Tag Info

New answers tagged

1

Given your requirements, i'd consider doing all of my web browsing in a VM. You could keep it up to date, and then after your session simply restore a snapshot. Update Windows or what have you only, then create new snapshots as patches become available. I do this myself to avoid malware accessing my sensitive data.


1

Today (windows) computers are usually are fairly good locked against direct attacks from the network by default, at least if you specify that you are on a public network. That means they have a firewall, don't expose unneeded services to the outside etc. I am not too concerned about being "attacked" as my computer's are mainly gaming and internet (Social ...


9

Usually the PNG format does not support multiple layers. So when you draw over something, whatever was there before is lost. However, the PNG format supports storage of an unlimited amount of metadata which is usually not displayed by image viewers. This feature is often used by image editors to add additional metadata to the image. One possible use-case is ...


3

When you paint over a jpg or png file, you are not putting a sticker over the image, you are more ripping a hole on the image and filling the hole with ink. Even on Photoshop, if you export the picture as jpg it will flatten the image, merging all layers together and destroying the original obscured area forever. There's no way to reconstruct the original ...


2

No, the security is no better. The typical formats used for screenshots (JPEG or PNG) are not image formats that support layers like say, a PSD does. When you add the green scribble, you're not adding a layer, you're replacing part of the image. The extra step, the screenshot-of-a-screenshot should give you an image file that's materially the same. ...


0

This really is dependent on the language, if it's compiled then what compiler was used. The question is... how secure is the value stored in "plainText" (at REFERENCE 1)? Without using a special secure class this variable will reside in memory until it is overwritten. Not all languages provide a "secure class" for data. Freeing memory does not ...


0

You are right, this is a common problem for code handling sensitive data. In the .Net managed environment, even if you zeroed out your string, you would still run into problems, due to movement of the string as a result of garbage collection. The garbage collector wants to defragment the heap and therefore can move your string around. Moving of course ...


-1

In .Net you can use secure string to have some level of protection against memory reading like that : http://msdn.microsoft.com/en-us/library/system.security.securestring(v=vs.110).aspx


0

The standard infosec response to complete compromise like this is to nuke it and start all over again, but this time from a security-hardened position. If you have many interconnected devices that are habitually insecure (they all have the same password, for instance), then you need to disconnect them from everything else, wipe them, secure them, then ...


1

Regardless of what is contained in the paper a standard ntp request datagram does contain a timestamp that represents the time the datagram was sent. From page 22 of the RFC: Origin Timestamp (org): Time at the client when the request departed for the server, in NTP timestamp format. The answer to the question "Does ntp leak system time?" is "Yes. A ...


1

First, use a known clean computer (not related to anything you had and not connected to anything you have now) to clear up all your online presence, especially various cloud storage services such as icloud/googledrive/dropbox/onedrive. Close up any unneccessary accounts and get your email in order - it often is the key point that must be secure. Set up two ...


2

No, the paper means something else. The paper talks about connecting multiple times to the same Tor Hidden service to increase the load, and at the same time measuring clock skew from candidate IP addresses. If the candidate shows clock skew during the attack, the server can be identified.


5

I believe the term you're looking for is a "canary trap", which is a form of offensive counterintelligence. This is similar to a suspected double-agent being given false information, which they then leak back to their handlers. This can then be used to show that the agent, being the only one told that information, was the real leak.


2

I was curious (and perhaps board) so I just ran a quick test to see... I took an old flash drive (4gb was my smallest one), did a quick reformat (to NTFS) and tossed a simple text file on there. Using FTK Imager, I took a before and after image of my drive (just the raw data dump). I used disk wipe to wipe (using the defaults and basic wipe settings) my ...


3

The name of $TxfLog.blf is self-explanatory: The extension blf indicates a CLFS log file, and TxF stands for Transactional NTFS. You can see that TxF is just a temporary file that backs up transactions to help against sudden crashes, just like similar precautions in modern databases. There can exist some leakage from this file, but it only would consist of ...


2

Well, this actually may not be the answer but FYI penetration testing software like kali have inbuilt wpscan tool which can enumerate the username, themes and plug-ins used and can list the vulnerabilities in those plug-ins and themes. Remaining brute force attack can be done by using any tools found on Web. Here, I am not saying kali is bad but it can be ...


3

I noticed this as well and wrote a blog post about it a while ago: wordpress username leak. To summarize: The leak is probably here: example.com/author/user_nicename. This page can for example be reached via example.com/?author=1. WordPress has three username related fields in the database: username, nickname, and user_nicename. username is the name with ...


0

A user name is easy, the password is a different issue. There have been data leaks that yield user names, addresses, etc. but the passwords were encrypted and salted and no passwords were compromised. If you know one username at a large company you probably know the domain log in username format for 10's of thousands of users.


2

I don't know exactly if Disk Wipe works by overwriting the partition data, or the disk data. If it only overwrites partition data, there can be files left on hidden partitions. If you are confortable with Linux, it's very easy to nuke out a disk. Assuming your disk is on /dev/sdb, you could do this: sudo dd if=/dev/zero of=/dev/sdb bs=65536 oflag=direct ...


2

Downloading .swp file C:\Users\user\Desktop\stuff\image-resize>curl http://mydomain/.smtp_config .php.swp -o .smtp_config.php.swp % Total % Received % Xferd Average Speed Time Time Time Cur rent Dload Upload Total Spent Left Spe ed 0 0 0 0 0 0 0 ...



Top 50 recent answers are included