Tag Info

Hot answers tagged

16

As far as I can tell, you’d need to define where it would be “Live Streaming” from. For example, if someone used darknet (Onion/TOR) to stream, it would be very difficult since there are a lot of randomized layers. No one would be able to block a live stream since it would come from various sources (nodes). There could be no mechanism to have ISPs block ...


12

"Can't be blocked" is impossible. Even if you don't know the location of the source (say, they're using a censorship-resistant system such as a Tor hidden service), you can still perform a denial-of-service attack, though doing so would have substantial collateral damage (a successful DoS on a Tor hidden service will likely render the entire Tor network ...


12

That utility needs root access because it uses a raw ethernet socket. In a similar way, ping needs root access, as it also uses raw sockets. The difference is that (on most systems) ping is suid-root so any user can run it. If you're happy with non-root users generating these packets, you can make etherwake suid-root, or use sudo as you suggested. There is ...


6

For police, requests like this are made to the ISP (which would be easy to ascertain), or the streaming or hosting service (also easy). The problem is the timeframe. It would take time to coordinate with the ISP or service. It is going to be 'impossible' to turn off a website within an hour, for instance.


4

I think you are worrying about the wrong thing. You should have no reason to trust the local network any more than you would for any data you'd send over the public internet. If you want to send a password, it's your responsibility to ensure you're using a connection protected by TLS. Trusting the local WiFi to protect your data is essentially excluding ...


3

The act of powering down or powering up a machine should be restricted to a small subset of administrators and security personnel in your organization. The act of remotely sending a Wake on Lan packet could have serious negative security and administrative implications if it is given to the wrong users. If you are worried about adding a user to the sudoers ...


3

No, you won't be able to do a MITM attack on the edge router and your access point/router. In order to perform a man in the middle attack you must be on a network segment that allows your device to actually get in between these two routers. As programings already pointed out your gateway is the internal router/access point, which means that without it you ...


2

Note that magic packets work regardless of their type. Your tool requires root because it sends Ethernet frames directly. However, there is nothing stopping someone from sending the same data inside UDPv4 broadcasts, which is in fact done by practically all other wake-on-LAN tools. (UDP port 9 is common.) This makes network security concerns mentioned in ...


2

Because virtualization software is not perfect, it is in some cases possible to escape out of the virtual environment and do bad things on the host. It is important to keep your virtualization (and other software) up to date, because security patches to prevent this attack are sometimes released. I believe that malware could indeed then be put onto the ...


2

Any self-verification mechanism included in the executable file could be replaced or removed by the attacker who intercepts the file. Therefore, we must leave signature verification to a system external to the downloaded executable, for example, the operating system. There are three possible outcomes such a verification system can produce: The signature ...


2

First, a comment; sometimes (read "almost always") I get a cool new toy, app, technology and I try to fit it in in every possible place. Even in places that don't work, I enjoy figuring out why. It's a learning experience. The term "Threat Model" may sound either overly theoretical, or dismissive of your case. The purpose is for the security consultant ...


1

I will restrict this to only gateway to gateway VPNs - there are additional potentially higher risk considerations for client to gateway VPNs. A connection to the Internet will be via an ISP and therefore the end points of a route between two organisations will generally be known; if the ISP(s) have implemented controls that provide confidence that their ...


1

The internet is a mesh of telecommunications lines run by different companies which are leased by ISPs which use them to sent traffic from customer to customer. Any one of the ISPs or telecommunications companies can sniff the traffic that goes over their lines or network devices in ways you cannot detect. Some governments have forced (or paid) ISPs to ...


1

Having once worked at an edu, it was our goal to make things as seamless and painless for the clients (students) of the University. As a professional, there were many things that we championed for especially when it came to security. For example, we opposed P2P network, because traffic patterns at the time pointed to students downloading music (back then ...


1

If I understand correctly, your computer serves as a Wifi Access Point, so it should have a dhcp server running on wlan0, is that so ? Assuming this is the case, First you need to have /proc/sys/net/ipv4/ip_forward set to 1 instead of 0 (if you are using IPv4, I don't know the equivalent for IPv6, if there is any) The iptables command you are looking for ...


1

Sounds to me like you looking more at the integrity of the actual file or data. When it comes to checking to ensure it is not infested with a possible virus, that where your Antivirus comes into play, or a UTM on your Firewall. For instance; a Sonicwall Firewall appliance would be able to ensure the safety of that file. but the actual integrity of the file ...



Only top voted, non community-wiki answers of a minimum length are eligible