Tag Info

Hot answers tagged

14

If it's not in the same network, you most likely won't be able to. MAC addresses are hardware addresses and are usually hidden behind a router unless you are on the same network or have direct access to the device. In other words, once you leave the network, unless the device(s) in question is/are directly connected to a router you will get the MAC address ...


8

I am running LMDE as a workstation and I am afraid as of now (Wed Apr 9 11:28:14 UTC 2014) no patch has been released yet. All available patches have been applied by me and right now # openssl version -a shows OpenSSL 1.0.1e 11 Feb 2013. You might want to consider changing your sources to point to Debian repos directly in order to get the update. I'll be ...


6

It is possible to find the MAC addresses of devices that are physically close to you if they have wifi enabled. When a device sends data packets over wifi they are stamped with the sender's MAC address and the destination MAC address (typically a wireless router). The contents of the packet will most likely be encrypted through WPA or WEP etc. but the MAC ...


5

Basically it is not safe. As far as I know, they use 512-bit RSA because they mimic what Microsoft's RDP server used to do, which indeed implied a 512-bit RSA key; using something bigger would risk breaking compatibility with existing clients. Biggest issue, though, is not that the 512-bit key is weak because too short; the main problem is that, as a client, ...


5

Most WiFi enabled devices broadcast their Mac address when probing for networks to join in the vicinity. By placing your own WiFi device in promiscuous/listening mode and utilizing a tool like Aircrack-ng, you can see and record all broadcast traffic enabling you to see if a device with a specific MAC address comes within earshot of your listening device. ...


5

I've already answered this question a few times here. Have a look at this answer in particular: Virus scanner on server And in particular this part: The concept of a virus implies a user at an interactive session. Someone opening email in Outlook or documents in Word, or running programs they received in an email. A virus implies a human element. ...


4

Making a file "undeletable" in Linux is done with attributes, specifically the "immutable" attribute. See lsattr to see attributes, chattr to change them. However, this only answers to the proximal cause. The important thing is that your machine was put through hostile control, and the hijacker installed things for his own devious goals. In particular, he ...


4

When you are going to play games you downloaded from the internet, you should definitely get a virus scanner. This is especially a concern when you download pirated copies, because these are bundled with malware from time to time. But even when you stick to legal downloads there is a certain risk involved. There were cases of renowned download portals ...


3

Under the premise that the system is so well-secured that there is only one person which can connect to it via network, then file permissions do not really matter anymore. The operating system can only enforce them against local users anyway. When an attacker can not log into the system or influence some public service running on the machine to do their ...


3

It sounds like your question is really, "How do I harden PHP?" And a second question, "How do I harden Linux to be a web server?" This site is really for extremely specific questions, hence your downvotes. The other reasons for the downvotes, is because since your questions are so broad, there are ample google searches for you to mine to get your ...


3

Because mythical imagined malware that might subtly modify your unique proprietary source code is very unlikely to exist, there are a couple of slightly more real threats you could check for. If your friend's computer was compromised by a human hacker, the hacker could have copied your code to his computer, studied it, changed it, and uploaded his changes ...


3

I believe spartan is talking about Wifi "probe requests". You can capture these using wireshark when your wireless adapter is set to "monitor mode". You can filter for them using the following syntax: wlan.fc.type_subtype == 0x04 These are managment frames and are basically frames sent from your client to find out which wireless networks / AP are ...


2

Non-system partition For partitions other than the system partition you can use the following systemd unit: [Unit] Description=Wipe Keys before <target> After=<target> [Service] Type=oneshot ExecStart=/path/to/wipe [Install] WantedBy=<target> <target> is the corresponding target of your desired mode. From the ...


2

The only way that I'm aware of for you to prove this "beyond any doubt" would be to have your client audit the servers themselves, or to have them audited by a 3rd party (e.g. consultant) that you both trust to do the work. Network scanning isn't likely to be sufficient on it's own as that wouldn't cover disabling services or the possibility that a firewall ...


2

Do a full scan of the target machine's IP address with Nmap from LAN or Internet: nmap -p- 12.34.56.78 If you've closed all the unused ports, then you'll see that in the scan result. Edit: It would look like this: Starting Nmap 6.40 ( http://nmap.org ) at 2014-03-29 11:26 CET Nmap scan report for abc.com (12.34.56.78) Host is up (0.030s latency). Not ...


2

Yes, it is possible to detect unknown keyloggers and other malware, usually through computer forensics (Volatility or EnCase are well-known software for doing that). Keylogger detection, as for viruses and other malwares, can basically be achieved through two methods (I simplify for answer's clarity) : Signature based detection Heuristic based detection ...


2

Short answer: this is the link you're probably looking for (-s specifies SSID). Longer answer: Precomputed 'hash' files are used to accelerate password bruteforce when cracking WPA. They do this by eliminating the need to perform costly transformation of a password into an encryption key; instead somebody already computed such keys for common SSIDs and ...


2

Here is what I have done, and still do in some specific cases: I use a machine with no swap. In my case, an old Asus EeePC with the famously horrendous proto-SSD; you really do not want to use it for swap space. Instead, I replaced the RAM chip, up to 2 GB. I configure /tmp to be a RAM-based filesystem (search for "tmpfs" in the man page for "mount"). When ...


1

(Quick answer, I don't have the time to research all I remember and double-check my facts.) There are multiple things to consider here: USB sticks may carry payload that you do not know is there, e.g. a virus to infect the computer it's plugged in to. Things like BIOSes, network cards, etc. can often be flashed to upgrade the firmware. You could also ...


1

If a machine is hijack by an hostile entity, then the attacker can gain full access to the hardware -- including every drive which is currently plugged in the machine. If the Linux drives are encrypted with a key that the Windows system never sees (which means that if you want to copy files from the Linux to the Windows, you have to do it from Linux, not ...


1

You could try to encrypt the script using standard methods and decode it on the fly by giving the secret key either directly or through a process. But, this would only help against attackers which have no permissions to modify any of your data or the programs you call, which especially means that they have neither root permission nor the same uid as you. And ...


1

If your PC is going to be online at any point (which in all likelihood it will be) then it is recommended to use virus protection. There is plenty of free and light software that will be sufficient. For installation and continuous scanning, try Microsoft Security Essentials


1

If you don't browse, and if you get your games from official places, you can skip the antivirus. If you browse, or if you get your games through illegal download, then it has to be considered like a traditional PC and protected appropriately, from OS to browser level. If you don't use an antivirus, at least the Microsoft Security Essentials and things like ...


1

First of all, it should be noted that virtualization is not a security measure in any way. This is an infrastructure / application technology, and it won't protect you from being compromised. Generally speaking, using chmod 777 to address application issues (log writing, cache etc.) is not a viable solution. You might want to understand what is going wrong ...


1

There is a Linux version of Skype however, I wouldn't recommend running it on bare metal. Have you considered running a virtual machine on your main Linux system (either Windows or Linux) and running Skype inside that? This way the software inside the virtual machine cannot access the ram of the host. I assume that in such a case the RAM is still ...


1

In addition, I would add that most attackers don't directly log in via the console or ssh, but instead use bugs in other software in order to break out into a root shell or elevate their privileges. Adding 2-factor authentication or other mechanisms will definitely improve your security posture, but must be viewed as part of a larger overall hardening ...


1

No - it does not mean you are not vulnerable. The patches you have installed may have fixed the particular vulnerability, but failure of a test does not automatically mean you are safe - it could just be the case that your test version is misconfigured, failed due to a local configuration or bug, or has had some other problem. The usual way to gain ...


1

The closest thing to a 'hello' packet concept in a smart phone, which mostly use TCP/IP, will probably be a DHCP-DISCOVER broadcast and then subsequent ARP requests, presuming it is active on the network. Most smart phones will probably respond to ping, too, so presuming you have control over DHCP on the network, once you know its IP address, send pings to ...


1

File /etc/ssh/ssh_config is a global configuration for SSH clients. /etc/ssh/sshd_config is for configuring the SSH server. Make sure you modify the right one. When you specify "AllowUsers", SSH automatically denies access from all unlisted users. There is no need for a PAM file. If you have read the man page, you'd know about this. "man sshd_config". ...


1

This actually sounds like a pretty decent use case for PostgreSQL's TLS support. You can configure a trusted client certificate for the application to use with your deployment script and then get the other advantages of not having a shared secret, plus obviously encryption too (unless your app is already CPU bound, in which case selecting the NULL cipher is ...



Only top voted, non community-wiki answers of a minimum length are eligible