8
votes
2answers
804 views

Unsolicited credit card in email?

I work for an insurance company who will randomly (3-5 times per year) have a consumer who emails their credit card to our customer service department. We don't ask for the number, they just send it ...
2
votes
2answers
1k views

Why do public key certificate “Trust anchor”? Does this introduce a single point of failure?

When you look at currently used concept of Root CA (primarily in SSL/TLS context), you can see a single-point-of-failure vulnerability, which means, if your private key is disclosed, you automatically ...
0
votes
2answers
262 views

SSL can stop MiTMs … but on the long run, can it really? [duplicate]

SSL uses CAs which sign certificates for the domains after they validate that the person requesting is truly the owner and by a public/private key pair a encrypted connection is achieved which cant be ...
0
votes
3answers
113 views

TLS encrypted passwords on my Android - safe? [closed]

i just get an answer from IM+ (instant messenger client android app) support and they told me that my auto saved ICQ, Googletalk, YM passwords are encrypted using TLS, so i want to ask if i need to ...
8
votes
3answers
4k views

Bittorrent Sync encryption

Sync, a new product from BitTorrent, Inc., has been cited as a viable alternative to other cloud-storage platforms. The Sync FAQ indicates that an encryption scheme is being used, but does not comment ...
44
votes
12answers
7k views

Why should I care if a site uses encryption or not if I'm not exchanging any sensitive data? [duplicate]

Lots of sites these days, that don't deal with sensitive data, enable encryption. I think it's mostly to make (paranoid?) users feel safer. In cases where there is a user's account being logged in, ...
2
votes
2answers
377 views

WordPress Hacked. Deny access via admin - helpful or not?

Does it actually help keep a site more secure to deny all access to WP admin and make changes directly on the FTP only? Our WP has been hacked twice now. It seems that everyone has a different idea ...
2
votes
1answer
142 views

Can IP phones be eavesdropped upon if administrator access is available?

I am interested in demonstrating an attack to my university's security team on IP phones installed at the university. The IP phone models are Siemens optipath410. Basically, using nmap, I identified ...
10
votes
2answers
13k views

How to get MAC addresses of devices which are not in the network

Can I get MAC addresses of devices (mobile phones) which are near to my network but not connected to it? (Linux) I have been trying to get the MAC addresses of devices connected to my network through ...
2
votes
4answers
471 views

Can I use elliptic curve DSA in a secure message service?

I'm looking to design a system that allows a user of a crypto-coin such as Bitcoin to both have an online wallet and to be able to send and receive encrypted emails in the same system. The relevant ...
2
votes
4answers
5k views

Malicious code in image. Harmful?

In my website, a user can upload his profile picture. After analysis of some pictures, I have found some pictures with malicious PHP code, just like the upload script. As an example, I have found a ...
0
votes
1answer
308 views

what information can be accessed with just the bank account number? [duplicate]

one of my friends wants to deposit money into my other friends bank account. obviously she needs the bank account number to do this. Can she access any other information in with just the bank account ...
0
votes
1answer
742 views

Are there any free, premade penetration testing labs? [duplicate]

I've already assembled a lab consisting of Kali, Metasploitable, and a Windows XP machine, but are they're any premade lab solutions available that offer up a bit more complexity or even predesignated ...
1
vote
2answers
3k views

REST security standards

As far as I know, SOAP services have security standards recognized by OASIS and W3C, such as: XML-Encryption XML-Signature SAML Are there any security standards for RESTful services?
1
vote
3answers
773 views

Up to date books for OpenSSL coverage of TLS 1.1 and 1.2 [closed]

I currently have Implementing SSL / TLS Using Cryptography and PKI Joshua Davies. It is very recent and covers even newer TLS version 1.1 and 1.2 and ECC. It is based on many C sample that are ...
0
votes
1answer
531 views

Twofish gpg:WARNING: message was not integrity protected [closed]

I get this warning while I decrypt a Twofish-encrypted file in GPG. WARNING: message was not integrity protected. From what I found online, this warning should only come up for CAST5, not for ...
1
vote
1answer
281 views

Why ARP Poising is not working for some sites?

I am using following link for arp poisoning our Wireless LAN. http://www.irongeek.com/i.php?page=security/ettercapfilter But the thing is, it is working only for some sites. Even some some http sites ...
7
votes
4answers
5k views

Is there a decentralized version of LastPass?

I am using LastPass for managing passwords on multiple computers. However, LastPass extension (at least the chrome version) is running some opaque binary code through Native Client, and I just feel ...
1
vote
2answers
148 views

Is checking against password lists a good way to enforce a secure password policy and possibly detect dictionary attacks on a web-based app?

I have written a script to check a given password against a ~65 million long list of passwords collated from various lists released after hacking attempts. I am thinking about incorporating it into ...
3
votes
1answer
172 views

Drive-by downloads

I am aware of the problem of drive-by downloads, which happens when one visits a malicious site and a malware is downloaded to the PC. I want to ask that when such a program is downloaded, how does it ...
1
vote
1answer
628 views

Which approach to encrypting data on a per-user basis is more secure?

As a bit of a thought experiment, I've been thinking through how one might design a web application where a user's data (say, from a form on a webpage) is stored, encrypted, on the server, using a ...
2
votes
4answers
2k views

Outbound DDOS attack from a centos server

We run a mail server (postfix/dovecot/centos 6.4). The hardware is based on a supermicro chasis with IPMI features. It also runs a web interface for accesisng mails(Apache web server ) Recently our ...
0
votes
1answer
244 views

Hacking an aircraft

Parting from the reasonable supposition that "everything can be hacked", I am sure the answer is 'yes.' But is it something possible, or even feasible? I know that aeroplane computer systems are ...
1
vote
1answer
3k views

Sniffing WiFi with tcpdump on an iPad [closed]

I have tcpdump installed on my iPad which is connected to WiFi (WPA2). How do I capture packets sent/received by other devices on same network? UPD: iPad 1st gen, latest (5.1.x) iOS available.
2
votes
2answers
260 views

Logging in as administrator in windows 7, is there a downside?

I have a very straightforward question. Is there any downside to logging in as an administrator all the time in windows 7? I mean, it asks you whenever a program asks for permission to do something ...
2
votes
3answers
188 views

Can MiTM and similar attacks be performed on separate networks

Okay, suppose that I have 2 computers: Computer A and Computer B, connected with this setup: A->switch->router->internet / B->router/ and the closest router to computer B is ...
1
vote
2answers
234 views

How secure is my system?

I am creating an application that allows a user to create an account, with a password, and have a set of public and private keys symmetrically encrypted with the password, so that they can be ...
2
votes
2answers
268 views

Securing internal REST service call via JavaScipt

I have a public Single Page Application (SPA) that is calling my backend REST service via JavaScript. How can I secure the REST service so that it will only accept calls from my SPA and no other ...
45
votes
7answers
24k views

How to explain buffer overflow to a layman

Every once in a while (when I think out loud and people overhear me) I am forced to explain what a buffer overflow is. Because I can't really think of a good metaphor, I end up spending about 10 ...
1
vote
1answer
140 views

How to prepare a report on security weakness in our software [closed]

I am part of an in-house development team that provides the software that is used in our company's factories across the world for production as well as for order management, and which also enables the ...
1
vote
1answer
954 views

FIPS 140-2 C# Password Hash

Is the following algorithm, using RNGCryptoServiceProvider & Rfc2898DeriveBytes, sufficient to implement a FIPS 140-2 password hash on Windows Server 2008R2? var provider = new ...
6
votes
1answer
2k views

Exploitability of use-after-free vulnerabilities

Use-after-free bugs are a particular class of memory safety bugs. How often are they exploitable, in practice? When you find a use-after-free bug in a program, is it often exploitable, rarely ...
1
vote
1answer
350 views

My WCF application uses 2 way certificate message encryption - does it still need SSL?

I have a WCF service configured to use two-way certificate authentication on the messages. The server is also locked down through a firewall to only allow traffic from a single IP:Port that the ...
3
votes
3answers
177 views

Trying to identify what a scanner was looking for

I got scanned yesterday, and I'm seeing a bunch of entries in my logs like /'\"\\'\\\");|]*{%0d%0a<%00>/photos or /'\"\\'\\\");|]*{%0d%0a<%00>/resources. What specific vulnerability was ...
3
votes
2answers
693 views

Why use PBKDF2 over multiple iterations of a another cryptographic hash function?

People often recommend PBKDF2 over using hash functions directly, but typically they compare PBKDF2 to a single unsalted hash. What advatages are there to using PBKDF2 over multiple iterations of a ...
3
votes
2answers
814 views

How do I allow websites to call my desktop app over HTTPS?

I'm building a desktop app. I'd like websites to be able to communicate with the app over HTTPS. The general idea is that a website could run a JSONP call to https://127.0.0.1:8844 and send data to ...
2
votes
1answer
332 views

Using Encrypt-then-MAC in SSL

SSL typically makes use of MAC-then-Encrypt technique instead of Encrypt-then-MAC (which is usually considered ideal for most of the scenarios). I myself don't have a full insight knowledge about the ...
0
votes
2answers
64 views

Will separating internet activity and offline activity secure a host?

Let the diagram below be a representation of a LAN. - let R be the interface between the LAN and the internet. - H be host connected to the LAN. - F be a firewall implemented using a virtual machine ...
2
votes
2answers
2k views

How do I Mitigate Directory Traversal when User-Supplied Input is a Mandatory Business Case?

I have an instance where we have an application that requires the ability to set up sftp commands that are specified by administrative users. They are configured through the front-end of the ...
2
votes
1answer
402 views

Uploading Executable Files

Using proxy software, I was able to bypass a file upload control file-checking for an asp.net system I am pen testing. I noticed they are saving the file into the database as bytes, and it is ...
2
votes
2answers
66 views

How secure is switching keys if breaking the key is an intractable problem?

Let's say that you create a system where a secret is hidden and revealed by a particular key. As well, the key can be broken, but it would take thousands of years. If you keep switching the keys ...
1
vote
0answers
89 views

Implementation of ECC MQV

I am looking for a free/open source implementation of the ECC MQV algorithm (preferably in Java) or a library that implements it, but Google is failing me. Help please?
2
votes
3answers
220 views

Why is it not standard practice to run password-based KDF's client-side?

In most protocols I have encountered in which a passphrase is used for authentication it is stored not in plaintext, but a PBKDF digest of it instead. This is obviously good. However what does not ...
-1
votes
1answer
229 views

Secure a string in PHP [closed]

What do you think it's the best method to secure a string in PHP? I speak of hiding its content and avoid malicious changes by the user, but be able to recover the information. We can use the ...
1
vote
3answers
162 views

Https forms on tens of domains

What is the optimal way (cost-wise, too) to secure page forms (https) on a large number of domains&subdomains? Are certificates required for all domains? Is putting all the page forms on a single ...
3
votes
1answer
365 views

EMV(Chip) Cards - What's the point of having the chip card communicating directly to the authorising server? & Clarification of CDA in EMV

Ok I understand from my research that the Chip Card creates an AC Key(MasterKey+AccNumber) to communicate with the authorizing server securely (3DES key to have encrypted communication) but I don't ...
0
votes
2answers
43 views

Is it possible to keep several files on windows partition after re-installing windows? [closed]

Is it possible to keep several files and programs on windows OS after re-installing it? because of someone can steal the device that uses windows OS, then just removes the windows and install another ...
17
votes
2answers
2k views

How can you prevent employees of your company from creating valid ssl certs? [duplicate]

When registering for an SSL cert, I was able to validate that I "owned" the domain I was creating the cert for by having a valid @domain.com email address. If I worked for a large company, say ...
4
votes
3answers
431 views

Alternative to security questions for account recovery when email isn't an option

I'm working on a project whereby a certain level of anonymity is required for users. One of stipulations is that no email is used at all, as it makes the barrier to entry too high for people who want ...
3
votes
3answers
146 views

Fingerprints of my computer

I'm recently interested in having an paranoid level of privacy but there is little question in my mind for which I cannot find an answer. I know there is fingerprint of my browser which it gives away ...

15 30 50 per page