0
votes
0answers
14 views
Is it possible to crack a TrueCrypt container based on its previous file versions?
Assume that a user syncs a TrueCrypt container to a service like Dropbox, which remembers previous file versions. Would it be possible for someone to crack the password of a TrueCrypt container by ...
0
votes
0answers
18 views
How to setup ICMP or DNS tunnel
I have only one PC, so I can't setup my own server for tunneling. Is there any server around world to help to setup my tunnel, or any free server available around the world which gives me permission ...
3
votes
1answer
27 views
Credit card data security - hashing, truncation and encryption
A question with a similar title has been asked before, but it doesn't answer my specific question here. PCI DSS permits storage of truncated and encrypted data, or hashed and encrypted data. It ...
1
vote
1answer
90 views
Safety of publishing last 4 credit card digits in age of fast computing?
How safe is it to make public the last four digits of a credit card?
Credit card numbers have a specific format. Digits tell you what type of institution issued the card, what bank issued the card, ...
0
votes
0answers
21 views
What's the most secure way to use the internet with OS X?
I'm looking for a very secure, yet still reasonably functional setup for my Mac. Currently, I'm using Mac OS X with Little Snitch and VMware Fusion on my Macbook Pro. By using Little Snitch, the only ...
0
votes
0answers
22 views
What kind and how many Certificates are needed? [migrated]
I have 3 ASP.NET-Web.Api Applications communicating together over https:
Master on Server1
Slave1 on Server1
Slave2 on Server2 (Slave2 is basicly an other instance of Slave1 installed on another ...
-2
votes
2answers
76 views
Is there a self destructing HDD (set in BIOS) that I can buy as a casual customer? [closed]
Is there a self destructing HDD (physically destruction) that will destroy after a certain time, or when I use some software to initiate its self-destruction?
I guess it need to be set in BIOS or on ...
0
votes
2answers
39 views
No single quotes is allowed, Is this SQL Injection point still exploitable?
The SQL phrase looks like this,
"SELECT * from XX where id = '" + id + "'"
The id variable comes directly from the GET parameter named id.
And the Java web app explicitly disallowed single quote. ...
2
votes
1answer
60 views
Why isn't TLS just called SSL v 4.0?
SSL and TLS seem to be somewhat interchangeable. So much so that they are generally lumped together ("SSL/TLS") when referring to HTTPS and other services. Its almost as if TLS is version 4.0 of SSL. ...
0
votes
0answers
14 views
API authentication without Oauth2 server
I have an API that needs user authentication. It is the same way Google authenticates when you use their API to access user data. I really don't want to setup an oauth2 server and I want user to login ...
1
vote
0answers
31 views
Is this exponentation or bitwise XOR [migrated]
I'm reading about SRP from this page and came accross the line that says a party computes
v = g^x
I am unfamiliar with reading cryptography texts. Does this mean gx, or g ⊕ x?
1
vote
1answer
30 views
How to manage passwords in a multi-tenant surrounding?
I am building a multi-tenant application in a shared database model. I would like to encrypt sensitive data so that only a particular tenant could have access to his data. What is the best mode to ...
1
vote
2answers
44 views
How can I create a secure password?
I know the standard tricks, create a long password, numbers, symbols, capital letters, etc. My questions is how do I judge password security.
I heard different tricks to make secure passwords. For ...
0
votes
1answer
41 views
Man-in-the-middle attack over an encrypted channel
I learned recently about man-in-the-middle attacks and came up with this question.
Let's say we have two computers who try to communicate over the network. Each computer has an encryptor and a ...
-2
votes
2answers
34 views
RSA algorithm: How to enter the multiplicative inverse to wolframalpha? [closed]
I'm trying to enter step 5: Compute d, the modular multiplicative inverse of e (mod φ(n)).
How do I enter this in WolframAlpha?
http://en.wikipedia.org/wiki/RSA_%28algorithm%29#A_working_example
-1
votes
1answer
62 views
personal studies to become a security expert [closed]
I'm a little late, I'm 21 always been interested in IT and this past year I've looked here and there for computer security, but I don't have a diploma.
I never had any idea on what to do in my life ...
1
vote
2answers
47 views
If a user visited a malicious website a year ago, should we nuke from orbit to be safe?
A Microsoft Security Essentials virus scan just finished on one of our computers and it shows two potential threats in Internet Explorer's temporary internet files:
Web page with Black Hole Exploit ...
-5
votes
4answers
79 views
How to physically destroy my desktop/laptop HDD using only software? [closed]
Is there some software "one click" solution app that will destroy my HDD (forever) when I e.g. run the app and enter a password?
I would prefer Windows application (could be piad, no problem with ...
2
votes
1answer
42 views
Auditing, accounting, logging, and accountability… What's the difference?
Let's first look at the book Microsoft Windows Security Essentials:
... the three As (AAA) of security: authentication, authorization, and accounting
... they combine to contribute to reliable ...
0
votes
1answer
48 views
How does does the “Sign out all other sessions” feature work in Gmail?
In Gmail, at the bottom of the screen if you click Details it will show you your recent account activity and there's a button to sign you out of all other sessions. How does this work? Are they ...
0
votes
0answers
51 views
Is it safe to connect mobile devices to rental cars? [duplicate]
Many modern cars feature Bluetooth connections and USB ports that allow passengers to connect them with mobile phones and digital music players (and smartphones, which serve as both). Is it safe to ...
16
votes
9answers
822 views
Is encryption in HTTPS done by the browser or by the system?
This may be a common sense question, but I am not able to find any documentation on this after searching on google for a long time
When browser makes a HTTPs request, does it encrypt the data then ...
4
votes
2answers
70 views
How to be sure content was generated on a specific software?
I am developing an open source software. This software generates content that is sent to a server for publishing. Anyone can get this software and generate content.
The API for publishing at the ...
4
votes
1answer
51 views
How to encourage responsible disclosure (and react appropriately otherwise)
As a conscious programmer, I put security as one of the core requirements of every product I develop. To prevent flaws from being introduced, I promote a culture of awareness (e.g. make sure that team ...
7
votes
2answers
308 views
Disabling CCTV/IP Cameras
@D3C4FF has asked a great question and I would like to follow up on that. Basically he had asked whether "[...] an attacker can identify if a CCTV camera is on/operational without direct physical ...
-4
votes
0answers
40 views
Method of the study of ctf [closed]
I am a university student of the computer science.I study c and java.I am interested in ctf and want to study it, but do not know what I should study.I want you to teach how you studied what you ...
-1
votes
0answers
16 views
App authenticating with Google
My iPad App uses an oAuth authenticator to get access to a user's analytics data on Google. After a welcome screen, users are shown the standard Google sign in page. The signup page is presented from ...
0
votes
1answer
54 views
Asynchronous vs. Synchronous authentication process
I'm currently developing a web application using Node.js (server-side JavaScript) and MongoDB (NoSQL database).
I'm at the stage where I have to design the authentication and I had a question about ...
0
votes
0answers
56 views
LophtCrack version 6.0.12 is not auditing my Administrator password
I am using LophtCrack on my Windows 8 OS. I was testing my password strength and the problem I am seeing it is not working it doesn't reveals me my Admin password, I've gave my half an hour.
I've ...
15
votes
2answers
471 views
Is there any way to tell if CCTV is on or not?
Is there any way that an attacker can identify if a CCTV camera is on/operational without direct physical access to the cable/camera?
If it is on, is there any way an attacker can tell if its being ...
2
votes
2answers
122 views
Allowing user to access password protected website without disclosing the password
A friend of mine has the following problem. She is an accountant and her clients frequently give her their login credentials so she could download their accounting data from various financial ...
6
votes
3answers
130 views
Vulnerabilities with DB backed session tokens
A user logs in and is given a session token. This token is also stored in a database on the server. The user includes this secret token with each request, and the server will pull it from the DB to ...
-1
votes
1answer
63 views
After salting my passwords, are they protected against dictionary attacks? [duplicate]
I use sha1() to hash my users passwords, but recently a friend told me that if someone get the hash then they could use dictionary attack and he recommended using salts.
I implemented a random salt ...
-1
votes
0answers
8 views
vpn connectivity issue with my Windows 8 pro? [migrated]
I have vpn connectivity issue. I want to established my connection, i am getting IP address etc but unable to connect with my Windows 8 pro but working fine with windows XP. I am using uk VPN
0
votes
0answers
28 views
Windows xp sp3 client fails decrypting application data after SSL Handshake done [migrated]
I am trying to make WPA2 authentication on windows client using PEAPv0 as inner authentication method. I am able to make the handshake and establish the tunnel. When I send the first application data, ...
0
votes
1answer
67 views
What method of secure erase is sufficient for MacBook Pro SSD Drives? [duplicate]
I would like to securely erase the hard drive of a SSD in a MacBook Pro. The Disk Utility does not give me the option to wipe this drive even when I boot into the System Partition. (it is greyed ...
-7
votes
2answers
91 views
Can a person be tracked when he spoofs both his ip as well as mac address? [closed]
just thought of that?Can a person be tracked when he spoofs both his ip as well as mac address using some tools and tries to hack or send a email?
6
votes
1answer
380 views
Working out how to decrypt encrypted string when knowing the plain text
I have access to a system which I have been asked to create a data export routine for. However, the address details are encrypted and the original sourcecode/password are lost.
However, I am able to ...
6
votes
1answer
113 views
Build a secure channel without SSL/TLS
I'm looking at possible options to build a secure channel between multiple embedded devices with limited cryptography capabilities and an HTTP server (It could be some sort of web service).
1. ...
-2
votes
1answer
37 views
Using Old version of mysql connector's security issue [closed]
I'm using asp.net 4.0 and MySQL. Last week my hosting firm changed security level of from full to medium. MySQL connector doesn't work correctly anymore. For this reason I'm using old version of ...
-2
votes
0answers
47 views
How to implement Korea's SEED algorithm in Java? [closed]
While reading about the SEED cipher in java documentations, I came to know about this Korean SEED algorithm. Can anyone help me to implement it in Java?
I have used AES for encryption and decryption ...
6
votes
1answer
59 views
public key distribution from a central server
I'm trying to code up a encrypted communication program. Originally I was thinking that I would use public key cryptography and then I would keep the public keys in a database where users could query ...
-9
votes
0answers
57 views
Noobee help [closed]
So I've purchased an unlocked Android (S6500) GSM, quad freq and am planning to take it to Italy to use on their TIM network..
There are no SIM's inside, rather 2 empty slots. I put in the SIM from my ...
2
votes
2answers
59 views
Virus Removal Boot Disks — a few questions
I'm new to working with and using a backdoor/virus with a boot disk.
Can they be mounted to a USB drive?
What options are out there and what should I look for in one?
Are they practical?
Do they ...
6
votes
3answers
94 views
How to fuzz proprietary protocol over SSL?
I'm doing vulnerability research on a client/server architecture that uses a custom proprietary protocol sent over SSL (port 443). I need to be able to intercept the traffic, and be able to view it in ...
4
votes
3answers
88 views
RSA key length vs. Shor's algorithm
I have just read a passage in Zeilinger's book about quantum world.
My question is:
Suppose there exist quantum computers. Given that a quantum computer can use Shor's algorithm,
what key length ...
-5
votes
1answer
51 views
Spam mail from my yahoo mail [closed]
Couple of days back spam mail(screenshot link) was sent to all my contacts from my yahoo account, and in my account activity page there is a yahoo partner logged in, from Peru (screenshot link) during ...
3
votes
2answers
130 views
Is revealing your residence physical address when browsing the web a security risk?
I live in a large apartment building that provides a wireless service for residents. All of that traffic goes through a proxy server, and the domain name on that server contains the name of the ...
2
votes
1answer
61 views
HTTP Basic Auth is enough?
I have WebSVN, Gitlab and phpMyAdmin hosted on my dev server. Now, all of it, I password protect the pages (not their individual login) using HTTP Basic Auth, is this the best practice that I can do?
-3
votes
4answers
90 views
Why is data privacy important? [closed]
I am finding it difficult to motivate the importance of data privacy when speaking to both more or less technically inclined people. Since selling the idea of security is a fundamental precondition to ...
