0
votes
0answers
5 views

is my computer hacked? suspicious authd.log mac?

So I know for a fact my computer was hacked several months ago, because I ran Comodo Antivirus and found a malware file right after some telling experiences with some neighbors that led me to run the ...
0
votes
0answers
4 views

Is MD5 hashing of files a valid method of creating an anti-virus program?

please help me with this, I am going to develop new program
-2
votes
0answers
12 views

How to encrypt/decrypt with only encryption hardware?

Alice and Bob have agreed a symmetric key to be used for encrypting messages to be sent over an insecure (wrt a passive adversary) communication channel. Both of them have hardware devices for ...
0
votes
1answer
32 views

Sites sending email using my email address

Today I was looking through my spam folder and noticed an email: The sender was myself, assume my email is xxx@gmail.com, on the from section it says xxx@gmail.com via clicktheprofits.com Does ...
-1
votes
0answers
9 views

rpm pckage info

on Linux, rpm -qi command would display the package info which would contain information of build machine - Build Host : does this poses any security risk? is this information is classified as ...
1
vote
1answer
12 views

Would you typically want to monitor all ports for NIDS monitoring? If so, is span port or network tap the way to go?

We're setting up NIDS monitoring and the bosses want to monitor all the ports, but I'm wondering if this actually makes sense. The switch we're currently using can only mirror 4 source ports to one ...
2
votes
0answers
24 views

How to authorize users for rest service

me and my friend are doing a project for a company. It involves getting some information from the database and display it on a smartglass device (epson, sony, ...). Now we want to build a RESTful ...
0
votes
1answer
13 views

How can access to settings of a public router be (mis)used?

I've noticed that, in the local café, Wi-Fi router credentials are simply user: admin pass: admin (as default). Upon this discovery, I was intrigued and I wanted to know more about what possibilities ...
1
vote
2answers
29 views

Getting spam calls from numbers similar to my own

My phone number is 456-123-XXXX (American phone number + area code). Over the past few months I get fairly regular spam calls from other numbers also beginning with 456-123-XXXX, where the last four ...
1
vote
0answers
24 views

Spoofing LAN IP Address Traffic

To give as much detail as possible, I am doing a Pentest for a client that has quite a few "terminal systems" meaning that they are simply a box with a connection back to the main server. These ...
-2
votes
1answer
29 views

Sniffing or DOS attacks or MIM Attack [on hold]

i'm preparing my bachelor's degree, i have to chose an attack, sniffing, dos, or MIM attack, I'm a bit lost, in my project i have to find a solution, how to detect one of this attacks, If you guys may ...
0
votes
2answers
76 views

What is the simplest way to send an anonymous email?

I would like to send an email that can't be traced back to me, is there a simple direct approach to do that? I mean an electronic way that doesn't involve me going to an Internet cafe wearing a ...
2
votes
0answers
14 views

IPtables Linux Firewall and IPsec traffic

Can iptables filter out incoming datagrams that are IPSec-tunneled packets going to port 25?
-2
votes
0answers
15 views

request for sandbox security controls efficiency evaluation [on hold]

Has anyone ever tried sandbox solutions aimed to block malware, viruses, ransom-ware, 0-days and the like? Would you suggest them? Besides any specific product, I am interested into knowing about: ...
-4
votes
2answers
69 views

What is is the best way to create virus signature database? [on hold]

We are thinking to develop a new Antivirus program. The main concern is to create a virus signature database. I want to ask what is the best possible way to add viruses signature in our database to ...
1
vote
1answer
35 views

Safest way to access data from an SQL server

I am part of a group developing an iOS application. This app accesses a database to both retrieve and submit data. One of the group members said that he does not want to have any direct interaction ...
4
votes
2answers
525 views

What was the aim of this HTTP request

I currently run an Apache HTTP server, and have set up monitoring to receive emails whenever an error appears in the error logs. I get the usual trying to find if I'm using HTTP 1.0 and trying to see ...
5
votes
2answers
99 views

How much can we trust open source implementations of crypto (security) libraries?

In one of my projects I was choosing bcrypt or PBKDF2 for the KDF for passwords. I have read that bcrypt is generally more advanced and scrypt is even better. But I am using .NET platform where ...
2
votes
0answers
26 views

Is secret key for HMAC in form of UTF8 characters good enough?

There is a popular JWT library on nuget. I am analyzing an application that uses that library and it stores a secret key as a string. In the code of the library I see that it uses the MS HMACSHA256 ...
0
votes
0answers
15 views

How netsparker extract SQL server version

We are using netsparker cloud version On last week when netsparker scan it detect SQL Injection Vulnerabilities. However I am surprised as the injection query throw error for casting and the scanner ...
4
votes
0answers
14 views

SSL 3.0 for clients without room for chosen plaintext attacks

I've collected the issues that affect SSL 3.0 and found that they are either configuration issues (disabling RC4, RC2, DES, anon, export, null suites, compression, proper key lengths, etc.) or ...
0
votes
0answers
28 views

Which user executes the screensaver on windows 8?

On a computer without administrator rights, I recently noticed that if I execute a screensaver by double clicking on it (the .scr file) the execution context was the user's one, but when I install it ...
2
votes
0answers
36 views

Lookaside List Injection

I've been reading a lot about Use-after-free and came across this document. It talks about a "Lookaside" injection exploit. The document says to empty the dynamic memory cache, called the Lookaside ...
3
votes
0answers
74 views

Can I make a digital time capsule? [on hold]

Say I wanted to make a super awesome time capsule of some digital information. How would I encrypt it so that no one would be able to open it until a specified date? (E.g. 100 years from now.) At ...
1
vote
1answer
35 views

Response on targeted attacks against an individual

I'm now an aim for a targeted attack. Someone tries to gather information about me and tries to get access to my accounts. Some time before he/they've managed to succeed (got all the info from my ...
0
votes
1answer
40 views

Objectively, how effective are malware removal tools at detecting infections?

I'm fully aware that concrete scientific data may not exist on this topic but I feel that the question at hand won't all boil down to opinion. Either way, with the rampant increase in sophistication ...
20
votes
4answers
4k views

Is it dangerous to call spam phone numbers, even if you know they're spammers?

I sometimes like to check spam just to see how the messages look like, and I found someone who actually put an American phone number (1-XXX-XXX-XXXX). Most of these spammers are either trying to get ...
-1
votes
0answers
9 views

How to set linux as default OS after reinstalling windows already dual booted envirnment? [migrated]

I have a system running windows and linux in dual boot envirnment. But due to of some problem i have reinstall my windows but now my boot menu only shows windows OS. I want to know that how i can ...
1
vote
1answer
46 views

Where to save Keepass' file? [on hold]

Using Keepass since a year ago, been told it's an excellent method to store one's passwords. But what is the best location to save Keepass' file (the file where all password are stored and that you ...
1
vote
0answers
26 views

Transmitted sensitive user data

At the moment, I have set up mitmproxy and can record all HTTP/HTTPS communications between the client and server. For research purposes I am looking to find a way to detect potential leakage of ...
-2
votes
2answers
45 views

Running SSH on a different port vs adding the port number to a password

So, a pretty typical piece of advice is to run SSH on a high port number, thus decreasing the chances of it being attacked. The thing I have always wondered about though is that it seems more secure ...
4
votes
1answer
28 views

Is OpenSSL generating Diffie-Hellman parameters that are safe for use in TLS or SSH servers?

I would like to generate Diffie-Hellman parameters on a Debian GNU/Linux "Jessie" 8 with OpenSSL. Lets assume the system CSPRNG was seeded with some real random data. On such a system, is the result ...
0
votes
0answers
13 views

Identify if pc is infected [duplicate]

I am operating a credit-card sized PC with debian on it. For some time (before taking care of it) it was reachable with SSH over port 22, simply using root as username, and no password. How can I ...
-2
votes
0answers
8 views

Router hangs when running Nessus [on hold]

I tried to run a Nessus scan for my own website through my home router (ZTE ZXV10 W300). However, the router always hangs when I run Nessus. Internet also doesn't work on that time. Once, I pause the ...
3
votes
3answers
127 views

Is web application connected to a database via an application server is more secure?

I have heard from my colleagues and some other people on web suggest that it is more secure to run this configuration: Web server -> Application server -> Database, than this: Web server -> ...
0
votes
1answer
17 views

Secure Electronic Transaction (SET Protocol)

I've looked into the SET protocol and some of the information are outdated. Therefore, I would like to ask if the SET protocol uses 3DES or AES or just the DES and the RSA?
6
votes
4answers
78 views

How to identify a company's public network address range?

Which tools or websites can I use to identify a company's public network address range?
-1
votes
0answers
27 views

What could eventually be effectively done to mitigate the risks of errors and backdoors in IT-security software? [on hold]

Software errors of programmers in composing the originals and later in updating them understandably can't be perfectly prevented. On the other hand there exist backdoors in IT-security software, which ...
-4
votes
0answers
35 views

how to AES cipher? [on hold]

You were eavesdropping on a network and intercepted some diffie-hellman keypairs as following (1099511627791, 152351, 903291794923) and (1099511627791, 152351, 838683142382) After those packages you ...
0
votes
0answers
14 views

Is cryptsetup luksFormat -y --cipher aes-xts-plain --key-size 512 /dev/sdax a insecure setup for luks [duplicate]

Is cryptsetup luksFormat -y --cipher aes-xts-plain --key-size 512 /dev/sdax insecure. If so why and what setup would be good for keeping corporate information safe?
0
votes
0answers
17 views

Problem with Firefox browser about user privacy [migrated]

Every time I use my firefox browser to visit sites like this I end up with multi redirection popups on every single click. however, I solved the problem accidentally by visiting the previous site ...
-6
votes
0answers
43 views

how to decrypt it on RSA encrypted message? [on hold]

You must decrypt the following RSA encrypted message, the thing is you only got public key :/ which is as following ...
1
vote
1answer
20 views

Diffie Hellman prime attributes

If I generate a Diffie-Hellman prime openssl dhparam 512 -text (deliberately of small size to keep the paste size below small; I know minimum is 2048 and up), what are the different parts of the ...
0
votes
0answers
39 views

How does add-on for the Firefox with a custom proxy server prevents info from Google?

I would like to know how does add-on for the Firefox web browser with a custom proxy server prevent Google from collecting information about your browsing? Does it prevent also from your internet ...
-5
votes
1answer
68 views

The problem I have with wikipedia showing IP addresses to the world? [on hold]

I went on wikipedia, then went to the edit history of an articles I edited. To my surprise, my IP address, along with other people's IP addresses are on the articles edit history page. Why would ...
1
vote
2answers
50 views

Is it possible to digitally sign an email twice?

User A encrypts an email with the public key of user B and digitally signs it. User B receives this message and decrypts it. B wants to forward it to user C, encrypts it with C's public key and signs ...
1
vote
1answer
26 views

Password manager: should key file be stored on a different device than password db file (even if master pw used)?

Does it defeat the purpose of a key file to store it in the same location as the password database? What if a master password is needed also? For example I save my .kdbx to dropbox as a means to ...
0
votes
0answers
26 views

Passwords vs keys in cryptography? Which is stronger and safer? [duplicate]

Maybe it isn’t correct question, but how to compare passwords and keys in cryptography? Symmetric encryption, e.g. AES, usually encrypts data with passwords, and all public-key cryptography use open ...
-1
votes
2answers
44 views

History of connected devices to my internet router (WIFI) [on hold]

Note: same question here, however I was not able to comment because it was by an unregistered user account. Simply, how can I know who (devices) has connected to my network WiFi without using tools ...
-1
votes
0answers
25 views

History (logs) of connected devices to my internet router (WIFI) [duplicate]

Simply, how can i know who has connected to my network WIFI? without using tools that run on PCs to monitor the traffic. Is there is a way?

15 30 50 per page