The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
59 views

How does driver install with an expired cert?

I'm working on making a silent installer of WinpkFilter driver. In my silent installation, I'm always getting a (not so silent) prompt that says "Windows can't verify the publisher of this driver ...
0
votes
1answer
479 views

Exploit HTTP PUT Method in Microsoft IIS 5.0

I'm trying to test if it's possible to use the PUT method to upload content to a IIS 5.0 server. The WebDav is actualy enabled and the PUT method is allowed for public/internet users: OPTIONS ...
1
vote
2answers
187 views

Attacker able to install screen capturing software in Windows 7 guest account

I am operating in a guest account of Windows 7. Could an attacker that got onto my PC through malware I installed, install a video program that records everything I do and send the result back to his ...
1
vote
1answer
136 views

IT support and security concerns regarding local VM's

I started working at a large financial institution several weeks ago as a software engineer and despite every other aspect of this job being great, I am haunted by the constant restrictions that ...
1
vote
1answer
225 views

Bluetooth Peripheral Vulnerabilities [duplicate]

I've read some interesting Bluetooth vulnerability questions, but I didn't notice one recently. Bluetooth has long been disabled in our organization, and I'm looking to enabling it because of repeated ...
0
votes
1answer
38 views

Public folders security

If using one standard user account (for daily task) and one administrator account, then while in standard you can download some virus or whatever and put that into public folder. of course, assuming ...
0
votes
1answer
378 views

Can local Admin on Windows be given restricted permissions?

Looking at a lot of different security software on Windows, a lot of them rely on some settings on the computer which can probably be overridden by a local administrator. For eg. some DLP software ...
2
votes
1answer
284 views

Localhost WebSocket defense

If a malicious application has found its way onto a computer running a localhost only WebSocket server, would it help if the communications used SSL? If so, how could SSL fail if a malicious app ...
1
vote
1answer
117 views

Reliability of windows OS security for “program files” safe guard

I want to do inter process communication between Firefox (via extension) and my application. Both reside in "Program files" (of windows 7 OS). I also assume that malware is running in the system and ...
6
votes
2answers
13k views

Windows groups and permissions: Authenticated Users group meaning

What is the purpose of the "Authenticated Users" group in Windows? Under Linux it doesn't exist and I'm starting to think this is another idiosyncrasy or over-engineering of the Windows operating ...
0
votes
3answers
2k views

Is there a combination of Windows permissions that allow execution of a .NET executable but not reading nor copying its content?

I suppose that if a file is executable by anyone, in other words, if a user has enough permissions to execute an executable in Windows, it will be possible to read the contents of the executable and ...