Hot answers tagged

25

Internet Explorer is tied directly to the Windows operating system. It is essentially an extension of normal File window. Many of the operations performed by Internet Explorer call directly into Windows services. For example, the SSL/TLS implementation for Internet Explorer is performed in the LSASS (Local Security Authority Subsystem Service). So any ...


15

As you state in the question, doing this in a foolproof way is technically impossible. For the video to be displayed on the screen it must somehow reside somewhere in the RAM on the computer, be transfered to the monitor and then displayed there. From all these points the video could be extracted. Possible ways include: Copied from RAM. Recorded with ...


13

Do not roll your own DRM scheme. The industry have tried and failed so many times that a homebrew solution will stand little chance. It would be better to "stand on the shoulders of giants" and use existing DRM solutions. Windows Media Rights Management and PlayReady are good solutions. The latter supports HDCP and are used by mainstream premium content ...


7

As mentioned, its impossible to prevent capture of the displayed video - even in the worst case, the user can record the video on a smartphone or using a fixed camera (as some pirate movies do when they are recorded at the cinema) What you can do then is to shift the protection from stopping copying, to prosecuting copiers. You can embed watermarks in the ...


6

No, that's simply wrong. Just like with a jail. They're not only built in a manner to keep anyone from escaping, but as well to prevent anyone from breaking in. You always have to think through both ways. Just an example: windows had a vulnerability that allowed arbitrary code-execution injected in JPGs (I think the format was JPG, but I'm not sure. ...


5

Is this a known feature? Yes. How IE can know my file browsing history? As mentioned in the answer by RoraZ, Internet Explorer is (or at least, was originally designed as) largely an extension of the system file browser (explorer.exe), and they share many components and operations. Specifically, what you're seeing is that Internet ...


4

None of the symptoms you posted is a sign of having malware on your computer. My internet connection slows to a crawl often Complain to your internet service provider or find a better one. my games keep crashing Viruses don't tend to do that. When you have problems running games, it's far more likely to be a problem with your graphic driver... or ...


4

This is a problem of trying to protect what you want to provide. It's impossible to do, but you can make it difficult. Probably the best approach would be to encrypt the files. But at the end, you give all the data for a person to run on a computer they have full access to. Since it will play the video at some times, it means the keys will be available in ...


4

A quick search turned up the link below. They created a new technology called CredentialGuard, which isolates secrets in virtualized secure environments rather than storing everything in LSA like they used to. Mimikatz can no longer just dump lsass.exe process memory and parse the contents. They're still in some memory, strictly speaking, but not memory ...


3

1/3/4/7-Access to the Internet? Not a good idea as depending on what it does, your VM could release it "into the wild". Running it in a VM should be perfectly fine if it is not connected to the internet. This answer from The Bear will go into a lot more detail regarding the malware escaping a VM. Here 2-Formatting should be fine for 99% of malware. Some can ...


2

I know that many giant companies has spent billions of dollars on how to prevent the privacy of their products but still they cant prevent it... So I am not expecting that I can get 100% solution on this, but still I want to protect it as much as I can. You've already got your answer, you just don't realize it. "As much as you can" is "not at all." ...


2

The biggest clue came in a comment: I am getting same thing. Did you use innoSetup? And I did. The conversation here points to a problem involving Inno Setup seemingly generating what appears to be a matching signature for a trojan:Win32/Fathale.B!plock. Submit the installer to the Microsoft Malware Protection Center. If your installer is indeed ...


2

As a client device, simply turn off the "Automatically detect proxy settings" feature in Internet Options. This prevents the browser from trying to look up a location for the wpad.dat or proxy PAC script. If you want to protect poorly configured devices on your network, set a DNS entry for WPAD and blackhole the traffic.


2

Your 1) Can I test malware in VirtualBox with access to the Internet within the VM without harming my host computer or any of the other computers on my network? You wouldn't want to. Suppose the malware you are analyzing is deisgned to immediately target say a bank or government machine. You could set yourself up for huge liabilities. On the one side of the ...


2

"Obviously a person can copy over a virus and run it, but you would see this happening so I don't count this as a method." Actually this is the method used most often with a malicious intent. There is a scam, where you get a call from a "Microsoft"-technician. He tells you, that your computer is behaving strangely. In order to show the user, that he ...


1

From Gray Hat Hacking The Ethical Hacker's Handbook, 4th Edition: Enumerating Named Pipes Named pipes are similar to shared sections in that developers used to think, incorrectly, that named pipes accept only trusted, well-formed data from users or programs running at the same privilege level as the program that has created the named pipe. ...


1

The SIM Card is not able to fulfill the requests sent to it when trying to place a certificate on it. The required commands are not available. Most (nearly all) SIM-Cards are not able to be extended in functionality either.


1

The problem you will actually have, when using a VM, is that most malware will refuse to open its payload so you won't get a lot of research done. Researchers using VMs to dissect malware are all too common, and most malware nowadays actively prevents it by looking for clues that it's running in a VM, and staying dormant if it finds them. Keep that in mind ...


1

Even with an additional Security Layer like Virtualization/Containerization, you are running this code at your system. If there is faulty code in this implementation, Docker in this case, the application will break out of the container and execute code at your host os. Docker CVEs from the past: https://www.docker.com/docker-cve-database


1

This here will be human readable. And (thanks to the semicolon as the delimiter) it will also open nicely in Excel: dir cert: -Recurse | where {$_.subject -ne $null} | where {$_.subject -eq $_.issuer} | Export-Csv -NoTypeInformation -Encoding UTF8 -delimiter ';' -path selfsignedcerts.csv


1

My approach: Install Linux as my primary OS with full disk encryption, install Windows with a no-password default user. Windows installation is left with the minimal: Firefox, Chrome, WinZip/WinRar, pdf reader, OpenOffice/LibreOffice, steam without account, Origin without account. This installation is to look like something just re-imaged, so the thief will ...



Only top voted, non community-wiki answers of a minimum length are eligible