New answers tagged

2

Risks of keeping logged in: CSRF and XSS attacks could be used to compromise your sessions, if the site in question is vulnerable. If the application uses weak or predictable session tokens, yours could be brute forced. A physical attack (e.g. laptop stolen), could possibly allow access to all your logged in sessions. This could be mitigated using disk ...


1

Not staying logged in increases the potential damage a keylogger could do. Also your passwords are going to be much more simpler because you need to recall them all the time. Staying logged in increases the damage a session stealer could inflict. The latter is only usable if the attacker is in the same network. If you are always in your own, safe network, ...


1

Using MySQL's built-in functions for encrypting and decrypting information is generally not recommended for exactly the reason that you described - MySQL is often configured to log queries. If that's the case, the plain text data (and the encryption/decryption keys!) are written in plain text to the logs! Having said that - If you must use aes_encrypt and ...


0

I'm not using Telegram myself but what you describe should easily be achievable by simply using a packet sniffer / netcat to figure out which IP is associated with a Telegram server and then simply filter all connections including that IP. All you need is a bit of scripting or manually process the packet sniffer's logs.


1

According to this answer, there is no way the history is written down somewhere on the system natively. But I am sure that you will find a tool that can track when what process was started like one of these: http://geekflare.com/how-to-check-process-start-time-in-windows/ ...


2

You can put the hash of your commit into Bitcoin blockchain, and after some blocks added upon the block having your hash, you will be able to convince people that you had had that commit prior the time the block has been added into the blockchain.


2

Nothing to worry about. This is regular internet noise, there are a lot of robots on the internet scanning the internet, even doing full IP traversals from 1.1.1.1 to 255.255.255.255 so even if your domain name is known only by you, someone will eventually scan your IP address. Since the logs are calling javascript files there's nothing to worry about. ...


1

To answer your more specific question in comments: I'm mostly curious to know if there would be any benefit to converting digital documents to physical ones so as to avoid hackers gaining access to any information in the case of an attack. This, like most security, depends on what you are protecting against. If you have completely erased all posts ...


0

The USB approach is not scalable and not even secure. You can use the latest practice of central log server using the ELK stack. E => ElasticSearch : Log storage and indexing (Searchable) L => LogStash: Filter the incoming logs according to your requirements K => Kibana: Web interface that integrates with ElasticSearch You Can secure access to Elastic ...


1

First of all, 100% security is a myth and is something you should never claim or promise. If I were in a situation where there are multiple hosts that are not connected to a network, I would consider the following things: Create an internal (management) LAN for all hosts. HIPS / HIDS - Host-based Intrusion Prevention/Detection System. Secure the hosts by ...



Top 50 recent answers are included