New answers tagged

0

A lot of what I discussed in this answer about alternate SSH ports is applicable to this question. Since your goal is to be as invisible as possible*, I think your best bet is secure port knocking with a tool like fwknop (as noted in this crypto.SE question) or perhaps a custom one-time password scheme for sufficiently complicated port knocks (to help ...


0

First, remember that Authy allows you to use any TOTP token (like Google authenticator), but they also offer their own proprietary 2FA method. In Authy's method, the account provider must integrate Authy into their authentication mechanism, not just implement the TOTP standard. In this method, Authy issues the seeds, and this also allows them to support push ...


1

Use nmap with the -p option to have it "ping" the specific port you'd like to test. You can cron this, or script it in any number of ways. The nice thing about this is you can test the TCP connectivity without creating logs on the server or take it a step further and get the version information from the server which will confirm that the server itself is ...


23

Note: I like honeypots a lot but to answer your question some negative aspects include: You are not reducing your workload. You are increasing the amount of signals you have to process. You are increasing your operating costs. You are taking time away from other security activities which may otherwise help protect actual data & services. You may be ...


25

It's a lot of work. Not only that, but it's a lot of work that your (legitimate) users will never see or benefit from. Most people would be willing to trade off the nebulous risk of deterring a small subset of hackers (realize that APT hackers, in particular, wouldn't be dissuaded and might even find an extra way into your system if you do something wrong ...


1

I think you are confusing some things here. JavaScript is to be executed in the user's web browser. You can change the JavaScript in your browser as much as you like (with your browsers developer tools or alike) - but this will not have any effect on the server or other users. If you would manage to change the JavaScript for ALL users, this would be a ...


1

You cannot really do that without being illegal. There is a reason probably that you dont have admin access. And not having permission from the admin and doing it is also illegal.


4

None of the symptoms you posted is a sign of having malware on your computer. My internet connection slows to a crawl often Complain to your internet service provider or find a better one. my games keep crashing Viruses don't tend to do that. When you have problems running games, it's far more likely to be a problem with your graphic driver... or ...


0

There is no sure way to tell. You can find a virus on your computer, and then I guess you'll know that there is a virus. But it is not possible to be sure that there is a virus responsible for all of the suspicious activity on your computer. It is equally possible that someone is hacking into your computer and screwing around with it. But in terms of ...


1

The quickest and easiest way would be to verify whether there are processes keeping a socket open for listening. You need a utility such as netstat (Unix, Mac and Windows). There are also GUI utilities - I seem to remember tcpstat and wintcp for Windows. Also Process Explorer by SysInternals and TCPView. These utilities will provide you with the open ports ...



Top 50 recent answers are included