Tag Info

New answers tagged

2

This is hard to answer without knowing how sensitive your files are. Think about it like this: how much is this data worth to you? If your data is worth more than what it would cost to switch to a proper hosting service, then you should just do that. Given what you are saying, it probably is, and you probably should. I don't know what kind of data this is, ...


2

An attacker is going to use forced browsing to try and find sensitive files. DirBuster is very useful in performing forced browsing attacks, and it commonly finds sensitive files on my penetration testing engagements. DirBuster comes with a very large list of common file and directory names. If it's not a common file-name, DirBuster probably won't find ...


0

QNAP devices have a very limited ssh server installed as standard - you have to login as admin (i.e. root access), which is a risk in itself. You can replace with openssh - see instructions here: http://wiki.qnap.com/wiki/How_To_Replace_SSH_Daemon_With_OpenSSH however be very careful to change the guest account password. I learnt this to my cost when I ...


1

First, a note on terminology. Usually: RFID is communication between a passive tag (no power source, acts as a simple memory, without any communication) and a reader. Communication is one-way: the RFID tag has no way to receive information. A contactless smartcard has a credit card form factor and can perform computation (it has a CPU, and its memory is ...


1

This mechanism is now made mandatory by law in France (lookup PGSSI-S, in French). I don't know about other states, but you should check the relevant legislation.


2

Some automatic blood bank audit and release systems have a 'break glass' feature where the fridge can be accessed without having to follow the normal process, which might be; input request, scan patient record identifier, bidirectional interface with lab system looks up blood type and the blood unit is scanned on removal from the fridge... It's very useful ...


0

An RFID ATM card (using traditional RFID with one way communication) doesn't sound like a smart idea. If an attacker could get close enough, he could simply record the ID that the card broadcasts, and create a clone of your ATM card. NFC, on the other hand, would be much more suitable. Since NFC supports two-way communications, the card can verify itself ...


0

This sounds like what you really want to do is whitelist applications. Windows 7 has AppLocker, Although I am not sure if Win 7 embeded has or not. You can read more here Its main points are Prevent unlicensed software from running in the desktop environment if the software is not on the allowed list Prevent vulnerable, unauthorized ...


1

I don't think this is security flaw on its own (please read below, as this statement is general and not particular to that plugin), but it does go against good practices, as no one should allow access a resource if that resource doesn't need to be exposed. This might be a security problem if any of the files exposed have any kind of private data (such as ...


1

Shelloid Virtual Private Transport (VPT) enables you to grant service access without yielding network access like VPNs. You can simply share the service when you need it and unshare it afterwards (once our APIs are in place you can write a cron job to do this automatically). VPT is open source (http://shelloid.org). Disclaimer: I am the founder of Shelloid ...



Top 50 recent answers are included