10
votes
2answers
10k views

OpenVPN dhparam

One of the steps for setting up OpenVPN is running the command openssl dhparam -out dh1024.pem 1024. The man page tells me this 1024 value refers to the number of bits. Why is the value 1024 ...
3
votes
5answers
5k views

SYN flooding attack causing high CPU on hardware firewall

I have a ZyWall USG 200 firewall. A few days ago there was a SYN flooding attack on it causing 100% CPU load. After investigating it turns out this was attack from a single IP address and while the ...
21
votes
5answers
5k views

Are self-signed certificates actually more secure than CA signed certificates now?

Are self-signed certificates actually more secure than CA signed certificates now? I ask this because recent leaks about the NSA spy programs and the secret FISA courts mean that the US government ...
2
votes
1answer
6k views

What is cleardot.gif next to the senders signature in Gmail? [closed]

I am concerned that my computer has been compromised because I sent an email out - but now I noticed that there is a link in the email I did not insert, and I am worried I have a virus or something. ...
7
votes
2answers
4k views

How to detect the NSA MITM attack on SSL?

As Bruce Schneider reported here... https://www.schneier.com/blog/archives/2013/09/new_nsa_leak_sh.html ...the NSA reportedly performed a MITM attack on a company in brazil and decrypted their SSL ...
0
votes
2answers
832 views

How to defeat software keyloggers [duplicate]

Is it possible to defeat software keyloggers? I remember reading long ago about programs run from a USB which will defeat keyloggers. The software works (if I remember correctly) by intercepting ...
2
votes
1answer
4k views

Honeywell WiFi thermostat security

I recently purchased a Honeywell thermostat with a WiFi connection, and I haven't been able to get it connected to my network yet. According to a representative, the network name and password are ...
0
votes
1answer
448 views

Can you sniff broadband connections? And how you secure that?

I know that you can sniff data which is transferred over wifi. Can you do that with broadband (wired)? And how can you secure the network, so nobody could sniff data both over wifi, and broadband?
0
votes
1answer
228 views

Abusing write permission on Apache logs dir to escalete privileges

I have just come across this sentence on apache log files documentation: Anyone who can write to the directory where Apache is writing a log file can almost certainly gain access to the uid that ...
2
votes
4answers
705 views

Best security practices in internet cafe

For the next while I will find myself without a working private wifi connection. That leaves me with just a number of options, of which using an internet cafe is one of them. What are the best ...
3
votes
2answers
409 views

Is there any way to cryptographically hash a human thumbprint?

Is there any way to cryptographically hash a human thumbprint into a form that can be consistently reproduced by thumbprint readers? Assuming that it would be possible to create a database of ...
16
votes
2answers
9k views

How trustworthy is SELinux? [closed]

Given the ongoing leaks concerning mass surveillance and the fact that the NSA is the original developer of SELinux, I'm wondering whether that means that backdoors should be expected in there? As ...
0
votes
2answers
304 views

Double encryption with different keys [duplicate]

I have a software development kit which packages the data for the finished program in a series of LZMA packages. I want to ensure that my software is the only program that can read the packages, even ...
2
votes
4answers
6k views

SQL Injection with pass MD5

I want to know, if in my login form there is any SQL injection possible. If there is, what could the exploit's web form entry look like? I send username and password by html form (POST). The login ...
1
vote
0answers
181 views

Remote desktop connection different networks password non VPN [closed]

I'm looking for a solution to bring support to users from a big network to other users into little networks. The idea is to keep control of content (no VPN). Also it's important that always users who ...
5
votes
2answers
1k views

anti-replay attack for secure cookies?

In the system that i'm working on, we are having some session cookies on the client side that we need to protect against the replay attack ! So I find the following paper ...
1
vote
1answer
257 views

Is there symmetric encryption like AES or Camelia with keys longer than 256 bits?

I am wondering if is there any (secure!) cipher like AES or Camelia with keys longer than 256 bits (and offering higher security than 256 bits). I have not found anything except ...
1
vote
1answer
2k views

ECC Brainpool Standard Curves and Curve Generation with Bouncy Castle which seed to use?

I want to implement a ECC Key Agreement with a Brainpool curve brainpoolP512r1 or brainpoolP512t1. I'm not clear about whichseed value to use (and how). In this document ...
1
vote
2answers
862 views

Do I have to validate Saml2 InResponseTo?

I'm implementing a SAML2 Service provider that will be running on a public facing web site. The sign in functionality is publicly available, so anyone can get hold of a AuthnRequest from my site. ...
2
votes
3answers
844 views

Suggestion on how to be PCI Compliant

I'm working on a system that takes the customers credit card information before sending it to the processor. It requires me to ask the customer for cc#, CVV, date, one at a time and send that to my ...
1
vote
1answer
235 views

How to check www.abc.com/?page=xyz is vulnerable to RFI or not?

On my friends website when I typed www.abc.com/?page=non existing page, I got page not found error.But when I gave www.abc.com/?page=www.google.com I got blank white page.So is this website ...
6
votes
2answers
893 views

Android side channels: what can one app observe about other apps?

What information can a malicious Android app observe about the behavior of other apps running on the same phone? In more detail, suppose app M is malicious and is running in the background. Suppose ...
1
vote
2answers
145 views

Does a OS manufacturer have permission to access your computer unauthorized? [closed]

Many services such as email and online storage have stated in their Terms of Service that they have the right to view and delete your files at any time. I'm wondering if they same applies to software ...
7
votes
2answers
729 views

Should you use VPN if the website uses HTTPS?

If I visit the website which uses https, is there a point using an VPN? In places like coffee shop where internet is not secure. Because I think https already encrypts data?
1
vote
3answers
873 views

What is this for a Request?

i see the following request-string (see complete example below) with the same request_parameters, but differing values, hitting all our sites/wafs. the scheme is always the same: ...
11
votes
2answers
2k views

How does a weakness in a random number generator lead to a compromise of the entire cryptographic process?

In the news, there are several articles (here, here, and the technical point of view) which have to do with a weakness in a random number generator. The question is somewhat twofold. What symptoms do ...
-3
votes
1answer
4k views

Google Chrome is keylogger? [closed]

Hi i am a little bit worried that Google Chrome is logging my keystroke. One time ago i had situation with chrome that when i clicked some where in input box he was writting key by key(even backspace) ...
5
votes
2answers
959 views

Are there any real life cases, where using final keyword in Java increases system security?

I've came across that question on StackOverflow: http://stackoverflow.com/questions/18755713/how-does-final-play-a-role-in-security The claim is made, that according to Wikipedia: A final class ...
7
votes
3answers
1k views

How important is CAPTCHA on registration pages?

I am working on a site and I would like to add CAPTCHA to the user registration page to prevent user name enumeration. I am working with a front end developer who feels pretty strongly that we should ...
4
votes
1answer
2k views

Hiding backdoors in Open Source code in other languages than C and C++?

I am referring to The Underhanded C Contest and Hiding Backdoors in plain sight. They demonstrate, that you can with some cleverness, write Open Source code, publish the code and hide a backdoor in ...
2
votes
1answer
198 views

How to protect the code of Windows applications against path traversal?

I'm writing a simple HTTP server in Lua and while I can easily find resources on how to secure against Unix directory traversal, I already found some caveats in the Windows version. While I'm already ...
3
votes
1answer
725 views

How does SEH based exploit bypass DEP and ASLR?

I am new to structured exception handling based exploits. Why don't we put our return address directly in SE handler to jump to our shellcode? (with no safe SEH) Can anybody explain the reason of ...
0
votes
1answer
153 views

Timing analysis attack and cryptosystem

Why is a “Timing Analysis Attack” a problem for a cryptosystem? I've been trying to learn security, and have a question about timing analysis attack.
1
vote
1answer
98 views

DNS Redelegation - Security Risk?

I am a web developer and I use Adobe Business Catalyst. To use some of their services it is recommended you redelegate the domain. In other words change the nameservers to Business Catalyst. I have ...
1
vote
2answers
811 views

MAC spoofing preventing connection

I'm attempting MAC spoofing on a network I own. I'm connecting to a NETGEAR WNDR4300 wireless router from an Ubuntu Linux machine. The network uses WPA2-PSK [AES] security. Connecting to the network ...
2
votes
1answer
4k views

What is a stub?

Would someone please explain in depth what a stub is? I understand it as a file created by a crypter to keep a program encrypted and undetectable by anti-virus software. It is attached to the ...
10
votes
1answer
1k views

Why are some DLLs not randomized? What makes it hard to deploy full ASLR for all DLLs?

One of the challenges with deploying ASLR for everything is that, at least on Windows, some DLLs (libraries) are not compiled in a way that's compatible with ASLR. (They're not compiled as ...
4
votes
2answers
136 views

Is there a pre-existing taxonomy of attackers?

When building a security policy (and implementing it) you must know who you are defending against. I would like to use proper terms, if they're already defined. I'm imagining a list such as: Passive ...
4
votes
2answers
191 views

How can you I detect low frequency brute forcing over multiple connections?

While I realize that servers can easily detect brute forcing strategies via a single I.P, it seems that servers would be vulnerable to a distributed attack from a botnet, with each computer attempting ...
25
votes
2answers
21k views

How do I get the RSA bit length with the pubkey and openssl?

I have a public key generated with ssh-keygen and I'm just wondering how I get information on the keylength with openssl?
16
votes
5answers
3k views

Is it possible to inject values in a drop down list?

Say a ASP.NET page, or any html page for that matter, has a drop down list with a bunch of prices. On posting the page, the code looks at the selection of the drop down list for a computation. Is it ...
1
vote
1answer
454 views

How could `iptables -F` lock me out of the server? [closed]

I was just configuring IPtables and whilst doing so, had the default chain policies set to ACCEPT, but when happy with the generated rules I changed that to DROP for all chains. I did not run ...
1
vote
1answer
667 views

OpenSSL DH modp size

If OpenSSL is configured to use a DH for key exchange, e.g. TLS_DHE_RSA_WITH_AES_128_CBC_SHA, where does it take the size for modp (or even modp itself) from? The following is a screenshot from ...
15
votes
11answers
2k views

Should I know my users passwords so I can check they can logon? [duplicate]

I have an issue with support for a system and I don't know what approach to take. It boils down to the question: Should I know my users passwords so that I can check with certainty that a ...
3
votes
1answer
8k views

What effect has MaxAuthTries=1?

I configure a new server right now and ask myself what is the internally effect if I set MaxAuthTries=1 in sshd_config. The server only accept key authentication an no root logins. Has this setting ...
13
votes
4answers
3k views

How can I make sure password hashing is secure on computers while not being prohibitively slow on mobile devices?

I'm new to cryptography and its implementations. I'm designing an Android app where an user enters a password to retrieve some encrypted data. After some research on possible solutions I ended up with ...
4
votes
1answer
95 views

Securing an IMAP service

I need to secure an IMAP service running on dovecot. Which wrapping layers of security can I enhance security with? I am using most of the built-in dovecot-specific security features, like ...
-4
votes
2answers
247 views

What kind of Wi-Fi security protocol does not use encryption?

I need to sniff HTTP packet over the WiFi network. What kind of WiFi security protocol does not use encryption? I mean if I capture the WiFi packets, no effort required to decrypt wireless packets and ...
1
vote
1answer
276 views

Which cloud providers can be used for the simulation of DDoS attacks? [closed]

Cloud providers have a great infrastructure to perform DDoS simulations. You can get thousands of virtual machines with different IP addresses, fully customizable with the tools you need for testing. ...
2
votes
2answers
2k views

Running arp command on public wifi network

I accidentally ran this arp -a on a public wifi network(because it is in my terminal history). I killed the process almost immediately. I want to know if this would raise an alert for the network ...

15 30 50 per page