New answers tagged

5

Thomas is correct, as usual. I'm going to add a small observation related to the physics involved. Radio waves have two regions of propagation (with the same underlying Maxwell's equations): near-field and far-field. In the near field presence of listening devices can be "detected" from the way they interfere with the transmissions (with some hoop-jumping ...


13

Passive detection is called "passive" exactly for that reason: it is not detectable. That's by definition. Now your question might be: is there a way to "emit a signal" (i.e. convey information) that cannot be passively detected ? In fact physicist have found a method, called quantum key distribution. This requires sending photons one by one, and security ...


2

Secure Boot consists of several components working together ( https://technet.microsoft.com/en-us/windows/dn168167.aspx was my source for how the different components work). Because it works vertically (from the bootloader up) the security of the kernel-mode protection the requires that the lower levels work flawlessly. Secure Boot When the PC is ...


2

It seems like a good idea to me, but with a caveat: You need to make sure that it doesn't make your system MORE vulnerable. I realize that this is technically impossible as another user account is another way in, but here's what I suggest if you decide to implement it: Don't use a common username, such as admin. This is likely to get hit by passive ...


11

Creating a honeypot is a common used technique in information security, though probably not the best of ideas for a production environment. Apart from the fact that you add potentially new risks to your application, there may not be much need for such a trap. Failed logins can be monitored by most applications (and/or server daemons) which should give you ...


3

This could be useful for Credentialed Vulnerability Assessment, but on a production side perspective, you're putting your application at risk. This could be a possible attack vector for an attacker. Attacker may gain access to these accounts, and may find ways to exploit and gain administrative rights or privilege escalation. The concept you were trying ...


3

Maybe you can look at their MAC address. For example, by default, VirtualBox begins theirs MAC address by 08002xxxx. The lists of couple address MAC - constructors https://support.microsoft.com/fr-fr/kb/461260



Top 50 recent answers are included