Tag Info

New answers tagged

0

My two cents: The write-up focuses too much on physical security and not enough on hacking. I would worry more about exploits in the browser and email application, mitigating those by using a more secure browser (cough), sandboxes, and virtual machines.


0

if they're going to the trouble of tampering with hardware, they could just as easily install a hardware keylogger under your keyboard. Lock the laptop in a case when it's out of your sight. I always do this in hotels, because it helps prevent theft too. I also suggest investing in a decent Kensington lock, which can be attached around pipes and various ...


0

For SQL injection, you're basically on the right path. The best advice it to not roll your own. Use something well known; whichever language you're using probably has a library to be used with proper parametrised SQL. OWASP has a very good article including mitigations against this attack vector here If this string is never executable, then it's not a ...


0

Just as a general rule, virtual machines cannot isolate against kernel mode malware that is VM aware. They are really only an effective containment for user mode malware. For user mode malware, or kernel mode malware that is "passive" (ie does not attempt to screen the kernel environment), the VM will contain it reliably so your measures are unnecessary. ...


2

Network questions: All your network related questions are basically down to the malware been able to talk with other computers on the network to. So, if the other devices outside of your guest machine are vulnerable then you're exposing your whole network. You'll want to have different NATs so they can't talk to your host machine or any other device on your ...


0

Related but important topic: According to this CentOS hosted page which is about having custom kernels, "CentOS is designed to function as a complete environment. If you replace a critical component, it may very well affect how the rest of the system acts.": http://wiki.centos.org/HowTos/Custom_Kernel See also this Stackexchange-related answer to the ...



Top 50 recent answers are included