A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.

learn more… | top users | synonyms

0
votes
0answers
24 views

How do I identify sensitive information in a Minidump file?

I suspect Minidump files contain sensitive information, and I'd like to inspect a file for such information. What approach should I take? Assume that the minidump references either an internally ...
0
votes
0answers
5 views

Enabling MFA in Windows 7 [migrated]

How does one set on Windows 7 that you have to login with 2 methods? For example, first time with your password and then you are forced to use fingerprint or smart card ... and after that your PC will ...
0
votes
1answer
34 views

BitLocker : Update Volume Master Key and meaning of “keyed” vs “re-keyed”

Note: Below are some information from searching around the Internet. To skip to my main question, go to the last line of this post. I've been searching around on how to change the Volume Master Key ...
28
votes
6answers
5k views

What is the point of making a complicated PUBLIC password?

I have downloaded a couple of Virtual Machine images from http://modern.ie, in order to test different versions of Internet Explorer. When running these images, a complete Windows environment is ...
1
vote
0answers
75 views

Windows 10 privacy concerns for other accounts on same computer [closed]

What are the privacy concerns for a local account on a Windows 10 computer, which has all settings set to "private", if an additional "Microsoft" account is being used on the same computer with ...
6
votes
2answers
1k views

Can a piece of malware/virus inject itself into an ISO

Let's say that I have an infected PC. I download a copy of the Windows ISO(obviously clean) and burn it to an USB. Is it possible that the malware on my computer can inject itself in this process/ISO ...
1
vote
0answers
15 views

Testing my TLS1.1 connection code [migrated]

I have a desktop client application (Windows) developed using C++. It connects to the web services hosted on the IIS on the server. Currently I am in the process of porting this application to use ...
5
votes
2answers
181 views

How secure is PIN login to Windows?

I've just noticed that Windows 10 allow me to change my login method to PIN which is obviously much more convenient than entering my long and secure password after every startup / wake. I am just ...
146
votes
4answers
25k views

How does Windows 10 allow Microsoft to spy on you?

Windows 10 is perhaps the most Internet-connected and cloud-centric operating system released by Microsoft to date. This, of course, has caused many users to be concerned about how the OS respects ...
0
votes
0answers
4 views

Help Needed To Create Custom .onion address - Please explain it like I'm 5? [migrated]

I've opened 'scallion.sln' in Visual Studio, tried to run it and have this error. I know I'm a complete noob, can someone please explain how I can do this? I've installed OpenCL and .NET 3.5. I'm ...
4
votes
4answers
260 views

Can the FBI or government agencies decrypt my hardrive and/or force me to give them the password?

I have seen other TrueCrypt questions as well "Windows encryption with BitLocker" and "Mac OSX encryption with FileVault". Does the FBI/NSA or other government agencies have access to my data or can ...
0
votes
0answers
30 views

What artifacts to acquire when looking for IoC?

I want to hunt for the Indicators of Compromise (IoC) in a potentially infected Windows PC. I am writing a batch script that would record the information needed for analysis. It includes the ...
-3
votes
0answers
70 views

SYN Flood attack on private user - steps for post-analysis?

The firewall in question, used in a secured home office, reported a series of SYN Flood matches on various requests coming in over a ten-second period. The IP and country of origin changed with every ...
-3
votes
1answer
75 views

How to tell if my Windows 7 copy is not modified?

I lost my windows cd I downloaded a copy from the internet. The guy who shared it said it's original without any modifications. However I get weird actions like I can't use mouse clicks or I can't ...
6
votes
0answers
189 views

Windows 10 installaton USBs sold by Microsoft [closed]

With the recent release of Microsoft's Windows 10, I dropped by a local Microsoft store to purchase a windows 10 installation media. To my surprise (somewhat) the employees said that they do not ...
1
vote
2answers
55 views

If there is a malicious attack on one partition, is the other one safe?

I recently have used Bootcamp to set up a new partition and run Windows 7. About half of my HDD is designated to my OS X partition and the other half is allocated to the new Windows 7 partition. If ...
3
votes
1answer
88 views

Is it dangerous to have the built-in Administrator account enabled?

I've seen it said that when using the built-in Windows Administrator account, the best practice is to enable it (net user administrator /active:yes), use it, and then disable it. I do realize it's a ...
0
votes
0answers
4 views

Connecting Android to Windows VPN [migrated]

I have set up a VPN on my Windows 10 computer by going into Control Panel\Network and Internet\Network Connections and hitting Alt and then going to File > New Incoming Connection... and setting up ...
97
votes
7answers
14k views

Are there technical differences which make Linux less vulnerable to virus than Windows?

What makes Linux so different than Windows in terms of anti-virus needs? My question is not if I should get an anti-virus for my Linux. I perfectly understand why an AV is important. I would like ...
30
votes
5answers
5k views

Why can't Windows 98/IE5 connect to HTTPS sites in 2015?

Recently I found an old installation CD for Windows 98 Second Edition, and looking for a bit of a nostalgia kick, I installed it inside VirtualBox. Win98SE shipped with IE 5.0, and browsing the web ...
6
votes
1answer
202 views

Is ECDH for SEC P-384 and P-521 broken in Windows 10 / Windows Server 2016 TP3?

UPDATE: Proof of concept code here, console output shown below and all involved certificates are here. Just noticed that ECDiffieHellmanCng.DeriveKeyMaterial(...) behaves differently on Windows 8.1 ...
13
votes
1answer
2k views

Is my modem compromised?

My modem automatically changes its DNS server from Norton DNS server to AdClick server. How do I prevent this from happen again? Is it possible to have protection from these for modem? How do I check ...
0
votes
2answers
77 views

How to detect port scan on SIEM within LAN or same Network?

Let's suppose a host machine in the client environment has been infected and its performing port scanning on other machine within the LAN or same Network without passing through Firewall: On what ...
0
votes
1answer
89 views

Scam caller claimed to have elderly friend's “Windows unique identifier”

An elderly friend received a telephone call similar to this Information Security SE post and this one. The caller claimed that my friend's computer had a problem that needed to be fixed. My friend ...
2
votes
0answers
813 views

Just how intrusive IS Cortana? [closed]

According to Microsoft's privacy statement: To enable Cortana to provide personalized experiences and relevant suggestions, Microsoft collects and uses various types of data, such as your device ...
3
votes
3answers
160 views

Identify Malicious/Suscipicous Processes from Process List

I have a list of 1000 processes and I want to identify which of them are legitimate and which are not. I only have the name of the processes and I want to categorize them. Is there any way to get ...
5
votes
2answers
107 views

Limiting Concurrent Login For System Admins On Windows Domain

Quick background: we are a smaller sized team meaning that we perform multi-function roles. Thus a developer is typically a DBA as well and some developers do have domain admin access. As a rule our ...
4
votes
3answers
189 views

Using Tor browser on a Windows machine

Suppose a person is running a Windows 7/8 operating system. If she/he uses the TOR web-browser, can Microsoft see what they are browsing? Would that not defeat the point of using TOR in the first ...
1
vote
2answers
49 views

What exactly is IE / Chrome checking when I view the “certification path” tab on cert connection details?

When I bring up certificate details for a web page in IE or Chrome, I have the option to view the certificate hierarchy (under a tab called "Certification Path"). Here's an example for ...
10
votes
1answer
1k views

Git server security

I want to install a Git server for my company. I'm able to get a Windows virtual machine. Now I've been asked to assess its security aspects. I'm lost on how to achieve this goal. As it is a Windows ...
3
votes
3answers
94 views

Will it improve security if I place both SHA1 and SHA256 signatures inside codesigned binary on Windows?

My application targets platforms starting with Windows 7 32bit. Many of them aren't up to date (i.e. may be missing many recommended updates from Microsoft). Given the constraints I must use SHA1 ...
3
votes
1answer
60 views

Does enabling EnableLinkedConnections pose a security risk?

As shown Microsoft's TechNet, network shares that are mapped by logon scripts are shared with the standard user access token instead of with the full administrator access token. Here's the gist of it: ...
2
votes
2answers
105 views

Malicious programs that takes advantages of Windows vulnerabilities [closed]

I was wondering if the majority of the viruses and worms are created to exploit vulnerabilities of the Windows system (not a third party app), also I would like to see a report. In Windows a normal ...
1
vote
2answers
195 views

Can I connect to a network without being detected? [closed]

Some people use software like whoisonmywifi and so on. Is there a way to bypass this software? I think it pings all IP addresses like 192.168.1.0/24 so it will ping all addresses. Can I disable ...
0
votes
2answers
179 views

Are the Microsoft Windows images found on the internet safe?

Microsoft has stopped offering the Windows images for download. It is now only possible to get the image if one has a key of a retail version of the corresponding OS. The question is now, whether the ...
4
votes
3answers
249 views

Windows: unknown program/service etc. sends HTTP request to download a file; how can I find the origin of that request?

The firewall of my company has detected and blocked a repetitive (every 15 min) HTTP request from a PC, which tries to start a download of a file called ..._chrome_installer.exe(or so) from the host: ...
-4
votes
2answers
104 views

What are the chances of a normal Internet user being hacked or infected by malware?

Say I'm a normal Internet user, I visit some well-known social networks like Facebook, twitter, play flash-based games in Facebook, visit some big websites that are known to be safe and trusted and ...
1
vote
0answers
62 views

A Solution for Block/File Encryption that is Corruption Resilient? [closed]

Question: What encryption features/(configuration options) are implemented that mitigate issues with device/block corruption? For example, if the external hard-drive gets dropped, the damaged ...
2
votes
2answers
98 views

enumeration and MS DCERPC

Enumeration, enumeration, and even more enumeration is the generic pentesting mantra, but enumeration is worthless if you can't read the results. I came across the Windows RPC service, where ...
1
vote
3answers
90 views

Protecting Uploaded Confidential Files [closed]

We have a web application in Linux (App A) using PHP and Zend and another in Windows using Asp.net C# (App B). They both access the same database. App B is for internal use only while App A can be ...
0
votes
0answers
83 views

Windows Credentials - read password

What is the cipher used by windows Credential Manager to generate credentials backup files (*.crd)? With a backup file from Credential Manager and the password used to created that backup file is it ...
1
vote
0answers
40 views

Webserver | IIS | Configuring to not run certain files [closed]

I currently have a webserver running Windows Server 2012 which is running IIS as its webserver and using PHP. Lets assume the a user is able to upload a trojan onto my server, either through a ...
5
votes
2answers
191 views

Can a Windows 7 PC with folder sharing and remote desktop disabled, still be penetrated by a rogue computer on the same WiFi or LAN?

Assume the network is already penetrated, and the attacker already fully controls another PC. Other than setting up a proxy to intercept traffic from all other systems on the network and use that to ...
1
vote
1answer
60 views

How to make sure my HTTP server on Win 7 is secure? [closed]

I'm hosting a HTTP server from home. I'm concerned about security issues since the machine has some personal files in it. I have forwarded data from external IP port 80 to my IP at port 80. The ...
4
votes
3answers
420 views

SFTP on Windows - is it likely to be disabled?

I'm a software engineer and I'm maintaining a product that allows a user to run commands and scripts on Linux servers via an SSH connection. We now need to extend this functionality onto Windows. We ...
0
votes
3answers
62 views

Why is shared less secure than open when it comes to WEP?

According to this post, Jeffrey Tippet (Microsoft employee) writes: WEP can run in two modes: shared and open. Despite the names, shared is actually less secure than open. Because of this, our ...
2
votes
1answer
92 views

Anti-live forensic programs

Against dead forensics acquisition we can use disk encryption (we can use TrueCrypt for example). I was wondering do software exists against live forensic ? Can you give me a list for windows and ...
1
vote
2answers
79 views

Performing a vulnerability assessment on Windows Tablets?

How do a security auditor can perform a vulnerability assessment for Windows Tablets including Surface RT tablets deployed ones and any management application that comes pre-installed with it? Also, ...
-3
votes
1answer
30 views

Protection of information terminal running Windows OS [closed]

I need an information computer terminal to work 24/7 in a protected public area. Operating system is Windows POSReady 7 EVAL. I need this terminal to send HTTP messages to a single IP address in the ...
3
votes
1answer
49 views

output from CryptGenRandom [closed]

Can we capture the output of Windows CryptGenRandom function. Suppose an application is utilizing CryptGenRandom, as a user can we know what is the Random Number generated and given to the ...