StillBill's user avatar
0 votes
1 answer
108 views

Need secure site substitute for printfriendly.com [closed]

At the present time, the website "printfriendly.com" is not available in my work environment. I had submitted an appeal to our helpdesk to have this site reviewed. Their response: That site ...
James Barrett's user avatar
1 vote
0 answers
87 views

Does Google Update perform cryptographic checks against releases?

My company is looking to allow Google Chrome to self-update, a necessity as we are finding it difficult to keep up with their release cycle in order to mitigate vulnerabilities. On the pro side, ...
JohnyD's user avatar
  • 169
0 votes
0 answers
27 views

Is using free product key or license key safe [duplicate]

I have installed VMWare Workstation Pro from the official website. Now after the trial version has ended, I have searched for free products key on the internet. If I use these product keys, will it be ...
Sann's user avatar
  • 43
1 vote
0 answers
518 views

Do anti-cheat software actually "patch" the UEFI firmware on your motherboard?

I've recently read about the new game called Bloodhunt containing an Anti-Cheat, which had a bug, in which the anti-cheat service would stay installed even though the game is removed. The top Steam ...
Sir Muffington's user avatar
4 votes
1 answer
1k views

How to maintain and enforce an approved list of software?

I work in a software-development company where we have a lot of tech-savvy people. For ISO27001 certification we need to maintain list of approved software. And I'd like to understand how in practice ...
Dmitry's user avatar
  • 43
0 votes
1 answer
573 views

Some introductory reverse engineering help on finding a string

I understand the crackme I am researching is from 2007, however this was the point in my life when I initially became interested in reverse engineering and wish to complete it for nostalgia sake. ...
questioner's user avatar
0 votes
1 answer
2k views

Is there a more convenient, yet safe, way to run DOSBox-X than I'm currently doing it?

I recently learned about DOSBox-X. It's basically a somewhat less awful version of the basically-abandoned DOSBox. I currently have it installed inside a Windows 10 VM inside of my Windows 10 bare ...
Kalo's user avatar
  • 1
1 vote
0 answers
167 views

How to stop 3rd party libraries from being reported as malicious, if they were part of malicious programs in the past?

Some are standard user space dll’s and another one is actually a windows driver. The libraries alone are not dangerous and are pure utilities but they can be used by bad guys, like most software tools....
miran80's user avatar
  • 171
3 votes
1 answer
2k views

How dangerous is Code With Me, a remote pair programming tool from Jetbrains?

I've been looking into this very useful remote pair programming plugin from JetBrains called Code With Me, but want to understand all the security implications. From their FAQ page: How is data ...
Fetus's user avatar
  • 143
0 votes
1 answer
396 views

How can a program remove the menu in Control-Alt-Delete (Secure desktop) in Windows?

In reference to another post about the Respondus Lockdown Browser, I was wondering how can a program edit and remove parts of the "Secure Desktop" Ctrl+Alt+Del menu in Windows, as well as ...
Mary Mayhem's user avatar
0 votes
1 answer
122 views

Building software in group [closed]

If one made software, but later needed others to work on the project, how to secure the software files and source code if one of the developers tried to share the source code with others or if someone ...
user259462's user avatar
26 votes
5 answers
6k views

How can a non-admin program cover your entire screen with a window?

This year, since many students are online, College Board (the company that administers AP Exams in the US, along with the SAT) recently released its Digital Testing App. Once installed, and going ...
StarDust's user avatar
  • 361
0 votes
1 answer
183 views

The difficulty of securely storing a password

We have an open source software that allows users to be created. The users are saved in an LDAP directory. The software connects to the LDAP as an administrator to write a new entry for a new user, or ...
Matthias Ronge's user avatar
1 vote
0 answers
116 views

Shuffle Tool / Software [closed]

I use GPG symmetric, to encrypt text file. Is it possible to use GPG symmetric, to encrypt a text file, and at the same time, add additional setting to the encrypted file, to give us 2 conditions: ...
leon's user avatar
  • 11
1 vote
1 answer
218 views

Is Acronis True Image encryption safe? [duplicate]

This question has been asked before but a lot of time has passed since then. The older question had an answer that the Eula said that Acronis can decrypt the data. I can no longer find that part. Can ...
A_good_name's user avatar
1 vote
1 answer
199 views

How do I destroy references to wiped files?

I partially wiped my hard drive using the null-fill method through command prompt by copying a 1 Gigabyte file filled with NULL over and over until I ran out of space. After that I tried recovering ...
user252028's user avatar
1 vote
1 answer
281 views

Use of SoftHSM2 in commercial products

I came across SoftHSM2 from OpenDNSSec(BSD license) which is a drop-in replacement for HSM except that SoftHSM2 only lacks physical security. Also, being the fact that PKCS#11 is the standard ...
Baranikumar Venkatesan's user avatar
0 votes
1 answer
217 views

How to distribute bash scripts to multiple IOT devices securely

Here is the dilemma we're having: we developed proprietary bash scripts that do something, which is meant to be secure and closed source. Our customers however will have to buy separate IOT devices ...
AK_'s user avatar
  • 687
1 vote
2 answers
432 views

how to download software without fear of viruses? [duplicate]

I've always been afraid of downloading software because of viruses, and that has affected my life as a programmer a lot. So, I want some tips to be able to install and download software without fear ...
Elblack Ninja's user avatar
0 votes
1 answer
156 views

Is it possible to use pass, the command line PW manager, without leaking details? Does it matter?

I'm familiar with password managers like KeePass, and that there are a variety of interfaces for them. However, I've decided that I rather like the charm of pass. It's command-line oriented, and ...
Wayne Werner's user avatar
  • 1,795
0 votes
1 answer
255 views

MFA using PKI certificates [closed]

I'm trying to set up a multi factor authentication using PKIs certificates. A PKI infrastructure is ready to use and i'm planning to put these certificates on smart cards. I was looking for a smart ...
n_q_t's user avatar
  • 1
0 votes
1 answer
442 views

Recommendations on minimal alternatives to openssh [closed]

Although openssh is awesome, I'm interested in exploring some more lightweight FLOSS alternatives to use for connecting to servers I'm administrating (and using alone). Since I only need a minimal ...
n0542344's user avatar
  • 121
6 votes
2 answers
2k views

How do EDR prevent you from uninstalling even as local admin?

I have an CrowdStrike EDR and it seems like the only way to disable this on all OS is to provide maintenance-token or ask CrowdStrike to disable the defences so you can uninstall it. I also have a ...
user153882's user avatar
4 votes
1 answer
4k views

How can wkhtmltopdf be used without introducing a security vulnerability?

Background Per the project website, wkhtmltopdf is a "command line tool to render HTML into PDF using the Qt WebKit rendering engine. It runs entirely "headless" and does not require a ...
Aaron Cicali's user avatar
0 votes
1 answer
139 views

Security of downloaded softwares [duplicate]

I downloaded Rufus and Win32 Disk Imager from Sourceforge and used them on a flash drive to boot another operating system. I'd like to know if it's possible that one of these infected my OS or ...
user240532's user avatar
0 votes
2 answers
137 views

Connect Cables in pc and it’s affect [closed]

Is there anyway I can know if the cable I use to charge my phone in it was connect to my pc before or not? Is there something in pc can let me see that because my pc contain some malware and spy files ...
user239386's user avatar
5 votes
1 answer
281 views

There seems like a wide gaping hole in the process for checking integrity of e.g. linux distro releases

Many Linux distributions (e.g. Fedora) recommend using downloaded signing keys to verify the integrity of downloaded checksums. This seems utterly ridiculous to me, since the downloaded keys are just ...
Money Luser's user avatar
0 votes
1 answer
139 views

Software update process (dependencies) in organization

Wondering how other organizations manage software update process. We are a startup, were we try to define components owners, which should update them (security updates etc). This does not to seem to ...
dev's user avatar
  • 997
9 votes
1 answer
1k views

Does HTTP/2 prevent security vulnerabilites like CRLF injection?

Which vulnerabilites does HTTP/2 prevent? More specifically: Does it prevent HTTP request smuggling? Does it prevent HTTP response splitting / CRLF injection?
Machine Yadav's user avatar
1 vote
0 answers
136 views

Protect USB from reading by using PC identity

Is there any way (software or hardware solution) to create a usb drive that can make its contents readable only on specific PCs using their hardware serial numbers?
Abdeslem SMAHI's user avatar
-1 votes
2 answers
225 views

Encrypt files without leaving a hint of the encryption algorithm used [closed]

I noticed after encrypting some files with 7zip that they contained the information about the encryption algorithm used AES 256, i want to know if there is a better software that doesn't leave traces ...
P. Kod's user avatar
  • 5
4 votes
2 answers
167 views

How could malware disable third party security software?

I'm asking this question with the assumption that anything the user can do, so can malware. I'm using a third party firewall on my system to control which programs are able to access the internet. ...
Synthetic Ascension's user avatar
1 vote
4 answers
309 views

What are the names of software vulnerabilities? [closed]

In web apps there are vulnerabilities like SQLi or XSS and many more. I heard that for hackers to hack a computer they have to find a vulnerability in a software that is running on an open port. ...
Sensei's user avatar
  • 33
2 votes
2 answers
161 views

Do bug bounties ensure that software is secure?

I've been looking into third-party encryption tools and noticed that this particular provider has a bounty going on. Does this mean that they take security more seriously than other providers? How ...
Romotogr_Sunradi's user avatar
0 votes
1 answer
325 views

What are security best practices and compliance areas in Agile Software Development process

How do you ensure on a high level that developed software is secure and compliant. We want to introduce a service checklist that will list each item, including "Security and Compliance" section. It ...
dev's user avatar
  • 997
-2 votes
1 answer
264 views

Why, with such insanely powerful computers, are no efforts to speak of spent on security? [closed]

The only technology "news" I ever hear about go on about "performance this" and "performance that". I haven't felt that my computer was "slow" since the 1990s. 20 years ago. Yet this is the only thing ...
Wayman Vacha's user avatar
0 votes
0 answers
130 views

Possible to verify the integrity of AIDE itself?

I recently installed the package AIDE (Advanced Intrusion Detection Environment) on my Linux server. This is a web server installed about a year ago. Since no integrity checks have been done before on ...
pmbonneau's user avatar
  • 191
0 votes
0 answers
162 views

How to restrict software distribution or make sure it should not be copied [duplicate]

I Want to release software and it is going to be hosted on the client system. How to make sure that it should not be copied or how to restrict unpaid users using the software. I have 2 questions. ...
Hardik Brahmbhatt's user avatar
-2 votes
1 answer
190 views

Upgrading Software Version: risk of an unknown vs known vulnerabilities

Is there any evidence or research into the likelihood, as well as damage, via vulnerabilities in previous versions compared to following iterations of software? For example, with every software ...
8protons's user avatar
  • 218
1 vote
2 answers
218 views

Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]

Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
Linux_user0987's user avatar
0 votes
0 answers
197 views

What are good examples of "Dynamic opaque predicates"?

I am studying the concept of software obfuscation and come across this interesting scheme, dynamic opaque predicate: Basically it either goes two false branches, or two true branches, and ...
lllllllllllll's user avatar
1 vote
4 answers
214 views

Could've previous owner installed tracking software on my phone, even if I changed the SIM card?

I recently bought a used mobile Android phone. Is there any way to install malware, tracking software etc. that is not on the SIM card, but on some other kind of memory disc?
Svit's user avatar
  • 11
1 vote
0 answers
81 views

Is there any security advantage of installing into AppData folder? [duplicate]

A lot of programs today allow to install into user appdata subdirectory to avoid installing system wide. Is there any advantage of this? Can programs installed system wide be more exploited than ...
metablaster's user avatar

1
2 3 4 5