Computer software, or just software, is a collection of computer programs and related data that provides the instructions for telling a computer what to do and how to do it.
32
votes
3answers
1k views
Mars Curiosity Rover Security
Does the software in the Mars Curiosity Rover have any security features built-in? I can't imagine how someone would hack into it, but if the rover does indeed have some protection against malicious ...
27
votes
8answers
1k views
Is it safer to use less heard of software than popular software?
Is it good policy to use non-mainstream applications, or does it depend? For example is it better to use a less popular browser, media player or operating system as it is less likely a target for ...
19
votes
5answers
951 views
Is having Steam installed a security risk?
Speaking to one of our security administrators at work, he insists that Steam is a well understood security risk and it shouldn't be installed on work machines.
Saying it's not work related I ...
7
votes
1answer
394 views
Insecure versions of crypt hashes
I read at crackstation not to use these variants of bcrypt* ($1$, $2$, $2a$, $2x$, $3$),but I've used bcrypt ($2a$) in various sensitive implementations recently.
Can any security expert clarify why ...
5
votes
4answers
803 views
Is MD5 considered insecure?
After all these articles circulating online about md5 exploits, I am considering switching to another hash algorithm. As far as I know it's always been the algorithm of choice among numerous DBAs. Is ...
5
votes
2answers
189 views
Software security V.S Hardware security
In theory, perfect software applications are possible but in real life, they don't exist. When attackers know the software, they can send payloads to exploit vulnerabilities and run any arbitrary code ...
5
votes
4answers
127 views
How to avoid to lose data encrypted because it was encrypted by no longer supported software?
How can I avoid losing data that is encrypted using methods that may become obsolete? I have valuable family records I wish to secure, so I plan to encrypt them before putting them in long-term ...
5
votes
3answers
97 views
how can an attacker use a fake temp file to compromise a program?
I am taking a security class. The class notes say that an attacker can observe a pattern in temp file names and then make their own temp file to compromise a program. They say that if a temp file is ...
5
votes
1answer
555 views
Average number of exploitable bugs per thousand lines of code?
Over the years I've heard various estimates for the average number of exploitable bugs per thousand lines of code, a common figure being one exploitable bug per thousand lines of code. A Google search ...
5
votes
2answers
145 views
Need a software that can monitor and log network traffic of installed applications
I need to monitor and log network activities of a specific software installed on my system.
I know there are lots of network monitoring software out there, even system explorer has one built in.
I ...
5
votes
1answer
170 views
ROP Exploitation on ARM
I was wondering about since, Ret2Libc attack doesn't works on ARM, and we have to rely on ROP for that. How different is ROP on ARM from the x86 architecture.
Are there any tools, such as mona.py ...
4
votes
2answers
124 views
Security test lab setup [closed]
I want to setup a testing lab in my basement for penetration/vulnerability testing & offensive/defensive security skills. I believe I have all the equipment that I need, and if I'll need something ...
4
votes
2answers
102 views
Is KeePass a good defense against keyloggers?
KeePass is a program in which you can store your password and copy and paste them into websites. Does anyone know if it is safe against key logging software? Does key logging software pick up what you ...
3
votes
2answers
93 views
Upgrading to latest software version for security reasons
I have some software that I want to upgrade to improve security. The current version I'm on is 2.6.2. Is it better to upgrade to the latest version of the entire product line which is 2.8 or should I ...
3
votes
5answers
443 views
Affordable web application attack tools
I've been using Burp Intruder (part of Burp suite), but in the free edition of Burp Suite the Intruder functionality is Time-throttled. As a student pen tester however, I can't justify the cost of ...
3
votes
4answers
1k views
Why Adobe is recommending McAfee security scan during flash player installation?
Why is Adobe recommending a McAfee security scan during the installation of flash player?
2
votes
2answers
110 views
Does there exist software that will scan a filesystem for possible files containing PHI?
I don't need a list of software (I know shopping questions are off topic), but my google-fu is failing me at this. Basically looking for software that will scan a filesystem looking for files that may ...
1
vote
1answer
146 views
uninstall and reinstall after hacking [closed]
My computer has been hacked. If I uninstall and reinstall do I loose my files?
The facebook tech tried to sell me a number of pkgs ranged $149-$299 and told me that my account was hacked as was my ...
1
vote
2answers
61 views
Application to monitor software activities
I am doing black box testing on a software which is installed in my local machine. I want to analyze and see the list of files and registry entries that software create/modify/delete. Basically ...
1
vote
3answers
257 views
What reputable site should I download Putty from?
I recently did a Bing search for Putty and can only guess at which distribution is "trusted", contains no malware, or sleuthing code.
If you needed to download Putty for a high security Windows ...
1
vote
6answers
411 views
How should I select which antivirus software to install on my new laptop?
I'm in a bit of a dilemma here. I have bought a new laptop with no antivirus installed. I'm wondering how to choose an appropriate antivirus software to install.
1
vote
2answers
206 views
Can I use hardware token OTP to stop piracy?
Our firm sells an offline desktop (.exe) software, we are thinking of using OTP (from hardware token like in internet banking) to stop people from copying the software without permission. Basically, ...
1
vote
5answers
2k views
Cracking CISCO ASA Passwords
I've got a copy of a Cisco ASA config and i want to crack the following example passwords
I've got the following lines in the config
ASA Version 8.4(2)
!
hostname ciscoasa
enable ...
1
vote
2answers
102 views
Where are located the DPAPI BLOBS and is there any tool to decypher them?
I'm doing some testing with DPAPI for a project where I'm involved. I would like to know where the users Masterkey are located and if there is any free utility to find and decipher them.
I'm pretty ...
0
votes
3answers
276 views
How to store a private RSA key for an application?
I was wondering how an application that have a private key will keep it secure?
If the private key is outside the binary, then anybody can access it, but store it in the binary doesn't make it more ...
0
votes
1answer
374 views
truecrypt second encryption of the master and XTS key with a back door password
this table was published by (Ubuntu Privacy Remix Team ), in an analysis document, anyway i was quite skeptical.
On file based containers as well as on completely encrypted partitions or drives ...
0
votes
4answers
91 views
Dynamic tools to detect vulnerabilities in software applications written in c?
I am doing a project on detecting vulnerabilities in Windows 7/8 for software applications. Some of which some have source code available and some do not.
Please suggest some technique that can help ...
0
votes
0answers
23 views
Secure delete with urandom? [duplicate]
What recovery techniques (if any) exist that can recover data from a mechanical HDD if the user has filled the disk with a single run of dd if=/dev/urandom of=/dev/[disk]?
Or in other words: is this ...
-5
votes
2answers
138 views
What technologies are recommended for E-banking? [closed]
If a Linux user need use his bank account from Internet, then what technologies and procedures should use?
Is better to use the Guest Account (if exist) of the OS, or an Administrator Account?
What ...
-5
votes
0answers
44 views
Looking for a software that will help me set security policy on my network [closed]
I'm looking for a software that will help me set security policy on my network.
Can anyone please recommend me on some network monitoring & management tool/s that will:
Allow me to block ...
-9
votes
1answer
76 views
Can a cracked antivrus software do the job?
Some of my friends say that their cracked antivirus software updates regularly, and does the job as same as a legitimate software would do. Is this possible? How do they bypass the activation key ...
