Windows 8 is the latest release of Microsoft Windows and is the successor to Windows 7, scheduled for release on October 26, 2012. If your issue does not relate to security issues ask in superuser.stackexchange.com

learn more… | top users | synonyms

16
votes
3answers
800 views

ISO27001 and Linux/Ubuntu

My company has an ISO 27001 certification. They provided me a new laptop with Windows 8 OS in it. I asked if I can have a Linux/Ubuntu OS installed, they said that it is not possible due to the ISO ...
-1
votes
0answers
36 views

I can't copy files from a HDD, do I need permission from my own account? [migrated]

My friend wanted me to backup all the photos and music and text documents on his hard drive so I'm trying to do that. He gave me the whole computer. It's an OEM machine from 2005 running Windows XP. ...
1
vote
1answer
74 views

Can Windows 8 be PCI compliant?

I am in the process of getting PCI. I am in the last step in which I would need a secure PC on my internal network. All the scans I must run are only available through a plugin in browsers for Windows ...
1
vote
2answers
31 views

What are hardened ACLs for the Windows %systemroot% folder?

What are the recommended file permissions for %systemroot% in Windows 8.1? I couldn't find hardened file system permissions to apply to better secure a Windows installation.
1
vote
3answers
83 views

Sensitive issue regarding windows 8 password [closed]

Although I know this sort of request probably isn't exactly what stackoverflow is for, I am desperately seeking help. One of my best friends recently passed away and his parents asked me if I knew a ...
-2
votes
1answer
73 views

Official proof (document) that Linux is safer and faster than Windows [closed]

I work for the Mexican government, and even though everyone involved in Linux knows that it is safer and runs faster in most instances, I have not found an official document or authority that I can ...
0
votes
1answer
151 views

Microsoftonline.com, is this legit?

A couple weeks back I went to google and type in Office 365 to login and download the suite from my account after restoring my PC. ...
0
votes
0answers
23 views

1e100.net Remote Address downloading something to my system behind the scenes [duplicate]

I have a brand new PC I got yesterday and am forced to use a dialup connection in the area I live in. Something was downloading from my internet last night behind the scenes even after I had all ...
0
votes
0answers
30 views

AutoRun/AutoPlay in Windows 8

It's widely known and accepted by most tech-savvy people, especially those with an affinity for security, that AutoRun/AutoPlay should be disabled due to a number of attack vectors that it opens up. ...
1
vote
2answers
165 views

How to be sure laptop's trusted certificates are safe

I have a Windows 8.1 Lenovo laptop. The evil Superfish app and certificate have been removed. My laptop has 36 certificates in certmgr.msc current user\third-party root certification ...
-4
votes
3answers
528 views

Can I do hacking using Windows OS? [closed]

I have searched the web a numerous times but haven't found an explicit answer to my question. I've studied (at school and on my own) computer networks for 2 years, doing active programming for 4 years ...
5
votes
6answers
486 views

How to protect the company VIPs

Environment: small engineering company (<50 employees) and everyone is local administrator on their computer, including everyone in the management group. Setup: Some standard security features are ...
2
votes
1answer
132 views

Powershell opened up, switched to administrator mode and ran scripts all without me touching my computer. How worried should I be?

I'm on a laptop running Window 8.1 connected to the internet running Kaspersky. I am the sole user and administrator of this laptop. While going about my usual work, I paused for a moment (hands off ...
0
votes
1answer
105 views

Do you really have to go to the extremes this guide says? [duplicate]

http://lifehacker.com/how-can-i-stay-anonymous-with-tor-1498876762 Alright, so here's a lifehacker guide on how to remain anonymous. Do you really have to go to this high level of extreme to remain ...
1
vote
1answer
114 views

Recovering From Suspected MPEG Malware Attack

Against my better judgement I foolishly opened an MPEG video emailed to me from a friend's email address because the topic in the email was something we had recently discussed. I am fairly certain ...
9
votes
1answer
213 views

Is a local account on windows more secure than a microsoft account

I am using a local account on my Windows 8 computers rather than logging in with a Microsoft account. I see no reason why Microsoft needs to know my login credentials; it feels intrusive to me and it ...
3
votes
2answers
488 views

Does KASLR really provide more security against exploits?

I know all about how ASLR works, and how it has been implemented on both Linux and Windows systems. It provides an extra layer of protection that malware has to take into account. But nowadays with ...
2
votes
0answers
749 views

How does Bitlocker only-PIN method work?

Microsoft explained USB-key and TPM based BitLocker decryption process on this article. USB-Key process: The steps in the illustrated sequence are as follows: 1- The operating system starts ...
0
votes
1answer
155 views

System Account in Windows

I was thinking about SYSTEM account on windows 7 and while researching about it, i came to know that it is predefined account used by service control manager (SCM),The account is not recognised by ...
4
votes
4answers
2k views

Does Windows have a built-in password store?

What passwords are stored in Microsoft Windows? How can I know what password are saved in computer?
1
vote
0answers
353 views

Bitlocker on a laptop without carrying around recovery key

We have a rule in my company that all PC drives must be encrypted with BitLocker, including laptops. My own Windows 8 laptop has a tendency to hang at shutdown, black screen but the computer never ...
14
votes
2answers
2k views

How does Windows 8's Microsoft Account authentication work?

One of the new features to Windows 8 is the ability to log in to your PC using your credentials from a Microsoft Account. How is this implemented, and what steps are taken to prevent hijacking of ...
4
votes
3answers
749 views

Is Chrome in Metro Mode more secure than Chrome in Desktop Mode?

With Windows 8, Microsoft introduces the Metro Apps which run in a sandbox environment, and therefore should be more secure. I would be interested to know if this higher security that the metro apps ...
1
vote
2answers
929 views

Windows certificate store suddenly changed security level of one of my certificates

I use Windows 8.1 Pro 64 bit and IE11. I have two personal certificates (with private key) of mine in the system certificate store. They are both set to require a password before they can be used. ...
1
vote
0answers
162 views

Does Windows 8 UEFI Trusted Boot protect SSDT table from modification?

I read from a link that says: Trusted Boot takes over where Secure Boot leaves off. The bootloader verifies the digital signature of the Windows 8 kernel before loading it. The Windows 8 kernel, ...
7
votes
2answers
590 views

What are the security implications of linking a domain account with a personal Microsoft account in Windows 8?

Besides being able to mess up settings and having access to the personal SkyDrive account, what else might an attacker on the corporate network be able to do when the accounts are linked and settings ...
2
votes
2answers
1k views

Security behind the windows 8 eye

I use the Windows 8 operating system. Whenever I navigate to the login page of Internet Explorer 10, or even the login screen of the operating system, I see an eye symbol at the end of the password ...
35
votes
2answers
13k views

How secure is the Windows 8 included Anti Virus known as Windows Defender?

How secure is the new Windows 8 anti virus known as Windows Defender? Does it have a protection against malware which uses UAC bypass/process injection/rootkits/process persistence/running the binary ...
-1
votes
1answer
4k views

Files deleted by some Employee . How to find what time it happened and whether done from another computer on network? [closed]

My Files got deleted by any Employee . How to find what time it happened and whether done from another computer on network ? The files were in shared drive in the computer. I am using windows 8. What ...
3
votes
0answers
227 views

PIV or GIDS compatible token availability [closed]

I am researching smartcards for corporate implementation and have hit a small bump. We need to support Windows RT, and Windows RT does not support Windows minidrivers for smartcards. Instead, it only ...
3
votes
1answer
388 views

Does the Windows Surface RT or Pro (Windows 8) support local encryption of Activesync data?

Our company policy is requires the local encryption of data for all email (in case the device is stolen) Does the Windows Surface (either version) support local encryption? Is the local device ...
2
votes
1answer
179 views

Windows App Store security

It seems like most companies now a days, give you a crappy laptop with some version of Windows on it that allows you to access the internet (sometimes they block YouTube, Facebook, etc.), comes with ...
2
votes
1answer
3k views

IE on Windows 2012 doesn't show certificate or lock icon despite using HTTPS

Can anyone explain why IE on Windows 2012 doesn't show the lock icon despite using HTTPS when visiting the following site? https://www.microsoft.com/en-us/default.aspx I am able to see the lock ...
2
votes
1answer
944 views

Can Microsoft monitor my computer because of Windows 8 email sign in

Because Windows 8 uses an email sign in/cloud profile, do they have access to view my data and what I am doing with it? I am always wary that one of the EULAs is signing away the rights to my soul (or ...
9
votes
1answer
609 views

How secure is Windows 8 email authentication?

I boot up Windows 8 and the first thing I notice is that it allows you to login with your email credentials. Let's say if my laptop is stolen then what are the advantages or disadvantages of email ...
1
vote
2answers
159 views

Auditing EXEs to ensure buffer overflow protections are in place? (such as SEHOP, ASLR, and DEP)

According to this answer, it's possible to compile a GCC-based application without certain buffer overflow techniques. Perhaps this is even possible with Visual Studio. How can I audit a given EXE ...
4
votes
4answers
994 views

To what extent is FREE 3rd party antivirus software better than Windows 8 defender (if any)?

As someone who is not in a position to currently purchase an antivirus suite, I would like to know if having a free Avira or Avast or similar program is worth the overall system performance drop (I ...
6
votes
1answer
1k views

What is HiASLR?

I have been hearing this word the whole day long. Can any one give me a brief intro? How does it differ from ASLR?
22
votes
4answers
7k views

How secure is Windows 8's Picture Password login?

The final Windows 8 build has been released to manufacturing. One of the new features of Windows 8 is "Picture Password", where the end user logs on to Windows by clicking a specific pattern on the ...
4
votes
3answers
579 views

Further potential problems with Windows 8 SmartScreen

Some research was recently published that showed that Windows 8's SmartScreen feature sends certain details about every single application that you install to Microsoft. Ignoring the obvious privacy ...