-1
votes
1answer
46 views

HTTPS - if this protocol protect against connecting to false server?

I know about SSL certificates. However it is ok to say: protocol HTTPS protects against connecting to false server ?
0
votes
0answers
2 views

Build host application for Thales payshield 9000 HSM [migrated]

I'm working on creating host application, which talks to Thales HSM over TCP/IP socket. The main use of HSM here is for PIN translation from DUKPT to ZPK for next network in EMV transaction flow. I ...
-2
votes
0answers
50 views

Tracking a criminal on my website [closed]

I've got an active criminal on my website purchasing with several stolen credit cards. I control the product so there is no concern of theft, but they did get away with the first couple. I'm really ...
1
vote
1answer
18 views

Certificate Setup Over Many Remote Resources

Imagine that you have a web app that needs to talk to a central api server with its purchased certificate. This server provides a token to the web app to be used to authenticate and talk to another ...
3
votes
4answers
82 views

What makes Malware so difficult to remove?

Why is it that when malware or adware is installed it's extremely difficult to remove? You can't go into your programs list to uninstall it and usually need a special program to remove it. What do the ...
0
votes
2answers
70 views

Decrypt chunks of pgp encrypted

Suppose I have a very large encrypted .csv file (too large to fit in memory). Is there a way to decrypt N bytes of the cyphertext? My goal is to process each row of the .csv in memory without ever ...
-3
votes
0answers
51 views

Full mesh and partial mesh networks [closed]

I have a homework question that says true or false: service providers only implement full mesh networks because of the need for reliable and available communications. this is true because they need ...
1
vote
1answer
34 views

Network Scans Find Absent Device

Using Nessus (an uncredentialed full scan) and Nmap (essentially a full port scan), I am finding a phantom device. This device is supposed to be a well-out-of-commission device, but is returning a ...
2
votes
0answers
13 views

Find the source of a recurrent mass SQL edit on a server [migrated]

I'll try to explain my problem as clear as possible. The server of a company I support runs many websites. This server runs Windows Server 2012 with Microsoft SQL Server 2014. Almost all of the ...
-1
votes
1answer
21 views

How does DRM enforcement work (across different platforms)? [closed]

I would like to know how Android, Windows, Linux, and OS X deal with DRM (Digital Rights Management) e-pub, pdf, and mp3 files. Basically, if I download a DRM file to my device (perhaps one that has ...
1
vote
1answer
72 views

Is the following e-mail fraud technically possible?

Summary: Can email be intercepted and modified by a 3rd-party during transit from the sender to the receiver? If so, can this interception be detected? Details: My friend (A) (mailbox at popular ...
1
vote
1answer
107 views

There might be a man in the middle attack against my server

I have a little $7.20/y VPS, and the fingerprint for the ECDSA key has changed three times on me. This time, it happened shortly after I reinstalled the server (same day, in fact.) I always disable ...
4
votes
4answers
129 views

Is information disclosure in a form of a server header is a real vulnerability?

I have seen in many places that people say that headers of the following types is a vulnerability: Server:Microsoft-IIS/7.5 X-AspNet-Version:4.0.30319 X-Powered-By:ASP.NET I can see that this gives ...
30
votes
6answers
6k views

Why did Poitras and Greenwald put their batteries in the fridge?

cnet.com says: Even in Snowden's room, the group took precautions not to be overheard. Greenwald and Poitras would remove the batteries from their mobile phones and put them in refrigerator of ...
-6
votes
0answers
53 views

How is VPN used hide an IP address? [closed]

Actually I want to know how VPN hides ip, that is used for anonymity,just like the proxy
4
votes
3answers
86 views

Is it safe storing revision history on production servers?

Currently we use at my workplace svn export <svn_repo>. This takes a long time and I have been playing with the idea to keep the revision history on the production server so we can simply fetch ...
-1
votes
0answers
32 views

Unauthorized Password Access [duplicate]

I have a website with no. of paid videos. Suppose, In future many of users will be purchase videos from my website and if any user distribute his password in his college and anywhere. So, my question ...
-3
votes
1answer
40 views

How does SMTP facilitate sending spam? [closed]

My friend tells me that there are exist weakness of the Simple Mail Transfer Protocol (SMTP) that make make it easy to send spam. Is this true?
0
votes
1answer
68 views

What does the below SQL injection indicate?

What is the meaning of this command in SQL ? php?que_id =-1/**/UNION/**/ ALL/**/SELECT What does /**/? indicate here?
1
vote
1answer
41 views

Is it completely safe to store the unencrypted credentials within a variable in the ios device

Overview is we encrypt the credentials using the pincode as the passphrase that the user also sets. One of the requirements is to NEVER SAVE THE PINCODE anytime anywhere. Everytime the user goes out ...
0
votes
1answer
44 views

Q: What happened to socat?

I saw elsewhere some discussions on an error (or backdoor) in socat but find it difficult to get from the (anyway not well ordered and fairly large volume) materials the essence of what had actually ...
1
vote
2answers
74 views

Which of the TLS/SSL and IPsec protocols is effective?

Which of those two protocols is the most effective for sending data from a client to a server on a local network (knowing that I aim to use it for FTP traffic)?
0
votes
0answers
38 views

Setting up a secure Network [migrated]

I have a home network that I want to make more secure so I brought a second router with the aim of setting up a second, separate network at home to put the more important device on. I checked out the ...
-2
votes
0answers
12 views

find unix command and NTFS Stream [migrated]

Suppose I have a partition and some files have been hidden by NTFS Stream. I have two serious question: Is it possible to find them via find unix command? How can I find them?
1
vote
1answer
25 views

Time of working generating hash with sha2

It is fragment of pseudocode algorithm SHA2 from wikipedia: break message into 512-bit chunks for each chunk create a 64-entry message schedule array w[0..63] of 32-bit words For me, it means ...
0
votes
2answers
58 views

SSLstrip is not working in the local network

My issue is the SSL stripping is not working in my LAN, but it works if I try to attack a HTTPS website with no HSTS. I am not using any domain name just the IP address of the server. Is there any ...
0
votes
0answers
21 views

Why does Windows 7 remove Authenticated Users from file permissions when a folder is shared?

When I try to share a folder using the share tab in file properties, if I go back and remove sharing options from the Share tab, it also affects the Security tab, removing inheritance of permissions ...
0
votes
1answer
48 views

Redirect from HTTP to HTTPS; SSLStrip

Our web app home page redirects from HTTP to HTTPS. Our security consultant has told us this is a significant security weakness, that the redirect could be intercepted e.g. by SSLStrip. And therefore, ...
-2
votes
0answers
18 views

detect forged e-mail system for windows? [closed]

some instances people send emails with false or "forged" headers. How can detect forged e-mail? (some program in windows)
-1
votes
0answers
92 views

How secure is Veracrypt/Truecrypt with a 60 char password?

I have a 10gb drive encrypted by Veracrypt with a 60 char password. If someone gets their hands on it how will it a skilled attacker to crack my password? The password has around 30 characters of ...
-2
votes
0answers
34 views

Are VPNs more secure than TOR? Why? [duplicate]

I've heard from multiple sources that a trusted VPN service is more secure than using TOR. Is this true? Even if TOR is used with SSL? Why or why not? And how do they compare with regard to anonymity? ...
1
vote
1answer
52 views

How to secure/cleanup my accounts after having an old email account breached

I have two email accounts. My main one that I created a few years ago and switched to, which has a very strong/unique password that is not written down or stored anywhere. It also has 2-factor auth ...
-1
votes
0answers
29 views

CSploit/Zanti - MITM takes 4 minutes - is it normal? [closed]

Working on a school project for network security and I wanted to demonstrate a MITM attack from my mobile Android device. I currently have been working with Csploit and Zanti2 on a roooted Ellipsis 7. ...
2
votes
0answers
42 views

Methods for allowing restricted access to web applications

Since I'm fully aware that allowing access for anybody to open web hosting control panel (login page), can be a little bit risky, I started to think about restricting access and allowing only for my ...
0
votes
0answers
33 views

Is this c# digital signature implementation secure?

The code connects multiple clients to a server using TCP sockets asynchronously. I have added code to attach a digital signature to the outgoing messages from the server, to authenticate the message ...
0
votes
1answer
43 views

There's still remain anyway to surf 100% anonymously on internet using a computer? [duplicate]

There's still a way to be 100% anonymous on internet using a computer? I know that using a prepaid SIM card you can surf 100% anonymously, as far as your phone hasn't been bought with a credit card ...
31
votes
4answers
6k views

Is there an encryption algorithm that is fully secure?

Is there an encryption algorithm that is completely secure and isn't based on difficult computational algorithms? If such an algorithm exists, why we don't we use it in SSL/SSH?
2
votes
1answer
61 views

A code protector claims that it “ensures it is physically impossible to run code without a serial number” is this a scam?

VMProtect Software (found at http://vmpsoft.com/) claims that it: "allows the generation and verification of serial numbers. Both manual and automatic generation are supported. Serial numbers can be ...
0
votes
0answers
100 views

Could Instagram really have asked me to send an email of my face, or is it a scam? [closed]

My Instagram account was deactivated without explanation, so I sent a request for an appeal. I then received this email, asking me to send them a picture of myself holding a hand-written code: Hi, ...
4
votes
2answers
120 views

What is the difference between MITMproxy and SSLsplit?

I am aware that MITMproxy only captures HTTP/HTTPS protocols where SSLsplit is a transparent proxy and therefore can capture also other non-HTTP protocol communications. However MITMproxy can operate ...
0
votes
0answers
3 views

Missing cipher suites when compiling OpenSSL on Windows [migrated]

I'm trying to connect to a HTTPS server that supports the following ciphers/protocols, but the handshake fails: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA ...
-3
votes
1answer
59 views

Making my password secure [closed]

I don't understand much about this topic and I am not highly involved with it in any way. I want to improve my password because I had my account stolen once (still a mystery has to how) but I was ...
0
votes
0answers
30 views

What are ways to help prevent the use buffer overflow to execute malicious code? [closed]

What are ways to help prevent the use buffer overflow to execute malicious code? I consider programs written in C++ or C.
-2
votes
0answers
12 views

how to fix deb command not found in kali linux 2016? [migrated]

i follow tutorial install wine on wine offical website: https://wiki.winehq.org/Debian. but have a trouble, in this picture Please tell me how to fix for completely wine install and run window ...
0
votes
0answers
23 views

How to authenticate a subscriber GSM? [closed]

How to authenticate a subscriber GSM? Could you give me a hint or link where it is described ? I mean: From what base station of GSM knows that the subscriber is authorized. abonent is user ...
0
votes
0answers
13 views

Alternative to Qtech Hide & View for Linux [closed]

Is there any similar program to Qtech Hide & View (steganography tool) for Linux? Or any other tool that uses a steganography method with similar power to store large amounts of data? Not like F5 ...
15
votes
3answers
2k views

Somebody is spoofing my email to send spam messages, and I have no idea how to block

Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails. I have no idea how to block this because the spammer is also using my email ...
1
vote
1answer
36 views

Handling session tokens when a users IP changes with extreme frequency

My web service is an API-driven Single-Page-Application. Once the user logs in they're given a temporary token to use for the rest of the session which is sent along with each API request. The token ...
-2
votes
0answers
31 views

Tool to Search a Network for Strings in Files [closed]

I'm hoping this can belong here. Do you know of a good tool that can be used to search strings in files across a Network? We have about 200 PCs in our environment. We also have Nessus but I ...
3
votes
2answers
49 views

What parameters define information sensitivity?

Since information is generally consumed by different parties for various reasons, what parameters define information sensitivity? For example marketing may define "customer" data such as name and ...

15 30 50 per page