Tag Info

Hot answers tagged

49

Yes they can but unless your neighbor has the required technical expertise, its highly doubtful. To view incoming and outgoing traffic you need specific software to monitor network packets and the tech knowledge to actually do it. Most routers only keep a syslog and unless they are using software like wireshark to monitor/capture your packets, they cannot ...


38

If you get a VPN and use that for browsing, that will hide all your traffic from both your neighbour and their ISP.


29

What about using tor? Keep in mind that your speed will be affected*. As other people said, using any private mode in your browser is not going to be of any help. *EDIT: The slowdown heavily depends on the network topology, the number of nodes, how much traffic the nodes are handling and what you are downloading. Here you can find some explanations about ...


25

Yes they can actually. What it boils down to is that they can see which websites you are running by looking at: Clear HTTP traffic DNS requests sent One thing you could do is purchase an encrypted VPN and run all your internet traffic through the VPN. This way your neighbours will not be able to see what you are doing.


20

You could try another old-fashioned way and disclose something specific on the phone, and nowhere else, that would be of interest to those monitoring you. If that information is later used you will know your phones are being monitored.


12

The built in windows auditing can do this if you're running a domain, or at least windows 2003/Vista and are willing to set it up in group policy. Enable object access auditing and then set up the files and folders you want to audit. There are a large nunber of tools that can then read and sort/filter the windows logs ... I'm a fan of GFI EventsManager, but ...


11

There are all sorts of security risks - the ones I tend to highlight are: The big social networking sites are a wonderful target for attackers. Imagine a group of over a billion users, most of whom are not technically savvy, that all use the same web app (eg Facebook) and have personal data, links to others etc. So take it as read that these sites are ...


11

Process Explorer, part of the SysInternals suite, is indeed a Windows only tool. It is largely intended to replace the standard Windows task manager. As such it gives very detailed information about the running processes, and all the various and sundry statistics that one should expect. One line I heard used to describe it was, "Finally, an actual top for ...


10

connections dropping frequently, rate limiting occuring, and packet loss Without knowing whether your connection resets are injected TCP reset packets or a result of dropped packets, it's hard to say whether you're actually having your data acted on or just having connection issues. It is entirely conceivable that your line or equipment aren't working ...


10

When my laptop is using a network I don't control (basically anything that's not home) it wears pretty red socks to reroute all traffic into the SOCKS5 proxy built into OpenSSH and then to a server I rent anyways for my website to protect my traffic. You can use tor as well but I intensely dislike tor (for reasons off topic here). This is the socks_up ...


10

In practice, it depends on the router they're using (and, specifically, on the firmware it's running). Basically all home WiFi routers have the technical ability to log visited URLs, as long as their firmware includes such a feature (and it's not exactly a complicated one). The main questions are: whether the router firmware supports such a logging ...


9

What do we look for? -- A Security Expert. To Hire. That is a 100% serious answer -- If you are asking this question you need someone in house who can answer it. Selling a "security monitoring service" without an expert on staff is a Bad Idea. You will make a mistake, it may result in a client being compromised, and you won't have the expertise on hand to ...


8

If he was a sysadmin, you can no longer rely on anything on that box, as he may have had the capability to change anything. You should escalate this to your IT or incident response team - the damage may not be confined to them just deleting evidence, a sensible precaution may be to wipe and rebuild the box, depending on its sensitivity. If you have backups ...


8

Assumptions. As I understand it, you are only concerned about eavesdropping: e.g., that the folks who are monitoring you might record everything you do, and fail to adequately secure those records. You are not worried that they will be actively malicious. For instance, they won't mount a man-in-the-middle attack on you. Advice. Given this threat model, I ...


8

In order to trace back the source you first need to figure out which device is generating the traffic. The best, in my opinion, would be to set up a flow collector of some sort. There are generally two ways to do this, Exporting flows from the device Software analysis to generate flows Most high end network gear will generate some kind of flow record, ...


8

You could detect some of them (the simple ones) using Process Explorer, but it would be a really time-consuming way to detect viruses and should be paired with other monitoring tools like FileMon. You probably would be much better off with installing an antivirus like Microsoft Security Essentials if that's an option. While there are still multiple malware ...


8

A keylogger can use literally any form of communication to send its data back to the attacker. Common methods: FTP upload Email IRC HTTP POST Connect-back (i.e. attacker connects to a service listening on your machine) P2P network (e.g. Gnutella or BitTorrent) Custom protocol running over TCP or UDP, directly to the attacker. Note that any of these ...


8

Since you do not state what kind of "help" you want, I will have to guess. So I suggest the following: Talk to your father. With "talk" as in "talking", not "shouting reproaches". Your father installed this monitoring system for a reason, probably a mixture of making him less worried about your well-being, and a safety feature against the re-enacting of ...


7

Sensor placement can be very tricky as there are loads of variables to consider. At minimum, you should take into account Classification level of monitored resource Network design System throughput Personnel time (for management and analysis) Resource availability Throwing all of those into a blender and turning on high for a few minutes will give you ...


7

One-time passwords would seem to fit the bill. Assuming you aren't being filmed, you could have a list printed out.


7

On the Linux side you can do this kind of monitoring using the auditd subsystem and very cleverly written rules. It can be used to watch for changes to files or directories, entry or exits of system calls, etc.


7

If you're looking for something interactive, and not service-style long-term monitoring software, check out Microsoft's (nee SysInternal) Process Monitor. Very versatile.


7

The simple answer is that you can't. The tracking and tapping is done transparently at the service provider. Only ways I can think of: Breach the service provider's network and find out for yourself. Bribe a service provider employee to give you a list of taps.


6

WireShark is a free tool you can use to monitor network traffic. Excellent tool to see if a hidden keylogger is trying to email and /or FTP logs because it usually has the address and password in the wireshark log.


6

Number 1 - as others have mentioned - is control: you should be working, not playing on facebook, or telling your dog on twitter that you just got yelled at by your boss (for playing on facebook). Number 2 - is bandwidth. Even if there is plenty of bandwith available, there is no reason to waste it on, well, sites that you shouldnt be using when you're ...


6

Have a look at tshark. It's like wireshark, but then for commandline. Just install it with apt-get. A tutorial on how to use it can be found here. You can easily filter for http with it. To capture http traffic: tshark -R "tcp.port == 80" -r /tmp/capture.cap If port 80 is your http port. If you don't know the port just capture everything and you can ...


6

If you delete your TOR data directory, TOR will randomize how it builds new circuits and picks new entry nodes. However, the behavior you are seeing is intentional. TOR has affinity to a small set of entry nodes, called entry guards. These guards help reduce the chance that you are assigned an entry node which is malicious, because your computer is only ...


5

My question: where do I go to get more info on this user account? Is there a log kept that shows the user and what action was taken? My thought - what is your purpose in collecting the information? How and what you do next, has a lot to do with what you want to have happen. Here's my thoughts of optional outcomes: Prosecute him - at this point, he is an ...


5

In short - because you should be working. And, in general, any truly relevant knowledge available via social sites is equally available elsewhere.



Only top voted, non community-wiki answers of a minimum length are eligible