-4
votes
2answers
244 views

Using my own encryption instead of https in app

I am writing a program that uses a webserver as a backend for communication between different users. Is it okay to use my own encryption (such as ...
-4
votes
2answers
291 views

Whats the best IT Security Web Forum? [closed]

I'm looking for a good source for IT Security, specifically information for Information Security Professionals. I'm wondering what your favorite is?
-4
votes
2answers
406 views

How do I construct a rainbow table to crack a 6 character password? [closed]

Given the hash: 491c290affbf5436f0fc0584ccefb2 how do I construct a rainbow table to crack this password?
-4
votes
1answer
79 views

Does Server Mistrust improve security? [closed]

By server mistrust, I mean the fully implemented lack of customer plaintext on a vendor's system, and lack of vendor access to customer plaintext. Specific case in question: Password and SSH key ...
-4
votes
5answers
2k views

Google Calendar has events that I didn't create and it's not shared

This has been rewritten because at first I thought this may be an accident but now it’s clear there’s a security compromise. In my Google Calendar I noticed an event that occurred each day from ...
-4
votes
2answers
237 views

What kind of Wi-Fi security protocol does not use encryption?

I need to sniff HTTP packet over the WiFi network. What kind of WiFi security protocol does not use encryption? I mean if I capture the WiFi packets, no effort required to decrypt wireless packets and ...
-4
votes
2answers
505 views

Is it possible to make a living selling exploits? [closed]

Is it possible to make a living (say $75k+ a year) finding and selling vulnerabilities? It doesn't matter (for the sake of this question) whether it means selling purely to a bug bounty program or ...
-4
votes
2answers
207 views

Is writing a document, not saving it, and printing it wirelessly 100% secure? [closed]

Say I want to write a top secret document (yeh, I'm a secret agent), and I use the method in the title...more specifically 1) Write a document on TextEdit on a Macbook Pro 2) Do not save it 3) ...
-4
votes
2answers
234 views

Problem with Encryption Protocol

I have a question about a encryption protocol, if it is good or not. Bob and Alice communicate over an insecure channel( a possible attacker can listen). An expert suggests the following protocol to ...
-4
votes
1answer
95 views

LUG war games — suggested strategies? [closed]

My LUG on campus once in awhile holds a mock wargames on a VM. I'm trying to figure a way to get root access and make everyone else not be able to have root (king of he hill). I have a few ideas, but ...
-4
votes
1answer
195 views

Secure Traffic model for Web application Protection

Web Application Firewalls relies on negative and positive security traffic rules to protect web application from being exploit. My question is that is their any other web traffic modelling technique ...
-4
votes
2answers
163 views

how to protect a personal computer? [closed]

I am Linux user with no knowledge on security , up to now i dont know that is my system was in attack or not . I havent felt anything wrong with my system . but every Computer user must have some ...
-4
votes
2answers
699 views

Web service that converts HTTP GET to POST? [closed]

Is there some online forwarding service that I can give HTTP GET parameters to, and it would create a form with the parameters and submit it as POST? For example, I'd like to give someone the URL: ...
-4
votes
3answers
76 views

Does MEGA cloud service say ALL the truth? [closed]

If this is not the right community for this question please inform me where to ask :-) I am talking about: encryption no enceyption key kept by MEGA and so on. I found many reviews confirming ...
-4
votes
3answers
165 views

How do I find vulnerabilities in software? [closed]

I read an answer here which talked about becoming a PenTester. The answer said that you have to learn to break software. I posted a comment on the answer asking where do I start learning to break ...
-4
votes
1answer
492 views

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection [closed]

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection of WI-FI without using a keylogger. I tried a lots of softwares and efforts but unsuccessful. Can any one suggest. I ...
-4
votes
1answer
469 views

Trace email without header or IP address [closed]

I have a gmail address only. It is a copy of the email. I do not have the original email. Is there anyway to trace it?
-4
votes
2answers
146 views

What are the security impacts of securing with WEP? [closed]

At an organisation if their Wifi is secured with WEP? why is this particularly bad for the organisation/business itself, I know WEP is a weak security algorithm which easily cracked but why is this ...
-4
votes
1answer
575 views

Feasibility of brute-force on online password [closed]

I am familiar with how offline brute-force attacks work. But for online accounts, assuming no social engineering, how feasible is it to brute-force attack a password? For example, is this dependent ...
-4
votes
1answer
108 views

What are the chances of a normal Internet user being hacked or infected by malware? [on hold]

Say I'm a normal Internet user, I visit some well-known social networks like Facebook, twitter, play flash-based games in Facebook, visit some big websites that are known to be safe and trusted and ...
-4
votes
1answer
124 views

How The Sony Hack Was Traced, and So Quickly? [closed]

What are the steps that are required to locate a source that have routed their traffic through multiple zombie hosts, spanning multiple networks/carrier/nations?
-4
votes
1answer
652 views

what type of database server is used by fb? [closed]

I want to know what type of server facebook uses ? If they use sql server , then is it vulnerable to sql injection ? Are all sql servers vulnerable to sql injection ? I just want to know this ...
-4
votes
1answer
194 views

Most secure SSH server [closed]

Which SSH server (compatible with Debian Wheezy) has the fewest (if any) exploitable security bugs?
-4
votes
1answer
180 views

Is there any virus that deletes Personal Folder? [closed]

I noticed that some special folders of my ex-HDD have been deleted. 'Personal' is one of them. Is there any virus that does that?
-4
votes
1answer
114 views

Recommendations about procedures and policies for an application security strategy? [closed]

I need to develop an application security strategy for a web application product. Do you have any recommendations as far as procedures and policies are concerned? Any inputs / guidelines or relevant ...
-4
votes
2answers
13k views

Why do some people think Linux is more secure than Windows? [duplicate]

I have no idea if Linux is more secure than windows. I think Linux is more secure but I want to know what is going at kernel level. Somebody told me that Linux have only one main kernel and has it ...
-4
votes
1answer
160 views

How can I crack ArrayOS password [closed]

I have some Array Load Balance device that the user password hash like: user "array" "XXXXXXXXXVkjTX9a1kYtNo". How can I crack the password or find out the algorithm of the hash?
-4
votes
1answer
64 views

How to see all incoming and outgoing traffic of other nodes while on a LAN?

I've got two computers. A & B. While sitting on the computer A how can I see the incoming and outgoing traffic of computer B? Or can I? Note: Please try to answer in a non-technical language as ...
-4
votes
1answer
91 views

AV isn't dead, so why network appliances differ in handling malicious code [closed]

when taking a look under the hood of some firewall appliances there can be observed a tremendous difference on how they handle malicious code. mostly, av-scanning is restricted to well-known protocols ...
-4
votes
2answers
66 views

How does the password become 30,000 times stronger?

This google support page says: For example, an eight-character password with numbers, symbols and mixed-case letters is harder to guess because it has 30,000 times as many possible combinations ...
-4
votes
1answer
614 views

Kali Linux Veil-Evasion install problem [closed]

I can't install Veil-Evasion. I have this error: Installing (Wine) i386 Binaries Reading package lists... Building dependency tree... Reading state information... Package wine-bin:i386 is ...
-4
votes
1answer
67 views

MPR I suppose somehow I found a way to make a super hacker angry with me [closed]

I suppose somehow I found a way to make a super hacker angry with me. I've lost three cellphones. It might have all started with the iPhone 4 getting locked then both androids to simlock. And I'm at ...
-4
votes
1answer
52 views

Is it true that breaking into the https padlock settings on a web page is easy to do? [closed]

I found some posts on this forum that explained that https settings are possible to crack. see here. Why is it possible to sniff an HTTPS / SSL request? And here is another post that mentions ...
-4
votes
1answer
221 views

Facebook friend suggestions [closed]

An ex of mine has joined Facebook yesterday and I have been informed of this and asked to make friend suggestions for him. I have had no contact with him for over 5 years and have deleted his home ...
-4
votes
1answer
136 views

I abused my VPN, what are realistic privacy consequences? [closed]

Ok let me give you a small background of my problem. I am using a (very good) VPN service as I am trying to hide the fact that it is me (ip:....,name:....,etc) who is managing a particular website. I ...
-4
votes
1answer
70 views

How do you deal with personal security issues? [closed]

How do you deal with personal security issues? Let's say you've got reason to assume somebody with big capital may be trying to track your moves. Early in the morning, day after confrontation, you ...
-4
votes
1answer
54 views

how can the hacker benefit from the information of checking tcp port or udp port? [closed]

I studying a scanning and I want to ask how can the hacker benefit from the information of checking tcp port or udp port?
-4
votes
1answer
76 views

what is today allowed, when I travel to USA? [closed]

Is there a list of prohibited devices, for travellers, when they travel as normal citizen into the USA, for a maximum of 3 months into USA ? Is it prohibited to carry the following in a bag: notebook, ...
-4
votes
1answer
62 views

Could blocking script in the url prevent DOM XSS? [closed]

On my site, if I were to block <script> from the url, could this prevent some cases of XSS? Any way someone could bypass that?
-4
votes
1answer
113 views

Is there an exploit for python hash collision? [closed]

Is there an exploit for this vulnerability? EDIT Python DoS via hash algorithm collision - oCERT advisory 2011-003. Affected numerous languages. No CVE for Python but CVEs for other languages.
-4
votes
2answers
53 views

How to hide my surfing history [closed]

I am on work network, installed and am using chrome without admin rights. how can i hide my surfing from netadmin, and if not then how can i link my home pc with work access and surf without any care? ...
-4
votes
1answer
54 views

different IP addresses [closed]

I'm new in the Network world so I'm still trying to figure things out. I have a server with an IP address like 192.168.1 etc. There is other devices that communicate and share information with the ...
-4
votes
1answer
94 views

How am I affected by malware? Malware transferred from service provider's base station or just port scan? [closed]

I need a malware expert here. I am being targeted by advanced hackers over the 4.5 years. So this is my situation: 1) My new phone: I just bought a new phone, with SIM card and mobile internet plan ...
-4
votes
1answer
115 views

How to know from where the website is being operated? [closed]

I mean one can find their host server (from which the domain name is bought), but can we check who bought the domain and from where is that website is being hosted?
-4
votes
1answer
108 views

How to create a secure channel in Java?

I am creating a certification server which takes some required details like name, email etc from clients and issues public and private keys using RSA along with digital certificate. Initially all ...
-4
votes
1answer
116 views

Email obfuscation/munging recent research [closed]

Does anyone know of any recent (past year or two) research into email obfuscation/munging? All I can find are tests done five to ten years ago. I'm trying to decide whether it's something still ...
-4
votes
1answer
277 views

How does https check md5, sha-1 and sha-2 fingerprints?

When a https site shows multiple finger prints, i.e.: md5 and sha1, or sha256 and sha1, how does the browser check? is it both just the "strongest" or whatever is convenient? This question arose ...
-4
votes
2answers
134 views

What is the difference between a virus and a worm ? [duplicate]

The only thing I know is that virus can get into the other programs and infect it whereas worms cannot attach itself to another program.
-4
votes
2answers
541 views

Defend against HTTP fingerprinting [closed]

I'm looking for ways to defend against common fingerprinting techniques used by hackers to identify what kind of setup my website is running on. I understand this is a complicated topic, and every ...
-4
votes
1answer
84 views

What is wrong with those calculations md5 gpubruteforcing

I read an article by a stackexchange founder: http://www.codinghorror.com/blog/2012/04/speed-hashing.html It talks about: " two ATI Radeon 7970 cards generating nearly 16000 M c/s with MD5." " the ...

15 30 50 per page