1
vote
2answers
3k views

Find the hack in the Apache2 logs?

The hack was a failure, as they were not able to put the created page as the home page. But we found recently a manipulated page on our website (via the rss). So I looked in the Apache2 logs and ...
5
votes
2answers
552 views

How might an email do damage merely by being opened?

E.g. http://www.dailymail.co.uk/sciencetech/article-2094982/Threat-new-virus-infected-emails-PC-DONT-open-attachments.html?ito=feeds-newsxml Assuming that the user clicks no links and opens no ...
6
votes
2answers
3k views

CSRF prevention in PHP

Two questions. Where does one download the PHP version of OWASP's CSRF Guard? The following URL says to check Git: https://www.owasp.org/index.php/PHP_CSRF_Guard All I see on Git however is ...
9
votes
2answers
9k views

Benefits to Arch Linux over Kali Linux

What are the relative benefits of BlackArch or other Arch-based distro over Kali? Are the tools broadly the same, or does one have better functionality in a particular area? Are there any other ...
6
votes
4answers
5k views

How to harden an iPhone/Android app so its tough to reverse-engineer it?

These are the following objectives I have in mind: Make the app hard to crack, as the binary will hold some secret tokens. If it still can be cracked, is there any way the app can tell someone or ...
7
votes
2answers
21k views

Javascript and jQuery not secure over https

I am building an ASP.NET MVC 3 app which will run in Azure. Everything was working well, until I switched to https. Now most of my jQuery plugins and some other javascript are not secure. I'm using ...
12
votes
2answers
361 views

Should a pentest report include the tester's opinion?

In this particular case, the webserver turned out to be a shared 3rd party system and was not tested. Examples: We do express grave concern at the overall security posture of that webserver and ...
11
votes
7answers
1k views

How are open-sourced operating systems and software kept secure?

I have been wondering about his for awhile. I have Linux running on a PC at home. I had a jailbroken iPhone. They both have attributes that make them very attractive, and they are also FREE! But I ...
7
votes
2answers
2k views

Revisting the Username Hash

There are a few questions which ask for inputs on the wisdom of storing (possibly salted) username hashes for the purpose of authenticating end user access to some information resource. Most of the ...
3
votes
2answers
1k views

how to make software reverse engineering difficult

In software reverse engineering, we use a dissembler, a debugger, and a code patcher. OllyDbg includes all. One of the differences between actual execution of a program and debugging through using ...
5
votes
3answers
880 views

Is this a symptom of an attack (DoS/DDoS)?

I work for an e-commerce website in my country and this is the second time we suffer an attack. At least, looks like one. We have a search functionality in our website and the supposed attacker is ...
5
votes
5answers
417 views

Does the method of Internet connection affect the security of your the network?

I was just visited by some door-to-door salesmen from a local ISP/TV/Phone provider. During our conversation, I raised some concerns about the fact that I knew their help desk techs had back-door ...
13
votes
3answers
387 views

Malicious QR Code and Mitigation

I just started reading a little on QR code, so I'm not entirely familiar with QR Code capabilities, but a thought crossed my mind today. I scanned a QR Code on a postcard I received, and it ...
2
votes
1answer
133 views

CSR generation origin?

Platform: Windows 7 x64 Development: .NET 4 Web Server: HttpListener (IIS not installed, will not be installed :) ) Can Machine A generate a Certificate Signing Request for Machine B and have the ...
3
votes
2answers
386 views

Computer-level logging by financial institutions

I am looking for the best approach to recognizing a specific computer and saving that computer as a "safe" login machine. My intuition points me to using cookies, but what value do I store in there to ...
0
votes
1answer
227 views

FoundStone scan + URI filtering

I have a server that is protected with a firewall with URI filtering rule. So if you go http://x.x.x.x/URIFilter/Something you will get to the server, but if you don't put URIfilter into URL or use ...
1
vote
2answers
4k views

Intercept Connections Instead of Forwarding (using arpspoof)

I am doing ARP Spoof experimentation with arpspoof and have successfully set up a man in the middle between two machines. We set up IP Forwarding using: echo 1 > /proc/sys/net/ipv4/ip_forward ...
7
votes
2answers
2k views

How to encrypt a password stored in a database (need to decrypt later)

I am working on a system that can connect to any number of different systems. Someone inputs the credentials for a system to connect to, and my system remembers the credentials and uses them to ...
2
votes
2answers
217 views

Design of a state machine model to solve conflict of interest in Computer Security

I need to design a state machine model to solve conflict of interest in computer security. [I know Chinese wall model but it is an information flow model] Are there any such existing models? Any ...
19
votes
2answers
6k views

How big should salt be?

I will be using scrypt to store passwords in my application. As such, I'll be using SHA-256 and Salsa20 crypto primitives (with PBKDF2). Having that in mind, how big salt should I use? Should it be ...
4
votes
2answers
3k views

Is viewing applied group policy on a client PC not considered a minor security breach?

A client on a company can run commands and view the Group Policy settings applied to his own account and computer. The commands are: gpresult (and all of its variants) rsop.msc In my opinion, ...
1
vote
2answers
170 views

What due diligence is required for HTTPModules that run within IIS?

I noticed some HTTP Handlers in my Web.config that appear to intercept HTTP traffic and manipulate it. Since there has already been an exploit with a similar component produced by Microsoft, what ...
5
votes
5answers
3k views

Robots.txt security strategy?

Is there a way to basically have an allow all policy on your top level domain, and any subdomains disallow all? I would rather that my public facing app servers not get indexed, but from what I can ...
5
votes
1answer
4k views

Is indirect access to a computer as bad as direct?

I'm deploying a web-based ERP system for a customer, such that both the server and the client machines will be inside the customer's intranet. I was advised not to allow the server machine to connect ...
9
votes
5answers
3k views

What is the problem with chain hashing?

Let's say that my password is a single character: "a". Couldn't I chain hash it 1000 (or more) times and make it nearly invulnerable to rainbow table attacks and brute force? Why isn't this ...
3
votes
1answer
824 views

DRY API Authentication Design Between Services

I am creating an API service that is going to require authentication. this will be the first part of a project that will include a front-end service for my website, and also open up the api for 3rd ...
1
vote
5answers
201 views

How to replace a constant identifier, for a resource on a network, with a variable one?

I guess the example can make it easier. Assume each Client on a network has an identifier(some alphanumeric sequence) which identifies it uniquely on the network. Each time the Client corresponds ...
4
votes
1answer
709 views

Summer Internships (for IT/Security/Networking?)

I know these are a common thing to do during the Summer semester for Computer Science students at large companies like Facebook, Apple, Google, etc. Are there similar internships available for IT ...
0
votes
2answers
250 views

What is Greasemonkey/Userscripts and how does it relate to IT Security?

I came across http://userscripts.org/ and learned that it is popular among web-users to install something called "Greasemonkey" to allow client side scripts to run. What are the benefits of ...
8
votes
4answers
6k views

How secure are the password files used by Password Safe and Password Gorilla?

Password Safe and Password Gorilla are both programs to manage passwords. Both store a list of user passwords in a file, which is encrypted using a master password. They use the same file format, so ...
4
votes
5answers
4k views

Is running an erase tool after an OS install sufficient to ensure no data from the old install is recoverable?

How secure do you consider this process? A drive has data from a previous OS installation. A new OS installation is made on the drive, and Heidi Eraser is run on free space. What are the chances ...
5
votes
2answers
761 views

How can I restrict users' connection attempts to my FTP server?

Is there any way possible to restrict user to make a connection to the FTP server on my Windows XP computer? I have an FTP server established in Windows XP and now I want to make access to that FTP ...
0
votes
1answer
937 views

PAP and CHAP implementation using Java

I want to implement PAP and CHAP based authentication in my Java project how can I implement ? is there any API available in Java for using that protocol ?
1
vote
1answer
115 views

Detecting and Responding to Email Account Compromise (regarding FINRA 12-05, ISAC/IC3 alerts)

FINRA, the ISAC and IC3 issued an alert regarding e-mail based attacks that attempt to obtain client contact information. They then use social engineering / persuasion to complete the attack. What ...
2
votes
4answers
409 views

Clickjacking: can't browsers just forbid/reject placing transparent elements over frames?

Why not? Seems like this is only used for clickjacking, the solution should be simple enough.
9
votes
3answers
256 views

would threat modeling help in scanning code?

threat modeling would definitely help in determining the test cases and where to fuzz but my question is specific to code scanning. Would threat modeling help in focusing/prioritizing or any way ...
2
votes
1answer
454 views

How to reverse engineer w32/malware!gemini?

How would you go about reverse engineering malware W32/Malware!Gemini. Recently I found it installed on my computer and would like to trace where the data is being sent.
6
votes
3answers
152 views

Should I make sure to get all of my OpenPGP uids are signed?

Should I make sure that I get all of the uids associated to my OpenPGP key signed, or is it enough to have one of them signed? If Bob can guarantee that alice@example.com belongs to Alice, I can't ...
2
votes
3answers
135 views

I want to implement a new type of security feature over several platforms

I want to make a security feature that will go farther in discouraging people from looking through a secure system or server than what I have seen being implemented. Specifically, is there a way (or ...
7
votes
4answers
920 views

if the hypervisor is hacked are all guests affected as well?

I'm guessing that all guests would be screwed, if the hypervisor is hacked. I found this article, but it seems to be more focused on privilege escalation of guests. I'm more interested to hear about ...
8
votes
1answer
2k views

Is it possible to have stateless server nonces in HTTP Digest

When implementing a HTTP Digest server, there's the issue of nonces. Server nonces (as opposed to client nonces) must be issued by the server may be re-used by clients as long as the server allows ...
4
votes
2answers
558 views

Using intranet SSO to access sites hosted on public cloud

We are thinking to move some of our intranet sites to public cloud. Is there any way to keep using company SSO to authorize access to those sites from the company intranet?
4
votes
3answers
3k views

Reverse-engineering one-time passwords for two-factor authentication systems

Given a one-time password generator that is time-based (such as Google Authenticator), how many instances of (time, PIN) pairs would one need to significantly weaken the algorithm to a point where one ...
7
votes
5answers
10k views

Prevent network users from creating an unauthorized outgoing VPN connection to avoid network policies

Is it possible to prevent network users from creating unauthorized outgoing VPN connections to avoid network policies? Edit- What is the best way to detect unauthorized outgoing VPN connections while ...
40
votes
6answers
129k views

Can I determine if my computer has a key logger installed?

A friend of mine just started a job at a security sensitive company. They've provided him with a laptop with Windows XP Professional installed. He's heard a rumor from other employees that the laptops ...
2
votes
1answer
3k views

Something causing Sonicwall to throw Smurf Amplification Attack Warning?

I set up a new laptop recently and, after installing various developer tools, it started causing our Sonicwall firewalls to issue an alert email whenever the laptop connected to the network. The ...
3
votes
3answers
762 views

Android Pen Testing

I have been pen testing a random android app that uses POST method to send data to a remote server using HTTPS. I have set up a proxy and am able to intercept the traffic, however the POST method ...
3
votes
3answers
203 views

What is the worse that could happen if a government wanted to interfere with a CA?

In our time of SOPA, PIPA and ACTA, I was wondering what could happen if a government wanted to remove the certificate of a website ? CA are companies, so they would have to obey to instructions from ...
0
votes
1answer
339 views

Do Auditors use a specific methodology or framework when auditing IT Backup policy? [closed]

I am wondering if IT Auditors use a methodology or framework to audit a backup policy. Here is a example of a different kind incase my question does not make sence: ~~~~~~~~~~~~~~~~~~~~~~~~~ A ...
2
votes
1answer
755 views

Token Based Authentication & Pass-the-hash Attacks

Do token-based authentication solutions (such as RSA SecurID) mitigate tools like incognito and/or pass-the-hash tools?

15 30 50 per page