Windows 8 is the latest release of Microsoft Windows and is the successor to Windows 7, scheduled for release on October 26, 2012. If your issue does not relate to security issues ask in superuser.stackexchange.com

learn more… | top users | synonyms

0
votes
1answer
66 views

Do you really have to go to the extremes this guide says?

http://lifehacker.com/how-can-i-stay-anonymous-with-tor-1498876762 Alright, so here's a lifehacker guide on how to remain anonymous. Do you really have to go to this high level of extreme to remain ...
1
vote
1answer
66 views

Recovering From Suspected MPEG Malware Attack

Against my better judgement I foolishly opened an MPEG video emailed to me from a friend's email address because the topic in the email was something we had recently discussed. I am fairly certain ...
0
votes
0answers
153 views

How to disable SSLv3 on a Windows 8 phone?

I have a Nokia Lumia phone that runs Windows 8. However, simple test on the browser tells me I'm vulnerable for POODLE attacks. I use the phone for internet and email access a lot and I need it to be ...
9
votes
1answer
103 views

Is a local account on windows more secure than a microsoft account

I am using a local account on my Windows 8 computers rather than logging in with a Microsoft account. I see no reason why Microsoft needs to know my login credentials; it feels intrusive to me and it ...
3
votes
2answers
98 views

Does KASLR really provide more security against exploits?

I know all about how ASLR works, and how it has been implemented on both Linux and Windows systems. It provides an extra layer of protection that malware has to take into account. But nowadays with ...
1
vote
1answer
219 views

How does Bitlocker only-PIN method work?

Microsoft explained USB-key and TPM based BitLocker decryption process on this article. USB-Key process: The steps in the illustrated sequence are as follows: 1- The operating system starts ...
0
votes
1answer
78 views

System Account in Windows

I was thinking about SYSTEM account on windows 7 and while researching about it, i came to know that it is predefined account used by service control manager (SCM),The account is not recognised by ...
4
votes
4answers
302 views

Does Windows have a built-in password store?

What passwords are stored in Microsoft Windows? How can I know what password are saved in computer?
1
vote
0answers
192 views

Bitlocker on a laptop without carrying around recovery key

We have a rule in my company that all PC drives must be encrypted with BitLocker, including laptops. My own Windows 8 laptop has a tendency to hang at shutdown, black screen but the computer never ...
14
votes
2answers
2k views

How does Windows 8's Microsoft Account authentication work?

One of the new features to Windows 8 is the ability to log in to your PC using your credentials from a Microsoft Account. How is this implemented, and what steps are taken to prevent hijacking of ...
4
votes
3answers
507 views

Is Chrome in Metro Mode more secure than Chrome in Desktop Mode?

With Windows 8, Microsoft introduces the Metro Apps which run in a sandbox environment, and therefore should be more secure. I would be interested to know if this higher security that the metro apps ...
1
vote
2answers
605 views

Windows certificate store suddenly changed security level of one of my certificates

I use Windows 8.1 Pro 64 bit and IE11. I have two personal certificates (with private key) of mine in the system certificate store. They are both set to require a password before they can be used. ...
1
vote
0answers
134 views

Does Windows 8 UEFI Trusted Boot protect SSDT table from modification?

I read from a link that says: Trusted Boot takes over where Secure Boot leaves off. The bootloader verifies the digital signature of the Windows 8 kernel before loading it. The Windows 8 kernel, ...
7
votes
2answers
420 views

What are the security implications of linking a domain account with a personal Microsoft account in Windows 8?

Besides being able to mess up settings and having access to the personal SkyDrive account, what else might an attacker on the corporate network be able to do when the accounts are linked and settings ...
2
votes
2answers
1k views

Security behind the windows 8 eye

I use the Windows 8 operating system. Whenever I navigate to the login page of Internet Explorer 10, or even the login screen of the operating system, I see an eye symbol at the end of the password ...
33
votes
2answers
10k views

How secure is the Windows 8 included Anti Virus known as Windows Defender?

How secure is the new Windows 8 anti virus known as Windows Defender? Does it have a protection against malware which uses UAC bypass/process injection/rootkits/process persistence/running the binary ...
-1
votes
1answer
2k views

Files deleted by some Employee . How to find what time it happened and whether done from another computer on network? [closed]

My Files got deleted by any Employee . How to find what time it happened and whether done from another computer on network ? The files were in shared drive in the computer. I am using windows 8. What ...
3
votes
0answers
191 views

PIV or GIDS compatible token availability [closed]

I am researching smartcards for corporate implementation and have hit a small bump. We need to support Windows RT, and Windows RT does not support Windows minidrivers for smartcards. Instead, it only ...
3
votes
1answer
370 views

Does the Windows Surface RT or Pro (Windows 8) support local encryption of Activesync data?

Our company policy is requires the local encryption of data for all email (in case the device is stolen) Does the Windows Surface (either version) support local encryption? Is the local device ...
2
votes
1answer
144 views

Windows App Store security

It seems like most companies now a days, give you a crappy laptop with some version of Windows on it that allows you to access the internet (sometimes they block YouTube, Facebook, etc.), comes with ...
2
votes
1answer
2k views

IE on Windows 2012 doesn't show certificate or lock icon despite using HTTPS

Can anyone explain why IE on Windows 2012 doesn't show the lock icon despite using HTTPS when visiting the following site? https://www.microsoft.com/en-us/default.aspx I am able to see the lock ...
2
votes
1answer
651 views

Can Microsoft monitor my computer because of Windows 8 email sign in

Because Windows 8 uses an email sign in/cloud profile, do they have access to view my data and what I am doing with it? I am always wary that one of the EULAs is signing away the rights to my soul (or ...
9
votes
1answer
564 views

How secure is Windows 8 email authentication?

I boot up Windows 8 and the first thing I notice is that it allows you to login with your email credentials. Let's say if my laptop is stolen then what are the advantages or disadvantages of email ...
1
vote
2answers
150 views

Auditing EXEs to ensure buffer overflow protections are in place? (such as SEHOP, ASLR, and DEP)

According to this answer, it's possible to compile a GCC-based application without certain buffer overflow techniques. Perhaps this is even possible with Visual Studio. How can I audit a given EXE ...
4
votes
4answers
913 views

To what extent is FREE 3rd party antivirus software better than Windows 8 defender (if any)?

As someone who is not in a position to currently purchase an antivirus suite, I would like to know if having a free Avira or Avast or similar program is worth the overall system performance drop (I ...
6
votes
1answer
894 views

What is HiASLR?

I have been hearing this word the whole day long. Can any one give me a brief intro? How does it differ from ASLR?
22
votes
4answers
6k views

How secure is Windows 8's Picture Password login?

The final Windows 8 build has been released to manufacturing. One of the new features of Windows 8 is "Picture Password", where the end user logs on to Windows by clicking a specific pattern on the ...
4
votes
3answers
550 views

Further potential problems with Windows 8 SmartScreen

Some research was recently published that showed that Windows 8's SmartScreen feature sends certain details about every single application that you install to Microsoft. Ignoring the obvious privacy ...