-3
votes
1answer
58 views

Google News, unencrypted by default- unless logged in? [on hold]

http://news.google.com Of course, if you are logged into a Google account, it is encrypted. Otherwise, unencrypted by default.. Even when visiting Google News via a Google search result page ...
2
votes
0answers
121 views

SAM Card deployment best practice

As part of my current project we will be deploying smart card readers containing SAM cards for decryption purposes. The deployment process involves a third party software integrator who will control ...
1
vote
0answers
27 views

msfvenom doesn’t generate raw shellcode output properly

I'm doing the Windows Buffer Overflow Exploitation section of the OSCP course, and the author uses a combination of msfpayload and msfencode to generate a windows/shell_reverse_tcp payload encoded ...
2
votes
2answers
5k views

SqlMap bypasses OWASP ModSecurity Core Rule Set for SQL Injection

I am trying to perform a simple penetration test on the DVWA (the web application that has been specifically designed to be vulnerable to some of the most common web application attacks). I want to ...
1
vote
3answers
75 views

Vulnerabilities despite FIDO U2F?

FIDO U2F seems much more secure than one-time-passwords (OTP), especially TOTP, because of the challenge-response architecture. In what ways is a U2F user still vulnerable? I presume if a user's ...
3
votes
1answer
46 views

Phishing/Malware redirection through AdExchange on Android

Issue: Yesterday I discovered a strange behaviour in the Chefkoch.de App. During the search for recipe, Firefox opens up with a (German) phishing warning screen. This happened not only on this ...
2
votes
0answers
134 views

What is the state of cryptographic obfuscation in 2015? [migrated]

Cryptographic Obfuscation is a technique that allows one to obfuscate source code in a secure way (as opposed to insecurely mangling it into spaghetti code.) For example, here is a way to protect a ...
0
votes
0answers
3 views

Firewall Throughputs [on hold]

I am looking at purchasing a new UTM/Firewall device for the sole purpose of bandwidth control/utilization and guest modes. I have the following terms that are troubling and I would like someone to ...
1
vote
1answer
28 views

EMET disable DEP on IE for specific site

I'm a new user of EMET. I wanted to know if there is anyway to avoid DEP on IE for a specific site. I want to do this because I use VMware remote server and when I start a remote console, EMET starts ...
1
vote
1answer
72 views

How can storing a userId as client-side-sessions be safe?

The documentation for session handling in ninjaFramework states: [...] Ninja uses so called client-side sessions. The cookie itself stores the information you want to attach to that session. ...
0
votes
0answers
30 views

Vecracrypt Outer Layer shows incorrect free space thus giving away the hidden layer? [on hold]

I just tried the veracrypt hidden volume for fun today, I was interested in how it works. I used the encryption on an old 2TB HDD, copied some files on the outer layer and then mounted both volumes. ...
1
vote
1answer
43 views

What is the point of signature file in signed JAR/ZIP files

The way JAR signatures (or ZIP for Android) are designed is that they have a manifest file, containing digest for each file in the archive. Then there is a "signature file" that contains digest of ...
5
votes
1answer
81 views

(proper) way to inform TLS server to drop TLS session with clientAuth

Is there a way for a TLS client to inform the server that it doesn't intend to resume its authenticated session(s) anymore? Example: A client established authenticated session with the server ...
0
votes
2answers
146 views

PCI Compliance - Encrypted Mobile Apps

My company (health care) went through a PCI audit and needs to solve some major issues. Our branches collect CHD on paper and saves them to a network drive as a pdf that our corp office accesses to ...
13
votes
1answer
718 views
+500

What are the privacy and security implications of Windows Telemetry

There have been quite a few news stories relating to the use of "Telemetry" in Windows 10 (and also now Windows 7/8) with suggestions that users would want to disable or remove these updates due to ...
-3
votes
0answers
11 views

/bin/bash is gone? [migrated]

I typed the following command, and now bash isn't working. $ sudo chmod a-x /bin/bash_old /bin/sh_old It just says: login: /bin/bash: No such file or directory.
3
votes
2answers
3k views

FREAK Attack: How to disable all EXPORT ciphers in OpenSSL?

As we all know all EXPORT ciphers in OpenSSL should be disabled so that we are not vulnerable to the FREAK attack. reference- ...
2
votes
4answers
623 views

One-Time-Passwords resist against bruteforce attacks? Immune Alternative?

Does a One-Time-Password like Google Authenticator or YubiKey protect against brute force attacks with unlimited computer power? If not, what algorithems are immune to bruteforce attacks against ...
2
votes
1answer
102 views

How does detecting promiscuous mode using an ARP test work?

I have read that we can detect whether a system is running promiscuous mode by sending out an ARP request with a fake broadcast address e.g FF:FF:FF:FF:FF:FE.This will be blocked by all NIC's ...
1
vote
3answers
397 views

Securing REST API with HMAC and basic auth

I was wondering if giving users choice of a method for securing their access to API would be a good idea. Background: We are creating and deploying applications for our customers, which help them do ...
2
votes
2answers
216 views

Examples of “Runtime application self-protection” (RASP) in action?

I'm having a hard time figuring out what "Runtime Application Self-Protection" (RASP) really is, though I see it mentioned in the press. The best description I've seen of the possible benefits, along ...
0
votes
0answers
15 views

Disguising as another computer using SMB Relay?

I've got a server that constantly checks for the existence of certain parameters on every PC in the web using SMB, if it fails to find those parameters it marks it as a rogue PC. I've understood that ...
4
votes
3answers
54 views

Input validation: how to do it if I must accept HTML as part of my input?

I'm writing a service which receives FHIR data and it stores it. FHIR is an HL7 healthcare information standard format which contains HTML by definition, embedded into a JSON or XML, (to ensure ...
1
vote
1answer
67 views

Purpose of client and server random numbers in SSL Handshake [duplicate]

I could not understand why in the Client hello and Server hello in SSL Handshake client needs to send to server (publicly) a random number and vice versa. From these numbers a Pre-Master secret will ...
3
votes
2answers
122 views

End-to-End (Point-to-Point?) Email encryption

I'm looking into providing security for the email server I recently deployed, however the subject matter is a touch more complex than I anticipated and I would appreciate confirmation or correction of ...
-1
votes
1answer
28 views

Integrate POS client with HSM Luna

I want to integrate and test a terminal device (PED) with HSM Luna. But I'm not able to understand steps clearly, as to what is done when a new device is integrated. Can anyone please help with this. ...
0
votes
1answer
34 views

Scope for information security in 2yrs down the lane? [on hold]

I'm a fresher. Very recently I started doing Java course because of the wide opportunities we get to enter into an IT industry. Now, I've got an opportunity to work for a project that's related to ...
3
votes
3answers
78 views

Wordpress infected with Trojan

So recently our (VPS CentOS6.5) server began hosting a WP site that was, or became, infected (via revslider plugin) with some kind of trojan (probably spam sender, as we ended up on Spamhaus list very ...
-3
votes
3answers
48 views

Reverse Engineer and Exploits researching [on hold]

Can some one give me a start point for finding exploits in software and reverse engineering? I need some kind of a book or a site... I have background with programming with high and low level such ...
16
votes
3answers
11k views

Can someone explain a little better what exactly is accomplished by generation of DH parameters?

I'm setting up a node.js server: https.createServer({ ... ciphers: 'ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH', honorCipherOrder: true }, app).listen(443); ...
3
votes
2answers
117 views

Encrypt part of users' data in web application vs. password recovery

I'm developing a web-application that stores sensitive user data. Although the data is sensitive we want it stored permanently because the users might want to come back later and reuse it. The user ...
6
votes
2answers
59 views

Using smart cards for email encryption and SSH

Suppose I have a small organization, every user has a recent Macbook Pro, can buy a ~$25 smart card reader on Amazon, and I want to use keypairs where the private keys are on personal smartcards to do ...
2
votes
2answers
45 views

Assuring Client is Authorized to use JSON Web Token

JSON Web Tokens ( JWT ) are server-signed objects that the issuing server uses to identify a user, track session data and authorize requests. The fact that JWT are server-signed gives assurance that ...
0
votes
0answers
10 views

Maths for the Diffie Hellman [migrated]

With respect to the maths behind the Diffie Hellman Key exchange algorithm. Why does: (ga mod p)b mod p = gab mod p It might be fairly obvious, but what basic maths guarantees this? Why does the ...
4
votes
1answer
63 views

iOS application pentest without jailbreak

Is it possible to run a security assessment on an iOS application using a non-jailbroken device? My device was recently restored (recovered - no SHSH blobs) to iOS 8.4.1 (as Apple doesn't like ...
4
votes
2answers
162 views

Are there any known cases were antivirus software have deliberately ignored malware?

Are there any known cases were antivirus companies for some reason have choosen to make their product allow/ignore malicious software? The reason could be government coercion or former trustworthy ...
2
votes
2answers
261 views

Best way to scan for and eliminate earlier versions of SSL/TLS in a production environment

Due to new PCI DSS standards mandating that nothing lower than TLS 1.2 be used in a PCI environment, I am tasked with phasing out anything lower than TLS 1.2 on every device in this environment by our ...
1
vote
0answers
19 views

SSH: Only allow known IPs [migrated]

I want to allow only a known IP address block to SSH into our servers. I have Windows Server 2012, R2, CentOS 7 and Ubuntu 12 and 14. What is the best practice for each OS to accomplish this?
2
votes
1answer
30 views

Public Key Pinning and subdomains

Shortly I have intend to install new webserver and I'd like to secure users a little bit more. I already have domain, (virtual) server and everything else that matters when configuring a server. ...
5
votes
2answers
216 views

FIPS 140-2 Compliance vs Validation & Products vs. Modules vs. Ciphers

Some vendors appear to advertise their products as using "FIPS 140-2 compliant algorithms & ciphers". However, some of these products cannot be found on the NIST website that lists validated ...
0
votes
3answers
47 views

Difference between brute-force and dictionary-based in the mitigation process of the IPSs

I am working with Bro IDS and CIF ( cyber threat intelligence) using the Intel framework I am testing. How can I mitigate brute-force and dictionary-based attacks? I found that the mitigation ...
2
votes
1answer
95 views

Token based approach to authentication over SSL Rest API - refresh tokens

I'm quite a newbie at security. I'm developing an android app with a token based approach to authentication. I'm not using Oauth as the OAuth 2.0 is not an authentication protocol but rather used to ...
2
votes
0answers
41 views

NX + ASLR bypass - troubles with return address of .bss

I have one problem, while doing NX + ASLR bypass. I'm going through this tutorial step-by-step. Everything is going well, I have prepared my exploit, just with another address and some small ...
2
votes
3answers
129 views

How to detect port scan on SIEM within LAN or same Network?

Let's suppose a host machine in the client environment has been infected and its performing port scanning on other machine within the LAN or same Network without passing through Firewall: On what ...
1
vote
0answers
42 views

What information can be gained given only a phone number? [on hold]

What personal information can be obtained given only a phone number? What information is your phone number publicly (or privately, but with easy access) linked to? Here is the way I am looking at ...
1
vote
1answer
35 views

Problems executing shellcode via nop-sled

My shellcode instructions are changing during execution. I'm not sure why. Here is what my shellcode looks like: => 0xbffff0b3: nop 0xbffff0b4: nop 0xbffff0b5: xor eax,eax ...
0
votes
0answers
83 views

CryptWall virus attack [on hold]

Is there something new about any solution to decrypt all my files that are infected with the CryptWall virus? All my files have extension *.abc.
6
votes
4answers
160 views

Does it matter which platform a file is scanned on for malware?

Different operating systems use different file types and file systems. Does it make a difference to a virus scan which system it is being run on and what type of malware it's looking for? I ask ...
0
votes
1answer
49 views

How to secure a websocket connection with challenge-response?

TL;DR Given that all of the state information for a web browser is accessible to a (potentially hostile) user, how can challenge-response authentication between the browser and the server be ...
4
votes
2answers
68 views

Protection of eduroam credentials

Recently my educational institution officially switched over from the their own wireless network to eduroam. If I understand correctly from the FAQ, credential authentication is performed on the ...

15 30 50 per page