Tag Info

Hot answers tagged

17

Yes, it can be done as (theoretically) every "computing device" is computationally equivalent to every other computing device. Look up the Church-Turing thesis if you are interested. However your question is grounded in practice and in this case the answer is "yes, but it would cost too much". Effort in virtualisation today aims at speeding up the virtual ...


15

Yes, most exploits are platform dependent. There are details. For instance, if an attacker targets Internet Explorer, then he targets Windows systems. Most Windows systems run on x86. Moreover, on Windows up to 7, the default IE is the 32-bit version, even if the OS is a 64-bit Windows. Also, at the assembly level, XP, Vista and 7 are very similar (indeed, ...


11

Google Chrome OS is a Linux-based operating system on which Chrome is the browser and focuses on the use of the online applications that belong to Google (Google Drive, Youtube ...). It is the direct competetor with Windows OS of Microsoft. Centos OS is also a Linux-based operating system but unlike Chrome OS which runs on mobiles, Centos OS is widely ...


8

Actually, you cannot. Even without speaking of an actual compromise, from a security perspective you may assume that your application already contains bugs which can be at least be as effective than a software compromise. That's why, when building a secure system, your security must not rely on a single tool. Instead, you must use a layered security ...


8

Actually lorenzo's answer does not quite cut it. The Church-Turing thesis only provides us with a model of computing, it can't tell us anything about virtualization because it is not concerned with other aspects of a machine. But there is theoretical analysis for the ability of a machine to be virtualized by Popek et al: ...


7

A sandbox is like a special "section" of your computer that has been blocked off from accessing the rest of your computer. In a perfect sandbox you can do anything you want within it, but it will not effect the rest of your computer. This is used as a form of security, keeping any malware you might download from being able to affect the rest of your ...


7

There are several major impacts, not all of them relevant to all users. Performance (based on throughput, i.e. MB/s - the more data you're moving in a given timeframe, the more encryption has to happen in that timeframe - when the encryption can no longer keep up, your data moves more slowly); if you use symmetric AES encryption with software that uses ...


7

One of the articles you link to -- If the NSA has been hacking everything, how has nobody seen them coming? -- makes an assumption in posing the question: "If the NSA was owning everything in sight (and by all accounts they have) then how is it that nobody ever spotted them?" The premise for this question is incorrect, because for all we have found out ...


6

A list of the various tests used are provided in the mmap documentation at http://nmap.org/book/osdetect-methods.html#osdetect-probes-seq. For more specific details you'll have to read the source code. Essentially various different probe packets are sent and the results analysed. Slight differences between TCP/IP software mean there are sometimes slight ...


5

Heuristically. nmap observes the behaviour of the system during probes, develops a "fingerprint", which analagous to a real fingerprint test, looks mainly for the minutiae: out of specification behaviour and extra-specification or undefined behaviour retransmission times response to fragmentation and various ICMP probes patterns in TCP sequence numbers, IP ...


5

You are correct about performance. With symmetric key encryption, the performance hit should be very small. The other effect is to render useless some operating system features. The one that comes immediately to mind for encrypted files (not full-disk encryption) is the content indexing and searching feature of Windows. If a file is encrypted, its ...


4

There are a wide range of ways to trick OS identification functions, and they work to varying degrees, depending on how much functionality is built into the tool. For example, nmap doesn't just use one identification mechanism, but a few which feed in to it's confidence %age announced in it's OS identification. Nmap sends a series of TCP and UDP ...


4

Are exploits platform dependent? Yes. As in, does that mean that the IE vulnerability needs to be developed IN ASSEMBLY once for each OS( XP, Vista, 7, 8 ), doubled based on 32/64 bit, then doubled again based on byte order? No. The use of assembly doesn't make it more platform dependent. It's only just as platform dependent as it would be if ...


4

In theory, a microkernel, by putting the bulk of the driver code into userspace, is more resilient against attacks: an attack against one driver can't easily be used to leverage access to the other drivers, or gain kernel-level privileges. Additionally, the reduced size of the kernel gives it a much smaller attack surface. In practice, kernel architecture ...


4

Performance was once the biggie, but there's also the impact on low-level access and operations. A good aspect to explore might be DRM. DRM is bad (or good) because it makes it hard to access your data in ways that you desire to. Almost always, there are very good reasons that you might want to access information in a non-standard or out-of-band way that ...


4

A network scanner interrogates the target over the network: determines open ports via (semi-)exhaustive search determines software and versions, if possible, based on banners and behavior checks for known vulnerabilities (e.g., does /CFIDE/administrator exist) but it is limited by only having network access. The banner printed on port 22 will identify ...


4

"Average length of time that an announced vulnerability has widespread exploitation", T "Attractiveness of server as a target", A, on a qualitative scale of 1-5 (higher number representing more attractiveness). "Ease of exploitation", E, using the CVE score as a basis of common comparison (T/A) x E = N Considering that T is now considered to be measured ...


3

This is almost certainly a hardware fault in the video card; it's possible (but unlikely) that it's a bug in the video driver instead. The scrambled image you're seeing is leftover data from the game, stored in the video card's memory. Since you rebooted rather than doing a cold shutdown, the data wasn't lost due to lack of power. On starting up, Linux ...


3

Running X.org as non-root is now possible as of Feb. 22, 2014 (my emphasis): In OpenBSD-current, after this commit users of Intel and ATI Radeon graphics which support kernel mode setting (almost all of them) can set machdep.allowaperture back to 0 in the /etc/sysctl.conf configuration and still run the X server. This means that the X server ...


3

The most common? Probably HKLM\Software\Microsoft\Windows\CurrentVersion\Run -- it's how programs arrange to be run at startup. Of course, a lot of perfectly harmless programs also use it, so watching it won't gain you much. The problem with simply watching registry keys for modification is that normal programs also change many of them. You can't, for ...


3

I think you can safely live normally ;) The user in this forum propably just took a guess on your UserAgent. This is neither considered hacking nor does it do any damage on your pc. There is even a Website telling you what OS you use, only by visiting it. There are also more informations about how this is working.


3

Exploits are platform dependent as each platform may have a different way of handling the memory layout and process execution. For example, executing an exploit on WinXP will be relatively easier rather than on other recent versions of Windows. Talking particularly about the IE exploits, it has got more to do with finding vulnerability in some of the ...


3

Maybe you have another trustworthy live system CD (such as knoppix) available. You can boot your computer from that CD, mount your filesystem in the live session, download and burn from within the live session. Then you can boot off the downloaded/burnt CD.


3

From the nmap documentation: Another cause of duplicate fingerprints is embedded devices which share a common OS. For example, a printer from one vendor and an ethernet switch from another may actually share an embedded OS from a third vendor. In many cases, subtle differences between the devices still allow them to be distinguished. But ...


3

Put an actual computer in a physical sandbox environment. The computer itself isn't a sandbox and don't virtualize anything. Need active directory? Put active directory in the sandbox environment. Do your tests, verify what has changed, review computer and network logs. This is more practical than building a sandboxed OS which limits normal hardware ...


2

It is possible to have an exploit be cross-browser or cross platform. It would depend upon libraries, frameworks, and the type of exploit. Most exploits are going to target a specific platform, a specific version, etc. An exploit is an attack on logic, so it may be possible to write code once that will work across architectures based on the logic, however ...


2

You're asking two different questions here, so I shall address each: Is a file I save in dev mode tracked by Google? Yes, yes it is, Google doesn't really respect privacy, even if they say they do, and if you are in developer mode, you are a far more interesting target for tracking. Is it invisible to Chrome OS if I save files in dev mode? No, again - ...


2

Probably the best protection for physical access is full disk encryption and a smartcard that stays on your keychain. I mean this is assuming you're colleagues aren't a bunch of professional hackers. I doubt the NSA is interested in your computer. Also, don't put personal files on your computer. Just don't. Assume that everything on your work computer is ...


2

This an artifact with the way windows does permissions: you can't act as a user without knowing the user's password because certain key bits of information are encrypted using the user's password. So this applies to no other operating systems. But the key here is that users have permissions and ownership rights, programs do not. So each application is just ...


2

The page lists the affected systems and your windows 7 32bit is not included: Affected Avaya DefinityOne Media Servers Avaya IP600 Media Servers Avaya S3400 Message Application Server Avaya S8100 Media Servers Microsoft Windows 2000 Advanced Server SP1, SP2, SP3, SP4 Microsoft Windows 2000 Datacenter Server SP1, SP2, SP3, SP4 Microsoft Windows 2000 ...



Only top voted, non community-wiki answers of a minimum length are eligible