A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.

learn more… | top users | synonyms

4
votes
0answers
24 views

Is SEC P-384 and P-521 broken in Windows 10?

Just noticed that ECDiffieHellmanCng.DeriveKeyMaterial(...) behaves differently on Windows 8.1 Enterprise (x64) and Windows 10 Prof (x64). Specifically, when doing: byte[] symKey12 = ...
-2
votes
0answers
67 views

How can I prevent Microsoft spying? [on hold]

I have some serious (private) files on my computer, but I still want to upgrade to Windows 10 safely. I can't just encrypt them and put them somewhere else, I am working on them, and need to keep ...
13
votes
1answer
2k views

Is my modem compromised?

My modem automatically changes its DNS server from Norton DNS server to AdClick server. How do I prevent this from happen again? Is it possible to have protection from these for modem? How do I check ...
0
votes
1answer
28 views

How to detect port scan on SIEM within LAN or same Network?

Let's suppose a host machine in the client environment has been infected and its performing port scanning on other machine within the LAN or same Network without passing through Firewall: On what ...
0
votes
1answer
70 views

Scam caller claimed to have elderly friend's “Windows unique identifier”

An elderly friend received a telephone call similar to this Information Security SE post and this one. The caller claimed that my friend's computer had a problem that needed to be fixed. My friend ...
2
votes
0answers
138 views

Just how intrusive IS Cortana? [on hold]

According to Microsoft's privacy statement: To enable Cortana to provide personalized experiences and relevant suggestions, Microsoft collects and uses various types of data, such as your device ...
3
votes
3answers
144 views

Identify Malicious/Suscipicous Processes from Process List

I have a list of 1000 processes and I want to identify which of them are legitimate and which are not. I only have the name of the processes and I want to categorize them. Is there any way to get ...
5
votes
2answers
77 views

Limiting Concurrent Login For System Admins On Windows Domain

Quick background: we are a smaller sized team meaning that we perform multi-function roles. Thus a developer is typically a DBA as well and some developers do have domain admin access. As a rule our ...
4
votes
3answers
159 views

Using Tor browser on a Windows machine

Suppose a person is running a Windows 7/8 operating system. If she/he uses the TOR web-browser, can Microsoft see what they are browsing? Would that not defeat the point of using TOR in the first ...
1
vote
2answers
37 views

What exactly is IE / Chrome checking when I view the “certification path” tab on cert connection details?

When I bring up certificate details for a web page in IE or Chrome, I have the option to view the certificate hierarchy (under a tab called "Certification Path"). Here's an example for ...
10
votes
1answer
1k views

Git server security

I want to install a Git server for my company. I'm able to get a Windows virtual machine. Now I've been asked to assess its security aspects. I'm lost on how to achieve this goal. As it is a Windows ...
3
votes
3answers
80 views

Will it improve security if I place both SHA1 and SHA256 signatures inside codesigned binary on Windows?

My application targets platforms starting with Windows 7 32bit. Many of them aren't up to date (i.e. may be missing many recommended updates from Microsoft). Given the constraints I must use SHA1 ...
2
votes
0answers
17 views

Does enabling EnableLinkedConnections pose a security risk?

As shown Microsoft's TechNet, network shares that are mapped by logon scripts are shared with the standard user access token instead of with the full administrator access token. Here's the gist of it: ...
2
votes
2answers
96 views

Malicious programs that takes advantages of Windows vulnerabilities [closed]

I was wondering if the majority of the viruses and worms are created to exploit vulnerabilities of the Windows system (not a third party app), also I would like to see a report. In Windows a normal ...
1
vote
2answers
187 views

Can I connect to a network without being detected? [closed]

Some people use software like whoisonmywifi and so on. Is there a way to bypass this software? I think it pings all IP addresses like 192.168.1.0/24 so it will ping all addresses. Can I disable ...
2
votes
0answers
31 views

Windows NFC login [migrated]

I have a motorola RFID enabled phone. I would like to scan the card for a sector with a certain password, then be able to log me into my Windows computer. How to do that? I have tried a bluetooth ...
0
votes
2answers
170 views

Are the Microsoft Windows images found on the internet safe?

Microsoft has stopped offering the Windows images for download. It is now only possible to get the image if one has a key of a retail version of the corresponding OS. The question is now, whether the ...
4
votes
3answers
215 views

Windows: unknown program/service etc. sends HTTP request to download a file; how can I find the origin of that request?

The firewall of my company has detected and blocked a repetitive (every 15 min) HTTP request from a PC, which tries to start a download of a file called ..._chrome_installer.exe(or so) from the host: ...
-4
votes
2answers
82 views

What are the chances of a normal Internet user being hacked or infected by malware?

Say I'm a normal Internet user, I visit some well-known social networks like Facebook, twitter, play flash-based games in Facebook, visit some big websites that are known to be safe and trusted and ...
1
vote
0answers
45 views

A Solution for Block/File Encryption that is Corruption Resilient? [closed]

Question: What encryption features/(configuration options) are implemented that mitigate issues with device/block corruption? For example, if the external hard-drive gets dropped, the damaged ...
1
vote
1answer
45 views

enumeration and MS DCERPC

Enumeration, enumeration, and even more enumeration is the generic pentesting mantra, but enumeration is worthless if you can't read the results. I came across the Windows RPC service, where ...
1
vote
3answers
85 views

Protecting Uploaded Confidential Files [closed]

We have a web application in Linux (App A) using PHP and Zend and another in Windows using Asp.net C# (App B). They both access the same database. App B is for internal use only while App A can be ...
0
votes
0answers
59 views

Windows Credentials - read password

What is the cipher used by windows Credential Manager to generate credentials backup files (*.crd)? With a backup file from Credential Manager and the password used to created that backup file is it ...
1
vote
0answers
36 views

Webserver | IIS | Configuring to not run certain files [closed]

I currently have a webserver running Windows Server 2012 which is running IIS as its webserver and using PHP. Lets assume the a user is able to upload a trojan onto my server, either through a ...
1
vote
0answers
28 views

What are these hexadecimal .tmp folders in my windows root containing WiseCustomCalla dlls? [migrated]

A few minutes ago, i went browsing through my Windows folder to find the proper name of my flash version for http://decentsecurity.com/enterprise/#/flash-force-update/. In my Windows root, I found 3 ...
5
votes
2answers
180 views

Can a Windows 7 PC with folder sharing and remote desktop disabled, still be penetrated by a rogue computer on the same WiFi or LAN?

Assume the network is already penetrated, and the attacker already fully controls another PC. Other than setting up a proxy to intercept traffic from all other systems on the network and use that to ...
1
vote
1answer
59 views

How to make sure my HTTP server on Win 7 is secure? [closed]

I'm hosting a HTTP server from home. I'm concerned about security issues since the machine has some personal files in it. I have forwarded data from external IP port 80 to my IP at port 80. The ...
1
vote
0answers
21 views

Reformatting drive from a GUID partition to an MBR partition [migrated]

I understand that Truecrypt is not compatible with an GUID partition but that is the limit of my knowledge. I am currently using a system that has a GUID partition but doesn't have bitlocker ...
4
votes
3answers
383 views

SFTP on Windows - is it likely to be disabled?

I'm a software engineer and I'm maintaining a product that allows a user to run commands and scripts on Linux servers via an SSH connection. We now need to extend this functionality onto Windows. We ...
0
votes
3answers
60 views

Why is shared less secure than open when it comes to WEP?

According to this post, Jeffrey Tippet (Microsoft employee) writes: WEP can run in two modes: shared and open. Despite the names, shared is actually less secure than open. Because of this, our ...
3
votes
1answer
64 views

Anti-live forensic programs

Against dead forensics acquisition we can use disk encryption (we can use TrueCrypt for example). I was wondering do software exists against live forensic ? Can you give me a list for windows and ...
1
vote
2answers
75 views

Performing a vulnerability assessment on Windows Tablets?

How do a security auditor can perform a vulnerability assessment for Windows Tablets including Surface RT tablets deployed ones and any management application that comes pre-installed with it? Also, ...
-3
votes
1answer
26 views

Protection of information terminal running Windows OS [closed]

I need an information computer terminal to work 24/7 in a protected public area. Operating system is Windows POSReady 7 EVAL. I need this terminal to send HTTP messages to a single IP address in the ...
3
votes
1answer
43 views

output from CryptGenRandom [closed]

Can we capture the output of Windows CryptGenRandom function. Suppose an application is utilizing CryptGenRandom, as a user can we know what is the Random Number generated and given to the ...
1
vote
0answers
31 views

Did DKOM trigger PatchGuard on x64 Windows?

DKOM can be used to hide processes and drivers. It works well on x86 system. However, there are PatchGuard on x64 system. Can PatchGuard detect DKOM?
1
vote
1answer
53 views

Windows Certificate Store - Generating / importing personal certificates using a smartcard?

I think we all know Windows can store and handle certificates which is a nice feature as this enables many appliations to rely on this (like Putty-CAC). Now I'm having the problem, that I own a ...
1
vote
3answers
116 views

How can I scan open ports through Windows Firewall?

I use Kali Linux and VMWare for testing some penetration techniques. The problem is that when I scan ports with Nmap to my Windows IP "all ports are filtered". I know that the firewall is blocking the ...
1
vote
0answers
39 views

What is SAM Account\F as reported by chntpw? [closed]

I am working through some study material and decided to explore the chntpw tool. I have a listing for SAM Account\F and it is off (0). I am wondering what this is as I am curious why it is off and ...
1
vote
2answers
121 views

How effective is antivirus software? [duplicate]

On one hand, most antivirus websites claim their products are highly effective, and I've seen antivirus "test" videos claiming 95%+ detection rates for new malware (as in less than a day old, not old ...
1
vote
1answer
53 views

CryptoAPI to CommonCrypto with RC4

I have cryptographic code used in the Windows platform, which uses the Crypto API functions and need to convert this to using Common Crypto on OS X. Essentially the original code is this, with error ...
2
votes
0answers
92 views

Convert RSA openSSH key/putty key to gpg key [closed]

Scenario Two work sites, site 1 and site 2. Two Linux servers, server A and server B. Server A is reachable from both sites, while server B is reachable from site 1 only. Two Windows workstations, ...
0
votes
1answer
31 views

Warning message about Git on IE 11: “a website wants to open web content using this program on your computer”

This is about something that happened while using IE 11 on Win 7 x64. Not sure if it matters but IE is running in "Protected Mode". I was posting a support request for a software that I use at that ...
1
vote
1answer
59 views

How to encrypt or store data so that only a pool of processes can share it on Windows?

I am writing an application T1 which is using SQLite database to store some sensitive data and i am trying to encrypt it securely. The issue i am facing is that i don't want my symmetric key to be ...
2
votes
1answer
148 views

Security behind “Windows Security” Feature

Within the Windows Security authentication mechanism active, there are cases the user-login popup comes up. Are this username and password sent encrypted or they are sent as plain-text as the ...
1
vote
1answer
145 views

Execute cmd commands with http directory traversal attack

Question Summary: I am trying to create a lab scenario wherein the "attacker" is intended to perform a directory transversal attack from an HTML page and move into the Windows system directories. Can ...
1
vote
0answers
22 views

Protect Specific Services on Client PC

I am not sure if I am asking in the correct location for this, but will ask in the hopes you assist. I want to be able to lock certain services from being restarted/stopped/ended. I know most ...
1
vote
2answers
61 views

secure notebook options [closed]

How can I secure my notebook with highly sensitive information stored in a spreadsheet. I am keeping the following options in mind: Password protect & encrypt BIOS Full disk encryption Password ...
1
vote
1answer
99 views

Can the Windows lock screen be attacked with software? [duplicate]

As a follow-up to this question, I am wondering how much care I need to put into my Windows login password, for when I leave my computer alone in "sleep" mode. (I know that Windows passwords can be ...
0
votes
0answers
39 views

Why malicious browser extensions along with API hooking

Most malware steals financial data by hooking to browser APIs like PR_Read, PR_write etc.. Also I see some malware like Sinowal use browser extensions along with these API hooks. I believe a user ...
32
votes
4answers
4k views

Is my data safe if, with an encrypted hard disk, I put Windows in “sleep” mode

Both my boot partition and my data partition are encrypted with TrueCrypt. My password is lengthy, so I find myself avoiding a reboot of my system whenever possible. When going to lunch (for ...