Tag Info

Hot answers tagged

9

There are security risk frameworks (STRIDE, DREAD and others) that you can apply to get a systematic approach to assessing risks and threats. TFS is a Microsoft solution that implements a sort of Git (from my experience, I don’t believe it’s a pure Git integration, but I may be wrong). They do offer valuable resources for security, so that’s worth checking ...


8

Because SFTP runs over the same protocol as SSH, there is no valid technical reason to refuse to enable SFTP. That said, there may be company policies that prevent this. There is a big difference between an SSH connection to issue commands, and an SFTP to transfer files. A company might accept the risk of allowing an approved account to access another ...


5

You could sniff the network for traffic and change your network configuration to an active machine(i.e. MAC address): # ifconfig wlan0 down # ifconfig wlan0 hw ether DE:AD:66:55:12:34 <== sniffed MAC # ifconfig wlan0 up assuming wlan0 is your wireless network interface. On Windows you can do something like this. Now there should be two work stations ...


4

There are a few possible scenarios, even after assuming Man in the Middle is not happening. Missing patches: If your system is missing a patch that allows RCE, that is an easy win. There are plenty of remote exploits that exist, and new ones every so often. Mitigation: Patch your system! Are you on a domain? You didn't mention Windows 7 Home or ...


4

For a malicious attacker who tries to alter an ISO file while keeping its hash value identical to the hash value of the "genuine" file, the problem is known as a second preimage attack. No such attack is known for SHA-1 right now; if somebody wanted to compute such a second preimage, he would have to pay a cost of about 2160 hash function computations, which ...


4

Technically, using SHA-256 won't make things really harder for the attacker. Unless you are the attacker. The concerns about SHA-1 are about collisions. SHA-1 is believed to be somewhat weak in that respect (generating a SHA-1 collision is still very expensive, to the point that it has not been done yet even once, but we have strong theoretical reasons to ...


3

It seems that "gvt1.com" its owned by Google (whois shows:) Registrant Name: DNS Admin Registrant Organization: Google Inc. Registrant Street: 1600 Amphitheatre Parkway Registrant City: Mountain View Registrant State/Province: CA Registrant Postal Code: 94043 Registrant Country: US Registrant Phone: +1.6506234000 Registrant Phone Ext: Registrant Fax: ...


3

The list of common/legitimate processes will depend on the OS installed. Also, the list will depend on the software you have installed on your machine. In Windows, you can trytasklistIn Linux, you can try ps You can make a list of trusted applications(which you can do manually or lookup online). Then, after getting the list of running processes ...


3

What exactly is this checking? Where is Windows (or more specifically, the Crypto Shell Extension application) populating the information on this tab from? It is showing the trust path it constructed based on the certificates sent in the SSL handshake (ignoring any root certificates sent by the server), the cached intermediate certificates from other ...


3

Microsoft is hoping to incorporate SSH: http://blogs.msdn.com/b/powershell/archive/2015/06/03/looking-forward-microsoft-support-for-secure-shell-ssh.aspx However, that has been attempted before and then fell by the wayside. As for your question, there is no standard or overriding reason why a user might enable SSH but disable SFTP, but there can always ...


2

This is how migrate works in meterpreter: Get the PID the user wants to migrate into. This is the target process. Check the architecture of the target process whether it is 32 bit or 64 bit. It is important for memory alignment. Check if the meterpreter process has the SeDebugPrivilege. This is used to get a handle to the target process. Further details ...


2

When I hear this question, my first response is don't. If you are at all concerned about your personal network and your personal data, don't expose any part of it directly to the internet by hosting services. If you feel you must, here are some steps: Host the website on an entirely separate machine with nothing else on it Put that machine on a DMZ (most ...


2

There are numerous questions with answers on this site as well as Owasp guidelines that cover the risks of allowing file uploads and how to store files properly. You may want to check the legislation that applies to your application and take necessary action to store files accordingly (encryption, access rights, data integrity, logging). As for your idea ...


2

If you are careful as you say, the chances will be lower, but not 0. Trusted websites can also contain malicious flash content. The games on Facebook are made by third parties and that means that you can never be sure if the game has some malicious code. Adds can also contain malicious flash. Another problem is, if a website has an XSS vulnerability, an ...


2

The goal of a piece of malware is to stay on your system for as long as it can. To do this it takes a number of steps, and often just having user administrative privileges is not enough. Gaining execution is only one step. If the malware is lucky enough for the user to execute it it can not assume that it has admin rights. In which case, exploitation of a ...


1

To get process inforomation programmatically (as you asked), it depends on the language you want to use but also on your processor version (32 or 64 bits). You can use Python's subprocess module: import subprocess cmd = 'WMIC PROCESS get Caption,Commandline,Processid' proc = subprocess.Popen(cmd, shell=True, stdout=subprocess.PIPE) for line in proc.stdout: ...


1

My short answer: Changing from SHA1 to SHA256 for file signatures will barely increase your security, the only good reason would be to keep current with best practices. The concern with SHA-1 and the potential for collisions is that potential decryption may take place. This has to do with decrypting hashes after the fact: for example, passwords in a ...


1

Don't assume the user always has admin rights. That may be the case on home computers, but on corporate networks, the users may be non-privileged users. As to why a virus needs to expoloit a specific vulnerability: Many users aren't stupid enough to download a virus onto their machine and then run it. Even if they did, then UAC would pop up an obvious ...


1

They r feasibly safe in the sense that in order to compute 2^160 hash computations which r technologically infeasible. And you don't need to worry of downloading an .iso of windows while u can create an .iso from install.esd files from some1's Genuine windows copy(if u r little bit paranoid).


1

Go to sysinternals and install a trace tool. Record 20m of activity and locate that request. Then go back to the orign of that request.


1

Alasjo already provided a good answer, but I think some additional information could help you grasp the difficulties you have and how to address them. In you question you suggested encryption. Just encrypting the uploaded data cannot be enough to secure them. Since encrypted data is useless without a mean to decrypt them, your application would have to ...


1

Security is a process, where new software bugs are discovered from time to time. Sometimes by good people, and sometimes by bad people. Software bugs can be discovered in both user software, like Excel, but also in OS network stack. Windows 7 is based on rather well tested code, in which hundreds of remote vulnerabilities were found and patched during last ...


1

Shared would send a plaintext query to authenticate clients which would be encrypted and returned. This left the key vulnerable to a known-plaintext attack. Open would allow anyone to authenticate, but wouldn't pass plaintext around, making the key harder to guess. Here and here are links to more details.



Only top voted, non community-wiki answers of a minimum length are eligible