0
votes
0answers
30 views

Unable to connect to VPN, but can connect to the internet [migrated]

I have a client that is trying to access my VPN server from a newly allowed connection at his work place. He can connect to the internet and browse when he plugs in his laptop, but when he tries the ...
0
votes
0answers
29 views

Question about a forensic tool [on hold]

I used the program icopybot to look for old emails. Under the "recents" section there are email addresses as well as phone numbers that had mail & SMS sent to. There are time stamps beside them. ...
1
vote
3answers
18 views

Is PGP or S/MIME useful when both servers are self-controlled?

With regards to encryption and preventing a 3rd party from viewing my emails (and ignoring validity/signing), is encrypting an email via PGP or S/MIME useful when I control my server and my recipient ...
3
votes
0answers
68 views

Generate secure one-time codes containing information

I need to create a system that allows a user to enter codes to charge an allowance. Embedded in this code should be the amount to charge the allowance. The user would pay for a code which would then ...
1
vote
0answers
24 views

OpenID Connect: Why use authorization code flow?

I have a question about implementing OpenID Connect I was hoping I could get some help on. I understand the different flows and get that the authorization code flow is good because it allow client ...
0
votes
2answers
178 views

Will gmail close my well intentioned botnet account? [on hold]

I'm part of a company that has at least 1000 PC's distributed in different buildings over a radius of 25 miles. I've been asked to make a program to survey technical information on each PC. Since ...
-1
votes
1answer
54 views

Pinging a host in another network [on hold]

Imagine this, you have a top down view of two LANs that reside in different locations.. You know which machines are on in each LAN and their private IP's.. Is it possible to send an ICMP packet from a ...
1
vote
2answers
49 views

Researchers figured out how to transmit/exfiltrate data using heat

I read article about it here and it says: Researchers at Ben-Gurion University have created a new piece of malware called BitWhisper. Infected machines can transmit data using heat they ...
1
vote
1answer
30 views

Security of access to local network via VNC over SSH tunnel

I've just set up a Raspberry Pi 2 with the latest raspbian and installed some services. For remote access I've installed tightvnc server which I set up to only allow connections from localhost. I can ...
22
votes
2answers
3k views

What is a “spam seed”?

Here I found a new terminology first time. Looks like a spam seed is a post, which "is designed to allow spammers to post questions so it looks legitimate". What means this exactly? Maybe it ...
3
votes
2answers
90 views

Decrypt and then re-encrypt all requests to the internet at firewall level

I don't have strong skills about this matter but I am very curious about the following communication so may I ask: One institution sent a message to all network users saying that "all requests to the ...
1
vote
1answer
28 views

Private messages for an ios app - how secure is this system?

I'm designing architecture for sending private messages (i.e. only sender and receiver are able to read a message). Client side - iOS, server side - Parse.com I'm thinking of using RSA to ...
-3
votes
0answers
31 views

Is it possible to track the email sender with the email headers? [on hold]

I need information about the is it possible to track a user with email headers
-1
votes
1answer
33 views

What encryption algorithm does CryptEncrypt in Crypto API use?

I am writing a code to perform encryption and decryption using CryptEncrypt and CryptDecrypt functions, a part of Windows' Crypto API. Can anyone tell me what kind of encryption these two function ...
-1
votes
1answer
49 views

Can someone hack through teamviewer?

quick question. I have been doing business with someone on fiverr. The person helping has been really good but I have concerns that they could potentially hack through teamviewer. I never leave sight ...
0
votes
0answers
13 views

Does IOS maintain a log for Keystrokes(used for spell checking) like system log? [on hold]

I found this from OWASP IOS Developer cheat sheet. I want to know if there is a way to access the keystrokes in IOS(using Xcode or any other app installed in iphone). If so how? Thanks in advance.
-1
votes
0answers
9 views

Know username who is working on remote desktop [migrated]

We are a team of 20 people we have a machine that is used by everyone. We take remote desktop of that machine to work on. so if somebody is working and i want to take that i have to ask everyone in ...
0
votes
1answer
21 views

Audio not playing on Android (Kitkat 4.4.2 on LG G Pro 2 D838) via HTTPS [on hold]

I am having issues playing an audio file on the chrome browser! This audio file plays on the chrome browser on my mobile LG G Pro-2(D838) running Kitkat 4.4.2 without any issues. But when i uploaded ...
0
votes
0answers
11 views

wordpress unknown IP was logged in [duplicate]

I am using wordfence on my wordpress website and enabled sending message when someone logged in to my site after checking my email An uknown IP address was logged in as admin user to my wordpress ...
1
vote
0answers
12 views

Is there a reason why IMEI is stored in EEPROM?

I've heard that IMEI numbers are stored on an EEPROM, essentially letting them be erased and rewritten. Thieves misuse it to make stolen phones untraceable. Is there a reason why manufacturers don't ...
0
votes
1answer
44 views

Am i getting DDOS attacked?

There has been some weird activity with my wifi router after somebody threatened to ddos me. I am looking at my wifi router's activity logs and i don't know what i am looking for. What happens is my ...
2
votes
0answers
22 views

Is there any reason to use AesManaged over DPAPI in this scenario?

I have a situation where my web application is going to be deployed on multiple web servers, and I'll be wanting to store some securely encrypted data on the DB servers (each web server has a DB ...
0
votes
2answers
35 views

SQL Injection in a Web Service URL as a Parameter Value

Obviously SQL Injection via the payload of a message is a very common practice and therefore it is always key to cover this (I already have in my code). However I'm just wondering about how possible ...
2
votes
1answer
57 views

Has an antivirus ever failed to detect malware for “non-technical” reasons? [on hold]

I'm wondering if an antimalware vendor has ever whitelisted (or otherwise failed to detect) a piece of malware because the author/sponsor either paid them, threatened them, or legislated against them. ...
0
votes
2answers
35 views

Is it safe to log JavaScript exceptions to the error console?

I know that on the server side it's very bad to display system-level errors instead of logging them to disk, because it could expose potentially sensitive information, but do the same concerns apply ...
0
votes
1answer
17 views

What kinds of PE file infection can AV software detect?

I wonder what kind of infections AV software is capable of detecting: only if the file is signed? also if the entry point isn't changed? does it also have hashes for non system files? what if the ...
2
votes
1answer
23 views

Password security when connecting to ldap with rails application

How do you store a username/password securely in a rails app when using it for many ldap searches? The connection in the app requires ldap_bind_authenticate(Net::LDAP.new, username, password) ...
0
votes
2answers
64 views

Is this a DDOS attack?

I lost my internet connection for about 15 minutes and I checked my netgear router log and found these 3: [DoS Attack: ACK Scan] from source: 114.77.184.189, port 44822, Tuesday, March 24,2015 ...
-3
votes
1answer
33 views

Information security Masters degree? [on hold]

Which school can i obtain a master degree in Information security? I reside in Nigeria and which to do my master in Information security.I have tried google search engines.
-6
votes
0answers
46 views

How to intercept emails? [on hold]

My husband is addicted to going and answering the personal ads on cregs list as a "destresser." He refuses to stop nomater how much it hurts me. I need to find a way to intercept both incoming and ...
0
votes
2answers
44 views

Questions regarding Bad USB exploit

I own a Netbook and my external DVD Drive is possibly infected with Bad USB. If i install Ubuntu using this infected DVD drive could my system be taken over during installation process or later when ...
0
votes
1answer
31 views

Subject verification of certificates

Suppose H has taken C’s certificate and manually changed the subject information in C’s certificate from C to H. Would this modification be detected by A during the certificate verification process?
0
votes
0answers
15 views

Vpn issues in Kali-linux [on hold]

I am using vpn for port forwarding in kali linux . The problem is that i could not receive any reverse connection from target pc or I can say I could not receive data packets from my forwarded port ?? ...
1
vote
1answer
45 views

Is DDOS more common than DOS?

Which attack takes place more often over the internet? I would have assumed DDOS due to the amount of botnets around today.
1
vote
2answers
34 views

Dealing with Spam with an unkown party harvesting the email address [on hold]

I have a situation where I keep receiving spam from several IT companies (solicitations, marketing etc.). I think I gave away my email to a company in the last couple of years for reading a white ...
2
votes
0answers
133 views

Lighteater - BIOS/UEFI vulnerable

I am currently a bit confused, I have read today an article about the BIOS-rootkit Lighteater made by John Loucaides and Andrew Furtaki. In their presentation 'How many million BIOSes would you like ...
0
votes
0answers
7 views

Resources and Examples for Modeling Application Security Groups

I am searching for some resources and documentation on modeling security groups for a web application, but seem to be coming up rather dry. I am interested in creating a visio-like diagram that ...
0
votes
0answers
9 views

encrypting chip data and accessing from other platforms [on hold]

i have a similar, yet somewhat differing question. I am not so interested in encrypting the phone per se, but the chip and data within it. I am interested in knowing if the bundled or downloadable ...
1
vote
0answers
15 views

In DNSSec, are Delegation Signer Records always SHA-1?

I'm creating a RSA/SHA-512 Zone Signing Key and Key Signing Key at Dynect Managed DNS (corporate offering) The Delegation Signer Record that was created is SHA1. Should I be concerned about this?
0
votes
1answer
28 views

understanding the vulnerability to write a snort rule [on hold]

I'm trying to write a snort rule for this vulnerability; http://www.exploit-db.com/exploits/36360/ however for me to be able to write a good snort rule I need to understand how the software is ...
4
votes
0answers
48 views

How to add certificate pinning for a certain domain to my web browser?

There is HPKP (HTTP Public Key Pinning) which servers use to tell the client's web browser which certificates to trust (in the future) for the domain that is being contacted. Google's Chrome and ...
2
votes
0answers
28 views

Security risk: Digitally sign communications for SMB

I have a computer (Windows) on a network where an industrial process is controlled. There is an option in Local Security Policy >> Local Policies >> Security Options >> "Microsoft network client: ...
2
votes
4answers
26 views

Is serialisation and HashMaps secure?

I've done some reading in this area and there is very little information about the security of a HashMap. The only article I could find was on IBM's Developer Works site. What hashing function is ...
0
votes
1answer
47 views

Java desktop app vs web service [on hold]

I currently have a desktop app written in Java (Swing) which talks to a C-based backend over SSL. I am trying to understand the pros/con from a security perspective to move to a web service model. ...
4
votes
1answer
36 views

Do GPG and OpenSSH use key stretching on their keypairs?

Both OpenSSH and GPG can generate key pairs which are stored as files in well-known paths inside the user directory. A passphrase is always asked for during the generation process, which is then used ...
0
votes
2answers
131 views

Is this the most secure encryption/hashing system? [on hold]

I've been doing some research regarding password security and after reading several topics and the Kerckhoff's principle. I came up with what I believe is a really secure system regarding online ...
0
votes
0answers
13 views

Port mirroring with A LOT of Drops Tx on a 5406zl [on hold]

It seems hard to find info about this specific problem so ANY related input is appreciated (I tried HP-forum and stackoverflow but no luck). Question #1. I've set up port mirroring this way on my HP ...
6
votes
2answers
42 views

Could an attacker prevent IIS from logging requests

I've had an attacker try to gain access to one of my websites through a form using what looks like a blind SQL inject. It is a huge form, and every possible permutation of values has been tried - in ...
15
votes
9answers
3k views

Hide the fact of e-mail communication

Bob has a mistress. Her name is Alice. Bob`s wife Eve knows Bob is unfaithful, but she does not know who the mistress is. Alice does not know Bob is married. Bob needs to communicate with Alice over ...
40
votes
6answers
5k views

Should I be concerned if my website throws stack information?

I have a simple login form on my web page and the URL looks like this: example.com/signup/signup.php?q=1 If I try something like this: example.com/signup/signup.php?q=1&() I'm redirected to ...

15 30 50 per page