Tag Info

New answers tagged

0

If an attacker gains access to the server, you'll likely have other concerns than exposing clear text credentials in a file. Also, your on the right track for inquiring about security best practices. Don't go through all of this effort only to email the results. Email is not secure so your results should be encrypted or use something else such as your ...


1

Some core networking may be necessary for proper network configuration. If you disable DHCP, you won't be able to get an ip from the DHCP server (but you prevent getting an ip from an unlikely but possible rogue DHCP server) If you disable ICMP fragmentation, your network may not be as fast as possible (but you prevent someone unlikely but possible to abuse ...


0

Even after the changes you made to that registry key, UAC is supposed to notify you of any further changes that may occur on your machine. So theoretically, this helps you to prevent malware installation, but there are few scenarii you may think about: Suppose you give access to a person you trust (let's say your brother but who's not that well informed as ...


0

The diagram in the page you linked demonstrates the functionality quite well. The idea is that the authentication mechanisms are all capable of decrypting the Volume Master Key (VMK), which then in turn can unlock the Full Volume Encryption Key (FVEK). The idea behind this is that, if any of the individual authentication parts are compromised, the VMK can ...


30

In addition to the password policy (upper case+lower case letters, number, non alphanumeric character, >8 digits), it also leads to clarity. Some users might be confused by the password being password, depending how it's displayed, especially if it's mixed with other information. Yet for all but the mentally challenged users it's immediately clear that ...


0

I have just established an IPSEC site-to-site VPN that required some ExtendedKeyUsage and I did some research on it. The ExtendedKeyUsage for Internet Key Exchange were deprecated by RFC4945 The CA SHOULD NOT include the ExtendedKeyUsage (EKU) extension in certificates for use with IKE. Note that there were three IPsec- related object identifiers ...


2

The site you point to is a site for developer tools, and specifically VMs created for the sole purpose of testing different versions of IE. Casually released developer tools like this normally are given far less scrutiny, and are less polished than a full release of a major product. There's really no good reason why Passw0rd! is any more secure than ...


15

Depending on how the virtual machine is configured, the password complexity may be a requirement that's enforced by the system's security settings. On the virtual machine, run secpol.msc. Navigate to: Security Settings\Account Policies\Password Policy Observe the value for "Password must meet complexity requirements" By default, standalone systems have ...


29

Password policy. You have to jump trough some hoops to get Windows to accept "password" (no capitals, no digits, no non-alphanumerics). But it will accept "Passw0rd!" right out of the box.


58

Reason may be: This Windows has implemented a strong password policy, thus the user MUST HAVE a "strong" password.


2

The only reason I can think of, is the case when the password is meant to be changed and they want to indicate to the users that they should use a complex password.


0

Not sure of your question, is it how these values are encrypted? It is described in RFC-2548 section 2.4.2. The reason I think this is that in your question you state: I have an example of freeradius and the session key is converted from 16 bytes long to 32 bytes long before the construction of the string stated in RFC 2548. so you are wondering ...


0

The normal Windows update process only replaces the operating system itself and doesn't touch any 3rd party applications which are installed. It usually also takes care that any programs which are configured to run at startup still run at startup after the update. So when a program you have installed is infected with a virus or you have a malware which is ...


5

Is it possible that the malware on my computer can inject itself in this process/ISO? Practically, I do not remember hearing a virus infecting an ISO file. Theoretically speaking however, nothing can prevent a virus from infecting an ISO file because, after all, an ISO file is just an archived file. Regarding this fact, viruses have always infected ...


8

It is technically possible to write some malware that intercepts the ISO extraction process and then writes a boot sector to the media in order to run some malware before the normal boot sequence to hinder detection. I do not know whether there are any current occurrences of this type of malware in the wild however. It is probably not worth worrying about ...


3

Install Opera compatible with Windows 98, I am using 10.10. Access the menu bar. Tools->Perferences => Advanced tab Select Security and then the Security Protocols... button. Popup window has check box for Enable SSL 3. Success! Google's site using HTTPS works again!


3

As the accepted answer already states, Microsoft kept the right to collect nearly everything from users of the open beta/technical preview. Keep in mind that they cannot do everything the terms of service or the free Windows 10 Technical Preview allow them to do, because especially in the EU privacy laws make some of this illegal. Before we go into ...


1

And if my disk is not encrypted maybe it generally doesn't matter whether I have pwd or PIN? I don't have enough reputation to comment, so I'm writing an answer. If you are not using disk encryption it doesnt matter are you using password or PIN. If someone wants your information, he will restart your computer and put a LiveUSB with Ubuntu (for ...


3

PIN numbers do not replace passwords. A password is still required. PINs allow you to have a very strong password with the convenience of being able to quickly unlock your device. PIN numbers in Windows 10 are not really included to increase the security of that specific device. In order to configure a PIN number on a device you must first log into that ...


21

With a Windows Profile you can see a portion of what's been collected. Expanding on Flyk's Last point. Microsoft Updates will be turned on by default with a peer to peer model for updating over your LAN or LAN and the Internet. Cortana seems to be the main intrusion with Windows 10. Optional extra's include linking to Office 365 linking to Power BI for data ...


156

It's worth noting that your first link is in relation to the Windows Insider program. The Windows Insider program provides you with pre-release software that does call home with usage details and other information. This is something that you agree to by installing the Windows Insider preview - if you don't like it, you don't have to install it, it's ...


54

Microsoft Windows Pre-Release Preview (aka Windows Insiders) Privacy Statement, January 2015: (no longer applies) When you acquire, install and use the Program software and services, Microsoft collects information about your use of the software and services as well as about the devices and networks on which they operate. Examples of data we may ...


2

Regarding #1, "Does the FBI/NSA or other government agencies have access to my data or can easily decrypt them?" legality aside, there are several factors to consider. "Easy" is relative. Depending on the charges, and the value of the data that is encrypted, they may have more or less incentive to break the encryption. If it's a list of neighborhood ...


5

The Electronic Frontier Foundation maintains an excellent FAQ on digital rights regarding search and seizure of computing devices. For your specific questions: (I'm going to assume US, because you reference FBI and NSA) 1. Can government agencies break disk encryption? Without a warrant or probable cause, no. With a warrant, if your question is: "Can the ...


1

Talking legally, of course they don't if they don't have court order,technically, i really doubt that, when it comes to decryption, we are basically talking about how strong is the encryption algorithm and if they can crack it. No, even if you are arrested police can search your devices only in limited circumstances , except at borders, they can search it ...


1

I don't know do they? If you're asking the tinfoil hat type of question: Does the FBI/NSA have access to all harddrives on the internet? Then I believe the answer is no. If a court order is handed down for access to your harddrive then you will need to give it to them. If a court order gives them access to your harddrive and your harddrive is encrypted ...


1

If you bought an original copy of Windows and lost the CD you should be able to contact Microsoft with your installation code and ask for a replacement. Don't download an illegal copy of a software from the Internet -- you're looking for trouble. It might very likely be infected with trojans, viruses, or any other kind of malware. Sure, you could run an AV ...


2

Based on the MSRPC DCE-RPC IFIDs from the first command output you posted, the target appears potentially vulnerable to MS00-070, CVE-2000-0544, CVE-2001-0662, CVE-2002-1561, CVE-2003-0533, CVE-2003-0818, CVE-2004-0894, CVE-2005-1984 (Nessus 19406 and 19407 as well as CANVAS ms05_043 and CORE IMPACT MSRPC SPOOLSS Buffer Overflow), CVE-2005-2119, ...


5

A fundamental problem with Windows' excuse for a security model--probably the biggest one--is that the only way a user can allow programs to do certain things that almost any installable program might need to do is to grant the program unlimited authority to do anything and everything it wants. If it were possible for Windows to say e.g. "This program would ...


1

In theory: Partitions are really just logical divisions of space. There is no security boundary between partitions at all. Any virus running under your credentials could manipulate files. Even if you can't manipulate the files when you're logged on (through NTFS security permissions), a virus that manages to escalate to Administrator privileges can probably ...


4

Boot Camp allows you to make two operating systems coexist on the same hard drive (but in distinct areas, called "partitions"), and to choose which one is started when you power up the machine. However, each OS, once started, sees and can access the whole machine. In particular, Windows, once started, is aware of the existence of both partitions, and can ...


10

On the Windows monoculture Every working Windows malware can cause an epidemic infection. There are hundreds of millions of Win 8.1 boxes in the world and on many of them e.g. Acrobat Reader has been installed. It is a monoculture. Linux on the other hand is less a monoculture. There are many different PDF viewers: Evince, Okular, mupdf, xpdf... There are ...


12

There are some good answers here. I just wanted to add a couple of points. There is an historical component to the argument that Linux is less vulnerable than windows. Some of the basis for this suggestion is not as valid when referring to modern windows implementaitons as it previously was. Perhaps the biggest difference was originally due to differences ...


0

Yes, install anti virus, and do Windows Update and all of that good stuff. Two reasons, your system is an entry into your network for malware, just because the system that gets infected has no information other systems probably do. Also any accounts like steam and the like will also have to be set up there. Second reason, just because right now you say you ...


0

You should install an anti-virus. Some online games automatically download user generated content, and I have seen some that use an in-game browser to display a server's MOTD. Mods are also a danger too, some have included bitcoin miners or keyloggers. Another thing to consider is that USB drives could be infected.


1

Yes you definitely should install anti virus software. However you should always remember that even with the best protection you can still get infected by malware. A few months ago security researcher described how malware spread in Steam gaming platform. Basically gamers were receiving a message on Steam that looks like "WTF?????" linked to a JPEG image ...


0

Risks are always a tricky thing to calculate and you are asking the right questions. While I understand that AV software can pose performance risks, you could consider using a Live CD during the downtime of the box/VM. You get full and comprehensive AV coverage, but 0 performance hit during gaming sessions. It's a little more management to handle, but you ...


0

Don't bother. Not only are you unlikely to need the protection, but A/V software imposes a significant penalty on performance. It will be even worse if you boot into windows just for games, because many packages will detect that no scan has been performed in a while and immediately start a full scan of your system, hurting performance even more. Yes, ...


0

But - why disable it? If you don't use it, disable it! It's like a telnet service that's no longer being used because you installed an SSH daemon, I sure hope telnet is disabled. Also from an audit perspective, you want to make sure no one had the ability to use this account. Personal administrative accounts make sure things can be tracked back to ...


25

I think the most crucial factor for virus infection of desktop Windows system is, definitely, the culture and discipline of software distribution and installation. While the average Linux user opens the package manager and get the vendor-built software package (and doesn't leave the official repository to find software in 90% cases), the average (non-IT) ...


4

Comparing Windows and Linux is like comparing apples and oranges structurally. Configuration plays a larger role in protection than any specific OS architecture, and it goes from physical security all the way to maintenance and upkeep. All security implementations can be removed in all operating systems, and corners can be cut in terms of maintenance and ...


0

You should not install anything that you (YOURSELF) did not try to install. No exceptions, unless if you look it up and find it is needed or useful and comes from a reliable source. For example you need to install winPCap to install Wireshark. When you are asked to install winPCap you go and type winPCap in a search engine to determine if Wireshark is ...


92

There are several reasons why Windows is so heavily inflated with anti-virus products. (I am pointing to out-of-the-box (OOTB) experiences). Windows users are, by default, local administrators, so any social engineering done on Windows can usually lead to an execution of software. Modern Linux has users set-up as low-privilege local users. It requires your ...


42

The reason for this tends to be historical. There is no reason why a modern desktop Linux should be particularly more resistant to malware when compared to a modern Windows desktop. However there have been many more viruses for Windows than Linux amongst desktop users, which is down to factors such as the number of users of the respective platforms and also ...


0

"Let's suppose a host machine in the client environment has been infected and its performing port scanning on other machine within the LAN or same Network without passing through Firewall:" Typically, if a host within your environment gets infected, it's not going to be port scanning other devices on your LAN. At least in my experience. It's typically going ...


2

The likely cause might be that not many servers support the cypher conditions IE5 has the ability to use. At the time of your IE's release it only had SSL support and not TLS support. SSL 1.0 was never publicly released. SSL 2.0 and 3.0 have since been deprecated. Even though servers out in the wild could support them they will likely not be found on ...


36

The main problem is probably that an IE from that era would like to support SSL 2.0, and, therefore, sends its initial message (ClientHello) in SSL 2.0 format, which has about nothing in common with the ClientHello of later protocol versions (SSL 3.0 and all TLS versions). That allowed the browser to connect to a server that knew SSL 2.0 but nothing else, ...


3

You're most likely correct. Most websites now prohibit the usage of outdated SSL protocols - recall that SSL v3.0 was part of the POODLE attack, among other things! If your browser only supports the disabled protocols, then you won't be getting very far. Wikipedia has a great chart on its page about SSL/TLS, showing what protocols are supported by default ...


6

There might be more reasons, I'll just list a few that came up my mind: When establishing the SSL/TLS connection (the handshake) the client sends a list of cipher suites to the server. The server's responsibility is then select the one which will be used. In case there is no suitable cipher, the connection is terminated. SNI - Server Name Indication ...


1

There is an entire literature in the Blackhat and Defcon communities showing how to exploit the software that manages TPMs, retrieve secret keys from the TPM by interposing on the communication between the TPM and the CPU, and other attacks. The answer above by Kevinze and his followup comments are simply not accurate (he/she argues that such exploits are ...



Top 50 recent answers are included