Tag Info

New answers tagged

0

He needs only one page, right ? Fine then, you might want to save it somewhere, so he can access only that page. Assuming the data he is trying to get is static, and assuming it's only for data processing purposes he needs that access, wouldn't that be a solution to save it somewhere else to give him access only to that page ? Unless it's the secure ...


3

Hi I'm the developer who wrote VyprVPN for Mac. It looks like you've still got one of our software components installed. Macintosh applications that needs to alter your system, including VyprVPN, uses something called a "privileged helper tool” aka a system daemon. We install a helper tool with the user's permission, using the appropriate Apple API for this ...


2

Is this kind of activity normal in VPN providers? they are legally registered company, claim that respect privacy... That the domain names begin on dl. (short for "download") sounds like they are checking for updates, configuration files or whatever. That they do it every seconds seems like a waste with Resources, but I Think they do it that way ...


1

How to detect if you are behind a PNAT: nping --ec "public" -c 1 echo.nmap.org (CAPT-labelled packet gives away the PNAT address) If you test the external side of the firewall, you could use the bnat modules from the Metasploit Framework in order to route traffic through the broken implementation of NAT. There is also a vulnerability in some firewalls ...


1

The NAT software running on the Firewall system is going to block all inward traffic that doesn't match a current egress session or a port forwarding rule. If no port forwarding rules are in place, then the server behind the NAT is as good as invisible, barring compromises to the firewall.


1

Its totally depends on the security level of the NAT. 64 packets per 0.1 seconds means 640 packets are hitting on Symmetric NAT (640 ports? as you are sending to random ports). Now say like connection established after 5 seconds that means you are hitting from PRC to SYMM around 3250 packets on Symmetric NAT (3250 ports?). Seems like most of the NAT will ...


0

Proxy, Adaptable Security Appliance, DMZ, and Automated Vulnerability Scanners are some items you'll find in the wild that are hardware. There's plenty more security related software items that will help you with research such as Splunk which takes logs and makes them searchable.


0

There are few other choices. If software is inherently insecure, all you can do is to replace it with something that isn't; or wrap it up in a condom of some sort. Host-based systems require programs to be invasively, and cooperatively, installed on every client (virus scanners, local network stack IPS). Network-based systems don't require cooperation ...


2

It's a bad idea to host a database server on your internet facing webserver. If the underlying OS of your web/DB server, or webserver platform itself contains any vulnerabilities that can be exploited then your database will be compromised. I won't be broadcasting the IP address of my database because I won't be sending calls to it, which makes my ...


1

Think of the scenarios of compromise. If you host the database on the same system as the web service, then a compromise of the web service results in immediate compromise of the database. So, this is minimally secure. If you host the database on an "internal" server that the web service can access (via an internally facing network interface or special ...


0

I won't be broadcasting the IP address of my database because I won't be sending calls to it, which makes my database inaccessible to the outside world Not knowing an IP address does not make something in that address inaccessible. In an analogy it is a house without a street address. If a thieve walks by that house, he can still enter the door. In ...


5

You mention two distinct technologies: an access portal and client isolation. In comments you say you are not talking about the access portal part, but rather client isolation. Most consumer and corporate access points and wireless controllers I have touched have this feature. It is simply built-in to the hardware you are working with, usually a checkbox ...


1

Is this the type of behavior you are referring to? What is a VAP? Every VAP appears as an independent AP to the client. The VAPs emulate the operations of a physical AP at the MAC level. All wireless management traffic that would be transmitted by one physical AP is also transmitted by the VAP. For example, a single physical AP might ...


1

You can use a Simple Batch File. Open Notepad and copy/paste the script below into a blank document. Save the file as BLOCKALL.BAT. Now copy that file to the same directory as the EXEs you want to block and double click it. It will add outbound rules to advanced Windows Firewall settings blocking all EXEs in that folder and sub-folders as well. I tested ...


13

This is normal and expected behavior for windows system. The IP you mentioned resolves to sinwns2012412.wns.windows.com. The Windows Push Notification Services (WNS) enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and ...


1

I would advocate terminating SSL at the load balancer (be that on your network, or at a CDN provider or whatever). It means the LB can inspect the traffic and can do a better job of load balancing. It also means your load balancer is responsible for dealing with slow clients, broken SSL implementations and general Internet flakiness. It's likely your load ...



Top 50 recent answers are included