-3
votes
0answers
23 views

Thousands of Wordpress hacked again? [duplicate]

Today I was visiting my websites and when I looked at the bottom/top of my Wordpress I found this string printed. What does this mean? I have seen posts in Wordpress forum which say that there are ...
3
votes
4answers
66 views

Should I keep to HDDs for sensitive data?

It appears that in many cases, there is no way (short of physical destruction) to securely delete data from an arbitrary SSD. Unfortunately, I do not know how an individual (not a business) can ...
0
votes
1answer
74 views

Public WiFi behavior

Here's an observation: My apartment offers free wifi around the social congregation areas. It is not encrypted BUT as I have observed, each connecting device is confined to its own VLAN (based on MAC ...
3
votes
2answers
60 views

Credit Card Fraud Prevention - Why Aren't Simple Things Used?

I use my American Express card every day, sometimes multiple times. I do a mixture of card-present and card-not-present transactions. AMEX has decent fraud detection and I get notified quickly if ...
10
votes
1answer
324 views

In CitizenFour, What Was Snowden Mitigating with Head Blanket?

A scene in the documentary, CitizenFour, showed Snowden using a blanket to cover his head and the laptop screen. When asked by Greenwald about this, he answered affirmatively, but I couldn't really ...
-2
votes
0answers
40 views

Monitor incoming/outgoing network activity

How can I monitor all the incoming and outgoing packet traffic on my home network? I am looking to see when I am getting DDoSed where the attacks are coming from. I am also looking to make sure my ...
9
votes
1answer
256 views

Kaspersky Antivirus “secure connection scan” as broken as Superfish?

I've read a lot about Superfish (and similar ad-ware) lately and I basically understand the vulnerability to MITM attacks. But I'm actually wondering if the "secure connection scan" by Kaspersky ...
-6
votes
0answers
22 views

Hardware keylogger detection possible? [duplicate]

Can you detect a keylogger when it is placed? Would it be possible to do that via a keyboard removed event, expecting the keyboard is not removed regularly? So that you for example get a pop-up/alert ...
0
votes
1answer
63 views

How can the Equation Group HDD firmware malware help bypass FDE?

There is currently a lot of discussion going on across the Internet about the "Equation Group" family of malicious hard disk drive firmware. One thing that has me wondering is the claim that ...
0
votes
0answers
14 views

keytool commands to replace existing SSL certificate? [migrated]

I've a linux centos server running glassfish 3.1.2 app server. The default certs coming from GlassFish install for ports 4848 and 8181 are 1024 bits. I need to replace these with 2048 bits versions. ...
4
votes
1answer
51 views

Android app using FTP

I have done some android programming (self taught). I have started working on an app idea. The idea is pretty much that people with the app installed can post pictures/videos and text which can be ...
0
votes
0answers
29 views

iptables - How to remove connection tracking [closed]

I'm using this command for redirect all web traffic (http) into my local web server iptables -t nat -I PREROUTING -p tcp --dport 80 -j DNAT --to 192.168.11.100 Then i test, access a website and got ...
2
votes
0answers
47 views

How can I restore my Windows certificate cache so I only have those from trusted CAs? [duplicate]

All this talk about Superfish and other adware crap has made me healthily paranoid that a wrong certificate can enter my certificate cache at any time. I have no reason to assume that there is a ...
1
vote
2answers
118 views

Is bruteforcing the last character of a salt a good idea?

Would it be a good idea security-wise to store salts with their last character removed, and then bruteforce the last character to further the amount of time it would take to create rainbow tables and ...
3
votes
0answers
9 views

No browsing issue on PPTP VPN Server on CentOS 6 64bit [migrated]

I am trying to setup a VPN server in CentOS6 64bit. I used the first 4 steps of following document to setup the server . ...
1
vote
0answers
14 views

Is it a good practice to clear audio metadata? If yes, how? [migrated]

According to How to inject executable, malicious code into PDF, JPEG, MP3, etc.? metadata can contain malicious code I am working on an app that handles sensitive sales information, and there is a ...
0
votes
0answers
14 views

List of certificate authorities for opera 9.64 [closed]

Where do I get a list of certificate authorities for my opera 9.64 I'm looking specifically for an certificate by "Over the Rainbow Tech."
0
votes
0answers
5 views

Tunneling EAP-TTLS over EAP-TTLS?

This question may come across as slightly (completely) absurd, but please entertain me as I believe it may have some pedagogical value, or if not at least some mild distraction on what is normally ...
5
votes
2answers
707 views

Why would a stealth scan attract more attention than a connect scan?

I'm reading an Information Security book and am faced with the question: Why may nmap stealth scans(SYN) attract more attention than simple connect scans(TCP connect())? Why might it be?
5
votes
2answers
69 views

How to break out of URL context

The OWASP XSS Prevention Worksheet recommends "URL escape before inserting untrusted data into HTML URL parameter values". I don't understand how someone could break out of a URL context or inject a ...
2
votes
0answers
62 views

Using hash for one time pad key [migrated]

Recently I've been delving into security algorithms, I already knew some of the (easy) math behind AES and RSA and how to and not to implement it. But well, i got a bit bored so i thought I'd just do ...
1
vote
0answers
19 views

Is it possible to limit remote administration accesses of an admin using Selinux? [migrated]

Suppose and admin needs to access a machine remotely.Root logins are disabled but he belongs to the sudoers list. I read that "sudo command" is good practice because you don't forget you are using ...
-3
votes
0answers
26 views

Is it possible to use Whatsapp as a proxy on Android? [closed]

My carrier has made all Whatsapp traffic free from billing. I was simply curious if it was possible to utilize Whatsapp as a traffic proxy for other internet traffic, or whether their end-to-end ...
7
votes
4answers
1k views

How do CC servers communicate to botnet bots in a local network?

A more general question How do bots communicate in the Zeus botnet? doesn't really address my question. I'm trying to understand how a bot can communicate with command and control (CC) machine. On a ...
-2
votes
1answer
68 views

is encrypted body http secure

I'm working on an embedded project that needs to communicate with a server. Both the server and the device have an AES key pre-installed. I have a network device that provides http services but not ...
0
votes
0answers
39 views

Symantec Endpoint Protection vs System Hardening [closed]

My IT Team is of the opinion that since they have installed Symantec Endpoint Protection software on my work laptop, there is no need for additional system hardening. They claim that SEP completely ...
2
votes
0answers
45 views

Obfuscating C++ Shared Library [migrated]

I've been asked to help obfuscate a library (written in C++) which will be distributed to clients. I've already discussed why obfuscation is not necessarily a good idea, and seeing as licensing will ...
-4
votes
0answers
89 views

spyware being installed on mobile sim cards [closed]

I had a net ten mobile android zte merit and some one put spyware or malware on my phone. They put it on by only having my phone number I downloaded avast antivirus from Google play and it could not ...
-2
votes
1answer
66 views

Similarly to How Photos Have Meta Data, Does Audio As Well?

There have been cases where a photo's meta data was used to track people who posted the photo...Is this the same with audio? Is there a way to wipe this meta data? Also, what about when this audio is ...
6
votes
2answers
86 views

Realistically, how much added security does having a passphrase on a ssh key have?

Let's assume ssh key brute force is unrealistic. It seems to me your greatest vulnerability would be someone gaining access to a client filesystem. If that's the case then key loggers and a host of ...
3
votes
2answers
64 views

LUKS, how to make strongest possible and reasonable passphrase?

Let us say I have a volume encrypted under LUKS with a 512-bit key. That would mean there are 2 ^ 512 possible values which the key may be. Now I need a passphrase which is at least as resistant to ...
0
votes
1answer
105 views

Could overlapping SHA256 hash begin to loop at some point?

I have a system that needs to send a key to the user. This key is used for validation after work and needs to be shown that we do not change it mid-work so we send to the user in the middle of work a ...
16
votes
2answers
356 views

Are the certificates from “skype click to call” and “avast! Web/Mail Shield” any better than superfish?

My Girlfriend has a years-old laptop from lenovo. I checked it over and wasn't surprised that the Superfish / Komodia Root CA certificate was not present. However I found some others that appear to ...
0
votes
1answer
65 views

Create certificate without private key with OpenSSL

I know that OpenSSL requires the CSR to be signed for a reason: to assure CSR validity, the fact that it was requested by the actual private key owner of the attached public key. It is absolutely ...
0
votes
0answers
16 views

theHarvester not exporting report [closed]

./theHarvester.py -d targetdomain -l 1000 -b all -f output I am using theHarvester python application to gather data on a site for pentesting purposes. Which works well. Accept I am unable to save ...
2
votes
0answers
21 views

How to use reflection attack in this simple protocol?

The following mutual authentication protocol has been designed to be resilient against reflection attacks. This is done by ensuring that the challenge from the initiator looks different from the ...
-2
votes
0answers
223 views

“DL is deprecated, please use Fiddle” error on metasploit console [windows] [closed]

I used the metasploit framework community. When I opened the metasploit console I saw this error : DL is deprecated, please use Fiddle"
2
votes
0answers
14 views

Understanding how openx cache was infected

I have a system that uses openx for serving banners. I have recently noticed that several cache file in /var/cache contain infected code. The code contains sql queries that create several php files in ...
0
votes
0answers
16 views

TLSv1 dosnt work witout enabling the sslv2 [migrated]

I'm using Apache 2.2.4 version. i already know this version only support the sslv2, sslv3 and tlsv3. but something wired happens when i use it: when sslv2 is disable: the web browser (internet ...
10
votes
4answers
1k views

What is Net-Worm.PHP.Mongiko trying to do?

I found several lines of this request in my web server access log: Source IP Dest IP Request Stat User agent 217.172.190.19 ...
2
votes
1answer
56 views

Autopsy/SleuthKit in the courthouse? [closed]

I am studying digital forensics and have been working with both AccessData's FTK and Autopsy to analyze disks for different assignments. I keep hearing that Autopsy findings should not be admitted in ...
2
votes
1answer
59 views

Is TLS enough to prevent eavesdropping? [duplicate]

Is it enough to use only SSL/TLS for client-server application with authentication, registration and data transmission (like chat)? If it is not what I also need to use?
2
votes
3answers
68 views

Can a wireless headphone (bluetooth) contain malware?

Can a wireless (bluetooth) headphone store data? Also, if it can, then can someone put malware in it? I assume that the device must necessarily be able to store some sort of data, since it has buttons ...
-6
votes
1answer
63 views

iPhone in airplane mode [closed]

Suppose I, as an iPhone owner, have enabled Control Center access from the Lock Screen, and I have enabled the GPS features, to be able to trace the phone should it be stolen. Why did Apple engineers ...
0
votes
1answer
53 views

Sniffing external networks from a public network (place)

There is something that I can not understand. If you are preparing, building up an attack from a public place (coffee shop, restaurant ect.). How can you be tracked by law enforcement? I'm asking ...
0
votes
1answer
95 views

Is it possible to detect a keylogger, when placed? [duplicate]

Can you detect a keylogger when it is placed? Would it be possible to do that via a keyboard removed event, expecting the keyboard is not removed regularly? So that you for example get a pop-up/alert ...
-2
votes
2answers
69 views

Password hashing and blowfish [duplicate]

What I'm about to say is probably going to make me look like an idiot but it's better to be wrong and learn than have unanswered questions. Ever since I started dealing with passwords I wondered what ...
3
votes
2answers
59 views

Why does a nmap scan give different results depending on whether it's run from inside or outside a LAN

I am testing/setting up a Thompson TG585v7 router/firewall. Results when running nmap from a computer INSIDE the LAN $ sudo nmap -O 210.86.xxx.xxx Starting Nmap 6.40 ( http://nmap.org ) at ...
13
votes
3answers
712 views

Should I worry if my credit card payment processor's server allows only weak SSL cipher suites?

I tested their server using https://www.ssllabs.com/ssltest/ and, apart from the disappointing "B" rating (it handles financial transactions, after all), the server only allows the following two RC4 ...
-6
votes
1answer
37 views

Does an alternative approach to cryptography exist? [closed]

Is there an alternative approach to cryptography?

15 30 50 per page