-1
votes
0answers
14 views

Spamming on viber

In general I don't use viber much, but today it went crazy. In less than 5 hours I got 3 spams. When I get notification on my phone and look at it, it says that the sender is 'ADS'. Obviously, I don't ...
1
vote
1answer
84 views

return-to-libc can't get the system function address

I'm trying to exploit my own code, just to learn how the "return-to-libc" technique works. I'm following a tutorial which basically says that to use this, I must find the address of the function I ...
32
votes
5answers
4k views

What can a company do against insiders going rogue and negatively affecting essential infrastructure?

In 2013, a Citibank employee had a bad performance review that ticked him off. The results were devastating: Specifically, at approximately 6:03 p.m. that evening, Brown knowingly transmitted a ...
1
vote
0answers
21 views

Forensic image of a VPS

Is it possible to acquire forensic image of a VPS without rebooting it ? Are any signs to an end user that it's VPS was imaged by the VPS provider ?
3
votes
1answer
36 views

How can two-man control be implemented efficiently?

Two-man control can be a strong defence, but the overhead is a concern, as discussed previously. How can two-man control be implemented with minimal overhead? I would be most interested in a ...
5
votes
5answers
3k views

Why would someone want to encrypt RSS feeds?

I heard the idea of encrypting the RSS feeds using public key encryption system from someone and since then I am intrigued by the idea. But then I started to wonder what would be the basic need for ...
1
vote
1answer
47 views

How can a coffee shop block VPN connections?

So I am at a coffee shop and trying to connect to my VPN (the VPN is configured just fine) but the service seems to be disabled by the coffee shop's network. How can a coffee shop block VPN ...
0
votes
0answers
17 views

How can I use a VPN if the network is blocking the VPN connection?

Related to my earlier question about how can a coffee shop block VPN connections, how can I use a VPN inspite of their blocking it? I do not know how they are blocking it (hence the other question) ...
6
votes
4answers
224 views

Why does DISA STIG recommend “Deny access to this computer from the network” for Domain Admins?

For Windows systems, the U.S. DISA STIGs recommend enabling the Deny access to this computer from the network for the Domain Admins and Enterprise Admins groups: https://www.stigviewer.com/stig/...
4
votes
4answers
4k views

Block Incoming-Teamviewer Connection

Is it possible to use an open-source tool such as Cisco IPS or Cisco ASA to block incoming Teamviewer connections to specific internal IP blocks, while allowing the outgoing ones? I cannot find a ...
1
vote
0answers
20 views

Data overflow instead of hiding

I was wondering, if instead of using a private way (like browsing incognito or even using TOR), is it a decent idea to use a program that visits as much random websites as possible (with a bandwidth ...
0
votes
0answers
6 views

Are Multi device usage and bots in Telegram an excuse for only ssl encrytion?

Telegram's E2E encryption is not secure. See: Is Telegram E2E Still Insecure? and Is Telegram secure? Lets asume its is secure and talk about the "excuses" why E2E encryption is not always used. It ...
0
votes
0answers
11 views

Enterprise Digital Footprinting [on hold]

This is more of a market knowledge question. I want to perform a digital footprinting for my enterprise which is pretty big. I know RiskIQ provide this service, is there any other player in the market ...
1
vote
1answer
35 views

Does a virtualised Windows machine without internet access need (security) updates?

I recently saw a Windows 7 machine (virtually running in a Xen environment) and used in a production network to perform certain automated tasks. This system was missing over a 100+ Windows update ...
3
votes
1answer
33 views

Do (uncompromised) passwords ever need changing, if I use a password manager?

For instance, my Google account has a 32-character, random character password that I maintain with LastPass. I regularly flash new ROMs on my phone or otherwise need to be able to manually type in my ...
1
vote
1answer
16 views

BlackHole Toolkit v2 JAVA Payload Stage Code Execution - What does this activity mean?! I cannot get hold of the owner of the server to check

An analyst came across this alert - BlackHole Toolkit v2 JAVA Payload Stage Code Execution from the Checkpoint IPS coming from a server, the event is recorded as a blocked outgoing connection attempt -...
0
votes
0answers
14 views

Why do I see 2FA but not see “two separate entities” being prioritized in website authentication?

I've seen a number of 2 step website authentication methods out there. Some include two passwords, HOTP/TOTP, Yubikey, SMS to a phone number, etc. However, it seems like all of these systems rely on ...
0
votes
1answer
25 views

Is hardware approved for classified government use more secure?

I've always been worried about malicious hardware or firmware in off-the-shelf computer equipment (e.g. the malware in particular Lenovo computers that reinstalled itself from the Windows Platform ...
0
votes
1answer
30 views

Hashing sensitive data in request

We have set the https connection, between the client and server. The problem is that security guys, showed us it is possible to intercept the data using rogue invalid certificate (user must accept it ...
0
votes
0answers
16 views

What are advantages of malware evolution research?

As the title, There are some research in malware development. But they just give an advantage: "Research in relationship of malware families can be a powerful tool for cyber–defense". I think this ...
50
votes
9answers
8k views
+50

What is worse for password strength, a poor password policy or no password policy at all?

Recently I saw the following picture on Twitter: Now I'm wondering what is worse for password strength. Having no password policy at all or a poor password policy like in the picture?
-1
votes
1answer
29 views

ports above 1024 vulnerable against man in the middle

I heard, that it would be possible to get man-in-the-middle-attacked this way, but the details are not clear to me. Is it dangerous to use ports above 1024 for things like SSL? And why?
1
vote
0answers
1 view

Does WS-Security require an extra signature in the SAML assertion?

According to the SAML core 2.0 profile, the signature, if there is one, should be right after the Issuer element (see section 2.3.3). But in the WS-Security 1.1.1 profile, the example at section 3.5....
1
vote
0answers
39 views

What are simple things I can do to protect my digital identity?

I have taken a big interest in securing my digital info and feel like I have addressed many typical problems. For example: I've gone to full disk encryption on my android phone and linux laptop. My ...
2
votes
1answer
112 views

Are there any exploits in Movable Type that allow the attacker to delete the movable type files?

I'm a developer for a web site; we have a small blog powered by Movable Type that we added a few years ago. The blog doesn't get a lot of traffic or attention; we just noticed a couple of days ago ...
2
votes
1answer
55 views

CryptoLocker master key

I am struggling to understand how it is possible to decrypt files encrypted by the TeslaCrypt ransomware using the master key their creators provided. As far as I know, ransomware encrypts files ...
0
votes
1answer
44 views

Does stretching a hash increase a denial-of-service (DoS) risk and does brute-force protection mitigates that?

Disclaimer: I noticed several questions on this site but none really answer this two questions directly. Therefor I do not consider this duplicate. Personally I really like the article called Some ...
0
votes
1answer
22 views

Local Server Management

I just started a new software development company, We are using Windows Server, with Wamp installed on the machine. The machine is connected to a router and we have 10 employees. But only 5 of them ...
0
votes
1answer
33 views

iframe basic auth or token security

We have two sites, both are trusted. On site1 we store the username and password for the user for site2. We make api calls on site1's backend to site2 via basic auth (all over HTTPS). I know this ...
1
vote
1answer
769 views

What are the possible types of intrusions that a IDS protects against? [closed]

I am implementing an IDS and just want to know that what are the possibilities with which the intrusion can occur. I am just doing a literature survey over the attacks possible so I want to know that ...
1
vote
1answer
22 views

VLANs, Subnets and a sensitive database server

I have a sensitive database, and two categories of employees Category A and Category B. Category A does not require access to the sensitive database while category B does require access to the ...
4
votes
3answers
32 views

what are security precautions to ask clients who send a USB or CD?

We're launching a tender for a big project, and some of the businesses who want to make an offer are asking if they can send some brochures together with a USB stick or CD-Rom. Since we're trying to ...
56
votes
8answers
10k views

Am I experiencing a brute force attack?

When checking the auth log of a server with the command: grep sshd.\*Failed /var/log/auth.log | less I see thousands of lines like this: Jan 12 11:27:10 ubuntu-leno1 sshd[8423]: Failed ...
1
vote
1answer
22 views

Why would I ever not want CSRF protection?

While I can see some of the overheads of CSRF protection (generation of token, validation of token, extra work to implement), I can't see any reason why you would ever not want it. Is there ever a ...
6
votes
1answer
1k views

Prevent cross domain form submission with nonce?

I haven't done much in web security before but am now in need to prevent a form from being submitted from anything but my own domain. I know how to lock this down in an .htaccess file but the ...
0
votes
3answers
176 views

Is this a website attack / vulnerability test?

I have a specific IP that has been iterating through the directories on my site testing for something. Here is an example of what it keeps trying to hit: http://<site>/<path>/change....
1
vote
1answer
84 views

What are common services that are being misused in UDP amplification DDoS attacks?

I have been learning about DDoS attacks and how to protect from it. I have a question regarding DDoS attacks. What are common services that are being misused in UDP amplification DDoS attacks?
0
votes
1answer
45 views

Veracrypt options to protect against multiple versions of an encrypted volume

I'm planning to use rsnapshot to backup a veracrypt volume as it changes. This means I will have multiple versions of the same volume, with slight differences in data. It is my understanding that ...
1
vote
1answer
162 views
+50

Is PHP array injection (web parameter key tampering) impossible without knowing the parameter keys and with mod_rewrite enabled?

In other words: Does the use of mod_rewrite make PHP array injection (web parameter key tampering) impossible when the keys are unknown (and hard to guess)? Let's say we have the following URL: ...
3
votes
1answer
1k views

How to secure a website against a ping of death attack?

I found this video in which they talk about crashing a website with a Ping Of Death (PoD) attack, using cmd only. How to secure a website against this type of denial-of-service (DoS) attack? I ...
1
vote
1answer
70 views

Why do credit cards have bigger security than debit cards?

So, I was getting another account at the bank, and there were all kinds of variety and options. To cut the story short, that bank worker and me started to talk about my options over debit card and ...
-2
votes
2answers
153 views

What is the weakness of WiFi attacks?

I did not come to anything after searching Google for some time. What's preventing someone from just doing an WiFi attack using AirCrack and do any kind of attack once logged on the victims network?
7
votes
1answer
209 views

Does Perfect Forward Secrecy (PFS) make Man-in-the-Middle (MitM) attacks more difficult?

Does Perfect Forward Secrecy (PFS) make Man-in-the-Middle (MitM) attacks more difficult? If not, why?
0
votes
0answers
19 views

Sha1Sum kali linux 64bit [on hold]

I got a new computer and now I want to dual boot Windows 8 with Kali Linux but whenever I download the ISO or torrent from their /downloads/ section I get the wrong sha1sum. I've tried using fciv to ...
11
votes
1answer
1k views

How do “Confidence images” on my bank's login page improve security?

My bank recently changed their login process to show a preselected image which they label a "Confidence image" - ostensibly to allow a human website user to authenticate the bank's website as not ...
2
votes
1answer
38 views

Security Vulnerabilities and Risks for an Information only website (XSS)

My website is an information only website and all the information on it is available to all those who visit the website. There is no sensitive data. And we do not store any user submitted data nor ...
0
votes
0answers
28 views

Are AliPay password rules making it easier to guess a password?

I recently went to change my password at AliPay, and found out that there are a few restrictions on the password: It can only be digits It must be six digits It can not consist of consecutive digits ...
4
votes
1answer
307 views

OpenSSL 0.9.6a PRNG algorithm weakness: How to exploit?

I saw an OpenSSL security advisory for Openssl 0.9.6a Recently a cryptographic flaw in OpenSSL's built-in pseudo-random number generator (PRNG) was pointed out to us by Markku-Juhani O. Saarinen , ...
27
votes
6answers
29k views

What ciphers should I use in my web server after I configure my SSL certificate?

There are many great questions that ask what is the best certificate to use for a website; but once the certificate is purchased, there is also the possibility to choose or edit the Cipher list. ...
81
votes
4answers
83k views

Now that it is 2015, what SSL/TLS cipher suites should be used in a high security HTTPS environment?

It has become quite difficult to configure an HTTPS service that maintains "the ideal transport layer". How should an HTTPS service be configured to permit some reasonable level of compatibility while ...

15 30 50 per page