A family of graphical operating systems produced by Microsoft. Windows includes both server and destop operating systems. Early versions relied on MS-DOS while current versions have evolved from Windows NT. Please do not use this tag for X, but use [x-windows] instead.

learn more… | top users | synonyms

1
vote
4answers
442 views

Block all Nmap scan methods on Windows [closed]

How can I prevent someone from scanning my Windows box using Nmap? I used Comodo as my firewall but someone still can scan my box using Nmap and get some info like open services and OS detection.
0
votes
1answer
128 views

How do you secure service account password on enterprise windows enviroment?

I'm suppose to have a large environment ( 500+ servers ) all Windows based joined to Active Directory domain. Some domain accounts are used for application\middleware authentication that needs high ...
0
votes
1answer
655 views

Single user mode for Windows

I am familiar with single user mode on OSX. By holding down Command-S, you can boot into a terminal as root. Resetting the PRAM with Command-Option-P-R will disable any firmware protection that would ...
1
vote
2answers
208 views

Are KIS 2014, Malewarebytes Pro and SpyBot sufficient to prevent internet attacks?

As mentionned in the title, I have KIS 2014, Malewarebyte Pro and Spybot installaed on my windows 7 (regularly updated). I regularly scan my pc for viruses and spywares and clean it with Glary ...
-1
votes
1answer
118 views

Antivirus keeps blocking connection from a file I don't recognize

This is a follow up to this question. I've finally tracked down the file Avast keeps detecting and it's C:\Users\Jacob\AppData\Local\Updater.exe , I've no clue what this file is for , but am wondering ...
2
votes
3answers
629 views

Cryptolocker: can servers be protected?

I'm IT in a small company. The network is about as ancient as most of the staff (at 30, I'm the company's youngest), and the staff also is notorious for spreading viruses around the network despite ...
1
vote
0answers
31 views

Is it safe/correct to grant full access to Everyone on a Windows symlink?

Does it really matter what the permissions are on a symlink as long as the smymlink target is configured correctly?
3
votes
1answer
107 views

Who watches the watchmen? User empowerment over firewall behaviour on a personal computer

I've been exploring the gamut of free Windows firewall applications recently and have encountered the following problem: The better firewalls are excellent at stopping other apps from phoning home ...
6
votes
4answers
531 views

Security of different OS

At my work we are given a computer to set up at home so if we ever feel like working from home we can do so. The thing is that whenever it comes to developing for java I always prefer using windows or ...
0
votes
4answers
354 views

Hacking Windows Box via Directory Traversal

I am practicing directory traversal attacks and found a vulnerability in a windows XP machine that is running a vulnerable HTTP server that is prone to directory traversal. I can guess file names and ...
3
votes
1answer
432 views

What are the risks posed by “pass-through authentication” and how are they mitigated?

Related: Local Admin has Domain Admin rights "Pass-through authentication" on Windows systems allows for the possibility for user accounts with the same name and password to impersonate one ...
1
vote
2answers
725 views

Basic self-signed certificate questions

A few basic questions around self-signed certificates Question 1 Does a self-signed certificate has to have a CA? I realize that a "real" certificate must as it otherwise can be chain validated but ...
1
vote
3answers
209 views

How safe is it to provide my administrator account password for a 3rd party software: EasyUS Todo Backup?

I've been recently searching for a backup solution for my Windows desktop. That's when I came across this free software called EasyUS Todo Backup. (I know it's a mouthful but English doesn't seem to ...
0
votes
1answer
344 views

Stack Guard vs Stack Shield

I would like to know why nowadays Stack Guard is used everywhere (example: ProPolice in GCC, /GS in Visual Studio), instead of Stack Shield. Both the approaches (i.e. Stack Guard & Stack Shield) ...
0
votes
2answers
123 views

How secure is a Windows PC that is routed through a Linux PC?

I have a Dual PC setup. Two PC's are networked together via crossover cable. The Windows PC is running Windows 7 SP1 64-bit and the Linux PC is running Slackware 14 64-bit with iptables. My firewall ...
0
votes
1answer
90 views

Is it ever safe to install patches in parallel on a Windows OS? When must I reboot after each patch?

It comes to my attention that not all installers are aware of each other (Windows Update, vs some hotfix and service pack installers) and block concurrent execution. For example, I'm able to run ...
1
vote
2answers
171 views

Manual Checks for Signs of Infection on Windows 7

Suppose I wanted to run some manual checks to see if my Windows 7 machine has been infected. I don't usually do anything to get it infected, but I would like to check whether the below steps are ...
1
vote
0answers
99 views

Bitlocker lock drive on standby or switch users

Is possible to auto lock drive with bitlocker when the laptop go on standby or sleep mode? Or when the user is changed? I want the drive to be accesible only by one user.
2
votes
1answer
279 views

Open-source alternative for CryptGenRandom?

Let's say that for some reason I don't trust CryptGenRandom. Are there any open source software Windows entropy collectors to get cryptographically secure random numbers from for seeding purposes? ...
1
vote
1answer
274 views

Is it possible to spoof the mac address of a wireless adapter so that windows sees the spoofed mac as the physical?

I know that its possible to spoof a mac address out to a network. But is it possible to spoof the address, so that the Windows operating system and applications running on Windows see a spoofed ...
0
votes
1answer
64 views

What's the point of storing an copy of args? (the /gs flag)

When you add the /gs argument to microsoft's compiler, it would place a copy of args below the buffer variable. So, what's the point of keeping a copy of arg?
1
vote
3answers
112 views

USGCB on a non-networked computer

We will be getting some data that needs to be kept in accordance with USGCB regulations. Our intent was to keep it secure by storing and using it on a non-networked computer, but the regulations seem ...
-8
votes
2answers
494 views

Remotely destroy all the data from a laptop having windows? [closed]

How can i remotely destroy all the data from a laptop having windows 7 as the OS? Is there a way to do that?
4
votes
2answers
3k views

Utilman.exe command prompt hack prevention?

This trick to hack windows and reset passwords(or create new logins)has been around for ages and still works on windows 7 and windows 8. Is there any way to disable the key combination that brings up ...
1
vote
4answers
5k views

Recover Windows Server 2003 admin password through restricted user

OK, so here goes after a lot of trial and error: background: My client recently took over another firm. However, apparently the administrator passwords to the server (along with some other non-IT ...
2
votes
2answers
209 views

Web Service Security Checklist - Tracing and Debugging

I have been reading this security checklist about web service design: http://msdn.microsoft.com/en-us/library/ff648304.aspx One of the suggestions is that you should disable the following in ...
2
votes
4answers
361 views

Best security practices in internet cafe

For the next while I will find myself without a working private wifi connection. That leaves me with just a number of options, of which using an internet cafe is one of them. What are the best ...
1
vote
1answer
201 views

While copying data from any email client to a USB device what residue information is left on the PC?

I often end up using netcafe's for browsing web (Windows 7). I recently wanted to download some secure data from my gmail account on to the USB pen drive. So, I went ahead and opened the attachment ...
3
votes
3answers
631 views

What risks are involved in exposing our home computers over the public internet?

I'm currently running a webserver from home accessible on the public internet via a static IP. Exactly what kind of risk is there in doing so? From what I understand, the setup will not allow ...
9
votes
1answer
247 views

Do the Windows shared source files compile into the same binaries as the retail version?

Microsoft makes the Windows source code available to certain third party organisations such as the US and foreign governments, universities etc. This is their Shared Source Initiative Is this a ...
1
vote
3answers
122 views

How does Windows know which part of memory is “intended to hold data only”?

I'm learning about DEP implementations, now I'm trying to figure out how does the OS know which part of memory is intended to hold data only?
2
votes
2answers
185 views

In Visual Studio, what are the risks of simply opening an untrusted project? What are the mitigations?

I'm looking at the source code of some potentially hostile code. As usual, VS 2012 is giving me the security warning: "You should only open projects from a trustworthy source" ... "ask me for every ...
3
votes
2answers
337 views

Possible to use a YubiKey in HSM mode to secure a Windows CA infrastructure?

I'm looking for a low-cost Hardware Security module, and discovered that YubiKey has a HSM mode. I'm not entirely clear if this HSM mode is what I'm thinking, but I'd like to use it as the offline ...
-1
votes
2answers
759 views

Would IT Security professionel people notice a backdoor in Windows 7 or SBS 2011 implemented by Microsoft? [closed]

I guess you have heard of Edward Snowden. Papers around the world published that the NSA invests much time, money and effort for a »full take« of the communication around the world. Given this, it ...
5
votes
4answers
234 views

Is Encrpyting Home Sufficient?

I currently have a fully encrypted Windows System, and I'm looking at switching to Ubuntu. Is encrypting my home directory (with ecryptfs) sufficient? On windows this would be problematic due to ...
4
votes
2answers
371 views

How to hack a Win95 machine?

While playing with old operating systems, I came across that there are no remote code execution exploits available for Win95 machines, running just file share (no IIS or anything else). Win95 neither ...
-4
votes
2answers
6k views

Why do some people think Linux is more secure than Windows? [duplicate]

I have no idea if Linux is more secure than windows. I think Linux is more secure but I want to know what is going at kernel level. Somebody told me that Linux have only one main kernel and has it ...
0
votes
1answer
11k views

Error150 (net::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN): The server's certificate appears to be a forgery [duplicate]

Help me guys please i'm having an problem with my google account. I can't log in it keeps saying : Error 150 (net::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN): The server's certificate appears to be a ...
4
votes
4answers
890 views

What is the easiest way for a newbie to RSA to create & use a key pair on Windows?

So I need to get a block of text sent to me over email from a friend, but before he sends it he wants a public RSA key from me. Am wondering what is the simplest way for me as a newbie to generate ...
7
votes
1answer
270 views

When TrueCrypt prompts to re-enable automatic mounting, should I be worried?

Assume one day you receive the following error from TrueCrypt: is that a reason to worry that someone may have removed the disk (in my case disk 0) and used it offline and then put it back into the ...
0
votes
2answers
282 views

How do i know if I have moved or copied a file from my SD card to PC? [closed]

is there any way to know if the file I have on my mini-SD card was moved or copied to my PC? i have sensitive files on my SD card which is stolen and i cant remember if I cut or copied the file from ...
-1
votes
1answer
2k views

Why IE/Windows forces you to install self-signed certificates as root CA to make them work?

In old versions of IE/Windows you could install a self-signed certificate for a web site and it just worked: the warnings disappeared. In more recent versions (and with Chrome) this just didn't work. ...
5
votes
2answers
5k views

Is there an SSL Certificate state-cache on Windows, IE, and Outlook and how it it managed?

Today I changed the SSL certificate that 3,000+ Outlook clients are using. In doing this I changed the certificate to an "older" one that had the same subject name, expiration and everything else. ...
1
vote
3answers
448 views

How can this web page access the USB? [closed]

A friend bought a "smart" headset (working with voice commands). I had to install a software on Windows to be able to configure this headset. After downloading the software from the page, this page ...
1
vote
1answer
346 views

Examples for practicing reverse engineering/disassembly of win32 .executables

I remember back in the day, there used to be a website where users would post hackits in the form of win32 exes for users to crack. Usually the goal was to defeat some sort of DRM, such as a nag ...
-6
votes
1answer
227 views

Do you recognise this suspicious folder: Malicious or Benign [closed]

Does anyone recognise this suspicious folder that sits on my C drive? The folder sits on my C drive at C:\cacde6d0fd849a939328ab\ The name obviously looks like a hash/encryption/or junk text. The ...
-2
votes
1answer
6k views

How to run any application through a proxy with PUTTY? [closed]

Maybe I did not search for it the right way but I could not find the solution. Maybe I am misinformed but if I understand correctly I could use PUTTY to run any Windows applications through a proxy ...
1
vote
1answer
64 views

How to Protect SQL Server 2005?

My project's backend is SQL Server 2005 and I need to install this to customers' systems. The problem is when someone logs onto the computer, they can easily access the SQL Server with Windows ...
2
votes
1answer
104 views

Security of RDPs and infected host system

I currently use a lot of Remote Desktop Connections and even mRemoteNG and I am curious, do key loggers and other security threats have the ability to see what I type and do on the RDPs? Can they ...
8
votes
3answers
402 views

Can I use the same keyboard on both my infected and non-infected computers?

I have a computer which is virus infected. Can I use the same keyboard on both it and a "safe/clean" computer without fear? Keyboards these days seem to come with built in software and thus must ...