0
votes
0answers
9 views

How does the exploit of CVE-2012-4221 work?

I am researching a number of Android/Linux kernel vulnerabilities. Towards CVE-2012-4221, I can only get two patches online: https://source.codeaurora.org/quic/la//kernel/msm/commit/?id=...
0
votes
2answers
16 views

When should I create and use my own CA?

I was taking a look to one Docker tutorial in which is explained how to create and use our own CA for encrypting the communication between the Docker client and the daemon and immediately a couple of ...
1
vote
1answer
30 views

Security disadvantages of sending a password with GET? [duplicate]

Other than over your shoulder peeping, if a password is sent using GET in plaintext over an encrypted connection, are there any extra security disadvantages or is it the same as POST?
1
vote
1answer
35 views

Risks in avoiding AdBlock detection by importing cookies or simulating the displaying of ads

I've increasingly been finding that many of the websites that I access have now been requesting whitelisting by my adblocker. Sites that do this like Forbes, NDTV, do not allow you to proceed until ...
0
votes
1answer
22 views

Is exposing the default plesk page dangerous?

Is exposing the default plesk page on an IP dangerous? I can imagine it is somehow usable for fingerprinting a version maybe. But is it dangerous anyhow?
2
votes
1answer
22 views

Is it safe to rely on email address from 3rd party identity provider?

Assuming that a 3rd party identity provider is reliable (eg; Facebook, Google, WindowsLive), is it safe to use email address (as provided by the service) to connect a user logging in with different ...
0
votes
0answers
15 views

How do you shun an IP automatically based on the number of current connections?

If I have a single IP that's trying a Denial of Service attack, how can I automatically have it banned/shunned? I go in and manually put it in a group of banned IP addresses, but I'd like for it to ...
1
vote
0answers
7 views

Storage of account password on keychain iOS to enable TouchID login

Currently in the middle of a rather long-winded process of deciding upon the use of TouchID within an application being developed due, to security concerns, and wondered if anyone had any advice? The ...
-1
votes
1answer
27 views

Public IP from my UVerse router

Please keep in mind that I don't know much so use small words and talk slowly when helping me out. At work we have our network set up in the following way: Our internet comes from AT&T U-verse ...
-9
votes
1answer
33 views

I have an MD5 encrypted link. How do I decrypt?

I have this MD5 hash of a link: 687474703a2f2f696d6775722e636f6d2f45554a43734742 I only have this code, no other information. How can I crack it?
0
votes
0answers
9 views

How does deauth protection (IEEE_802.11w-2009) work?

I read a Wikipedia article on IEEE_802.11w-2009 and I wonder how does it work with WPA2. In other words, how do I turn it on in my Linux kernel? If I enable it both in it and in an OpenWRT router, am ...
2
votes
0answers
23 views

Diagnose encryption problem in Microsoft Outlook?

I am unable to send an encrypted email to a party for whom I have a certificate. How can I diagnose the problem? Microsoft's error message does not explain what the problem is: Notes: The party's ...
0
votes
0answers
27 views

Shellcode problem for a remote service (Encoding)

I have an excercise to exploit a remote service after a short dialog with it using stack buffer overflow. I've downloaded a binary on my local Ubuntu 14.04 and tested it with gdb. What I do is ...
0
votes
1answer
22 views

Physical Access Control Logging on a SIEM - Is it worthwhile?

The company I work for (Manufacturing) are upgrading their Physical Access Control (PAC) System, and it will come with logging that can be fed into the our SIEM tool(LogRhythm). Does anyone have any ...
1
vote
2answers
76 views

Can masked passwords on iOS UIs be read?

If someone had physical access to my iPhone, could they see the stored passwords for my WiFi or email that are represented as black circles and not actually the password itself, e.g. under my mail ...
1
vote
1answer
34 views

Where can I find a list of unpatched Server 2003 exploits?

Where can I find a list of only unpatched Server 2003 exploits? I want to be sure I can inform server owners of the actual risks. I can get a list of all cve's but I have been unable to filter for ...
1
vote
1answer
23 views

How do I create multiple vulnerability scanners on the public cloud?

Let us say I have a large IP range (a x.x.x.x/8 CIDR). What would be a way to efficiently deploy multiple instances of vulnerability scanners on the public cloud to scan that IP range in a period of 1 ...
0
votes
1answer
49 views

What happens when attacker disrupts the ssl handshake?

I have recently understood how SSL handshake works.I understand that once the handshake is done, everything is shared by secret key between server and client. I want to know what happens if Man in the ...
0
votes
2answers
55 views

Can websites send WhatsApp messages without my permission through the WhatsApp API?

I want to know if it is possible for websites to send messages through my WhatsApp without my permission. I read about the WhatsApp API, but I haven't done much PHP so it did not make much sense to me....
1
vote
2answers
48 views

Single web application - security advantages to two server model?

I'm looking to deploy infrastructure for a web application that will live on a LAMP stack. The infrastructure is such that this is the only application that will ever live on this server and it must ...
8
votes
3answers
1k views

Why is it more secure to use intermediate CA certificates?

I've read that using Intermediate CA certificates is more secure because this way the Root CA is offline. So, if the Intermediate is compromised it does not impact the Root CA. What I understand is ...
2
votes
1answer
72 views

Found a security issue but no answer

I found a security issue on a politician personal site about two weeks ago. The site is still very active and have a bunch of visitors every day. The breach is very stupid and I'm probably not the ...
0
votes
1answer
50 views

Penetration Testing Methodologies

I have some issues regarding the concept of black, grey and white hat and my question is: Were and in what penetration testing methodology I can find the black, grey or white hat concept definition?
0
votes
0answers
7 views

DNSSEC ZSK compromisation (man-in-the-middle attack)

Assuming I am administering a DNS zone and I operate an authoritative name server that is secured with DNSSEC (split ZSK/KSK setup). When the Zone-Signing-Key (ZSK) ever gets compromised, would it be ...
0
votes
1answer
20 views

Short integer hashes to mitigate timing attacks on passwords

Assuming we want to protect against timing attacks on our hashed passwords because even to know the hash may give to the attacker a significative advantage then we may want to perform a constant-time ...
0
votes
0answers
9 views

Is KBA trustworthy?

I read on a different post about KBA, which is an identity verification concept that claims to verify a person by asking it about stuff just this person knows of, collected from "public information". ...
0
votes
0answers
22 views

Adding conditions after LIMIT in MySQL

Is there any way to add any condition after LIMIT for example the OR or AND? I am wondering if we can add any query after LIMIT which returns nothing. for example the query is: SELECT * FROM table ...
2
votes
1answer
12 views

How secure is IDology's ExpectID (as used on airbnb)?

To quote http://travel.stackexchange.com/a/72476/2928 I entered the last four digits of my SSN and provided basic DOB and full name. Then it asked me three security questions that only I would ...
0
votes
0answers
25 views

How does Whatsapp implement end to end encryption? [duplicate]

I see in my phone that messages are end to end encrypted and no third person can see the message. Let's say A has B in his contacts. To send a message to B, A and B should use the same secret key. How ...
-6
votes
0answers
22 views

How to resolve Xfinity wifi internet trouble shoot?

If you’re trying to connect to the internet for the very first time, start your troubleshooting by activating the wireless gateway for which information is typically provided by the internet provider. ...
-1
votes
1answer
44 views

Secure PIN verification if HTTPS is decryptable by third party

I'm developing a system where mobile applications communicate with server through HTTPS. The communication consists of two phases: at first, app "registers" at server: among other stuff, user chooses ...
4
votes
1answer
24 views

Sending GPG private key to myself

I recently started to use GPG and I wanted to import my secret key from another computer. I was thinking about sending it to myself by email or using an USB storage device. Question : Is it safe ? ...
1
vote
1answer
48 views

Is is possible to shuffle an AES ciphertext without owning the key for it?

I would like to know if it is mathematically feasible to change an AES(CBC) ciphertext and IV without owning the key, so that the ciphertext would look totally different while still decrypting to the ...
-1
votes
0answers
8 views

How does DNS-based Authentication of Named Entities (DANE) work?

How does DNS-based Authentication of Named Entities (DANE) work? If I'm correct it depends on a valid DNSSEC configuration (Domain Name System Security Extensions)? But what does it do and how does it ...
5
votes
1answer
61 views

SMS: Apple has detected multiple failed login attempts

I have just got a SMS message (text message) on my phone saying: Apple has detected multiple failed login attempts Given I don't have (and have never had) an iPhone, I expect it is some sort of ...
1
vote
2answers
22 views

Are two DNS MX records pointing to the same IP a availability risk (single point of failure)?

Are two DNS MX records pointing to the same IP a availability risk as in a single point of failure (SPOF)? Even if there are three DNS MX records in total for example: mx1.example.com 192.168.1.1 ...
2
votes
1answer
37 views

How could we provide certainty to users that education material on phishing, isn't phishing itself?

This is a problem that has been bothering me somewhat. I am able to run a phishing simulation campaign against users across the organisation. If the user clicks on a bad link they are directed and ...
0
votes
4answers
50 views

Random pop ups caused by add on in Firefox

I'm a bit conflicted. Firefox was open to it's default home page and after a few minutes of inactivity a new tab opens by itself to this (seemingly harmless) webpage: http://barisderin.com/?p=2264 ...
-1
votes
3answers
292 views

Virus using input from victims mic to generate encryption keys

I am a software engineer from Bucharest and I've created an audio based encryption and authentication application called WaveCrypt. It basically allows users to encrypt (AES) their files with an ...
-1
votes
2answers
45 views

Trouble with Metasploit framework (kali linux) [ms08_067_netapi]

I'm new to kali linux and just penetration testing in general. I'm having a bit of trouble with the metasploit framework in getting into my own pc. I've used this tutorial and I get an error that says ...
0
votes
2answers
26 views

How to convert a SSL certificate to an authority?

How can one convert an SSL cert provided by an authority to another authority, so one can generate "valid" certs for different domains?
1
vote
1answer
28 views

Disk encryption with OTP to protect source code

We have to ship a hard- and software prototype to a customer for a first field test. The software is just not ready (protected - too much Python code) for distribution without the possibility, that ...
-1
votes
1answer
38 views

SHA-256 VS SHA-512VL

Recently a friend of mine sent me a file accompanied by an SHA-512VL hash. My hashing tool GTKHash doesn't support this algorithm, and I've never heard of it. I asked my friend, and he pointed me to ...
0
votes
0answers
17 views

How are TPMs used to detect tampering?

I've known some stuff about trusted platform modules for over six or seven years. I understand their usage in (un)wrapping keys and storing information in NVRAM which may then be locked permanently or ...
2
votes
1answer
61 views

Should I worry about GitHub using IP addresses that are described as having an unknown host?

Today, I got a message while doing a git push, saying Warning: Permanently added the RSA host key for IP address '192.30.253.112' to the list of known hosts. It seems as if it's consistent with ...
2
votes
1answer
56 views

How secure is HTML5 web storage (sessionStorage and localStorage)?

As part of a Google Chrome extension that I'm building at the moment, I'm thinking of using either sessionStorage or localStorage to store some important user data. The extension's functionality ...
23
votes
4answers
3k views

What to do when I find a possible security vulnerability of public interest?

Let's say I found a possible vulnerability in a security system. The system has been universally considered sound for years and nowadays is used worldwide. I am not an expert in security, but there ...
-3
votes
0answers
16 views

Which software can log All the files transafered to external storage (DVD & Flash Disk) [on hold]

I need a software that I can use it to log all the files that are being transferred from my computer to any external storage like DVD or Flash disk
-1
votes
0answers
30 views

Yahoo email origin syntaxes

I have several e-mails from a friend with the first (bottom-most) receive line in the general form of: Received: by 66.196.81.106; Tue, 10 Nov 2015 17:41:33 +0000 Date: Tue, 10 Nov 2015 17:41:30 +...
1
vote
1answer
18 views

Is it possible to lock down the http / https proxy settings on a Windows Phone?

Is there any way to lock down the proxy settings on a Windows Phone so that they can't be changed by anyone but the person with the password?

15 30 50 per page