3
votes
2answers
43 views

Why does gpg use /dev/urandom

Looking at the strace output of GPG on my box seems to show that it uses /dev/urandom when encrypting a message without any access to /dev/random even when --no-random-seed-file is specified. Are ...
0
votes
2answers
37 views

How to detect port scan on SIEM within LAN or same Network?

Let's suppose a host machine in the client environment has been infected and its performing port scanning on other machine within the LAN or same Network without passing through Firewall: On what ...
0
votes
0answers
6 views

XSSF cookie stealer not working

I am playing with XSSF with Metasploit and attacking Mutilldae(security 0). I was able to get the generic XSS inject working. The inject was added to the Mutilldae blog. However, when I try to get the ...
1
vote
1answer
9 views

How exactly should I interpret the term “Hybrid Cloud”?

The CISSP CBK definition says that a hybrid could is a mix of public and private. But what exactly does it mean? Is it more a conceptual idea:If you use both a public and a private your company is a ...
8
votes
3answers
747 views

Someone registered a domain name with the IP of my VPS

I rented a VPS server to run my website a few month ago. Today, I looked at the /var/log/apache2/access.log and noticed a strange line : 192.0.2.123 - - [02/Aug/2015:05:21:29 -0400] "GET / HTTP/1.1" ...
-5
votes
1answer
27 views

How long does it take to execute a DoS attack on a PC using the ping… -t CMD command?

Suppose the target of a Denial of Service attack is a PC on LAN with IP 192.168.1.10. Then, I can continue to ping the target by running the ping command in an infinite loop in CMD, that is, by ...
-1
votes
1answer
52 views

Password Hashing SELECT (PHP)

Is it possible to select a hashed and salted password from MySql DB only using the posted password? If so, how? If I hash the password this way: $password = "blabla"; $hash = ...
30
votes
10answers
27k views

DDoS - Impossible to stop?

Is it possible - in theory - to stop1 a DDoS attack of any size? Many people claim it's impossible to stop DDoS attacks and tell me I just shouldn't mess with the wrong people on the internet. But ...
3
votes
1answer
22 views

HTTP Caching Headers: private vs no-cache

We're currently reviewing our set of "no-cache" security headers. Header set Cache-Control "no-cache, no-store, must-revalidate Header set Pragma "no-cache" Header set Expires 0 Besides the ...
20
votes
6answers
13k views

Is this “Domain Registration Service” email a scam?

I received an email to the email address listed on our website (it's a generic info@ourcompany.com to help "weed out" spam, whereas each employee has something like andreas@ourcompany.com to which I ...
-3
votes
2answers
46 views

Mission Critical Security

I thought that if TLS is well implemented that is sufficient for security. Today I analyzed PubNub (Global Data Stream Network) and found these steps for security: communication over TLS AES-256 to ...
8
votes
5answers
5k views

Webserver logs show someone is trying to hack my site, what should I do?

It looks like someone is trying to hack my site. The following comes from my IIS log files: #Software: Microsoft Internet Information Services 7.5 #Version: 1.0 #Date: 2011-07-03 00:02:39 #Fields: ...
0
votes
1answer
30 views

What are specific use cases for anonymity?

There are various technologies for anonymity online, most notably TOR, but also I2P and VPNs, as well as simply using one-shot email addresses. What are the specific use cases for anonymity? I'm not ...
2
votes
1answer
29 views

Keypass - Needle in a stack of needles

I got the idea from someone saying the best way is to hide the needle in a stack of needles, not in a haystack. I am considering writing a little app to accompany my Keepass installation. The app ...
1
vote
1answer
34 views

Why is brute forcing DH private key harder than calculating public key?

Assuming shared parameters: prime p base g Alice's private key is a and her public key is A, which is g ^ a mod p Calcuating A requires g * g * g... a times. Modulus is applied whenever necessary. ...
0
votes
0answers
3 views

How to submit IIS created CSR to StartSSL certificate provider? [migrated]

I'm in process of setting IIS server up with free SSL certitificate from StartSSL. I'm new in this domain. StartSSL seems to be legit to me. My question is regarding point 7 on there website The ...
0
votes
3answers
59 views

Security RESTful web application in Java

We are developing two web applications: Application A : Restful web-services running on a GlassFish Server . Application B : Dynamic web application running on a Tomcat Server . I am accessing ...
1
vote
0answers
17 views

Reflected XSS via $_FILES

Is it possible to perform a reflected XSS attack via the $_FILES variable? The vulnerable code I am imagining might look like this: echo $_FILES["file"]["name"]; I read that it's not possible to ...
1
vote
3answers
42 views

What benefit to use different encryption key (passphrase) for different customers?

When we store confidential information in our database, we encrypt it using AES. In addition, when customers install our product, they protect their machines using a firewall. Should we use different ...
6
votes
4answers
987 views

Why can't Windows 98/IE5 connect to HTTPS sites in 2015?

Recently I found an old installation CD for Windows 98 Second Edition, and looking for a bit of a nostalgia kick, I installed it inside VirtualBox. Win98SE shipped with IE 5.0, and browsing the web ...
28
votes
3answers
4k views

What security scheme is used by PDF password encryption, and why is it so weak?

Many PDFs are distributed as encrypted PDFs to lock out some of their functionality (eg printing, writing, copying). However, PDF cracking software is available online, which usually cracks the PDF ...
0
votes
0answers
36 views

How to validate my Chrome Security Extension

I have developed a privacy preserving extension in Google Chrome for my project in which I can spoof user agents, via header, X-Forwarded-For and other headers. For my project defense I have to ...
0
votes
1answer
54 views

{PHP} SQL Injection [duplicate]

I have this PHP code: <?php (...) function escape($str) { $ret = ''; for($i=0;@$str[$i];$i++) { if($str[$i]!='\'') if($str[$i]!='\\') if($str[$i]!='"') if($str[$i]!="\r") ...
0
votes
0answers
19 views

Rasberry Pi with TRESOR immune to cold boot and DMA attacks?

I would like to set up a Rasberry Pi and connect a large USB Harddrive and some webcams to run motion for homesurveillance. If I am understanding everything correctly if I get Ubuntu mate to run with ...
45
votes
2answers
6k views

How exactly does the Stagefright Vulnerability work on Android?

Digital Trends describes the Stagefright Vulnerability thus: The exploit in question happens when a hacker sends a MMS message containing a video that includes malware code. What’s most alarming ...
0
votes
0answers
19 views

Enterprise message bus encryption

I'm contemplating using Amazon's Simple Queue System as the basis of an enterprise message bus. According to Amazon, the contents are not encrypted, which means the application(s) will have to handle ...
5
votes
2answers
90 views

Do ISP Detect and Block Pen Testing Tools?

I one of the earliest books I read on security - The Basics of Hacking and Penetration Testing (978-0124116443); the author emphasized that you cannot use these Penetration Test Tools over the ...
1
vote
1answer
20 views

How is a exploit code mmaped in user space executed in kernel space?

I am reading about a Ubuntu-12.10 security exploit CVE-2013-1763 which describes the vulnerability of stack buffer overflow that can be exploited to escalate privilege of a process and gain root ...
1
vote
2answers
533 views

Booting into Live USB Linux

If I have a Live USB Linux stick and I plug it into a computer which is not connected to the internet and boot the computer using the Live USB stick. How secure is this interms of not leaving any ...
2
votes
2answers
54 views

Checksum Calculation for Source Code tar balls downloads

Http sites like OpenSSL provide checksum for each source code tarball available for download HTTPS sites like GitHub usually do not provide checksum with 'download zip' option. Some sites although ...
0
votes
0answers
9 views

Configuration panel videotron [duplicate]

At the moment I am living in an apartment with some other people. We are students and we will start school in Canada. One guy took internet with Videotron, he manages the internet and we just give ...
4
votes
5answers
248 views

Is encryption possible at the physical layer?

When we talk about encryption in relation to the OSI Model we usually hear about encryption at Application (Email - PGP), Transport (SSL), Network (IPSec) and even Data Link Layer (WPA). But I have ...
3
votes
1answer
45 views

Malicious RCE functions in CGI and Java

I know there are some functions in CGI and Java that can be abused to perform remote code execution attack. For example we can see abuse of "eval" function in Movable Type CMS: sub ...
1
vote
1answer
80 views

Confusion regarding PCI compliance in an office

We use myvirtualmerchant.com (previously Converge, owned by Elavon) to process payments in our doctor's office. Recently, they emailed us that we have to fulfill their partner company's (Trustwave ...
1
vote
1answer
52 views

Am I encrypting and storing an array of user-details correctly?

I came up with a user-details-storing procedure that was, in the beginning, based on actual security-literature – but then I just kept writing without really doing all the cross-checking I should have ...
1
vote
3answers
134 views

How does Facebook really identify requests?

Today I have discovered something very strange. It seems like Facebook is playing some kind of unfair game for identifying one's online identity. So, here is what I have done: I have a regular ...
0
votes
0answers
88 views

Wifi Card Removed, computer still shows data packets sent/received [migrated]

I have purposely removed the wifi card on my macbook in order to work offline securely. The "Activity Monitor" still shows packets are being sent/received. How is this possible? Of particular ...
2
votes
1answer
213 views

WLCTL protocol detected by sniffer in an Android tablet

I detected that my rooted Android tablet had a slow connection. Trying to find what is taking the bandwith, I installed a firewall (DroidWall) and I blocked all the applications thinking that one of ...
0
votes
1answer
52 views

Repeated security questions after remote key has changed

I reinstalled one of my machines and gave it new ssh keys, which should yield warnings when I connect to it from a machine I have connected from earlier. First I get the big warning that the remote ...
9
votes
5answers
2k views

SIEM system, what are the benefits?

Each person in the company has a unique username/password, and nobody should log in with his username/password but him. I want a program that would inspect the logs that includes a list of all the ...
1
vote
1answer
32 views

Difference between X-Forwarded-For IP, X-Real-IP, VPNs and TOR

I have this Google Chrome Privacy Preserving Extension that I am working on. Where I can spoof the header information e.g user agents and else. When I spoof X-Forwarded-For IP and go to ...
0
votes
3answers
58 views

Advantages to alphanumeric-only usernames?

Let's say we are setting up some registration form for some website. I know that if input fields aren't sanitized then SQL injection can happen. But let's say all fields are sanitized correctly. Is ...
0
votes
0answers
14 views

Bluecoat sc-filter-result: DENIED but s-action: ALLOWED [migrated]

I have a bluecoat server which sometimes creates rows which don't make sense: { ... "sc-filter-result": "DENIED", "s-action": "ALLOWED" } How is it possible to be both DENIED and ALLOWED?
2
votes
2answers
93 views

Are there any ways to defraud a fundraising site?

I have developed a many e-commerce stores for clients over the years; almost all of them selling physical products. Recently, one client in particular was repeatedly getting hit with fraudulent ...
0
votes
0answers
23 views

How to prevent injection attacks against a large number of powerscript scripts

I have a large number of scripts with code looking like this: task "$argument" Which is then called by: powershell.Runspace.SessionStateProxy.SetVariable(argument, UserMadeValue); ...
1
vote
1answer
25 views

Detecting the source of dll injection

Is it possible to determine the process that performed DLL injection against a victim process?
5
votes
4answers
2k views

Self-signed certificates not working over Internet?

My self-signed certificates are not working over Internet. What can be the problems? Here are the setup details: I have a Windows Virtual Machine in Azure with IIS, and a self-signed certificate ...
0
votes
1answer
56 views

Practical steps for encrypting an encryption key for data stored in MySQL

So I'm working on my first project where user data is stored as encrypted using the user's password as (part of) the key. I have read many similar things about best practices, but the details seems to ...
1
vote
1answer
45 views

Could a spoken (TTS) SMS-based 2FA be intercepted?

In mid-June, Lastpass made news again, and I've since been mowing around the idea of two-factor authentication. After familiarizing myself with SMS and Google Authenticator, I thought the SMS was a ...
4
votes
1answer
76 views

What kind of attacks can target static resources?

Static resources and their caching interests me from the security perspective. Let's say we have an .jpg file requisted from the origin -> going through a reverse proxy with caching -> reaching the ...

15 30 50 per page