6
votes
1answer
186 views

How to protect a Wifi network from Microsoft WiFi Sense

Microsoft is deploying a new feature, WiFi Sense, which provides users a way to easily share passwords to wireless networks with all of their contacts. This introduces a new security failure mode: a ...
0
votes
0answers
16 views

Behaviour of DNS query packet

When the configured name server resolver is not reachable, the query packet will retransmitted after certain t times (in windows, every 1 seconds until 8 seconds,max). The behaviour of the legitimate ...
2
votes
1answer
33 views

How to determine which program accessed the Mac Camera?

The green light on my laptop's camera just flashed on and then off after 1 second. I am extremely concerned about this since I am not running any programs which could have enabled the camera. I ...
5
votes
2answers
359 views

Questions on true anonymity

I am going to use Tails to connect to Tor through VPN which has AES-256 data encryption, SHA-256 data authentication and RSA-4096 handshake encryption on my Mac on my school's WiFi (as public as I can ...
3
votes
1answer
55 views

Do card issuers give merchants new expiry dates for recurring payments? [on hold]

Recently I got an email from, let's say, “Company X” saying: some banks provide updated expiration dates for automatically renewing subscriptions I find it really hard to imagine that my bank ...
0
votes
1answer
70 views

Scam caller claimed to have elderly friend's “Windows unique identifier”

An elderly friend received a telephone call similar to this Information Security SE post and this one. The caller claimed that my friend's computer had a problem that needed to be fixed. My friend ...
0
votes
0answers
15 views

How secure is the TAP Windows Adapter V9? [duplicate]

I use Cyberghost to browse the web on public wifi. How secure is the network adapter? Cyberghost uses OpenVPN which utilizes TAP Windows Adapter V9. I am asking this, because I believe at the ...
1
vote
0answers
16 views

Mod Security - How can I email alerts from logs for incident response? [on hold]

We are in a production environment and I have mod_security WAF storing logs in /var/log/foo.log . We are wanting to have alerts that we have fine tuned , upon being logged to be sent to us via email ...
3
votes
1answer
46 views

How secure is VOIP?

I was at a friend's house who uses VOIP on his own private WiFi for his phone calls. He made a call over VOIP (Voice Over Internet Protocol) that included the need to verbally state his credit card ...
1
vote
1answer
39 views

What is the difference between Key Derivation Function and (salted) Hash?

I see in this post that the main difference is that KDF outputs have "certain randomness properties", and I don't understand what does it mean. Suposing that that "certain randomness properties" are ...
0
votes
1answer
28 views

Should I use the certificate serial number or the subject key identifier to look up public key?

I'm designing an API authentication mechanism similar to the one AWS use. As part of that, I need to look up which public key belongs to which user to verify. The public keys come from x509 ...
3
votes
5answers
72 views

How can I uniquely identify an user when cookies are not an option?

In web application development, how can I uniquely identify an user when cookies are not an option and IPs are dynamic? Are the patterns which I can combine and then created a hash to be used as a ...
1
vote
1answer
32 views

SQL Injection from Data Import Files

We process a lot of batch files and do an initial batch file import via the LOAD DATA LOCAL INFILE call in MySQL. Is there a tool / standard out there that can scan or help to mitigate SQL injection ...
1
vote
2answers
60 views

ECC and RSA 10K stronger claim

There are a lot of websites where it is claimed something akin to this but no explanation on the basis. "ECC key size of 256 bits is equivalent to a 3072-bit RSA key and 10,000 times stronger than a ...
2
votes
0answers
10 views

Freshness for SGX enclaves

Future Intel processors will support SGX (Software Guard Extensions), which allows running security-critical software on your processor in a way that is isolated from all the other code. The hardware ...
2
votes
1answer
60 views

Simple exploit leads to wrong EIP and EBP

I have a simple program: void bug(char *arg1) { char name[128]; strcpy(name, arg1); printf("Hello %s\n", name); } int main(int argc, char **argv) { if (argc < 2) { ...
-4
votes
1answer
35 views

How to verify perfect secrecy of a cryptosystem? [on hold]

Playing with an encryption algorithm. how can i prove it's information-theoretically secure?
1
vote
2answers
46 views

What measures must be taken to securely authenticate from web traffic to a WebSocket connection?

Obviously TLS is a must for any and all secure authentication. Please turn your paranoia settings up to 11 for this. Background: (In case people are unfamiliar with the WebSocket (WS) protocol and ...
3
votes
1answer
89 views

How do I instantly disconnect from my ISP during an exploit or suspicious activity?

When I was using "Zone Alarm Security" under Windows 98 SE, there was a toggle link feature under Zone Alarm, whereby I could instantly sever connectivity to the web, while a suspicious exploit was ...
0
votes
1answer
65 views

Trying to hack my router with Hydra with no success

My router (Gigaset 604 il) is open only for basic configuration under user name "home" the advance configuration is under the "admin" user. Orange refuses to provide the admin password. I tried ...
2
votes
0answers
129 views

Just how intrusive IS Cortana? [on hold]

According to Microsoft's privacy statement: To enable Cortana to provide personalized experiences and relevant suggestions, Microsoft collects and uses various types of data, such as your device ...
0
votes
2answers
73 views

Persistent XSS in Blogger domain

I have discovered persistent XSS in blogger domain. I have reported vulnerability to Google Security Team and I received this is the response: Users are permitted to place arbitrary JavaScript, ...
0
votes
1answer
75 views

How to Perform SQL insert or update command using SQL injection

I have a URL http://localhost/usernfo.php?id=8 on which SQL injection can be performed. How can I perform an Update, Insert or Delete command from this link after I have got the structure of the ...
0
votes
3answers
77 views

Is this code javascript vulnerable to DOM based XSS?

Code : <script> document.theform.reference.onchange = function(){ var id = document.theform.reference.selectedIndex; var url = document.theform.reference[id].value; ...
2
votes
4answers
87 views

Can data be forensically retrieved off an encrypted hard drive?

If a hard drive is encrypted, is it still possible to retrieve data off of it? What about if the password to decrypt it is known? If this is the case, given that OSX now encrypts your drive by ...
0
votes
0answers
17 views

Restricting Vmware View Copy/Paste functionality

Does anybody know if it's possible to restrict VMware View copy/paste functionality depending on the source of the client? It seems VDIs can have GPOs set to configure copy/paste functionality, but ...
1
vote
1answer
44 views

Using cipher suite: deployment commands

Can someone point me in using the correct OpenSSL commands to use a certain cipher suite. For example DHE-RSA-AES256-GCM-SHA384 (I am not using ECDH suite because of supposed NSA backdoor ...
12
votes
2answers
2k views

Is sending a string (representing a HTTP message) over SSL the same as sending a HTTPS message?

I want to communicate from an embedded device that only has SSL for encryption with an intranet-server that can receive HTTPS. Will SSL encrypted HTTP string be interpreted as HTTPS? or is there more ...
-1
votes
1answer
62 views

How separated should a management VLAN be from the production VLAN?

I was after a little bit of advice regarding Network Management. Users will enter the network and hit a remote desktop server. On from this, they will pass through firewalls to the core switch. When ...
1
vote
1answer
91 views

Can data be tampered with after expert clones a drive?

Introduction 3 computers were sealed and taken from a persons apartment. Investigators invited him to unseal the PCs, they were intact and they started the cloning process, however the hashes were ...
0
votes
1answer
68 views

A sneaky way of disabling Microsoft Security Essentials?

For a long time I've been dismissing and ignoring this popup, which is easy since it only appears at boot (or logon) which is once every few months: But recently I became suspicious after a crash ...
0
votes
0answers
192 views

Does Microsoft Edge (Spartan) share Cookies, Cache, Passwords, or TLS Certificates with Internet Explorer?

Windows 10 was released with a new browser called Microsoft Edge. Interestingly, Internet Explorer is also installed on the same default install. Given that Chrome and Firefox tend to separate their ...
10
votes
5answers
1k views

Input Sanitization vs Output Sanitization [duplicate]

In the bits that I've searched about this, I've seen a few people declare as word-of-god that you should only sanitize outputs and not inputs. Why? Would it not be safer to cover both ends?
-1
votes
0answers
23 views

How to handle the aftermath of a possible firewall compromise? [on hold]

Today while I was away at work, my router and one of my Windows boxes both spontaneously rebooted, at roughly the same time. After this, the firewall failed to start DHCP and Apache services on ...
1
vote
2answers
75 views

LAMP MailServer without SSL… so what's the problem?

I want to set up a MailServer on Ubuntu for my website, and access the email from my POP3 client without enabling SSL encryption (I suppose the SSL is used to encrypt the password?). My questions ...
0
votes
3answers
53 views

Password help with coding! [duplicate]

So, I'm terrible with any sort of coding, and I need help with generating a series of possible passwords. I've forgotten the combination of a password I put in for an email - I know the password, just ...
-3
votes
0answers
54 views

How can i get my algorithm corrected? it seems it should be simple [on hold]

Im trying to make a really decent compression method. This is sort of getting throttled though by my lack in college level mathematics and algorithms. Can someone help me with this code? Its really ...
1
vote
0answers
6 views

Is it possible to low level format an Virtual Machine? [migrated]

I just came to wonder, if you can low level format the disk of an Virtual Machine, maybe you guys can help me with that?
2
votes
1answer
32 views

Source code scanning - PCI Requirement - Service Provider

I've been doing a lot of research regarding the requirements for source code scanning but haven't found anything conclusive when it comes to my question below. So I need some guidance from PCI Experts ...
2
votes
1answer
24 views

Setting up a wildcard certificate, question about generating CSR?

I have registered a new domain for a project. The hosting is actually done by a vendor. I have set the nameservers according to the vendors specs. Now they are requiring the cert in PFX format. ...
20
votes
5answers
2k views

WarGames: Platforms to practice and improving your hacking skill set [on hold]

Do you know of any good free platform in which we can practice mechanisms such as XSS, SQL injection, low level, reverse engineering and other hacking skills online? For example, I really liked Smash ...
41
votes
3answers
8k views

My friend revealed both private and public keys for his server. How serious is this?

A friend of mine managed to expose both id_rsa and id_rsa.pub file from his server via apache. I mentioned to him that this is serious security issue but he brushed this off like it was no big deal. ...
4
votes
1answer
266 views

How to store passwords in database so that they can be retrieved?

I'm developing a password manager web app. It's just for fun: I'm not exposing anybody's passwords. My idea was to use hashing+salting, and that's what I did for the master password. But then I ...
3
votes
2answers
42 views

Stealing OAuth2 Tokens from IoT Devices

As I am delving into different forms of session authentication and persistence, I started to question how tokens are stored and the risk of a token being compromised. The scenario I have in mind is as ...
0
votes
1answer
23 views

When do system access policies start to become source of security incidents? [on hold]

Consider the assumption we are dealing with systems handling secret information which is crucial for an organization's existence. I would like to know what is a good balance between security ...
20
votes
3answers
2k views

Could malware move during a scan to avoid detection?

I think every AV-Scanner is using some predictable recursive scan to search files for malware. Couldn't malware easily detect a scan and just move to an already checked location, determined by knowing ...
3
votes
2answers
52 views

Can you access Google Drive documents if you have the absolute path to the file?

I have been digging into Google Drive while I am trying to investigate a proper way to protect files on a site. In my experience if a user has the URL to a file they can access it without any ...
-7
votes
0answers
43 views

Should Free and Open Source Software and Hardware be Legally Manadated to Protect Users' Digital Rights? [on hold]

In light of the advent of the Purism Librem 15, and the Novena laptops, is it time to consider legally mandating the manufacture of Free and Open Source Hardware and Software, in order to uphold ...
-4
votes
1answer
33 views

Exploit php array and string using url variable [on hold]

I get this php error after requesting /main/located?location=usa&time=' on my site. array(0) { } string(8) "||| LOCATION I tried several methods to inject something, but all failed.. What do ...
4
votes
2answers
195 views

How to ensure that a person whose identity has been verified from an I.D. is the author of their exam answers?

Background We are designing a computer based test system where the examinees use their own computers to write their answers. The examinees' computers are booted to a custom Linux OS from USB drives ...

15 30 50 per page