Tag Info

Hot answers tagged

13

Those messages get a D- for technical content and accuracy. The most likely explanation is that these packets arrived late and failed the ESTABLISHED,RELATED check because the connection was already closed. Somewhat less likely is that they actually had the CONNECT flag set in the TCP header, and your firewall is either dropping all incoming connections or ...


4

Firstly as per @EricG most of the administration should be handled using a network administrator account, using group policies and the like. If you need access to a users logged-in session the best way to approach this is to have the user login to their machine and then hand you the keyboard. That way you never learn there password, and the user can observe ...


2

This is based on personal experience with a femtocell issued by the German chapter of O2 (a branded Alcatel-Lucent 9361). For other femtocells and operators, the configuration might be different. Setting up a Whitelist of Cell Users By default, every O2 customer (and those roaming from other operators and countries, of course) is allowed to connect to ...


2

In basic language we can say VPN provides access to private network (corporate / office ) from outside, using secure network connection over the public network (Internet/ISP). Types of VPN: Site-to-site VPNs connect entire networks to each other -- for example, connecting a branch office network to a company headquarters network. In a site-to-site VPN, ...


2

Setup proper 802.1X authentication / WPA-Enterprise to connect to the network. So each client will have their own credentials and they'll be logged accordingly. VPN could also be set up in the same manner if you need remote access. All of these protocols are designed with security in mind and thus inherently prevents any form of MITM attacks if implemented ...


2

I also have this following sha512 encryption system, which was created by Sammitch Why not use password_hash? The only reason I can think of is that you are using an old version of PHP, in which case you should update PHP. I have a custom CMS with a randomly generated ASCII 100-character string from this site for both my username/password. Don't ...


2

What you're looking for is network data loss prevention. There are some costly solutions from Code Green Networks, Symantec, etc. One free and GNU GPL-licensed ones is MyDLP (specifically you'll want the MyDLP-Network product) that does this.


1

Whatever your strategy, I think the first step is to sign your patches. No matter how many MITM there are, if the users can check your signature in a way they trust that will already provide a massive amount of certainty. HTTPS is good, but it doesn't really do as much as the signature on your patch, HTTPS will make MITM more difficult, but not impossible. ...


1

You should consider the following: If the two interfaces connect to two different network segments, with different levels of trust (e.g. DMZ and internal network), you are essentially bridging those networks. Software firewalls can help mitigate the potential for abuse, but you must also consider situations where the firewall daemon fails to start, or the ...


1

You can use wireshark for sniffing packets and getting every kind of information from that. Wireshark is opensource project Check out its official page: https://www.wireshark.org/


1

how does one make a worm to send packets to execute bytes on a computer without the legitimate user downloading the Stuxnet? It has been widely publicised that Stuxnet used at least four 0day vulnerabilities in Windows to circumvent measures which otherwise might have prevented arbitrary code being executed without the user's knowledge. These were ...


1

As long as you keep UPnP blocked at your gateway, you will be fine against any direct attacks against UPnP. Later in that same article you linked: First, and foremost, you need to make sure you've blocked UPnP at your Internet gateway. Specifically, you need your firewall to block any system from outside your LAN from accessing the ports 1900/UDP, ...


1

I don't see how TLS 1.3 should harm the current way TLS interception is done. Currently TLS interception is done by having a man-in-the-middle proxy. Connections from client to server will be handled by this proxy the following way: Create TLS connection between proxy and server. Create a new server certificate (often just a clone of the original ...


1

First of all I do not think this is belonging to Security SE Please read Security SE policy regarding questions. Its more of Physics. if I am correct! I recommend you to read this article about Data Transimission require basic knowledge of physics Simple way to find more about your question with no prior knowledge of physics is understanding Layer 1. But ...


1

Ad-Hoc networks are just like regular ones: they are networks hosted by a machine (in this case your computer) that provide some networking functionality. Windows automatically disables wireless methods of file sharing and remote desktop without a password. The only thing bad that could happen (assuming you have a programmer on your trip, which you probably ...


1

My preferred method is SSHFS. Your NAS server runs a SSH server which you then connect to from your remote machine. Leveraging SSHFS it will mount a drive on your remote machine via SSH (secure, encrypted) from the server you specify. I've not used the windows client version so YMMV. ...


1

Here is how this really works. Where ever you are your IP address on a Smart phone may, or may not change. This purely depends on the carrier and or provider of said access. Some will give you a static Ip, others will give you a Dynamic IP. Static does not change, Dynamic does. (If I am remembering right I am very tired.) So, lets say you retrieved ...


1

If you want to ensure you have your employees taking to you, and not some third party, you need to create a set of keys you distribute securely, and the tool you use depends on both ends having keys. Some few VPNs may do that, but not many. I think ssh can do so.


1

To answer question 1, I don't think either setting is as secure as you ought to be. Option 1 leaves masq turned on for the WAN when it doesn't need to be. Option 2 sets up a default accept rule for the WAN when it doesn't need to be. To answer question 2 and fill in the blanks on question 1: The input/output rule settings in OpenWRT are the default ...


1

Check out these two guides for more info: http://blog.ipredator.se/howto/openwrt/configuring-openvpn-on-openwrt.html http://tokyobreeze.wordpress.com/2015/01/15/install-openvpn-in-a-router-with-4mb-flash/ The basic idea is to create 3 separate zones, use zone forwarding from LAN to VPN, and turn on Masquerading and MSS clamping on the VPN zone. Be sure to ...


1

The seminal work on detection of promiscuous interfaces on the network is Detection of Promiscuous Modes using ARP Packets: ...promiscuous mode detection is performed by checking the responses of ARP packets, when ARP request packets are sent to all nodes on the network I don't know of implementations offhand, but the paper is detailed enough for ...


1

You could use an SSH tunnel, which would encrypt your network traffic and route it through your home. The problem is that you'll likely not be able to access local network resources (fileshares, intranet, etc.) while tunneling. And while your net-admin may not know exactly what you're doing, he or she will still see that you're doing something. It may rouse ...


1

In the old days, if you were a big company with multiple private local networks in multiple locations, you connected them together by installing private data lines between the various locations to make a Wide-Area Network. Then the Internet came along, and you also had to connect each site to the Internet. It turns out that Internet feeds are much, much ...


1

There are low tech solutions that will work: Possibly combined with an IR repeater: if you want to limit the remote control to, say the front of the room where the teacher stands. That won't help if your teachers want to stroll around the students and operate the Beamer; as @AJHenderson says, there is no security protocol for the existing remotes. ...



Only top voted, non community-wiki answers of a minimum length are eligible