4
votes
2answers
3k views

Why do most hashing functions produce hashes that have characters a-f 0-9?

This is something I never understood about hashing functions. I know that algorithms like whirlpool and blowfish both produce outputs that don't follow this pattern, but why is it that most do? Is ...
4
votes
1answer
348 views

Need help on understanding obfuscated code in CVE-2012-4969 exploit

As you may know this vulnerability was found a while ago in the wild and the exploit is available too, btw I'm having problem on understanding the obfuscated code. Is it necessary to use obfuscation ...
1
vote
1answer
2k views

Is TOR used to perform hostile hacking?

I was wondering, if in order to protect myself from hostile hacking, should I consider access via TOR to be OK to perform e.g. havoc without anyone being able to track my ip back?
3
votes
2answers
351 views

Reusing HMAC state for multiple messages

I have a secret key k and message m. I send m || HMAC(m, k) to some other party, who can verify the integrity of m, assuming that they know k. Suppose I have multiple messages m1, m2, and so on. ...
-1
votes
1answer
166 views

Mac app purchase validation

How do I sell a mac app off of my website without somebody being able to copy-and-paste the app to some friends after he buys it, etc.. I understand that you can use receipt validation when selling ...
1
vote
2answers
473 views

Can I encrypt the packets that are sent to my router?

Is there a way to encrypt HTTP traffic to avoid man-in-the-middle attacks? I use Google Chrome.
9
votes
7answers
2k views

Encrypt Virtual Machine in the cloud

I am no expert when it comes to security in virtualized environments. However a problem I always saw is: What happens if the host OS gets hacked and an attacker gains administrative privileges? How ...
2
votes
3answers
1k views

Security Assessment vs. Risk Analysis

What the real difference between IT Security Assessment based on ISO 27001 (or in general other international standard) and qualitative risk analysis? In some way the approach is much similar - ...
7
votes
3answers
2k views

Does a working JTAG diagnostics port on Android phone add unnecessary risk?

Not enough people seem to know about JTAG outside the hacker and LEO communities but the short version is that JTAG allows anyone with physical access to your phone to chew their way right into it. ...
6
votes
4answers
2k views

Why is penetration testing important

In improving the security of an organization, it seems as though an audit of existing code, procedures, policies, infrastructure, etc. would be absolutely sufficient to reveal any security or policy ...
2
votes
3answers
5k views

Is Aescrypt a valid tool for encryption or not?

I'd like to know if Aescrypt is a valid tool, or if for a very secure protection, the only choice is to use a software like gpg, or similar. More I've another curiosity, if one doesn't want to use ...
-2
votes
1answer
132 views

can vps be made as secure as having two dedicated server computers? [closed]

Which is a better option security wise : 1) cheaper option - vps (Iam assuming that if one particular virtual server is hacked,then still other virtual servers on that comp will be ...
-1
votes
3answers
595 views

Digital Forensic test image?

Does anyone know where I can get a free forensic test image for FTK? I need it to be below 5000 files for the demo. I found one but it is larger than 5k and it spits errors back at me.
8
votes
2answers
4k views

safe to use jBCrypt and recommend it to my organization?

I'd like to recommend to my fellow developers that we all use bcrypt to hash stored passwords. We all use java and I hesitate to recommend jBCrypt only because its latest version number (0.3) ...
3
votes
2answers
283 views

I just discovered that my sysadmin created a loophole that gives me root access. What should I do?

At our company the Linux system administration is handled by the security team. The guy assigned to my project has been a great big pain, and has seemed to me at several points to be of questionable ...
5
votes
1answer
539 views

Secure web user authentication even after server-side database compromise

By now, we should all know to use bcrypt or scrypt to store salted password hashes with a sufficient number of rounds. (See, e.g., https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet) The ...
1
vote
2answers
622 views

DVWA vulnerability list or guide?

Is there a list of vulnerabilities for DVWA, I cannot seem to find a vulnerability list or guide. By guide I mean an exhaustive list of vulnerabilities to work through.
60
votes
5answers
86k views

How does Amazon bill me without the CVC / CVV / CVV2?

The card in question is a VISA, if that's of any importance. I've noticed this only on Amazon. All other sites I've purchased something from, ever, have needed the CVC code for the card. However, I ...
1
vote
2answers
4k views

Port scanning legal or not? [closed]

Is port scanning legal ? In which countries ? my option : I think port scanning is like a short-walk( or a long-walk) in the neighbourhood, just curious about neighbours are up to. I think that ...
1
vote
3answers
1k views

Are tracking cookies illegal?

I have a merchant website. When a user visits the website, a cookie is set. Then when the same user visits the site again, we provide him with suggestions, content that he may enjoy based on what ...
6
votes
3answers
880 views

Does NAT break source port randomization?

The standard defense against the Kaminsky attack is to use source port randomization for all DNS requests. Does NAT break the security benefits of source port randomization? In more detail, consider ...
20
votes
4answers
9k views

Confused about (password) entropy

There seem to be many different 'kinds' of entropy. I've come across two different concepts: A) The XKCD example of 'correcthorsebatterystaple". It has 44 bits of entropy because four words randomly ...
2
votes
1answer
1k views

Victim system's internet connection slow after ARP spoof?

I've been using Nemesis 1.4 to test ARP spoofing on a local victim machine. I've been spoofing both the victim machine and the default gateway to ARP redirect to my machine. Spoofing victim's source ...
7
votes
1answer
3k views

Average number of exploitable bugs per thousand lines of code?

Over the years I've heard various estimates for the average number of exploitable bugs per thousand lines of code, a common figure being one exploitable bug per thousand lines of code. A Google search ...
4
votes
2answers
863 views

Firefox lists '(unknown)' as the owner of google.com. Is my connection insecure?

I just went to accounts.google.com and I noticed that Firefox reports (unknown) as the owner of google.com. Should I be worried about this? Here's a Dutch screenshot of the certificate:
6
votes
2answers
2k views

Should we start using SHA-3? [duplicate]

Possible Duplicate: What is SHA-3 and why did we change it? SHA-3 has been finalized! So, what does secuirty.se think about the new hash funciton? Should we start replacing all uses of ...
8
votes
4answers
226 views

What standards are there for mangaging high value passwords?

I am leading a small team at a start-up and I am facing a dilemma with high value passwords. I am the only one on the team who knows all the key passwords for production servers, databases ... etc. ...
15
votes
2answers
1k views

If DNSSEC is so useful, why is its deployment non-existent for top domains?

I've read several papers on DNSSEC, and it appears that it does prevent many attack classes, and the only two possible downsides is that its deployment is hard (DNSSEC is complex), and that you can ...
2
votes
3answers
691 views

What are the risks of a rogue Access Point? What lessons can be learned from the Wifi Pineapple?

I'd like to educate colleagues and peers on rogue access points using the tool "Wifi Pineapple". What are some specific security-related lessons I could demonstrate? If applicable, what are the ...
0
votes
2answers
894 views

Is a VPN the only way to protect against rogue Wifi access points MITM attacks?

Given that it's very easy set up a rogue access point and MITM that connection, is a VPN to a trusted host the only real way to secure my browsing and other TCP/UDP actions? This question relates to ...
28
votes
4answers
7k views

What is SHA-3 and why did we change it?

On the 2nd of October NIST decided that SHA-3 is the new standard hashing algorithm, does this mean we need to stop using SHA-2 as it is not secure? What is this SHA-3 anyway?
2
votes
1answer
77 views

Can we just provide VM snapshopts to LEA

Currently Law enforcement agencies (LEA) take your entire server (or perhaps all servers) in a VPS/Cloud or multi-tenant situation. Have we thought of any policy guidelines where VM images/snapshots ...
2
votes
3answers
275 views

Odd spam in a forum

In the forum http://forums.finehomebuilding.com/breaktime/ (same forum that was one of the subjects of this thread) we're seeing a lot of "spam" of a curious sort. Obvious non-native-English speakers ...
3
votes
2answers
810 views

Added security risks that come with 3-tier software architecture

Are there any added security risks that come with using a 3-tier architecture such as MVC in a software project? I got asked this today, and my gut reaction was "I don't see why there would be." ...
-1
votes
2answers
515 views

Precautions to be made while using Internet chat to prevent being hacked? [closed]

I have read many websites which state that, "We can hack into computers while chatting on the internet." What are the best precautions to be taken while chatting to prevent unauthorized access? I ...
3
votes
2answers
2k views

Using Elliptic Curve Cryptography

I am wondering if ECC could be used the way that the data is encrypted with the public key instead of the random generated key. Is there any advantage doing that comparing to the "traditional" way of ...
3
votes
1answer
587 views

Backdoor.ASP.Ace.C keeps showing up and being removed by f-secure

Backdoor.ASP.Ace.C is being found and removed from: C:\Users[username]\AppData\Local\Temp[randomstring] We have recently found some malicious aspx files on our IIS server that we have studied and ...
3
votes
2answers
1k views

Program binaries or files with same MD5 hash

I'm looking for 2 different program binaries or 2 different files with the same MD5 hash to prove its weakness and the collisions in the algorithm.
2
votes
1answer
471 views

Best way to validate /etc/hosts from third party providers to avoid ads?

A lot of people use a huge /etc/hosts file to simply redirect ads and scam sites to 127.0.0.1. The interesting part about this approach is that you can have the same hosts on your tablet, your android ...
5
votes
3answers
880 views

How do you search for a botnet out in the wild?

I'm interested in searching for botnets out in the wild. Besides Google dorking for a phrase or code used on the control panel backend for web based interfaces. What other ways are there to search for ...
10
votes
2answers
168 views

What are the likely effects of increased government spending on “Cyber Weapons” on the software industry?

From the conference scene and news this year it seems probable that there's an increased amount of spending from governmental agencies on what it getting termed "Cyber Weapons". A key component of ...
4
votes
5answers
625 views

What about combining pkdf2 with scrypt? [duplicate]

Possible Duplicate: Would it make sense to use Bcrypt and PBKDF2 together? How does the following password hashing scheme look to you? iterations1 = scrypt iterations required to spend ...
4
votes
5answers
10k views

Nexus 7 (Or any other good android tablets) For pen testing

I'm considering investing in an android tablet for pen testing. Does anyone know how capable they are with pen testing? Can they compile code or forward packets? Are any applications that work on ...
8
votes
3answers
3k views

Calculating complex password entropy?

Whenever I look at password entropy, the only equation I ever see is E = log2(R)*L, or alternatively E = log2(R^L), where E is password entropy, R is the range of available characters, and L is the ...
3
votes
1answer
88 views

Is it possible to verify identity of site that sent request to you?

I'm developing a JS widget that can be embedded by 3rd party websites. When widget is shown, it sends request to my site. When this request is received, I know that it was shown to the user and pay ...
0
votes
2answers
544 views

Any open source software firewall with country based ip blocking feature? [closed]

I am looking for an open source firewall with country based ip blocking feature for Linux OS.
6
votes
4answers
1k views

Is Remotely wiping a cell phone really a valid defense?

In this month's issue of the SANS Institutes "Securing the Human" newsletter, the topic was lost and stolen cell phones. In the section on what to do if your cell phone is lost or stolen, it included ...
2
votes
2answers
803 views

Using tor with SET to bypass firewall policy?

I'm doing a credential harvesting attack using SET from backtrack. I want to sent a spoof email using an open relay server. However, any outbound connection for smtp is blocked by the firewall. I ...
2
votes
1answer
883 views

Airbase-ng & Metasploit the perfect pair

So if I am running an airbase-ng soft AP, I have several clients connecting to me. I can run metasploit against them once they are connected manually, but that is oh too much effort. Is there anyway ...
28
votes
7answers
23k views

Invalid users trying to log in to my server

I'm seeing a lot of log entries that appear to be failed login attempts from unknown IP addresses. I am using private and public keys to log in with SSH but I have noticed that even with private ...

15 30 50 per page