-5
votes
0answers
24 views

Session cookies not been retrieved or copied anymore? [on hold]

Can sessions cookies be retrieved now Google changed they way they are created? Any php examples would be appreciated
-1
votes
0answers
22 views

Encryption algorithm of EScan anti-virus for data transmission between clients and server? [on hold]

I have a multi-user EScan anti-virus that uses a console to manage clients. This anti-virus has a server and receive updates from that server online, and then update its clients. The communication ...
0
votes
1answer
24 views

Algorithms for transaction authentication

It's unclear to me how transaction signing and transaction authentication work. Industrial solutions use both symmetric and asymmetric algorithms to compute the signature. What does RSA add the ...
-5
votes
0answers
56 views

Security through obfuscation [on hold]

Well, the obfuscation part is something everyone thinks about, most significantly it's a well proven method to force an attacker into a longer reconnaissance period, providing more time to catch them ...
3
votes
1answer
49 views

Security concerns about purchased PHP script (web app)

I have been thinking about buying a ready-made PHP script (i.e. a web application) that provides a specific functionality. Say, for example one of these sold by Agriya: http://www.agriya.com/products ...
-2
votes
2answers
49 views

Which all ports are in danger and needs to be closed with immediate attention?

This is the nmap scan results on my server (used for email and web serving) from a remote scan. Which all ports are in danger and why? PORT STATE SERVICE 21/tcp open ftp 25/tcp open ...
0
votes
1answer
47 views

Passwords propagation, Password Trend and Word Generator in Human Mind

Some passwords like "123456", "admin" are outrageously popular, so are the leet transformations and concatenation of digits. The users seem to pick up the password suggestions or just copy the ...
43
votes
1answer
3k views

Why does Windows Ship with Expired SSL Certificates?

I am cleaning up the certificate stores on my Windows machines, and considering which certificates I should keep, and which ones I should delete. Why does a fresh install of Windows Server 2012 R2 ...
3
votes
4answers
81 views

External Penetration test by third party

I am planning to engage a vendor to do pen test on my external systems. I know that pen test has a set of systematic steps .. just would like to gather some industry experience. Normally, at which ...
-1
votes
2answers
73 views

What can IT see and log? [on hold]

First of all, I'm a co-owner of my company and I am using my own computer on my company network. Occasionally I'll browse some websites throughout the day to kill some time. My business partner ...
-3
votes
3answers
60 views

How to hide my ip and browsing history from others on my network?

I need to hide my activity and IP address from those I share this network with. I'm unsure if a VPN will serve my needs, because I'm not concerned about the sites I access tracking me. I'm concerned ...
3
votes
1answer
33 views

Decrypting arbitrary offset of encrypted file

I want to store encrypted files on some storage backend that allows me to fetch bytes X through Y of the encrypted file. I can obviously decrypt the entire file locally and send it back to the client. ...
4
votes
2answers
68 views

How do honeypots remain secure to 0days and newer exploits?

If honeypots are designed for a specific set of exploits, such as SQL injection and XSS, how do they protect themselves against other exploits? For instance, if I created a honeypot a few months ago, ...
-1
votes
1answer
29 views

Is it some kind of bug, if same request is being used over and over again to perform a particular update? [on hold]

<body> <form action="example.com/deleteuser"> <input type="hidden" name="newid" value="7613053" /> <input type="hidden" name="comment" value="6272321" /> ...
7
votes
5answers
1k views

What Man-made Physical Threat Could Pose Severe Danger to a Server Farm?

I am writing a novel in which a researcher attempts to work against a study he is a part of by purposely sabotaging operations on the research compound. I am wondering if the following is plausible. ...
2
votes
2answers
55 views

Ubuntu/Debian Is it okay to use a sudouser account as my primary on a workstation?

This question comes to you from the the common WindowsNT advice that "I", as the computer administrator, should login with a normal unprivileged user account for day to day use. Does this concept have ...
1
vote
4answers
97 views

Strange device in routers client list

Due to a high number of clients connected to one of my routers I recently changed it's password and reboot it. I also disabled WPS. The router is a ZyXEL Prestige 660. After the reboot the client ...
0
votes
2answers
48 views

Separate database column for salt

Is it advisable to store the salt in a separate database column or should we concatenate it together with the password? Is there any difference? I have come across implementations of both types. ...
1
vote
0answers
37 views

Limit Packets Per Second

Since last week I have been seeing something fishy and it seems to be worsening. I tried many firewalls and they seem to be useless. I blocked all unwanted ports and only few ports are open so I found ...
2
votes
3answers
92 views

Is it possible to upgrade the SSL version of a connection from the server's side only?

I am trying to find out if there's a way to upgrade the SSL version from SSLv3 to TLSv1 of a connection by only making server-side changes. In my case, both the client application and server are ...
-2
votes
3answers
58 views

Basics - IP spoofing

I can't understand why IP spoofing (even basic) is very limited. Suppose Bob and Alice are about to communicate and Eve can see network communication, why eve can't use IP spoofing for making "Man ...
1
vote
1answer
50 views

Is there a way to mimic http request of a compiled program?

Lets suppose my program makes a http request and uses it response to update some values. Is it possible to somehow mimic the response in order to modify it so the program believes the server responded ...
0
votes
1answer
16 views

Possible for Lync clients to adopt Activesync-style policies?

My compliance manager recently told me that Lync IMs should be treated as e-mail for compliance purposes. This also made me realize that our other email policies (encrypted device, pin required, ...
0
votes
1answer
88 views

Can you get someone's IP if you have their Skype number?

I was reading about capturing packets during skype sessions to get the other person's IP address... sounds like you can do this mainly while in a live skype chat / call between skype to skype, but Is ...
0
votes
1answer
36 views

CSRF Guard - Can it protect service call also?

I'm implementing CSRF guard in my web application. I have done all the required configuration and I can see token getting generated/injected into the request header. Let me tell you application's ...
1
vote
1answer
64 views

PCI DSS - Recorded Phone Conversations

I am using the using the following image from FishNet Security as a sort of guide for the data flow diagram required by PCI DSS as defined by: 1.1.3 Current diagram that shows all cardholder ...
0
votes
0answers
9 views

Build set with PKI from reliable broadcast / random beacon [on hold]

I am trying to build a protocol (or find an existing one) for creating a set $S_2$ with PKI from a set of parties $S_1$ that initially does not know anything about the other parties. We assume ...
-2
votes
1answer
33 views

Why Application Penetration Testing is required? [on hold]

I've developed application for receiving payments on my shop site. However, my clients are asking and forcing to complete a penetration testing. Why there is need of penetration testing, when I ...
2
votes
2answers
295 views

How to force nmap to check all the ports?

I heard that nmap scans for only 1000 most common ports while we do server scan. Is it possible to force nmap to check all the ports for scanning? If yes,How?
0
votes
2answers
83 views

What are the security threats when Googling and surfing when my Gmail account is open?

Suppose I log to my Gmail account. After that, I use Google to search for random websites and visit some. Are there any security threats on my Gmail account when Googling and surfing the net while it ...
6
votes
2answers
506 views

How to find processes that are hidden from task manager

I have read that you can hide processes from the task manager, example here I've seen a few posts on hidden keyloggers using rootkit but that's it really. Is there a tool or way to look at processes ...
5
votes
1answer
102 views

Distinguishing SSH and HTTPS traffic

Alice is an employee of Chris, and Chris does heavy traffic monitoring via its company proxy. Alice wishes to use a Bob's web service while preserving privacy and confidentiality. She has full ...
7
votes
0answers
370 views

Find the service creation date in Windows? [migrated]

If on a compromised system you are trying to analyze newly installed services or when services were installed, how do you do that. Where can I find the creation date for a certain service in the ...
1
vote
0answers
49 views

Anatomy of a Cyber exercise and SOC

What exactly entails an incident response exercise (like a Red/Tiger team excercise)? How does it add value to a security operations center? Is there any good resource I can read up on how to set up a ...
-3
votes
0answers
34 views

What is the best small zombie program or application can use as a zombie for practice? [on hold]

I used Backtrack as an attacker and Sift as a victim, but I don't know what is the best and smallest program or application I can use as a zombie ?
-2
votes
0answers
19 views

how to convert mac address to floating value [migrated]

i want to change a mac address to floating point number. i tried using IEEE 754 converter online but it says "the value is out of range", how can i do it in a proper way?
2
votes
2answers
35 views

Determining PCI DSS SAQ level

I have a b2b SaaS that my clients then use with their own customers to gather data in a face to face scenario with iPads, I would like to expand it to take credit card details. The credit card details ...
1
vote
2answers
130 views

What is a salami attack?

Can someone give a clear definition of a Salami Attack? In the book Security in Computing (4th Edition) by Charles P. Pfleeger. It is stated as a attack to data integrity and I quote the passage: ...
3
votes
2answers
58 views

What is the difference between ISO 27001 and ISO 27002?

What is the difference between ISO 27001 and ISO 27002? Are they related to each other or not?
6
votes
1answer
42 views

When generating CSRF token

I'm building a CSRF prevention method in our application framework. I use, inter alia, the OWASP site. We have chosen for the "Double Submit Cookies" prevention meassure, described at the OWASP CSRF ...
2
votes
1answer
19 views

Is it possible to cause a DOS attack on a domain by spoofing the DC's NTP request?

According to this page: Be aware that the Network Time Protocol (NTP) is unauthenticated, and unencrypted, and it is possible for an intruder to spoof the time root source, causing the wrong ...
2
votes
1answer
48 views

What are good precautions to take before cleaning an infected website? [duplicate]

I have to work on infected websites once in a while, and I'm wondering if there are some good practices to keep my computer safe. I use my personal computer for work, so I'd like to take precautions. ...
0
votes
0answers
16 views

RFID Security - Copying/cloning cards [duplicate]

I've seen some mobile apps coming up that scan RFID cards and clone the signal so that you could use the phone in place of a card. I was under the impression that most cards implemented something like ...
3
votes
0answers
41 views

What's the best way to transform sensitive account numbers

I work on a web application that manages information about transmission setups and processes client transmission statistics to generate billing charges for the services used by these clients. The team ...
1
vote
1answer
24 views

What is the difference between certified and non-certified drives for Windows To Go?

Microsoft suggests "certified drives" for http://www.microsoft.com/en-us/windows/enterprise/products-and-technologies/devices/windowstogo.aspx, but it appears that other than confirming that these ...
0
votes
2answers
58 views

guidelines for password managers

I use Lastpass and I'm testing out other password managers in order to set policy for organizational use. Depending on settings, I've found that these programs can automatically send your password ...
9
votes
1answer
237 views

Torrent “bad seed” attack by Sony, how does it work?

Sony recently saw a large amount of data stolen. In order to prevent the stolen data from being spread using torrents, they are doing what was called a bad seed attack. What is this attack? Is this a ...
-1
votes
1answer
38 views

Blocking Tor By Trying to Connect to an Entry Node [on hold]

So, I had an idea on how to block Tor (or similar tools) from being used on your network (or ISP, which is perhaps more relevant, considering Tor's mission). I'm assuming it wouldn't work (based on ...
1
vote
2answers
36 views

How to avoid referer information leakage during password reset

Most password reset systems involve emailing the user a one-time link that lets them reset their password. The token needs to be in the URL, as most email clients do not allow HTML emails to perform ...
3
votes
1answer
43 views

How to exfiltrate data over remote desktop

I sometimes come across systems that are segregated in a way I know to be flawed. The arrangement usually looks like this: There is a general IT environment, which follows best practice: patching, ...

15 30 50 per page