New answers tagged

2

All attributes can be seen here under "Permissions for files and folders" on Microsoft technet documentation: Permissions for files and folders The only attribute that is not there is the Full control which upon selecting will check all the rest of the attributes which is the detention of full control. Also, in the logs, event ID 4663 the Accesses ...


0

Is there any way he could access my files/folders info? Yes, he could reboot from a live CD and then access your files directly, unless the drive is encrypted. He could also attempt privilege escalation by leveraging any vulnerability within Windows 10 (such as this), or via any insecure configuration on your machine (e.g. overwriting a .exe that he has ...


0

Yes, he can access those files but only if the guest account has permission to do so and some programs require administration rights to execute.


1

EXIF data is metadata. Basically any (unencrypted) metadata can be altered anytime with access to (a copy of) the file. Your idea of creating an executable to open images and protect EXIF data seems a bit like building a underground bunker just for storing the labels on and tabs in a physical folder. Apart from the practical problems like system rights ...


0

Well left to me, if you have a client running a cafe like mine does and he the client doesn't want to go LAN, maybe a combination of a MAC filter and a wps would be fine. For example my client complained that some friends of his apprentice connects to his network just by getting the password on their (apprentices) system, be it wep, wpa, wpa2 , tikp, once ...


2

Many file-encrypting ransomware viruses add some "unique" file extension to the name of the affected file and leave a "manual" of how to decrypt the files in the affected directories. This is one of the easiest ways to detect them. On windows file servers you can set up the file server ressource manager to look for those files and block the creation or ...


-1

The best way that I would recommend would be to use a storage solution that offers block level storage vs file-system level storage. Many SAN solutions, and shinier cluster-based storage solutions like gluster and ceph, offer periodic snapshots of the storage blocks. Got ransomware? Roll back to your most current snapshot. Poof, no harm done. (After you ...


0

Giving an app your OAuth token is kind of like giving them a limited-use password. In this case it's a password they they can use to get into your Google Drive, but they can't use it to get into your Gmail. If you're not comfortable with the app saving that key to storage, then don't use that app. Also, you can review which OAuth tokens you've granted and ...


0

I can suggest the following options based on provided information: Define data domain (North America, Europe, etc.) according to your criteria and grant roles within that domain only. E.g., grant Role 1 within data domain A or account S1. Simple enough, but depends on your data structure. Add additional conditions in ABAC style, i.e. grant or deny access ...


0

Firstly, why is cannot see application data being one of the disadvantages of Stateful Packet Filter? Application level analysis is important to filter out malware because you have to understand the applications protocol to actually extract potential malware for analysis. But, this is of course only a disadvantage compared to an application level gateway/...


0

Firstly, what does it mean "A proxy is something that acts on your behalf"? Can anyone give a more detail explanation about proxy? I read a number of papers but still bit confused The client connects to the proxy, either explicitly (configured as proxy in browser) or implicitly (transparent proxy). The proxy then looks at what the client wants (i.e. access ...


1

An application proxy (or more commonly called application level gateway) is a firewall at the application level. A packet filter is a firewall at the packet level. This mean with a packet filter you are not able to filter web traffic for malware since it has no understanding of the applications protocols of the web (i.e. HTTP). An application level gateway ...


0

As far I understand this, application proxies would need to be running on the server as applications, i.e. consuming memory and CPU. Meanwhile, packet filtering takes place at network level, i.e. before it even gets on to the server in the first place. That's going to be less computationally expensive, so a packet filter would allow greater throughput if ...


0

First, let's define both what a non-stateful and a stateful firewall or filter is: Non-stateful firewall: This was the original firewall method. You give the firewall rules as to which IP ports are open or not. If an incoming packet (usually from the internet) doesn't specify a port allowed by the rules, it is dropped/stopped by the firewall. Stateful ...


0

You are basically correct. Also, is it usual to have action in row 3 in real life? Yes, if the intent is to only allow packets to your web server, you have to deny everything else. Many types of ACLs have an "implicit deny," meaning that if the packet doesn't match any ACE, it is denied. what is the importance of the ACK bit in the flag field? ...



Top 50 recent answers are included