0
votes
0answers
88 views

My ISP provider is spoofing DNS [on hold]

My ISP provider is DNS spoofing OpenDNS, Google DNS, Norton DNS, Yandex DNS and all other known DNS servers. So even if I use those, I still can't access some websites. So I need a DNS server which is ...
3
votes
1answer
75 views

Besides Browsers, what other Technologies are Impacted by the Deprecation of SHA-1?

I am aware that from January 2017, browsers will start rejecting, or at least warning, users browsing sites offering SHA-1-signed certificates. Would a service be impacted if the system does not ...
3
votes
1answer
62 views

Do a DoS where you permit only your own connection?

Yesterday I was discussing with my brother, a computer scientist, if it is posible to perform a Denial of Service on a webpage so you block all the traffic to the web but you allow your connection to ...
0
votes
0answers
20 views

What are the best practices in rotating security token for a single page applications [on hold]

Does generating a new token for every request fit for a single page application. Ideally I believe for a web site which can be managed by subsequent calls to server can be managed by new token per ...
1
vote
1answer
90 views

Isn't a reverse TLS (reverse) proxy a security risk?

So, after reading Wikipedia's article on reverse SSL/TLS Proxies, I totally get the advantages it offers. But doesn't it also pose a security risk, by basically being a "man in the middle"? As a ...
0
votes
0answers
51 views

How do organizations with BYOD policy handle code theft? [migrated]

Some corporations have a Bring Your Own Device (BYOD) policy, and some may allow their employees to take their laptops home for usage. What if an employee takes the code and develops something outside ...
0
votes
0answers
25 views

Does IBM DataPower firmware employ any open source technologies? [on hold]

Does IBM DataPower firmware employ any open source technologies beside GNU utilities or is it predominantly in house code and hardware processing? What about an internal OS?
0
votes
2answers
601 views

How to spoof SFTP?

Is there anyway to spoof an organisation that distributes files across the internet via SFTP? I know it's easy to spoof an IP address. But how easy is it to an SFTP link?
0
votes
0answers
11 views

Is there an original informaton source linking output of Qualys SSL report to settings in nginx and Apache configurations?

The online tool at Qualys for testing webserver SSL configurations, https://www.ssllabs.com/ssltest/index.html, produces a list of codeslike TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, ...
2
votes
1answer
44 views

Man-in-the-middle packet injection

I'm currently studying the possibility of a man-in-the-middle attack in a network consisting of a switch and 3 computers: Server/Host Client Man In The Middle The server and the client will change ...
-1
votes
0answers
76 views

How does the following brute force password breaker work? [on hold]

def numberToBase(n, b): """ This function will convert the number n into base b and return a list containing the digits of number n in base b """ digits = [] while n > 0: ...
0
votes
0answers
25 views

Can the instruction set be targeted directly?

Can malware directly manipulate the instruction set or is it restricted to the functions/services of the os/kernel?
2
votes
0answers
11 views

Signtool validation fails when signing and validating are done in different machines

I am signing an exe from a machine using a cer file. Then when I validate the EXE using the signtool.exe from the same machine, it succeeds. But when I try to validate it using the same .cer installed ...
-8
votes
0answers
27 views

Security issues to be considered in case of a webpage [on hold]

What are the security issues to be taken into consideration while loading a webpage?
2
votes
1answer
32 views

What does Microsoft mean by “Trusted Domain” in relation to Kerberos?

In the Microsoft documentation about using Kerberos, it is stated that: Both the server and the client computers must be members of the same Windows domain or members of trusted domains. If this ...
3
votes
0answers
18 views

Does Oracle's GuardedString protect sensitive data against heap or memory dumps?

Oracle's org.identityconnectors.common.security.GuardedString states this in its documentation: The GuardedString class alleviates [the problem that string data is kept in memory as clear text] by ...
3
votes
1answer
55 views

How are WPA2 passwords encoded?

I'm trying to figure out a good John The Ripper rule for WPA2 that won't waste time testing impossible passwords. Thus the question - are there any limits on what's allowed in a WPA2 password? Can it ...
1
vote
0answers
21 views

Blocking FORWARD on iptables except port 80 [migrated]

I got a subnet that is protected by a computer that acts as a firewall. The rules I want this firewall to have are: Deny all INPUT iptables -A INPUT -j DROP Allow all OUTPUT iptables -A OUTPUT -j ...
1
vote
2answers
68 views

Is there a practical way to identify security vulnerabilities that were published following a full disclosure policy?

I am conducting a study about the different vulnerability disclosure policies in an effort to determine how long it takes for a given vendor to issue a fix/patch, depending on how a given ...
0
votes
1answer
62 views

Retrieve password of an encrypted hard drive [on hold]

I have a hard drive that uses hardware encryption. After not using it for a while, I have forgotten a code which is needed to reset the drive, but doesn't give access to any data. The window for this ...
3
votes
1answer
14 views

Creating subkeys for an existing OpenPGP key

I have an existing OpenPGP key which has been used infrequently. All capabilities appear to be bound to the master key, there are no subkeys. /home/user/.gnupg/pubring.gpg ---------------------------...
2
votes
1answer
61 views

What does “probability space is over coin flips of algorithm M” mean?

In the book The Algorithmic Foundations of Differential Privacy by Cynthia Dwork, Aaron Roth on page 16 (actually page 20 in the pdf viewer) it says at the very bottom of the page: Definition 2.2 (...
0
votes
0answers
60 views

XSS attack without special chars [duplicate]

I found a website vulnerable to XSS, but it disallows these characters: ( ) / \ Can I do an XSS attack without these characters?
0
votes
2answers
114 views

Why not have an identical session cookie for different user's devices?

Here is my table structure: // users +----+--------+------------------------+------------------+-------------------------------+ | id | name | email | cookie | /* some ...
21
votes
2answers
3k views

Hacking a car “in real life”

There are lots of papers concerning car hacking. It is often done with physical access (by the OBD interface for example), sometimes without (Remote Exploitation of an Unaltered Passenger Vehicle). ...
-7
votes
0answers
63 views

How strong is this cipher suite? [on hold]

Are there any shortcomings in this SSLCipherSuite? EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !...
3
votes
2answers
67 views

CAPTCHA code refreshing vulnerability

Question is not programmatic but rather conceptual. When a user is trying to fill in a contact form and then CAPTCHA code, if he/she accidentally refreshes the page or doesn't fill a required input ...
0
votes
0answers
42 views

ARP spoofing on WLAN: seeing only traffic coming back

I am attempting to capture network traffic of my mobile device connected to switched network via WIFI, utilizing arpspoof. I did all steps tutorials mention. What I see in Wireshark is only a half ...
4
votes
1answer
88 views

Is it possible to clone my contactless debit card while it's in my pocket?

I have a bank account that I never use, someone cloned my debit card and used it to buy something in Brazil in order to make sure the cloning was successful then they started making transactions of £...
0
votes
0answers
37 views

How do malware save configuration of C&C-server?

Malware must communicate with a command and control server. In order to be able to do that the malware must know specific things about that server (e.g. hostname, port, username, password...). Of ...
0
votes
0answers
49 views

Trying to build an offline virus total type product

I have been tasked with finding a way to scan a file using multiple AV products. The machines this is to be used on cannot be connected to the web, due to lab restrictions and the AV products cannot ...
3
votes
3answers
106 views

Can identification imply authentication in biometric systems?

I know the difference between Identification and Authentication, which are basically claiming who you are and proving that claim. In terms of a system, they are username and password in general. But ...
3
votes
1answer
127 views

Can we safely distribute password protected .p12 file?

I have a password protected .pfx file and I would like to know if it safe to share it on GitHub. The intention is to ensure that companies can trust a dll file of the Tweetinvi open source library. ...
1
vote
1answer
23 views

How to best manage multiple applications using the internet with Firewall

Im not new too Linux (Ubuntu 14.x) however I must admit that I have never bothered with a Firewall until now. Im currently using Ubuntu's inbuilt firewall (UFW) with a graphical plugin (GUFW), which I ...
0
votes
1answer
17 views

Replace certificates simultaneously on remote servers?

A third party server sends us signed messages that we verify. When its certificate is about to expire, the third party generates a new key pair and sends us the new certificate. At some point, the ...
0
votes
1answer
31 views

How do I know which subkey GitHub is using for signing?

I added my gpg subkey to GitHub today and noticed that regardless of which subkey I export, the PUBLIC KEY BLOCK is the same. I have since found this post, that explains why: is-it-possible-to-export-...
3
votes
1answer
76 views

How dangerous is leaking knowledge about existence of objects which the user is not allowed to access?

It is my understanding that good security design does not reveal information about data which the user is not allowed to access. This includes information about the existence of said data, i.e. if a ...
49
votes
9answers
9k views

Is the UK Parliament e-petition system trustworthy?

Over the last few days, I've been hearing often about the petition to (pratically) "repeat" the Brexit referendum and I noticed that it is an online petition. I noticed that the "sign petition" form ...
-6
votes
0answers
44 views

How do I decrypt this unknown cipher text? [duplicate]

I got this unknow cipher text. Can you solve this? This looks like encoded PHP with base64/str_rot13/gzinflate eval. nI31RZG+Rxb1RZGzRMfsOdNql2K9RsesRLDVOdNqnLWtOdNqRtJtRtm1RZG8OdNrmxb1R/...
162
votes
14answers
31k views

SQL injection is 17 years old. Why is it still around?

I'm no techie and would like your expertise in understanding this. I recently read a detailed article on SQLi for a research paper. It strikes me as odd. Why do so many data breaches still happen ...
0
votes
0answers
38 views

Creating a port snooper/sniffer [on hold]

Is it possible to create a program, that monitors a traffic to a specific port, be it reserved or used defined? This is because I want to create a system that traps the attacker in a honeypot. That ...
3
votes
3answers
79 views

Is it safe to manually patch security bugs in an outdated system, that is no longer supported?

How do I manually patch security bugs safely without damaging the system for information security purposes on my Ubuntu system that I am running on my Nook Simple Touch (2011 Nook)? I need to find ...
-2
votes
1answer
45 views

Decrypting keys at the software application level [on hold]

Does anyone know what the most common method of decrypting data is? I.e., if something is hashed and not decrypted at the firewall, how is it usually decrypted within a system? Is it integrated into ...
4
votes
1answer
117 views

Why, after a certain character limit, are larger passwords labeled as “weak” on some sites?

On many sites we see an indicator if our password is weak, or strong, to give us a good indication to go with that password, or not. I've been noticing on some sites, that after x amount of ...
0
votes
3answers
63 views

Are there any security advantages to forcing a password-character limit on reset, but allowing unlimited character in password-login?

I was resetting a password a few moments ago, and I was given a character limit of around 10 characters to make a secure password with. After resetting the password, I went to enter my password, and ...
-4
votes
1answer
38 views

Why is MITRE not changing CVE entries that are clearly incorrect? [on hold]

Why is MITRE not changing some CVE entries that are clearly wrong? I have deeply analysed and highly tested some specific vulnerabilities. The CVE reports of them are in some cases inconsistent, ...
0
votes
1answer
52 views

Do these packages indicate nefarious activities?

Being security paranoid, I could help but notice that in my autoremove list that there were two packages I did not immediately recognise and was immediately suspicious of: The first one was ...
4
votes
1answer
131 views

What does Obama's phone say about Android and phone hardware?

The recent article Goodbye Obamaberry, hello Obamadroid describes the decision to move Obama's phone from the Blackberry to the Samsung Galaxy S4. The Galaxy 4S is of course an old, foreign phone. ...
-5
votes
0answers
14 views

What's RSS Validity Checker? [on hold]

i'm trying to exploit XXE in challenge ! it's about XML External Entity [RSS Validity Checker] can someone tell me about this vulnerability <html><header><title>XXE</title>...
-3
votes
1answer
75 views

Need to learn information security [on hold]

I want to learn about information security so I need some good sources to help me and learn that. I'm still a beginner.

15 30 50 per page