New answers tagged

8

I did not know about this until I read the link you posted, so do not view this answer as authorative. I would recommend you to take the precautions listed under "Immediate Mitigation" now, until you are completely sure you are not affected. First, how does this vulnerability work? This is a short form of the PHP example explained under "How it works": ...


1

TLS is an end to end encryption which means that the traffic between the client and the server is encrypted and can't be accessed by someone performing a MitM attack for example. This does not protect your server in any way it only protects the data that is transmitted. So yes it can be exploited through http aswell as through https.


-1

You can detect it with the Firefox resource bundle. You just have to be aware of JavaScript programming. The resource:// URI scheme is used by Firefox to call on-disk resources from internal modules and extensions. But some of these resources may also be included to any web page and executed via a script tag. Mozilla developers is not considering the ...


18

How to know if your company does TLS intercept As the post you linked to explains, the proxy will decrypt all the traffic, and then encrypt it again but signed with another certificate. Therefore the certificate you receive will be different from the one the website send. So one way to detect this is to compare the certificates you get when you visit a ...


1

Second one is definitely better compared to the first. But.....i do not know which kind of users you are dealing with because for the average computer user, more people are aware of VPNs and program to hide their identity more than being able to change headers. In my opinion, i think headers could be more reliable because for the average user, it is easier ...


1

Is a whitelist of hosts reasonable? (I'm thinking yes, since it makes 'call home' more difficult for a virus.) Whitelisting hosts is definitely reasonable when it comes to blocking the malicious network communication. However, the site visits for all whitelisted endpoints requires communication with other third-party entities. The combined ecosystem is ...


2

I don't think your average virus is designed to circumvent whitelist blocks, and doing so via a forum question seems too low bandwidth to be worrisome (or interesting for the average virus writer). I say 'average', because this kind of behaviour is more to be expected of a tailored virus designed to exfiltrate very selected information from your network. ...


1

ZAP does what you tell it to do. It always performs passive scanning, but thats safe as it justs examines the requests and responses. The active scanner performs the attacks, and that only runs when you tell it to. Simon (ZAP Project Lead)


3

To achieve that, you need to choose/use a Mobile Device Management (MDM) solution. There are some solutions about MDM for Windows Phone / Windows 10 Mobile. Look: From Microsoft: https://technet.microsoft.com/en-us/windows/dn771709.aspx https://technet.microsoft.com/itpro/windows/whats-new/device-management Solutions from other companies: just do a web ...


1

Mobile Device Management (MDM) solutions exist that allow you to control and lock down settings on the device, as well as manage devices from a central location.


1

In most cases in which a reverse proxy is deployed, the network behind it is assumed to be secure, in which case the fact that there is technically a man-in-the-middle is of no consequence. However, some providers that use a reverse proxy do choose to secure the traffic behind the proxy using an IPSEC tunnel between the proxy and the content server(s). That ...



Top 50 recent answers are included