3
votes
2answers
309 views

What are the security or privacy issues with allowing users to forward email from our Google Apps account to their personal Gmail?

But we have a new employee that would rather all his email in one inbox. I know he can forward the mail to his personal account, send mail using an alias so that it looks like it is coming from the ...
11
votes
5answers
2k views

Why is this certificate valid for so many domains?

If you look at the (invalid) certificate for https://i.imgur.com/ it says only valid for the following names: The certificate is only valid for the following names and then a list of about 100 names. ...
4
votes
2answers
1k views

Do I always have to overwrite EIP to get to write on the stack in a buffer overflow?

Do I always have to overwrite EIP to get to write on the stack in a buffer overflow? How's the memory organized? I can't find a proper graph with google
5
votes
2answers
240 views

Are any and all software vendors who have stored credit card information in their databases subject to PCI-DSS or only some?

Is a commercial software vendor who sells software for use in the United States, subject to, or legally required to implement PCI-DSS if their software includes a feature which will allow the ...
3
votes
1answer
2k views

What are the Netscape Cert Type attributes? Why/when are they needed?

What are the Netscape Cert Type attributes in a X.509 Certificate and how are they different with the X509v3 extensions? Example: There is the Client/Server Extended Key Usage (X.509) but there is ...
2
votes
2answers
540 views

Vuln Web App which includes LDAP Injection?

I want to check several techniques for LDAP injection, but I cannot find a vulnerable application (like Webgoat, Hacme etc.) which uses LDAP injection. Do you know of any vulnerable web application ...
2
votes
3answers
893 views

Google Mail alert message. Hacker from China

I have had a red warning box on top of the page when I access GMail. It says that there have been three attacks from China: IP Address: 117.70.121.33 Location: Xuancheng, Anhui, China and ...
2
votes
1answer
817 views

Can Diffie-Hellman Anonymous be used as a cipher for SSL for one-way certifiate-based authentication

I want to use Diffie-Hellman anonymous cipher for SSL. I also want to use a one-way certificate for server authentication. Is this possible?
39
votes
5answers
13k views

What's the impact of disclosing the front-face of a credit or debit card?

There are quite a few cases where people are called out for disclosing the front-face of a credit or debit card (e.g. this tweet from Brian Krebs or this twitter account). So I was wondering what the ...
3
votes
1answer
302 views

Payment security on Android App

I am developing an application from which users browse and buy books. The client can be Android ,iOS, Mac. The server is ASP.net Web APIs. I know there are many payment services available. One of ...
5
votes
1answer
2k views

“Hello World” example of a Buffer Overflow attack in many programming languages

I'm looking for a very simple application that has an intentional Buffer Overflow embedded in it. I'm assuming this possible in systems where DEP and ASLR are not being used Ideally (and if ...
14
votes
6answers
4k views

Client side password hashing

Edit: Updated to put more emphasis on the goal - peace of mind for the user, and not beefing up the security. After reading through a few discussions here about client side hashing of passwords, I'm ...
3
votes
4answers
150 views

Strong authentication over insecure links

Let's begin by assuming that we're operating in either a corporate or Governmental environment where SSL man-in-the-middle interceptions are a given and that *all* traffic on the network between the ...
10
votes
2answers
6k views

How “leaking pointers” to bypass DEP/ASLR works

I was wondering if anyone could give me some clues on how "leaking pointers" to bypass DEP/ASLR work. I read here: The only way to reliably bypass DEP and ASLR is through an pointer leak. This ...
1
vote
2answers
170 views

Activesync: If I disable or rename the AD account does that mean the phone won't be wiped?

Suppose an Activesync phone needs to be wiped because it was lost, stolen, or it was an employee termination. If we disable the account prior to wiping the device (or the device receiving the wipe ...
2
votes
1answer
227 views

amd64 safer than 686-pae?

Apart from stronger ALSR entropy... Is a system using amd64 any safer than 686-pae? What are the advantages, if any?
2
votes
1answer
3k views

SHA1 hash encoded with base64 results not consistent?

When i take a hash of user input test123+ i get the following base64 result:- YaddchSU52yztwIMdtHzkg3p1oA= The results have been obtained using the online sha1 convertor I m failing to understand how ...
4
votes
1answer
1k views

172.16.33.197, 127.0.0.1 IP addresses in visitor logs

I have a website running Apache and PHP. I see that there are visitors with IP addresses 172.16.33.197 and 127.0.0.1. These addresses do not belong to our network. I get the visitor IP addresses with ...
15
votes
3answers
810 views

If I find or create a 0day exploit, can I be held liable for releasing out to the public?

If I found or created a 0day and decided to immediately release it into the wild (Giving a P.o.c w/ source). But not using it to actually exploit anything. Can I be held liable for it?
8
votes
1answer
2k views

Experience with a recent DDoS attack on Apache

I originally posted a question here since I was not familiar with an actual distributed denial of service attack (DDoS) on my server. I noticed that my server is very slow in responding to HTTP ...
17
votes
4answers
4k views

What is the potential impact of these SSL certificate validation vulnerabilities?

I just finished reading through this paper by Georgiev et al, which demonstrates a wide range of serious security flaws in SSL certificate validation in various non-browser software, libraries and ...
1
vote
2answers
441 views

Is ProxyPass more secure than directly hosting PHP site?

Here's two possible ways, Use Apache and PHP module to interpret a php file Use nginx's ProxyPass with fastcgi So, would passing the request to another server with ProxyPass more secure than a ...
4
votes
2answers
2k views

How do I find all domains hosted on a single host?

I found several websites offer a function that allows you to list all domains hosted on the same machine, e.g you supply a.com, and it tells you b.com and c.com are both hosted on the same machine as ...
89
votes
13answers
9k views

Why do we lock our computers?

It's common knowledge that if somebody has physical access to your machine they can do whatever they want with it1. So why do we always lock our computers? If somebody has physical access to my ...
0
votes
2answers
1k views

CSRF over post request without redirection?

Is there a way to forge post request without being redirected to the page where parameters are submitted.For example : <html> <head> <title> CRSF example </title> ...
9
votes
2answers
545 views

How does the Copyright Alert System work? Who has implemented it?

Some ISPs are participating in a Copyright Alert System that notifies content authors of violations of their copyright. I'm concerned how this oversight relates to my private traffic, and what laws ...
11
votes
3answers
2k views

Are open redirects a security concern?

Are open redirects a security concern? Google writes that: "An open redirect isn't a bug or a security flaw in and of itself—for some uses they have to be left fairly open." And Google's bounty ...
4
votes
3answers
305 views

Decoy User Account on Windows

Is there a way to have two passwords for a Windows account? One password unlocks the decoy version of the account and the other unlocks the "real" version of the account. I would use Truecrypt's ...
1
vote
1answer
1k views

Why is Message Labs sending mail in plaintext?

I have several SMTP servers on various networks around the world, and all of them are getting mail through ESTMPS - extended SMTP using TLS. So the email coming from GMail, MSN, Yahoo, as well MOST ...
6
votes
2answers
686 views

What risks does WPA carry?

A family member of mine would like to be able to play old PSP games online. Unfortunately the device does not support WPA2, and my network is strictly WPA2 AES secured. What are the risks involved in ...
2
votes
1answer
221 views

Mitigate risk of security questions [duplicate]

Possible Duplicate: Do security questions subvert passwords? Many Web sites nowadays require a (hopefully strong) password along with some pretty easy security questions. Sometimes it is ...
3
votes
1answer
160 views

Award BIOS Security

How can I secure an Award BIOS from being flashed or attacked by a remote attacker? Are there other types of BIOS that are more secure?
7
votes
5answers
2k views

How does CAPTCHA mitigate DDoS attacks?

This seems like an easy question, but I've failed to find an answer. One of the uses of CAPTCHA is to cope mitigate Denial of Service attacks. Suppose an adversary performs excessive login attempts, ...
2
votes
2answers
2k views

How long would it take a single Processor with the AES-NI Instruction Set to bruteforce an AES Key?

I know that it seems like a stupid question - since it's note feasable to break AES without a quantum computer but I'm curious anyway. I read on wikipedia that the best known attack on AES-128 takes ...
31
votes
7answers
13k views

Why refresh CSRF token per form request?

In many tutorials and guides I see that an CSRF token should be refreshed per request, my question is why do I have to do this? Isn't a single CSRF token per session much easier than regenerating one ...
4
votes
2answers
190 views

What is the state of the Windows Update certificate after Flame?

May 28, The Flame malware is discovered in Iran and by Kaspersky Labs. June 5, Dan Goodin (Ars Technica) points out that Flame had hijacked WindowsUpdate, spreading signed malware through that ...
1
vote
1answer
662 views

Why does the OpenSSH client on Mac OS X silently launch an ssh-agent for the user?

I'm confused by the difference in behavior of ssh clients I'm seeing on two different hosts. Just to be clear, this is the scenario: "macbox" OS X using OpenSSH_5.2p1 ssh client "sunbox" Solaris 10 ...
2
votes
1answer
241 views

Seeding GPG keygen with a hashed secret [duplicate]

Possible Duplicate: Tool for public key cryptography where password is the private key? I was wondering if you guys could clue me in to potential problems with using a hashed password as ...
6
votes
1answer
406 views

How far should I go in creating anonymity?

I am in the early design stages of a system (QuestGuide) to help researchers gather information (arbitrarily complex), analyze it, annotate it, visualize it, and, ultimately, share it. There are ...
4
votes
2answers
616 views

Why are simple packet filter firewalls insufficient for the protection of web applications?

I was wondering why exactly are simple packet filter firewalls insufficient for the protection of web applications?
1
vote
1answer
188 views

Is truecrypt a good choice to work with file that are generated and manipulated via browser

i'd like to know if Truecrypt is a reliable software for filesystem encryption, at the level of pgp as security level, and if it suitable to work with files that are generate via web browser, so ...
15
votes
4answers
1k views

My credit union is reducing its maximum password length to 10 characters

I just received an email from my credit union saying they are redesigning their online banking service and that I will need to change my password by October 22 to conform to the new limit of 10 ...
2
votes
2answers
455 views

Safety of opening .txt files via URL

If I'm given a URL that points to a .txt file, is it always safe to open it? Can it possibly contain virus or malicious content?
6
votes
3answers
314 views

How much added security do I really get with a longer key size?

Imagine I have a cipher which supports keys of 128, 192 or 256 bits. Suppose that there are no vulnerabilities in the cipher regardless of key length. I'm going to use it to encrypt something, and ...
2
votes
1answer
321 views

Keyloggers and Performance Benchmarks

I don't know very much about keyloggers; but I thought I'd be able to detect the presence of one by writing a program to simulate keystrokes (in Windows) and recording the throughput, then repeating ...
2
votes
2answers
450 views

How attacker can access victim's account without knowing its credentials?

I want to login facebook from a wifi connection and check sign-in page is over https but later when i don't pay attention to address bar (for example when playing games and click on links like a crazy ...
-1
votes
1answer
94 views

Sharing of Wireless Security and Encryption Settings

Frequently I try to connect to various wireless networks and spend more time trying to determine the correct settings (WPA or WPA2? Personal or Enterprise? and so on) than anything else. Why isn't ...
2
votes
1answer
969 views

Password authentication using DynamoDB

I'm working on a Mac app. I have users stored using DynamoDB. Authentication is needed to enforce access control on system-internal operations, such as uploading files to Amazon S3. Of course, I ...
0
votes
2answers
1k views

Running Apache as system service on Windows 2003 R2 64-bit

Trying to make my point, that running Apache with PHP5 module as Windows service is not secure. All I got to prove it - FTP access to some internal website. So what I did - I uploaded file test.php ...
4
votes
3answers
2k views

Is a forced rewrite from http to https secure? What does SSLRequireSSL add?

I've read contradicting advice about forcing https connections in the following way: RewriteEngine On RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} To me it seems ...

15 30 50 per page