Tag Info

New answers tagged

4

If I look at a presentation about the topic it does not look like replacing defense in depth, but replacing a heterogeneous environment containing lots of different mostly independent and sometimes incompatible security solutions with a more structured environment where all parts work together to better detect and deal with the risks. It still contains ...


4

I'm wondering why AJAX is not used to log in nor register in most of the pages and it's used PHP reloading the whole page. Is it about security, or it's just that it's not practical at all? Ajax is not a special thing regarding the transport of the login data, because it is a HTTP request done in the background instead of the foreground. Thus if done ...


1

First and foremost, anything non-trivial is theoretically possible. Now, on to practicality. It is exceedingly improbable that you'd get infected in this situation. The router is kind of like a phone system in an office: instead of global "phone numbers" (IP addresses), your internal machines only get "extensions" (internal, non-routable addresses). ...


1

It is possible for several reasons - but your intuition is fundamentally correct, because the fundamental issue is always the "attack surface." And network security is all about minimizing the attack surface (and locking down the surface that must be exposed). You probably have a combination router/firewall at your "edge" that serves as the default gateway ...


1

By just being connected to the Internet ther is risk of being vulnerated. This risk can be mitigated with software updates and some security products (antimalware, firewall, intrusion detection systems, etc...). On an ideal setting, the risk is very low. You would be running behind one or two routers on a NAT, with a fully updated operating system, no ...


0

I recently wrote 2 articles exactly about that, however in polish language: http://fajne.it/zelazne-zasady-dla-uzytkownikow-sieci-tor.html http://fajne.it/jak-skutecznie-obronic-swoj-komputer.html Let me repeat the key advices: Encrypt everything, everywhere. No exceptions. Every disk should ideally be encrypted with different key. Use separate IT ...


30

A few years ago (2003), there was this worm called "Blaster" (or MSBlast, Lovesan etc. - read more on https://en.wikipedia.org/wiki/Blaster_(computer_worm)). It spread by using a vulnerability in an RPC service, running on Windows XP and 2000. At the time where it was "worst", you could get infected within minutes, if you didn't have a firewall set up. I ...


1

With your disconnected computer, you are describing an Air Gap. A quote at a recent security conference: "An air gap just means higher latency in the network" You are right that it is very difficult to be perfectly secure. Instead of trying to be perfect, try to improve. Do a self-assessment and calculate what your biggest risks are and then use ...


5

It might be possible to be infected if your computer is directly accessible from the Internet (without NAT, router, etc.). But the attacker will need to find a vulnerablity in TCP stack of your operating system that would allow him to execute arbitrary code on the machine (e.g. by sending a malformed packet), and those are very uncommon nowadays. There can ...


1

Edit: If you are connected to the Internet, then yes it is possible. When you say connected to the Internet (doing nothing else) Do you browse websites? Receive email? Connect to any other computer from the Internet? If you do any of these things, you can still get infected. If you do none of these things, then it is still possible (although ...


1

If you are just connected to the Internet (so you are not downloading anything), your computer cannot be infected, but attacker can get to your computer through an open ports. Another problem will be if you already have virus in the computer (like malware), it can use the connection to send data (e.g. passwords) to the attacker. So there is no possibility ...


1

Short: Don't download anything and you will be fine. Long: If you aren't downloading any file from the Internet there is almost no possibilty that your computer will be infected. If you aren't downloading any file from the Internet and you only fear from viruses that affect your computer directly then the only way to actually infect your computer is through ...



Top 50 recent answers are included