13
votes
3answers
1k views

Should I be concerned that Google no longer trusts specific Symantec root CA cert that is also on my Windows system?

This is related to this other question which refers to Google moving to distrust the "Class 3 Public Primary CA" root certificate operated by Symantec Corporation, across Chrome, Android, and Google ...
2
votes
1answer
120 views

Return-to-libc attack with the argument read from registers (EDI/RDI)

I've read that to make a successful return-to-libc attack, the attacker should store the address of the command (for example /bin/sh) in the stack exactly after the return address of the system ...
44
votes
4answers
150k views

How can I export my private key from a Java Keytool keystore?

I would like to export my private key from a Java Keytool keystore, so I can use it with openssl. How can I do that?
102
votes
8answers
18k views

My school wants to keep the details of our door authentication system a secret. Is that a good idea?

So, I am designing a door authentication system (can't really go into more detail) for our school, so that only authenticated persons can go through a certain internal door. They hold that its inner ...
25
votes
4answers
4k views

How do you deal with massive port scans?

This morning I was looking through firewall logs and saw there were about 500 packets marked as port scan. The scanning range was from 1000-1200 5000-5200. The IP address is 85.25.217.47 which seems ...
0
votes
1answer
38 views

Accesssing cookies of another domain using Iframes and Javascript

Using Iframe we can embed webpages of another domain provided the X-Frame-Options isn't set to SAMEORIGIN. This also loads the cookie inside the iframe. Now, one can access this cookie if it's in the ...
2
votes
0answers
21 views

How to enable Windows firewall to log attempts to connect to closed (not listenting) ports? [migrated]

We have some servers with Windows firewall and logging enabled for dropped connections. We observe that when we do a port scan with nmap, the log (pfirewall.log) only reports attempts to connect ...
0
votes
0answers
47 views

securing a web application access [on hold]

I have to develop a web application using a JavaScript framework on the frontend and some REST services on the backend (written in Java). The Web/app server is IBM WebSphere. The users of this ...
0
votes
0answers
24 views

Identify Certificate Authority from public key [migrated]

Under OS X, the /usr/local/etc/openssl/cert.pem contains many certificates in this format: ----BEGIN CERTIFICATE----- <...snip..> ----END CERTIFICATE----- In Ubuntu, in /etc/ssl/certs, each ...
-8
votes
0answers
35 views

Hoomomorphic encryption for e voting [on hold]

I have to implement a online voting system in java using homomorphic encryption.Can anyone provide me the source code for it??
0
votes
1answer
31 views

Inadvertent clickjacking on page causes LastPass login dialog to appear.

I like the idea of password managers but have become leery of the way they interact with browsers (especially given the recent "LostPass" exploit). Today I found that viewing a certain page with ...
29
votes
4answers
2k views

Is it okay to reveal database's table names?

I'm developing web application that uses database. I have to do some operations which needs database table names and db table schema. Will it be secure if I send this kind of information to client ...
11
votes
7answers
2k views

Deprecation of SHA1 code signing certificates on Windows

I have been keenly following the issues with regards to Microsoft deprecating the use of SHA1 code-signing certificates for Windows executables ...
-4
votes
1answer
59 views

How to encrypt/decrypt with only encryption hardware?

Alice and Bob have agreed a symmetric key to be used for encrypting messages to be sent over an insecure (wrt a passive adversary) communication channel. Both of them have hardware devices for ...
0
votes
1answer
36 views

How does Netsparker extract the version of SQL Server during a SQL injection?

We are using netsparker cloud version On last week when netsparker scan it detect SQL Injection Vulnerabilities. However I am surprised as the injection query throw error for casting and the scanner ...
3
votes
2answers
83 views

How secure a secured PDF really is? [duplicate]

I've googled the internet for answers regarding secured pdf/cracking them and found huge amount of stuff. But most of it is quite old. So could someone confirm the following is still valid in modern ...
0
votes
0answers
23 views

How does a firewall protect against denial of service attack? [duplicate]

I do not know much about firewalls etc, but I am curious as to how a firewall protects against Denial of service attacks. My understanding is that, sending a lot of requests(more than the server ...
-3
votes
2answers
44 views

What are the risks of having a server with 2 interfaces each one in a different security zone?

In an organization usually have production and preproduction environments segregated in different physical or virtual machines. However, this new appliance is very expensive and the organization is ...
3
votes
1answer
60 views

return-to-libc attack

I was trying to attempt at return-to-libc buffer overflow attack for my Computer Software Security assignment. As far as my understanding goes, we can do these kind of attacks regardless of stack ...
0
votes
1answer
118 views

Test a known list of possible Windows Remote Desktop credentials?

I've forgotten my password to my home server. It's a new Windows 2012R2 VM, I didn't change the maximum password age requirements in Group Policy DC (even tho I know I should have) until it was too ...
4
votes
1answer
433 views

Is my server being used as a proxy or being attacked?

I have an Ubuntu, Apache, Passenger, and Rails 4 project on AWS EC2. I am unfamiliar with the security and server side of my project. Recently, my site was down because of "too many users" so when I ...
3
votes
6answers
3k views

How can a non-technical user verify a message was sent “securely”? …or over TLS?

I have a situation where B2B and B2C communication needs to be sent securely and not visible to most SMTP hijackers. I don't care about conspiracy theories or NSA style attacks, but want to provide ...
5
votes
2answers
54 views

Are cached pages more secure?

Whenever I see a suspicious looking URL I want to go to, I usually just search it up on Google's webcache and browse the site that way. But I just realized that I never really had evidence to support ...
0
votes
2answers
59 views

What is a good way to generate a one time pad, and is this a good way? [duplicate]

Is there a good/better/best way to generate a one time pad? I would like to only utilize about 40 characters (a-z, 0-9, .,!-). What I have come up with is perhaps not the BEST way, but seems to fill ...
0
votes
1answer
9 views

(spp_sdf) SDF Combination Alerts in Snort

I'm testing Snort in IDS mode and have been receiving a few (spp_sdf) SDF Combination Alerts as below. Seems like it happens when I visit certain but not all https sites. Tried to google this alert ...
2
votes
1answer
332 views

How much of a security problem is PHP's proc_open() on a shared host

My company is developing a PHP system that needs to interact with Git on the server, which can currently most conveniently be done by allowing external calls via proc_open(), system() and the likes. ...
1
vote
1answer
56 views

Would you typically want to monitor all ports for NIDS monitoring? If so, is span port or network tap the way to go?

We're setting up NIDS monitoring and the bosses want to monitor all the ports, but I'm wondering if this actually makes sense. The switch we're currently using can only mirror 4 source ports to one ...
0
votes
0answers
13 views

Api key v oAuth for mobile apps

So we already have an oAuth setup for authenticating users. But there are endpoints that are not user specific that are currently open, we would like to restrict access to those open endpoints via API ...
6
votes
3answers
213 views

How much can we trust open source implementations of crypto (security) libraries?

In one of my projects I was choosing bcrypt or PBKDF2 for the KDF for passwords. I have read that bcrypt is generally more advanced and scrypt is even better. But I am using .NET platform where ...
12
votes
2answers
322 views

Can client-side hashing improve after-the-fact security in response to password leaks?

Several questions on this site address client-side password hashing, and none of them admit to any security benefit beyond protecting other sites the user might use the same password for. However, ...
99
votes
7answers
17k views

Why shouldn't we roll our own?

Why shouldn't we create our own security schemes? I see a lot of questions around here about custom crypto and custom security mechanisms, especially around password hashing. With that in mind, I'm ...
0
votes
1answer
92 views

Forensics, evidence collection vs data acquisition

I'm new in forensics. I would like to understand the difference between evidence collection and data acquisition? How would you call the following events: Imaging the RAM on a live system; ...
-1
votes
1answer
25 views

rpm package info leak?

On Linux, rpm -qi <package-name> command would display the package info, which would contain information of build machine - Build Host :<host-name> Does this pose any security risk? Is ...
2
votes
1answer
2k views

How can you check and analyze SSL ports other than 443? [closed]

I tried https://www.ssllabs.com/ssltest/analyze.html?d=imap.spamarrest.com%3A993&hideResults=on but it said Ports other than 443 not supported I need to check imap.spamarrest.com:993
1
vote
3answers
145 views

What is the simplest way to send an anonymous email?

I would like to send an email that can't be traced back to me, is there a simple direct approach to do that? I mean an electronic way that doesn't involve me going to an Internet cafe wearing a ...
4
votes
1answer
50 views

IPtables Linux Firewall and IPsec traffic

Can iptables filter out incoming datagrams that are IPSec-tunneled packets going to port 25?
0
votes
0answers
33 views

DSS digital signing approach

Under the DSS approach to digital signing, what is the advantage of using two pairs of keys for each signature?
8
votes
3answers
76 views

How can you prevent email addresses from being harvested from a registration form?

When you go to a website's login form and enter the wrong credentials, the website can give you one of three error messages: Your email is wrong Your password is wrong Your email or password is ...
4
votes
1answer
58 views

Spoofing LAN IP Address Traffic

To give as much detail as possible, I am doing a Pentest for a client that has quite a few "terminal systems" meaning that they are simply a box with a connection back to the main server. These ...
3
votes
1answer
52 views

Is secret key for HMAC in form of UTF8 characters good enough?

There is a popular JWT library on nuget. I am analyzing an application that uses that library and it stores a secret key as a string. In the code of the library I see that it uses the MS HMACSHA256 ...
3
votes
3answers
179 views

Is web application connected to a database via an application server is more secure?

I have heard from my colleagues and some other people on web suggest that it is more secure to run this configuration: Web server -> Application server -> Database, than this: Web server -> ...
1
vote
4answers
215 views

Cell phone monitoring device

This Chinese company claim their device/sim card can track other cell phone locations, record phone calls and SMS. Is this possible without having access to the other phones first? What do you guys ...
81
votes
10answers
13k views

New Gmail login system—going against conventional wisdom?

I noticed that the new gmail login asks for username first, and then confirms if such username exists, before asking for password input. Does this not go against conventional security wisdom to not ...
0
votes
1answer
49 views

Safest way to access data from an SQL server

I am part of a group developing an iOS application. This app accesses a database to both retrieve and submit data. One of the group members said that he does not want to have any direct interaction ...
4
votes
1answer
4k views

IP address, iphone, Snapchat

My child is being accused of doing some improper things via Snapchat, but he swears that he did not do anything, and he is the type of person who probably would not. The only thing the police are ...
0
votes
1answer
70 views

Sites sending email using my email address

Today I was looking through my spam folder and noticed an email: The sender was myself, assume my email is xxx@gmail.com, on the from section it says xxx@gmail.com via clicktheprofits.com Does ...
1
vote
2answers
59 views

Getting spam calls from numbers similar to my own

My phone number is 456-123-XXXX (American phone number + area code). Over the past few months I get fairly regular spam calls from other numbers also beginning with 456-123-XXXX, where the last four ...
1
vote
0answers
44 views

How to authorize users for rest service

me and my friend are doing a project for a company. It involves getting some information from the database and display it on a smartglass device (epson, sony, ...). Now we want to build a RESTful ...
1
vote
1answer
28 views

How can access to settings of a public router be (mis)used?

I've noticed that, in the local café, Wi-Fi router credentials are simply user: admin pass: admin (as default). Upon this discovery, I was intrigued and I wanted to know more about what possibilities ...
4
votes
3answers
15k views

Is it possible to create a custom login page for your own Wi-Fi hotspot?

How do I create my own open Wi-Fi hotspot/access point with a custom login page similar to those found in commercial hot-spots? The page would be accessible using Windows or iOS, and users would have ...

15 30 50 per page