Tag Info

Hot answers tagged

15

Yes, most exploits are platform dependent. There are details. For instance, if an attacker targets Internet Explorer, then he targets Windows systems. Most Windows systems run on x86. Moreover, on Windows up to 7, the default IE is the 32-bit version, even if the OS is a 64-bit Windows. Also, at the assembly level, XP, Vista and 7 are very similar (indeed, ...


11

Google Chrome OS is a Linux-based operating system on which Chrome is the browser and focuses on the use of the online applications that belong to Google (Google Drive, Youtube ...). It is the direct competetor with Windows OS of Microsoft. Centos OS is also a Linux-based operating system but unlike Chrome OS which runs on mobiles, Centos OS is widely ...


8

Actually, you cannot. Even without speaking of an actual compromise, from a security perspective you may assume that your application already contains bugs which can be at least be as effective than a software compromise. That's why, when building a secure system, your security must not rely on a single tool. Instead, you must use a layered security ...


7

There are several major impacts, not all of them relevant to all users. Performance (based on throughput, i.e. MB/s - the more data you're moving in a given timeframe, the more encryption has to happen in that timeframe - when the encryption can no longer keep up, your data moves more slowly); if you use symmetric AES encryption with software that uses ...


7

One of the articles you link to -- If the NSA has been hacking everything, how has nobody seen them coming? -- makes an assumption in posing the question: "If the NSA was owning everything in sight (and by all accounts they have) then how is it that nobody ever spotted them?" The premise for this question is incorrect, because for all we have found out ...


6

A sandbox is like a special "section" of your computer that has been blocked off from accessing the rest of your computer. In a perfect sandbox you can do anything you want within it, but it will not effect the rest of your computer. This is used as a form of security, keeping any malware you might download from being able to affect the rest of your ...


6

A list of the various tests used are provided in the mmap documentation at http://nmap.org/book/osdetect-methods.html#osdetect-probes-seq. For more specific details you'll have to read the source code. Essentially various different probe packets are sent and the results analysed. Slight differences between TCP/IP software mean there are sometimes slight ...


5

Heuristically. nmap observes the behaviour of the system during probes, develops a "fingerprint", which analagous to a real fingerprint test, looks mainly for the minutiae: out of specification behaviour and extra-specification or undefined behaviour retransmission times response to fragmentation and various ICMP probes patterns in TCP sequence numbers, IP ...


5

You are correct about performance. With symmetric key encryption, the performance hit should be very small. The other effect is to render useless some operating system features. The one that comes immediately to mind for encrypted files (not full-disk encryption) is the content indexing and searching feature of Windows. If a file is encrypted, its ...


4

You have a non-question right here. Let's look at your second and third assumptions. Rebuilding a machine has negligible cost with zero downtime. The logical conclusion in this ideal world is rebuilding after any instruction is executed. After all, it has zero cost. Then you say, Ideally a way that avoids 'unnecessarily' excessive recycling which ...


4

There are a wide range of ways to trick OS identification functions, and they work to varying degrees, depending on how much functionality is built into the tool. For example, nmap doesn't just use one identification mechanism, but a few which feed in to it's confidence %age announced in it's OS identification. Nmap sends a series of TCP and UDP ...


4

Are exploits platform dependent? Yes. As in, does that mean that the IE vulnerability needs to be developed IN ASSEMBLY once for each OS( XP, Vista, 7, 8 ), doubled based on 32/64 bit, then doubled again based on byte order? No. The use of assembly doesn't make it more platform dependent. It's only just as platform dependent as it would be if ...


4

In theory, a microkernel, by putting the bulk of the driver code into userspace, is more resilient against attacks: an attack against one driver can't easily be used to leverage access to the other drivers, or gain kernel-level privileges. Additionally, the reduced size of the kernel gives it a much smaller attack surface. In practice, kernel architecture ...


4

Performance was once the biggie, but there's also the impact on low-level access and operations. A good aspect to explore might be DRM. DRM is bad (or good) because it makes it hard to access your data in ways that you desire to. Almost always, there are very good reasons that you might want to access information in a non-standard or out-of-band way that ...


4

A network scanner interrogates the target over the network: determines open ports via (semi-)exhaustive search determines software and versions, if possible, based on banners and behavior checks for known vulnerabilities (e.g., does /CFIDE/administrator exist) but it is limited by only having network access. The banner printed on port 22 will identify ...


3

The most common? Probably HKLM\Software\Microsoft\Windows\CurrentVersion\Run -- it's how programs arrange to be run at startup. Of course, a lot of perfectly harmless programs also use it, so watching it won't gain you much. The problem with simply watching registry keys for modification is that normal programs also change many of them. You can't, for ...


3

I think you can safely live normally ;) The user in this forum propably just took a guess on your UserAgent. This is neither considered hacking nor does it do any damage on your pc. There is even a Website telling you what OS you use, only by visiting it. There are also more informations about how this is working.


3

Exploits are platform dependent as each platform may have a different way of handling the memory layout and process execution. For example, executing an exploit on WinXP will be relatively easier rather than on other recent versions of Windows. Talking particularly about the IE exploits, it has got more to do with finding vulnerability in some of the ...


3

This is almost certainly a hardware fault in the video card; it's possible (but unlikely) that it's a bug in the video driver instead. The scrambled image you're seeing is leftover data from the game, stored in the video card's memory. Since you rebooted rather than doing a cold shutdown, the data wasn't lost due to lack of power. On starting up, Linux ...


3

Maybe you have another trustworthy live system CD (such as knoppix) available. You can boot your computer from that CD, mount your filesystem in the live session, download and burn from within the live session. Then you can boot off the downloaded/burnt CD.


2

With this kind of configuration, there will always be a level of risk as they have shared resources which could be compromised. Probably the main area of concern would be the BIOS of the machine which could, theoretically, have malware installed which would be active when the "secure" OS was booted. Two approaches that spring to mind to minimize the risk. ...


2

If a machine is hijack by an hostile entity, then the attacker can gain full access to the hardware -- including every drive which is currently plugged in the machine. If the Linux drives are encrypted with a key that the Windows system never sees (which means that if you want to copy files from the Linux to the Windows, you have to do it from Linux, not ...


2

In general, restoring from a clean backup will wipe out any malware you have. However, there are rare exceptions. Malware can install itself in your computer's BIOS, in which case it will persist through anything but a BIOS flash (and if it can sabotage the flash process, it can survive even that). BIOS-infecting viruses are extremely rare, though, ...


2

There is a way to do this via Google's Native Client. However, executables have to be compiled for this environment explicitely. It is difficult to achieve otherwise (i.e. without a sandbox). DEP can't do this for you, as it only prevents memory segments without the executable flag from being executed. Just think of reading the CPUID, which is a simple ...


2

It is possible to have an exploit be cross-browser or cross platform. It would depend upon libraries, frameworks, and the type of exploit. Most exploits are going to target a specific platform, a specific version, etc. An exploit is an attack on logic, so it may be possible to write code once that will work across architectures based on the logic, however ...


2

You're asking two different questions here, so I shall address each: Is a file I save in dev mode tracked by Google? Yes, yes it is, Google doesn't really respect privacy, even if they say they do, and if you are in developer mode, you are a far more interesting target for tracking. Is it invisible to Chrome OS if I save files in dev mode? No, again - ...


2

Probably the best protection for physical access is full disk encryption and a smartcard that stays on your keychain. I mean this is assuming you're colleagues aren't a bunch of professional hackers. I doubt the NSA is interested in your computer. Also, don't put personal files on your computer. Just don't. Assume that everything on your work computer is ...


2

The page lists the affected systems and your windows 7 32bit is not included: Affected Avaya DefinityOne Media Servers Avaya IP600 Media Servers Avaya S3400 Message Application Server Avaya S8100 Media Servers Microsoft Windows 2000 Advanced Server SP1, SP2, SP3, SP4 Microsoft Windows 2000 Datacenter Server SP1, SP2, SP3, SP4 Microsoft Windows 2000 ...


2

Running X.org as non-root is now possible as of Feb. 22, 2014 (my emphasis): In OpenBSD-current, after this commit users of Intel and ATI Radeon graphics which support kernel mode setting (almost all of them) can set machdep.allowaperture back to 0 in the /etc/sysctl.conf configuration and still run the X server. This means that the X server ...


2

This an artifact with the way windows does permissions: you can't act as a user without knowing the user's password because certain key bits of information are encrypted using the user's password. So this applies to no other operating systems. But the key here is that users have permissions and ownership rights, programs do not. So each application is just ...



Only top voted, non community-wiki answers of a minimum length are eligible