Tag Info

New answers tagged

2

If he knows the admin password to the WiFi router or network switch he can monitor every URL that you access. Many routers even come with monitoring facilities built into them to support monitoring of one's kids' internet activities. Using SSL prevents your friend form knowing the contents of what is transmitted over the pages but the sites you access are ...


1

Well it depends. If your friend is using Wireshark or similar software that allows capture the packets, then yes he will be able to intercepts the HTTP traffic in WiFi network. So put it simple: If you and your friends are browsing HTTP web pages, then "computer wizard" will be able to see what you and your friends are doing.


4

Incognito mode does not provide any protection from Wi-Fi snooping; it merely stops your browser from saving your browsing history locally. If you're using unsecured Wi-Fi (or secured Wi-Fi where the attacker knows the password), there is no way to detect if your friend has been recording your web traffic. Any http sites you visited have potential to have ...


2

Actually visiting your browser history is not possible as long as he doesn't has acces to your computer. Assuming your computer is not infected by him and he has no physical access to your computer. Although inspecting the network traffic, monitoring or saving it, is possible. What you can do is. Just ask him from man-to-man. Secondly, if you have something ...


0

Sounds like a very cool project. It seems that you have rediscovered the very problem that Kerberos was designed to solve. Looking at your example, why would you not just use PKI both ways? Or can you not control the certificates at both ends? You could look at SSL session initialization to see how you could transfer a confidential message under the gaze ...


4

Maybe you are thinking of: Ingress which indicates inbound flow, for instance flows coming from Internet to your LAN/DMZ, Egress which indicates outbound flow, for instance flow leaving your LAN toward the Internet. These will be handled in quite a different way regarding your firewall policy. If you are just referring to data coming to the firewall ...


0

This could either be a DDOS, albeit a low scale one, or Cash-overflow attack (given that you're on AWS) https://www.owasp.org/index.php/Cash_Overflow Edit: Also worth noting, that if someone is attempting to use your server as a proxy, you would see something like this in your Apache logs: X.X.X.X - [20/Apr/2015:12:39:11 +0100] "GET ...


2

What DrDinosaur said is correct, about the tools widely used like nmap being exactly that - tools - without any intention of their own, they are given an intention of good or bad by the person who uses them. Let me explain further: There are 4 stages of Security testing: - Recon - Mapping - Discovery - Exploitation Each stage has a different aim of gaining ...


8

Those are vulnerability scanners, not just port scanners. People use them to find vulnerabilities in systems. It doesn't matter what their intentions are. If there are vulnerabilities, there's a fair chance the scanner will catch it. A hacker can chose to exploit any exploitable vulnerabilities. The scanners themselves don't exploit the systems; an attack ...


1

Whatever your strategy, I think the first step is to sign your patches. No matter how many MITM there are, if the users can check your signature in a way they trust that will already provide a massive amount of certainty. HTTPS is good, but it doesn't really do as much as the signature on your patch, HTTPS will make MITM more difficult, but not impossible. ...


1

You should consider the following: If the two interfaces connect to two different network segments, with different levels of trust (e.g. DMZ and internal network), you are essentially bridging those networks. Software firewalls can help mitigate the potential for abuse, but you must also consider situations where the firewall daemon fails to start, or the ...


4

Firstly as per @EricG most of the administration should be handled using a network administrator account, using group policies and the like. If you need access to a users logged-in session the best way to approach this is to have the user login to their machine and then hand you the keyboard. That way you never learn there password, and the user can observe ...


0

Indeed, Microsoft Technet lists MITM prevention as the sole use of this setting. And a digital signature does just that: to prove the authenticity of a digital message. If your network is trusted and MITM scenarios are really (!) not possible, it can be disabled. Apparently there's also a performance decrease involved when it's enabled. So, if you're ...


1

how does one make a worm to send packets to execute bytes on a computer without the legitimate user downloading the Stuxnet? It has been widely publicised that Stuxnet used at least four 0day vulnerabilities in Windows to circumvent measures which otherwise might have prevented arbitrary code being executed without the user's knowledge. These were ...


1

As long as you keep UPnP blocked at your gateway, you will be fine against any direct attacks against UPnP. Later in that same article you linked: First, and foremost, you need to make sure you've blocked UPnP at your Internet gateway. Specifically, you need your firewall to block any system from outside your LAN from accessing the ports 1900/UDP, ...


0

These seem like exaggerated claims in the form of "We just protected you from 145 threats, killed 5 aliens, 3 ninjas and one dragon!" The best options are, either: (next time it happens) use a network scanner/sniffer (like WireShark or similar) to see what actually happened ignore it (or use a better HIDS that gives better descriptions) uninstall McAfee ;) ...


1

I don't see how TLS 1.3 should harm the current way TLS interception is done. Currently TLS interception is done by having a man-in-the-middle proxy. Connections from client to server will be handled by this proxy the following way: Create TLS connection between proxy and server. Create a new server certificate (often just a clone of the original ...


1

First of all I do not think this is belonging to Security SE Please read Security SE policy regarding questions. Its more of Physics. if I am correct! I recommend you to read this article about Data Transimission require basic knowledge of physics Simple way to find more about your question with no prior knowledge of physics is understanding Layer 1. But ...


1

Ad-Hoc networks are just like regular ones: they are networks hosted by a machine (in this case your computer) that provide some networking functionality. Windows automatically disables wireless methods of file sharing and remote desktop without a password. The only thing bad that could happen (assuming you have a programmer on your trip, which you probably ...


0

This isn't the place to ask, but it is a wifi camera and there is no DVR function attached to it, therefore if you do not have a wireless router or if the router/access point turns off then you will not receive the video stream. NOTE: I do not own the product nor do am I affiliated with Belkin so my answer could potentially be wrong.


2

What you're looking for is network data loss prevention. There are some costly solutions from Code Green Networks, Symantec, etc. One free and GNU GPL-licensed ones is MyDLP (specifically you'll want the MyDLP-Network product) that does this.


1

You can use wireshark for sniffing packets and getting every kind of information from that. Wireshark is opensource project Check out its official page: https://www.wireshark.org/


2

I also have this following sha512 encryption system, which was created by Sammitch Why not use password_hash? The only reason I can think of is that you are using an old version of PHP, in which case you should update PHP. I have a custom CMS with a randomly generated ASCII 100-character string from this site for both my username/password. Don't ...


1

My preferred method is SSHFS. Your NAS server runs a SSH server which you then connect to from your remote machine. Leveraging SSHFS it will mount a drive on your remote machine via SSH (secure, encrypted) from the server you specify. I've not used the windows client version so YMMV. ...


1

Here is how this really works. Where ever you are your IP address on a Smart phone may, or may not change. This purely depends on the carrier and or provider of said access. Some will give you a static Ip, others will give you a Dynamic IP. Static does not change, Dynamic does. (If I am remembering right I am very tired.) So, lets say you retrieved ...


2

Setup proper 802.1X authentication / WPA-Enterprise to connect to the network. So each client will have their own credentials and they'll be logged accordingly. VPN could also be set up in the same manner if you need remote access. All of these protocols are designed with security in mind and thus inherently prevents any form of MITM attacks if implemented ...


1

If you want to ensure you have your employees taking to you, and not some third party, you need to create a set of keys you distribute securely, and the tool you use depends on both ends having keys. Some few VPNs may do that, but not many. I think ssh can do so.


13

Those messages get a D- for technical content and accuracy. The most likely explanation is that these packets arrived late and failed the ESTABLISHED,RELATED check because the connection was already closed. Somewhat less likely is that they actually had the CONNECT flag set in the TCP header, and your firewall is either dropping all incoming connections or ...


1

To answer question 1, I don't think either setting is as secure as you ought to be. Option 1 leaves masq turned on for the WAN when it doesn't need to be. Option 2 sets up a default accept rule for the WAN when it doesn't need to be. To answer question 2 and fill in the blanks on question 1: The input/output rule settings in OpenWRT are the default ...


1

Check out these two guides for more info: http://blog.ipredator.se/howto/openwrt/configuring-openvpn-on-openwrt.html http://tokyobreeze.wordpress.com/2015/01/15/install-openvpn-in-a-router-with-4mb-flash/ The basic idea is to create 3 separate zones, use zone forwarding from LAN to VPN, and turn on Masquerading and MSS clamping on the VPN zone. Be sure to ...


0

WPA2 is just a commercial name for a complete implementation of the 802.11i specification (WPA implemented only a part of it as a temporary measure against WEP weakness). 802.11i is an amendment to the original 802.11 specification, which means that it replaced several part from it, the original content becoming deprecated and a new revision of the 802.11 ...


0

VPN providers surely keep track of your connections to their services. They probably don't track your trafic inside the tunnel, giving you the anonymity. Remote port forwarding only applies for incoming external connections and therefore doesn't remove your anonymity for your outgoing trafic. But, if you use remote port forwarding to handle illegal ...



Top 50 recent answers are included