10,952 reputation
1834
bio website
location Troy, NY
age 28
visits member for 8 months
seen 11 hours ago
stats profile views 316

Feb
21
answered Does disabling right click have any impact on security?
Feb
21
comment Does disabling right click have any impact on security?
Ah, this brings back memories of a buddy of mine in college thinking he'd made a "secure" image DRM and challenged me to break it. He was so surprised when I brought in the image the next day after having pulled the details of the image right out of the packet traffic and recomposed it in to a data file. Now it's even easier, but then I had to make my own tool.
Feb
21
comment What type of attack should be used in order to pass this authentication
@Erfan - yeah, I didn't expect it would be that simple. You normally need to redirect a particular function return with an overflow, otherwise you would also overwrite the function that you want to impact. I just didn't have time to look in to the actual answer and wanted to make sure to point out the immediately evident problem.
Feb
21
comment What type of attack should be used in order to pass this authentication
It is worth pointing out that a boolean value of 1 is not the same as a string value of 1, so your approach wouldn't necessarily put the right value in even if it was at the correct spot.
Feb
20
answered Did I get hit by the recent Java exploit?
Feb
20
answered Arguments that proof a hashing scheme is sufficient
Feb
20
answered How esignature verification process work?
Feb
19
answered How X509 Certificates are used for Encryption
Feb
19
revised How X509 Certificates are used for Encryption
deleted 1 characters in body
Feb
19
comment Is RDP an effective security barrier
I don't want to post as another answer since I think Thomas hit it on the head, but just to be direct. Using RDP is effectively going to be the same as if you put a second desktop on each person's computer as long as you are running Terminal Services. (The difference being that they run on a common OS, so user isolation is tricky.) Another popular approach is to use something like VMWare View which gives better isolation for users (as each can have their own virtual desktop) but also is a little bit more resource intensive (since each user has their own running instance of Windows).
Feb
15
reviewed No Action Needed MACSEC nonce/key uniqueness
Feb
15
revised Create a unterminable process in Windows
added 193 characters in body
Feb
15
comment Create a unterminable process in Windows
superuser.com/questions/109010/… - This has more details about process user contexts.
Feb
15
revised Create a unterminable process in Windows
added 406 characters in body
Feb
15
comment Create a unterminable process in Windows
@Rachel - do you have active directory running and are the processes run by a context that the local administrator does not have control over? Ultimatly, the execution context is the key thing here. Windows (unless rootkitted or very rarely, the kernel is made unstable) can kill any process that is running. The access is denied messages are a result of the execution context of Task Manager not having permission to kill applications running under the execution context of the process.
Feb
15
revised Create a unterminable process in Windows
added 439 characters in body
Feb
15
comment Create a unterminable process in Windows
@VarunDotCuDotCc - Ok, I did a little more research on the message you got. It appears that Task Manager is also not allowed to kill services. If a process is started from the Service manager, it needs to be killed by the service manager or some other process killer. You could make a service with VB6. Also, sorry about the confusion. I have not worked with XP in some time and the access that Task Manager has was changed between XP and Vista. I'm fairly certain it can kill services directly now, but in XP/2000 it couldn't.
Feb
15
comment Create a unterminable process in Windows
@VarunDotCuDotCc - the other possiblity is that if you get something called a rootkit, it could replace Task Manager with a fake or altered version or could alter Window's system files such that instructions to kill the process are ignored. Such a program could not be made in Visual Basic however as it requires some very advanced native code programing to hijack that functionality and VB6 is far too limited to do this. Legitimate programs are also unlikely to use a root kit as they can compromise a computer. (See the Sony DRM RootKit fiasco.)
Feb
15
comment Create a unterminable process in Windows
@VarunDotCuDotCc - If you are getting an Access Denied message, you almost certainly have UAC on and are not running task manager in administrative mode. Do you have a "Show Processes for All User's button? If so, click it (task manager will close and reopen automatically in administrative mode) and then try killing the process.
Feb
15
comment Create a unterminable process in Windows
@VarunDotCuDotCc - Are you trying to kill the "application" or the "process." If UAC is on, are you running as admin or user? If you are running at a user level, you won't be able to kill administrative processes. Also, when killing at the "Application/Task" level, the process is asked to close and it can refuse. Killing the process itself should hard stop the process regardless of its wishes.