Hot answers tagged

38

Like most embedded hardware (routers, etc), their firmware often sucks, and unless you have unlimited time I'm afraid there is no way to thoroughly check every single camera out there. And even if you do find one that's currently secure, what guarantees that you'll get updates for vulnerabilities that will be discovered in the future ? Instead, I suggest ...


33

There's a great short essay written by Bruce Schneier on the right of privacy: The most common retort against privacy advocates -- by those in favor of ID checks, cameras, databases, data mining and other wholesale surveillance measures -- is this line: "If you aren't doing anything wrong, what do you have to hide?" Some clever answers: "If I'...


26

Positive reasons Instead of a beach holiday, we joined a Christian Mission this summer in Malawi. We're keeping quiet about it in case the children are teased at school. I leapt into the road and saved a toddler's life. I just walked away because I don't want any fuss. Controlling dissemination My wife is pregnant, great news! We want to tell close ...


14

Officially, they are pushed forward to allow people in dictatorships to break laws restricting their freedom of information and/or expression. Because, the problem with the law is, that you need some people to make it, and wherever people are involved, they try to get their beliefs into the law. As such, laws, even in so-called "democracies", are not always ...


13

Just to address one point: Credit card insurance protects them from fraud This makes several assumptions, none of which are to be relied on: You assume that the insurance will pay out. It would be safer to assume that the insurer will try to avoid paying out, and require you to prove that you didn't give away your card details. This may be tricky if ...


12

If the victim is using an open wireless network, spoofing DNS is easy. It is easy for the attacker to mount a man-in-the-middle attack and send forged DNS responses. Therefore, if you are using an open wireless network, you should not trust DNS at all: it is trivial to spoof. Similarly, if the attacker is on the same subnet as you, spoofing DNS is easy: ...


11

Threat Modeling is really a skill, based on experience, after learning what works and what doesn't. I don't think a choice of framework will make things much easier for you, you will still have the same issues and difficulties that you have now. On the contrary, I would recommend STRIDE-per-element as the better place to start, and later add in ...


10

Ok, this is a pretty nasty flaw. If directory traversal is possible, the attacker might overwrite often-used executables in order to infect the box with malware. From there, the rest of the network could get infected through a whole range of different mechanisms: USB spreading, remote code execution vulnerabilities, spear phishing, etc. Worse, they could ...


10

This started off as a comment on Andre's answer, but it got a bit long. USB is fine as long as none of the cameras are more than 16 foot from the host :) Since you need to run power out to the cameras anyway, just run a wired ethernet connection to the LAN (or use POE if you can find cameras which support it). On an un-routed subnet, most of the inherent ...


9

EDIT - Modified this answer slightly (now three parts) Low Budget Version Pick up a used router (laying around the house?), install dd-wrt on it and turn off the WiFi. Bingo, ready made 4 port switch. You won't get PoE for the cameras, but, if needed, that's easily rectified (pun intended) with a PoE adapter or just wall warts. Run a VPN on the dd-wrt ...


8

If the attacker gets to choose the files he can overwrite, then he just has to replace a few operating system files to completely own the machine (e.g. replace the kernel and wait for the next reboot). If the file names are "contained" (i.e. the files written to by the attacker will necessarily appear in a specific directory or a subdirectory thereof, ...


7

OWASP, the Open Web Application Security project, maintains a top 10 list of vulnerabilities. It's available in PDF form. That can be a good starting point for understanding, at a high level. "The OWASP Guide to Building Secure Web Applications and Web Services" explains how web applications can be exploited and how they can be designed for robustness.


7

In short, yes it would. But you could also use a simple triage approach if threat modelling is too much of an overhead. In detail - Code analysis can be a time consuming activity. Even tool lead approaches will generate large amounts of output that will require human review and prioritisation. As such a threat modelling approach can help to identify and ...


7

Somebody owning a Tor exit node can sniff and modify any traffic. This includes of course also man-in-the-middle attacks against HTTPS connections. This is not only theoretical attack but used in practice, see https://trac.torproject.org/projects/tor/ticket/8657. See also How safe is Tor from MITM/snooping attacks? for a more detailed answer.


7

A replay attack is an attack where you record a legitimate transaction and then replay it at a later date. It is not an attack on confidentiality because the attacker isn't learning any new information: he has the same data than what he recorded in the first place. it might lead to an unauthorized access but that is a different issue. It is not an attack ...


6

Definatly maybe. Methods and techniques have value when they assist you in acomplishing a task either more completely or with fewer resources than another approach. So are you looking to do the job thoroughly or more efficiently? Threat modeling may help you come up with test cases that anticipate a practical attack and ignore test cases, and thus code, ...


6

I suggest the Microsoft Press book titled "Threat Modeling"


6

Just to add some point of view: Have you heard about the 10 Immutable Laws of Security ? It's a bit old, simple, etc., but goes to the point. Inside it you'll find some rules: Law #1: If a bad guy can persuade you to run his program on your computer, it's not your computer anymore Law #2: If a bad guy can alter the operating system on your computer,...


6

Yes, the "phone" itself is an application. It can be hijacked or replaced entirely. In fact, Android handsets are DESIGNED to do this so that you can automatically use a VOIP provider when making phone calls if you so desire. Malware with complete device control could simply place itself as such a service and when you dialed a call, it would be connected ...


6

It's not a question of which is better, to a large extent these activities come together. For example, some of the trivial threats (e.g. SQL injection and XSS) can be properly mitigated upfront, by choosing appropriate design, using suitable technology, and defining relevant coding guidelines. On the other hand, most security mechanisms and ...


5

SANS.org have a few really good resources. Including: http://www.sans.org/windows-security/2009/07/11/practical-risk-analysis-spreadsheet/ http://software-security.sans.org/resources/paper/reading-room/threat-modeling-process-ensure-application-security http://www.sans.org/reading_room/whitepapers/securecode/threat-modeling-process-ensure-application-...


5

Microsoft SDL v5 is pretty decent and you have to full paper explaining the whole process that can be downloaded from MSKB: http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=12285 If you need to get just a general grasp of the process, you can read a short and solid intro @ TechSurface: http://techsurface.com/2010/01/microsoft-security-...


5

RFC 5246 does include a threat model, but it is described very succinctly and quite informally. It is at the start of Appendix F: The TLS protocol is designed to establish a secure connection between a client and a server communicating over an insecure channel. This document makes several traditional assumptions, including that attackers have ...


5

For the fraud and "identity theft" angle on this, people should remember that dealing with it always takes someone's time and money. Identity theft can be extremely inconvenient or expensive, and your time is not usually covered by insurance. Another angle is price discrimination. "We see you have $1234.50 in your bank account, therefore the price of this ...


4

Is DNSSec required for public key/hash distribution? Yes. One has to have a trusted starting point, and in this case that's the signature of the root domain. From there, each corresponding subdomain is signed so there is a chain of continuity to demonstrate that your request was not hijacked at any step of inquiry. Are there any threat models comparing ...


4

If you have zero trace of what happened then you can only make assumptions as to what happened. Standard practice is to identify all platforms and versions, then to look at vulnerability databases to see if there are known weaknesses in your environment. Then look at all information flows and transforms - identifying entrance points. The above are common ...


4

It sounds like you are interested in something similar to the National Vulnerability Database (NVD), except for malware. I am not sure such a thing exists, but here are some similar repositories: http://home.mcafee.com/virusinfo/ http://www.microsoft.com/security/portal/Threat/Views.aspx http://www.virustotal.com/search.html http://about-threats....


4

OK, it sounds like you are asking for a policy, plan, and practices for secure system administration of a data center. I have some suggestions for you: Start with a policy. Start by thinking out your security policy. Develop a written security policy, and gain approval from management. Take a look at SANS's resources on security policies. They'll give ...


4

Google Authenticator is based on the Time-based One-time Password Algorithm (TOTP). http://en.m.wikipedia.org/wiki/Time-based_One-time_Password_Algorithm The reason that it would be difficult to brute-force is because the tokens change every 30 seconds. So after every 30 seconds of trying to brute-force, the target moves, and suddenly the token can by any ...


4

You are using the expression "zero-knowledge proof" but it does not mean what you believe it to mean. A ZKP proof is a kind of cryptographic protocol by which a Prover demonstrates to a Verifier a given property on a secret value. The proof is "zero-knowledge" if it does not divulge any extra information to the verifier. For instance, suppose that there is ...



Only top voted, non community-wiki answers of a minimum length are eligible