Tag Info

Hot answers tagged

9

In order to make C code "safe", even against a malicious developer, then you have to fix the core issues of C, which have all been repeatedly exploited for arbitrary code execution (exactly what you want to avoid): Weak types. In C, you can take a bunch of bytes, and interpret them as a pointer, an integer, or whatever. All it takes is a cast. As long as ...


4

When you attempt to take over control of a botnet, you are committing an act which is just as criminal as what the original owner of the botnet was doing. No matter how good your intentions are, you are taking control of other peoples IT systems, which is illegal in most parts of the world. Report the botnet to the authorities. When you don't believe that ...


4

If the httpd file was replaced, what ELSE was replaced? This looks like a 'nuke from orbit' scenario. As for taking over a botnet, that isn't a good idea. Whatever that botnet does can be attributed to you because you became one of the controllers in its network. Report to the authorities in your area.


3

Safer than not using a parser in that it will stop casual attackers, but not as safe as using a sandboxed scripting language. The big problem you'll run into is that some fairly low-level features of the C language, such as pointer arithmetic, can be used in nefarious ways. For example, you might forbid the use of open(), but a plugin could find a point in ...


3

In general, restoring from a clean backup will wipe out any malware you have. However, there are rare exceptions. Malware can install itself in your computer's BIOS, in which case it will persist through anything but a BIOS flash (and if it can sabotage the flash process, it can survive even that). BIOS-infecting viruses are extremely rare, though, ...


3

Because mythical imagined malware that might subtly modify your unique proprietary source code is very unlikely to exist, there are a couple of slightly more real threats you could check for. If your friend's computer was compromised by a human hacker, the hacker could have copied your code to his computer, studied it, changed it, and uploaded his changes ...


3

Yes it can, for example using : Ajax A reference to an external JS or css file An iframe or even a HTTP 302 redirect. This can be used by online malware to generate trafic for a DDoS Attack. Note, all those are used for legitimate purpose on many (most) websites, and hence do not imply a malicious behavior. In response to your edit: Yes, Ajax can do ...


2

One good practice you should follow to avoid getting infected from USBs is to disable the Autorun functionality in all of your computers. If I recall correctly, Windows 7 and 8 have Autorun disabled by default for all devices except CD and DVDs, although the slightly different Autoplay function can still be used on USB devices. You can find a quite thorough ...


2

There are signatures, but these don't typically exist in standard AV products. Frequently, these types of protections are found in network based security products such as proxy servers, IPS/IDS, and web application firewalls. These signatures don't operate on hashes like typical AV signatures do, but rather look at the heuristics or behavior of the code ...


1

1) As long as your browser has shown a green (or at least not red and with a warning message) https in the address bar then you've successfully authenticated to the other end without compromise. It's highly unlikely for the attacker to be able to man-in-the-middle the SSL connection without the private keys of the host server (e.g. your bank) to sign the ssl ...


1

The most important part of this post is "with antivirus". Do you have automatic submissions turned on? If so, those computers might have sent in an 'automatic submission' to the AV mothership at some point. It might have been flagged for evaluation, and possibly run in a controlled environment to see what behavior it would exhibit. These environments are ...


1

To avoid infection from storage devices, don't execute any files from them, and configure your operating system to not do so automatically. But storage devices aren't the only threat in form of USB. For example, take a look at this USB keyboard: "But that's not a keyboard! That's a USB thumb drive!" Are you sure? "Of course! I can tell a keyboard apart ...



Only top voted, non community-wiki answers of a minimum length are eligible