0
votes
0answers
3 views

Is my ISP trying to impersonate google?

Everything has been well for years and today i Wake up with this: https://www.dropbox.com/s/om51ibfr3zjwlnq/GoogleOrange.PNG?dl=0 A warning on EM Client (also got the same on my IPhone) that the ...
0
votes
1answer
10 views

Clarifications sought about SSL cert signing process

Currently I have a cert (signed with SHA1) expiring soon and I have extended its expiry incorporating SHA2 signing algorithm. I have done this by creating another CSR using certutil command with the ...
1
vote
2answers
15 views

Secure communication in SHTF

I am a prepper. I am preparing for a situation where there will be no rule of law and where I can't rely on the government for all my needs. This naturally involves storing food, water, and items for ...
1
vote
2answers
28 views

Javascript phishing attack sucker: Do I need to be worried?

So, I'm an idiot. I opened a javascript phishing attack file. I would really, really appreciate some help with decoding the Javascript to figure out whether I'm in trouble, and what sort. I'm on OS X ...
2
votes
1answer
32 views

Are images created with commercial software stamped with identifiers that can be traced back to a serial number?

To the best of your knowledge, do images created with Photoshop and/or other commercial software embed any bits of information that can allow someone (governments, security agencies?) to trace the ...
1
vote
3answers
37 views

Email injection in simple terms?

Can someone explain why spammers use email injection? I am a victim and was wondering if there was any other malicious point besides annoying me and filling up my e-mail?
1
vote
0answers
19 views

Vault Secret server best practices

Recently Hashicorp released a secret management solution called Vault. Which is a free and open source general secret storage, acting as a vault for passwords, encryption keys, and hash salts. I am ...
2
votes
2answers
56 views

Why can I sign but not encrypt?

-edit- After following a chain of links from this question I see this is similar/duplicate of Why should one not use the same asymmetric key for encryption as they do for signing? but this question ...
-3
votes
1answer
39 views

How do i make a phone number authetication system for my website?

I really need to prevent users from create multiple accounts. So i was thinking about making a phone number authetication system. Where a user signs up, a 4 digit code is sent to their phone and they ...
-2
votes
0answers
18 views

Setting up domain with Raspberry Pi

I'm working within a a center and i have 1 day to set up a domain with a raspberry pi. The center is limited on money and resources so i need to make the cheapest domain possible. Its for working ...
1
vote
1answer
32 views

Does a solution exist for transferring large files across a network that is faster, yet just as secure as scp?

I'm posting this here rather than unix/linux, because the primary deal breaker here would be a deteriorated security layer. I'm wondering if there are (noticeably) faster solutions available for ...
1
vote
1answer
64 views

Any standard tests to prevent hacking? [on hold]

I am very new in programming world so my question may sound weird. I am useing selenium to test an application, yesterday one of my colleagues found this issue that if someone enters this: <script ...
1
vote
0answers
18 views

Are all homomorphic encryption schemes not CCA secure? [migrated]

Homomorphic encryption is hyped by computer sciences because it offers great potentials. For example you can perform cloud based calculation while nobody gets to know you data. I am wondering if ...
1
vote
1answer
34 views

Securely hide OS independent a directory using java

I have a project to do for my master's degree and I need to do a Java app which loads a file (read some attributes and copy the file to a working directory), basically any file, and make the working ...
13
votes
4answers
901 views

What layer is TLS?

TLS stands for "transport layer security". And the list of IP protocol numbers includes "TLSP" as "Transport Layer Security Protocol". These two things would leave me to believe that TLS is a ...
1
vote
1answer
32 views

Safety of routing a network to a firewall

I am studying for my CompTIA Security+ qualification and have come across the following question. Question : You are implementing a testing environment for a development team. They use several ...
0
votes
0answers
26 views

How aircrack-ng test passphrase

I'm new to Kali Linux and other related stuff/ I want to crack a WPA2 connection using aircrack-ng. So, I have already captured the handshake file (.cap) with airodump-ng and already have a ...
2
votes
2answers
72 views

As a user, how can I defend myself from disclosed unpatched zero-day vulnerabilities?

In the wake of the Hacking Team breach on July 6th, 2015 [1] [2] I heard that some previously unknown zero-day exploits might surface (apparently one for Flash already has). Once these exploits ...
0
votes
1answer
32 views

Difference between authentication, integrity and data origin authentication

I first thought all these terms were synonyms, but I sometimes see those terms used in the same document. For instance, on MSDN: data origin authentication, which enables the recipient to verify ...
1
vote
1answer
44 views

What are those http://123.249.24.233/POST_ip_port.php POST requests I get on my server?

I receive a lot of requests on my Node.js server, which I don't understand. On the picture, there are phpMyAdmin-oriented requests, that I understand as automated testing against phpMyAdmin. But I ...
8
votes
1answer
1k views

Does restricting the names of computers allowed to connect to a wifi network provide any security

In response to a statement elsewhere that MAC address filtering was essentially useless for protecting a wifi network because it was trivially by passable by network attack tools, I was asked if the ...
0
votes
0answers
7 views

How to tell if Bluetooth EDR is used

I have set up Ubertooth in combination with Kismet and Wireshark in Santoku Linux in order to sniff Bluetooth traffic between an Android device and a Bluetooth peripheral. I have opened the ...
1
vote
1answer
25 views

Detect SSH InBound / Oubound Connections

I'm noodling with the idea of managing SSH connections on Linux server using a program (not sure what it will be written in yet) that monitors inbound and outbound connections. Is there a way to ...
0
votes
0answers
19 views

How safe is it to use the Sony SWR30?

I'd like to buy the fitness tracker Sony SWR30. The tracker itself sends data to Apps on the connected Smartphone. The default app is "Sony Lifelog". Does this app store the data locally only or ...
-7
votes
1answer
25 views

SMS recived from number [on hold]

i am reciving SMS from particular number,how do identify them as they have barred incoming calls please guide me regards Dr srinivas
1
vote
1answer
34 views

Is it possible to use obtained wildcard certificate on more than one server?

We are using two Debian servers in our company (with apache 2 as httpd) and our services are split between those two of them. One server has the website, the other has some minor sites under ...
-5
votes
0answers
24 views

Performing an attack on Dynamic IP

If a person uses a Dynamic IP , how will i perform any type of attack on it , if the IP changes every time ? Even if i know his IP i am not sure whether i am performing this attack on the victim of my ...
-2
votes
2answers
40 views

Blocking an IMEI

I have lost a phone and I would like the network operators to block the IMEI of this phone at least in Romania, the country in which I am located. I can bring documents justifying that the phone with ...
-3
votes
0answers
38 views

Insert hidden link in Skype

Recently I have received a link from one of my Skype contacts (obviously infected). The link looks like an Instagram one, but points to another site. How is it possible? Can I create a similar ...
3
votes
1answer
49 views

Android disk encryption

When is the data on an Android phone encrypted? I am assuming here that the device is configured to have full disk encryption enabled. Is it only encrypted when the device is powered off and ...
1
vote
0answers
67 views

Alternative for validating the identity of an employer?

We are designing an application where we need to register and validate the employer's (company's) identity. Our system already has some information about all employers that want to register with us. ...
2
votes
0answers
29 views

Webserver | IIS | Configuring to not run certain files

I currently have a webserver running Windows Server 2012 which is running IIS as its webserver and using PHP. Lets assume the a user is able to upload a trojan onto my server, either through a ...
1
vote
0answers
31 views

Is it secure to use pbkdf2 for both password hashing and key generation

I'm writing a password manager, right now for each individual site, I already used master password + random salt with PBKDF2 to generate encryption key to encrypt its password (each site has its own ...
2
votes
1answer
37 views

How to implement encrytion/decryption system using IV between mobile app and web service

In my app we are going to send encrypted data to the web service. I am using the following code to encrypt and decrypt the data - public class DecEn { private static final String password = ...
1
vote
1answer
37 views

Sandboxing untrusted user-supplied code in a web application

I am trying to create a programming game where user-supplied programs compete in battle simulations, to be used as a tool to teach and practice programming. (It will likely be a turn-based robot ...
0
votes
0answers
29 views

SSH on metasploit does not work [on hold]

I have a jailbroken ipad and I have open ssh on it put when i exploit it on metasploit I have got this error (on image) how to solve it ?? thanks
0
votes
0answers
24 views

Get root on MediaTek powered Hisense TV [on hold]

I am looking for methods to get root on my Linux smart tv. Anyone have any ideas? I ran metasploit against it and had no luck, it did find some open ports for upnp and something called twonkymedia ...
2
votes
1answer
62 views

Wi-Fi monopolizing bandwidth technique? [on hold]

It seems like my brother is consuming all the internet available since when he is on his device (ipad) I cannot connect to the internet (or I really lag). Is there a way, via software or hardware, ...
0
votes
0answers
26 views

Potential security issues in a two-part upload process

I use a pre-signed URL approach for uploading files to a private S3 bucket. A CloudFront distribution is configured to use this bucket as the source. The upload process is only available to ...
16
votes
8answers
2k views

Is there such a thing as public key steganography

One of the drawbacks of traditional steganography is that both parties need to exchange a secret key. Encryption had this problem too but circumvented this with public key cryptography. Are there ...
3
votes
2answers
103 views

Should I set a password for 'root'@'localhost' in MySQL?

The 'root'@'localhost' MySQL account can only be accessed by someone currently on the server hosting the MySQL server. Assuming that only the person or persons who are in charge of the MySQL server ...
1
vote
0answers
28 views

What are these hexadecimal .tmp folders in my windows root containing WiseCustomCalla dlls? [migrated]

A few minutes ago, i went browsing through my Windows folder to find the proper name of my flash version for http://decentsecurity.com/enterprise/#/flash-force-update/. In my Windows root, I found 3 ...
0
votes
0answers
18 views

What are null certificates in Gnome Seahorse? [migrated]

In the "Default Trust" tab in Seahorse there are several personal certificates named simply "(null)", which are issued by "No name". There's nothing on their property pages. What are these? Can they ...
0
votes
0answers
35 views

Recommended short (128 bit) and fast checksum for deduplication? [migrated]

I am using MD5 for file deduplication. This is great since the files are from a trusted source, and they will not intentionally exploit the MD5 shortcomings. Later, I may accept untrusted files, and ...
2
votes
1answer
34 views

Creating a P2P hosted website

Is there a way to create a peer-to-peer hosted website securely without: - Having a connection between the developer (host) of the website to the website? - Securing some information the site uses ...
-1
votes
0answers
22 views

server to server authentication/authorization using OAuth2 or OpenID Connect. (no user involvement) [on hold]

I have a project that consists of a server that provides certain services through RESTFul API. I need to protect the service. The clients of this server are other servers, so there are no direct user ...
2
votes
1answer
38 views

Additional virtual security? [on hold]

Besides following VMware's security best practices, are there any other recommended security technologies that are aimed at security and compliance in virtual environments? Vormetric comes to mind, ...
1
vote
3answers
91 views

A neighbor is using a WEP encrypted router, should I inform them of the security risk? [on hold]

Someone in my neighborhood is using a WEP encrypted wifi router. I am not sure who they are yet, but if I find out, should I inform them of the security risks which that poses or are there any legal ...
0
votes
2answers
94 views

Is it possible to crack ransomware encryption if I have the original file?

Is it possible to crack ransomware encryption if I have 2 versions of a file: before and after the encryption? Are there any tools for such a thing?
0
votes
0answers
22 views

Can TTL field in IP header be used to locate the router nearest to the sender? [on hold]

Under the Internet Protocol, TTL is an 8-bit field. The TTL field is set by the sender of the datagram, and reduced by every router on the route to its destination. Consider we have TTL values from ...

15 30 50 per page