The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
1answer
53 views

What's the mechanism used to extract my user name on a website? [on hold]

I was browsing this forum http://openelec.tv/forum/64-installation/40869-putting-openelec-onto-sd-card-using-usb-reader-from-a-mac-for-raspberry-pi ,and realised that they show my hostname and my ...
2
votes
1answer
28 views

Where to start , secure an AWS Ubuntu 14.04 [closed]

Ok so this is probably a basic question but I would like to expand my knowledge. I have created an AWS Ubuntu EC2 server. I am running software on the server that provides 2 services , firstly a ...
2
votes
2answers
81 views

How do anti-viruses identify malicious pages when JavaScript doesn't have access to the filesystem anyway?

Disclaimer : I am not very knowledgeable about the behaviour of anti-viruses (anti-viri?). I was wondering how they discern between malicious and non-malicious pages if all they can read is the HTML ...
0
votes
1answer
69 views

Website being probed from the Ukraine

I have a landing page setup for my business located at www.jdmxchange.com and have been getting some strange error logs from ELMAH. I apparently have users (or bots) in the Ukraine probing the hell ...
28
votes
2answers
2k views

I have registered a .com domain and received an e-mail from domainadmin.com

I have registered a .com domain and received an e-mail from domainadmin.com, it looks extremely like a phishing e-mail, but after a research I am ultimately confused whether this thing is legitimate ...
1
vote
1answer
77 views

Is it possible to redirect someone to a fake site without changing the hosts file?

Is it possible to redirect someone to a fake site without changing the hosts file? When I access a bank site, I receive a fake page. But my hosts file does not have any changes to do this. Is it ...
1
vote
0answers
69 views

rootkits subverting the windows kernel source code [closed]

I just purchased the book "rootkits: subverting the windows kernel" by Greg Hoglund and James Butler for a research project at work. However, this book constantly refers to the source code that can be ...
3
votes
3answers
261 views

External cross domain include script

One of my web application underwent a vulnerability assessment recently, and one of the findings is about cross domain include script. Our web app uses addthis_widget.js from AddThis to bookmark ...
0
votes
3answers
119 views

What is a good way to authenticate a user to websites and applications with a smart phone?

What would be a good way to authenticate a user to authenticate to websites and applications over a smart phone? By good, I mean that it is both secure, and user-friendly. Passwords don't seem to be ...
42
votes
5answers
10k views

Should I take over a compromised website from another hacker?

A website (www.blue*****art.com) is trying to attack my server using the Shellshock vulnerability. After doing an Nmap scan on the attacking IP address, I found many open ports. It looks like the ...
0
votes
1answer
81 views

My website got several unkown visits [closed]

sorry if this question do not fit here. I am at this moment making a website which is not finished at all. I found some analytics for the site and found something strange. I have 30 visits from ...
1
vote
0answers
38 views

Secure Third-Party User Forms [closed]

Hopefully this is the correct forum for this type of question. I work in a small not-for-profit in the UK. We wish to have a userform on our website that will allow customers to send information to ...
-4
votes
1answer
86 views

How to know from where the website is being operated? [closed]

I mean one can find their host server (from which the domain name is bought), but can we check who bought the domain and from where is that website is being hosted?
5
votes
1answer
232 views

Best Practices for Security Questions

When a website asks me to enter security questions in addition to a password what is best practice on my part? This often happens with banks and other institutions but I see it less with other ...
2
votes
1answer
83 views

What are good precautions to take before cleaning an infected website? [duplicate]

I have to work on infected websites once in a while, and I'm wondering if there are some good practices to keep my computer safe. I use my personal computer for work, so I'd like to take precautions. ...
-8
votes
2answers
288 views

I need to hack my website [closed]

I'm writing a simple web framework for a project of mine and need to ensure that the websites it produces are secure. In order to check this I thought I might as well just try and hack my own website ...
-3
votes
2answers
137 views

Do website owners know what keywords a visitor typed in google search to get to their site? [closed]

Does google give the info to website owners / administrators... is I guess how it would work?
5
votes
2answers
360 views

Website Defacing without hacking (google issue or trick?)

When I search in google for: "Impedance spectroscopy of MSDI (molecular semiconductor-doped insulator) ammonia sensors" The two first results are: "(molecular Semiconductor-doped ...
0
votes
4answers
253 views

If a large companies website's robots.txt file has no Disallow section, does this mean I am free to write code to crawl their website? [closed]

If a large companies website's robots.txt file has no Disallow section, does this mean I am free to write code to crawl their website? The website in question is basically a data warehouse for the ...
0
votes
1answer
173 views

Malicious JavaScript — Troj/JSRedir — Gumblar

I have a client with a website receiving AV warnings from Microsoft Security Essentials. A further investigation revealed that the site is blacklisted by Yandex.com, due to a report that the site ...
2
votes
1answer
110 views

How to handle legacy website account login credentials

I have a lot (>1000) of credentials for website logins in my Chrome's password safe. Some of them are quite old (> 10 years) and have weak (dictionary) passwords. Some of the accounts have low value ...
2
votes
1answer
214 views

Is it noticeable when you take a copy of a website?

Is it noticeable when you use a tool to take a copy of a website? - how likely are you to trigger logs and whatnot when you use tools like HTTrack? Is it actually illegal or 'bad' to do this? - alls ...
-3
votes
3answers
468 views

Company-issued laptop monitoring

just want to ask whether company IT can monitor the websites that I open using the company-issued laptop but on my personal wifi network? Offhand, I can see Symantec endpoint protection and Websense ...
1
vote
1answer
139 views

How to convert SSL Certificate for mobile app?

I am in the current process of renewing my SSL cert for my website. I also have a mobile app for my site. I want to use the same cert from my website in my mobile app. How can I do this? Thanks - I ...
0
votes
2answers
107 views

Where to find such URLs that attack their visitors? [closed]

Where can I find websites that perform drive-by dowload attacks ? I need such websites in order to test a software that prevents such attacks. I am in the testing phase but I do not see where I could ...
34
votes
5answers
5k views

Are there actions taken against websites that deliver malware?

There are serious tools and services such as Google Safe Browsing for malicious and phishing websites, and others fully dedicated to phishing websites such as Phishing.org. What is done against these ...