1
vote
1answer
36 views

JSON Web Tokens - How to securely store the key?

I was building a RESTful Web Service when I came across JSON Web Tokens as an alternative to traditional cookies for authentication. The concept core of this method is that the server is the only ...
1
vote
1answer
28 views

Search Engine security for searches associated with the same searcher [on hold]

A number of years ago AOL leaked potentially identifiable information, because all of the searches leaked were associated with the same 'user', and as such they could be put together to identify the ...
1
vote
1answer
54 views

PKI/Why does Microsoft require my cert before encrypting an email?

Microsoft doesn't allow sending public-key encrypted messages using Outlook 2003-2012 on Windows 7-8x environments without first creating your own Digital ID or private key for signing. Per ...
1
vote
1answer
27 views

Digital Certificate Repository Integrity

I am trying to figure out if there is an automatic way to determine if a digital certificate repository has been tampered with. Does anyone know of a way to do so?
13
votes
4answers
688 views

Custom socket server on the internet running as root

We are writing a custom socket server which runs on a high port. Until recently, it has been running behind a corporate firewall. Now, it has been decided that the server should be taken outside the ...
0
votes
2answers
2k views

HTTPS icon red and crossed out - Chrome browser

I just would like to ask what actually means when HTTPS icon is red / crossed - out. Is this site is vulnerable to Man in the Middle Attack? Is it safe or not?
2
votes
1answer
92 views

someone may be doing something nasty

I have an ssh server. earlier toady, I was about to login to my server, when I got a message that said something along the lines of "Someone may be trying to do something nasty" and indicating a man ...
1
vote
2answers
88 views

How can I detect unencrypted self-executing code in JPEG images?

Assuming that I have an infected image containing a self-executing malicious code that targets my image viewer and executes when I open the file. Supposing also that my computer is completely clean ...
3
votes
4answers
215 views

How can I set my server to only accept requests from my own client app? (similar to SSL Client Certificates)

I'd like to have my server APIs only accept requests from my own app, to prevent other "rogue" clients of my service. As i understand it, the way to do this would be with a "client certificate" that ...
47
votes
6answers
7k views

Do actual penetration testers actually use tools like metasploit?

I've played around with metasploit simply as a hobby but am wondering if actual pentesters and/or hackers actually use metasploit to get into systems or do they write their own post exploitation ...
7
votes
1answer
211 views

Maximum number of nodes with IPSec?

From my understanding, for incoming packets over IPSec, the Security Association (SA) is identified by the SPI field of the ESP header. Then let's say I have a bunch of nodes where each node wants to ...
0
votes
1answer
26 views

In What Ways Can X-Foward-For Header Information Be Used In An Attack

By enabling X-Foward-For on our proxy, we would essentially be advertising our internal IP addresses externally. However, we use a private range. Everything goes through NAT. So, the best anyone would ...
1
vote
2answers
54 views

follow up to previously answered “Escalating from Apache shell to root”

I have seen numerous questions similar to the above with answers that relate to elevation of privileges to those of root. the answer and example that silverlightfox has given is one of the better ...
7
votes
0answers
88 views

A way to trigger an SELinux policy violation? [migrated]

I'm studying the basic workings of SELinux and would find it useful to trigger a denial. My test machine is running CentOS 7, it's a basic server install without any extra services, and getenforce ...
-2
votes
1answer
40 views

What would a typical packet of a DDOS attack look like? [on hold]

In terms of header, size and payload? We've been learning about DDOS attacks in class and they've been telling us all of the abstract ideas, but haven't told us what the actual makeup of the packets ...
1
vote
1answer
82 views

Any way to revoke old key pair?

There is a many-year-old 1024 DSA key in the public keyservers under my name. There is a 2048 ELG-E subkey for it. I didn't create these keys, they were created for me by a former employer without my ...
26
votes
2answers
3k views

What is the relationship between “SHA-2” and “SHA-256”

I'm confused on the difference between SHA-2 and SHA-256 and often hear them used interchangeably (which seems really wrong). I think SHA-2 a "family" of hash algorithms and SHA-256 a specific ...
4
votes
5answers
3k views

Becoming HIPAA Compliant

What is required to become HIPAA Compliant? Do I need to take a test or do I just need to follow a certain set of guidelines? EDIT: Just to provide my background. I am a small IT Firm and we would ...
0
votes
0answers
10 views

Categories for Information Security Learning [duplicate]

I'm learning Information Security, Actually I'm a software developer but for my work I need to learn a lot of Information Security, you know attacks and defenses, But I really don't know where to ...
0
votes
0answers
10 views

How to change isp from a wimax usb card to another one? [on hold]

I have a MediaTek MT7118 WiMAX USB Card. I want change my ISP to another ISP. Is there any way to do that?
-1
votes
0answers
39 views

Alternate ways to block ports on Windows [on hold]

[question] What alternative methods are there to blocking ports in Windows, apart from the firewall and IPsec? If there is no other way, is there a way of setting up IPSec timeouts to immediately ...
3
votes
0answers
73 views

Linux Plausibly Deniable File System

Is there any way to encrypt a linux filesystem in such a way to maintain plausible deniability? E.g. "Hidden OS support," the way Truecrypt and Veracrypt work, they only support Windows OS due to low ...
3
votes
3answers
112 views

What's the best way to secure the responses in a single page web app after logout?

I've read some of the great responses to storing and passing session keys in a single page web application (i.e., a web "site" that runs mostly on the client-side, getting data from the server by ...
77
votes
7answers
14k views

Is it dangerous to post my MAC address publicly?

When posting questions, it is often quite useful to include debug output. However, it sometimes include the MAC address of my laptop, router, or both. What are the possible dangers of releasing these ...
10
votes
2answers
2k views

Someone Copied Our Site Code (Including Analytics) and Put Adult Content on It [on hold]

Someone copied our WordPress based website and put it on another server and added adult content on it. It also includes our Google Analytics code so the traffic to this site also shows on our ...
7
votes
3answers
377 views

CTF competitions/challenges that are Windows based?

I've been messing about in CTF's for a while and I also do pen-testing professionally, what i've noticed is a distinct lack of CTF competitions using windows environments. This is in stark contrast ...
2
votes
0answers
45 views

Why do I get a Secure Connection Error on some sites? [migrated]

I am using Firefox version 37.0.2 with an ethernet connection at a university in Bangkok. I consider the university a network a hostile environment as the majority of the computers on this network are ...
25
votes
4answers
22k views

Should SSL be terminated at a load balancer?

When hosting a cluster of web application servers it’s common to have a reverse proxy (HAProxy, Nginx, F5, etc.) in between the cluster and the public internet to load balance traffic among app ...
0
votes
2answers
65 views

Is there any reason that captive portal server can't block the ICMP echo request/reply packet

We can get connected to those public WiFi hotspot without the account but can access to no website but the login page. As I tested, all those login website would respond to my ping even I was an ...
5
votes
1answer
39 views

Are these access.log entries successful wordpress login attempts?

I am hosting some wordpress sites on an apache 2.4 webserver, and I have discovered thousands of entries in my server logs like this: 221.219.219.248 - - [09/Mar/2015:03:29:25 +1300] "GET ...
-2
votes
0answers
20 views

Extracted process using Volatility has different size from the original process [on hold]

I extracted the lsass.exe process from memory dump using the "procdump" command in Volatility. I noticed that the extracted process has a different size from the original process in the computer. Then ...
2
votes
2answers
142 views

Steps after getting hit with malware or browser exploits on Xubuntu

Well, today I was browsing the internet and I suddenly got redirected to a chinese hosted malware site and firefox started going crazy. I checked the url on virustotal with my phone and it found other ...
3
votes
2answers
230 views

How to check if my usb drives are vulnerable by BAD USB

Mark pointed out that only one chip type is vulnerable to BAD USB, id like to check if mine are, am using only Kingston flash drives here so can you tell me if they are, or if there exists a list ...
-1
votes
0answers
8 views

How do I Uninstall HubSpot [migrated]

How do I uninstall Hubspot on a Mac. I do not use it and everytime I open up email I am asked to sign in. I have no idea what your quality standards are - all I want to do is get rid of the program
-1
votes
1answer
32 views

Dumped processes using Volatility contain similar strings [on hold]

I dumped all the processes from memory dump using the "memdump" command in Volatility. When I looked in the strings of the dumps to search for suspicious strings, I discovered that there are many ...
1
vote
1answer
460 views

Forcing eap-TLS 1.2 authentication with FreeRadius and OpenSSL

Been working with TLS DHECE Certificate Based Handshake with a FreeRADIUS Server and wpa_supplicant- both running OpenSSL 1.0.1j FIPS. Afer watching the Wireshark traffic, I notice that the client ...
6
votes
3answers
3k views

Can someone launch a DOS attack on my IP

Suppose, I have a static IP on my PC and is known to others. None of my softwares listen for remote connection. Is it still possible for someone to DOS attack me in such cases? If yes, how it is ...
1
vote
1answer
44 views

Electronic voting, follow up [on hold]

As a follow up to this great question and the answers provided I (as stubborn and naive as I am) still don't get why creating a secure voting system is practically impossible. First off why is ...
1
vote
1answer
142 views

Minimize risk with Windows 2003 end of life

The company I’m at currently has over 500 Windows 2003 servers remaining globally in production and even though they have a refresh plan they are working through, they are not going to be done anytime ...
0
votes
3answers
125 views

How can I stop rails exposing its routes?

Today my site was probed maliciously. I have searched through the knowledge base for advice on how to block cg-bin requests but have not been able to find specific advice. A portion of the log of the ...
0
votes
0answers
7 views

Unable to resolve ip forwarders on DNS windows server 2008 r2 [migrated]

I'm trying to build a mail system using exchange server 2010. At that time, only mail can send from outside to inside via a TMG firewall. Any email from local to the Internet were not able to send. So ...
0
votes
2answers
71 views

Check signature when next CRL will be published after end of validity of certificate

My situation looks like this: I have to verify signature on document. For this I will wait when next CRL will be published to check that involved certificate was not revoked. But what if certificate ...
5
votes
3answers
561 views

Can the IPS technology in a UTM prevent a DDoS attack?

Does a Unified Threat Management appliance (UTM) with Intrusion Prevention (IPS) enabled have the ability to prevent a DDoS attack? I have read some articles and none of them have a perfect ...
-1
votes
0answers
24 views

.ShellClassInfo] is being controled by microsoft [on hold]

My op system is being controlled to prevent the information from being leak on the internet. The 12 files are located in pictures also I have a twitter file that is zip. This is very serious.
29
votes
6answers
7k views

Length of passwords that are rainbow table safe

With large computing power (like what you can get in the Amazon cloud for example) you can generate huge rainbow tables for passwords. There also seems to be some large rainbow tables reachable that ...
3
votes
3answers
128 views

Recovery email for email services

The famous Mat Honan hack got me thinking about e-mail password recovery, and how any link in the chain can break all the links preceding it. In Mat's example, that link happened to be the last link, ...
2
votes
1answer
140 views

Securely erasing USB flash drives from a bootable media

My question refers to securely erasing viruses from the usb flash drives, including the MBR, in case there is one. I was thinking of booting with Linux from a closed CD-R (a cd rather than USB flash ...
2
votes
1answer
3k views

Honeywell WiFi thermostat security

I recently purchased a Honeywell thermostat with a WiFi connection, and I haven't been able to get it connected to my network yet. According to a representative, the network name and password are ...
3
votes
0answers
70 views

How does a TOR exit node know the public key of the client?

When the TOR exit node executes the client's request and receives a response from the server, it must create an onion cell that can be reversely decrypted along a circuit through the TOR network. ...
7
votes
1answer
237 views

Bootstrapping an EC2 Spot Instance

I'm considering using EC2 Spot Instances in an automated fashion (ie create a script that will request EC2 Spot Instances that will run unattended). For this specific use case, I'm happy to lock down ...

15 30 50 per page