All Questions

Filter by
Sorted by
Tagged with
0 votes
0 answers
10 views

Converting a PE executable to a RAW format

I am on a red team exercise and want to try wePWNise to form a malware DOC with an executable that I have created and tested and know to pass the target's AV. Does anybody know how to convert a PE ...
user avatar
  • 11
0 votes
0 answers
25 views

Solutions for out of band biometric login

I am enhancing our login flow to include biometric verification via your phone. The user will log in to the desktop app but will have to verify their identity via their phone. We already have an app ...
user avatar
  • 101
0 votes
0 answers
27 views

How to determine validation process of a certificate used by a website using HTTPS?

When visiting a website that uses HTTPS, we can see its certificate in the browser. But how can we know for sure which validation process the company or domain behind the website has gone through? ...
user avatar
  • 13
0 votes
0 answers
14 views

Limitation on SafeSEH

I'm reading this article And quote: Does anyone know which method in NTDLL does this check? I'm trying to reverse engineer it with IDA, but I don't know which method to look at.
user avatar
  • 1,695
0 votes
1 answer
27 views

Is NAT66 increasing security?

NAT is so standard for IPv4 that nobody thinks about it but for IPv6 it's considered a really bad option. (Article from APNIC) Of course there's the stateless NPTv6 and the firewall can be configured ...
user avatar
  • 197
0 votes
0 answers
9 views

Protocols used during a Single Sign-On between Okta Universal Directory and AWS IAM Identity Center(aka SSO)

Single Sign-On between Okta Universal Directory and AWS allows users in your company using OKTA to connect to AWS using SSO after first agreeing and setting up the use of identities by AWS IAM ...
user avatar
0 votes
1 answer
31 views

Can an attacker perform MiTM attacks on non-web based clients such as Microsoft Outlook using a Rogue Access Point?

I understand an attacker could perform MiTM on Rogue Access Points and capture cleartext traffic between a web client and server. However, is it possible that an attacker could do similar MiTM attacks ...
user avatar
  • 115
0 votes
2 answers
54 views

Are bandwidth sharing apps such as peer2profit, IPRoyal and PacketStream risky?

Apps like peer2profit, IPRoyal and PacketStream allow you to sell your unused internet bandwidth to others for passive income. Supposedly you could earn about 30 to 75 dollars a month from using these ...
user avatar
  • 145
0 votes
0 answers
32 views

Virtualization softwar that doesn't phone home and is secure? [closed]

I know QEMU with KVM is a really good choice but the performance if you are using a desktop is terrible. It's capped at around 30hz is the main issue, not to mention the trouble you have to go through ...
user avatar
  • 1
0 votes
2 answers
56 views

Site "can't" change user info, why?

I know this might not be the best place to ask this but there's some pretty smart people on here and I've tried asking this elsewhere and got either no replies or just a bunch of worthless arguments ...
user avatar
  • 1
-4 votes
0 answers
47 views

VMWare Player is closed-source, does it phone home or has backdoors? Any security audits? [closed]

I put privacy and security as even top priorities when choosing any software. I never use any closed-source applications. However I am considering using VMWare because it's just superior to anything ...
user avatar
  • 1
0 votes
0 answers
13 views

how to match source code in vault with that in production environment

I want to clear out my concept since I'm not a developer by trade. Imagine there is source code vault where codes/binaries are checked in. Developers check out this code and deploy them in the ...
user avatar
0 votes
0 answers
27 views

Suspicious incoming connection attempts from random IPv6 addresses on local network on macOS

I've been using Little Snitch on my Macbook and I have since a long time a rule to alert on any incoming IPv6 connection, which would be suspicious since I use IPv4 only. Since a couple of days I've ...
user avatar
  • 101
0 votes
2 answers
33 views

What type of attacks can be carried against an OS with FDE, if we assume OS and FDE are implemented correctly?

The question is mainly stated in the title. I was wondering what kind of attacks can be launched on such a setup, where someone has access to a running OS with locked screen (needs password for the ...
user avatar
  • 101
1 vote
1 answer
52 views

Does a Honda Civic send vehicle telemetry to its servers?

I recently read an article by the IEEE on Tesla's vehicle telemetry and after reading that, I also realised that Honda Civics also have vehicle infotainment systems, including in-cabin microphones. ...
user avatar
3 votes
1 answer
54 views

Why would websites ask users to reauthenticate after a password change?

I was discussing with a non-IT friend after he came to me with a question regarding security and password change. As he puts it: "Why do websites ask me to re-authenticate after a password change?...
user avatar
  • 676
1 vote
1 answer
42 views

Is there a security-related motivation for prompting me for my email address, and then my email and password?

Often when I am signing into web sites, I am prompted for credentials in two steps. First, they ask me to enter my email address. I type it in and click a button. Then they ask me for my password. I ...
user avatar
2 votes
2 answers
69 views

OpenSSH Disabling Diffie-Hellman (DHE) key exchange

I'm seeking to mitigate CVE-2002-20001 by disabling DHE key exchange through OpenSSH on an Ubuntu instance. I understand this can be achieved through editing the /etc/ssh/sshd_config at line ...
user avatar
0 votes
1 answer
49 views

Using Single Sign-On and the usage of password managers is discouraged. Whay are alternatives for storing tokens for example?

What are the alternatives of storing tokens when password managers are discouraged? Some of the ideas that come to my mind are storing in a text file and encrypting with GnuPG but that's asks for ...
user avatar
  • 293
0 votes
1 answer
31 views

Can you use an LTE router as an IMSI catcher?

I'm wondering if you could use an LTE router as a 4G IMSI catcher and what tools you would need for this, if any.
user avatar
0 votes
0 answers
45 views

What kind of security is it? Base64/MD5. Key with 22 characters and 32 characters

What kind of security do you suggest for this case? What do you think is the security flow? It is happening in a web which download a PDF document, inside the document has a QR code. This QR code has ...
user avatar
0 votes
0 answers
17 views

What should argon2id parameters be

I plan to use it locally on mobile devices. These seems to do not offer computational power as good as on a server. So what could be a secure argon2id parameters that run around 1s since offline apps ...
user avatar
0 votes
0 answers
39 views

Difference Between Reflected XSS and Reflected-DOM XSS

What's the difference between Reflected XSS (RXSS) and Reflected-DOM XSS (RDOMXSS). After some research, I think it can be concluded that Reflected-DOM XSS is: Similarities: The value is reflected by ...
user avatar
1 vote
0 answers
17 views

Is iCloud Private Relay leaking my DNS queries to my ISP?

So I noticed recently that despite iOS settings saying all DNS queries go through iCloud Private Relay's DNS servers, despite Private Relay using Oblivious DNS over HTTPS, and even despite dnsleaktest....
user avatar
1 vote
1 answer
32 views

ThinkShield secure wipe - SSD does it forbid data recovering?

I have to give my computer back to my boss. I want to delete all the data from my SSD. I found "ThinkShield secure wipe" which is implemented in the BIOS apparently. It gives me two options: ...
user avatar
  • 13
0 votes
1 answer
103 views

I change everything but again Instagram knows it's me?

I change my device, my public dynamic IP address, account, username, password, email, browser, app, cookies and everything and again Instagram knows it's me, and my question was do you know that can ...
user avatar
0 votes
1 answer
24 views

Interpreting OWASP prohibition: no sensitive-account login to any frontend interface

OWASP’s Authentication Cheat Sheet states unequivocally: Do NOT allow login with sensitive accounts (i.e. accounts that can be used internally within the solution such as to a back-end / middle-ware /...
user avatar
14 votes
1 answer
3k views

What is this potential identity leak that NoScript warns about?

Recently, while using the Tor Browser, NoScript popped up the following warning when I opened a stack overflow link in a new tab from duckduckgo: Potential Identity Leak You are about to load a page ...
user avatar
  • 11.1k
-1 votes
2 answers
32 views

When using Google Translate's "website" functionality, do passwords entered go through Google?

I'm looking at the functionality offered by Google Translate's option to translate an entire website. It opens in a new tab with the domain https://whatever-is-the-website-domain-com.translate.goog/. ...
user avatar
0 votes
1 answer
27 views

How to prevent a user retaining file access with an open handle on Windows?

Suppose a user is a member of a group, and they open (in the Windows API sense) a file whose DACL grants access to that group. Then, the user stops being a member of the group. Since access checks are ...
user avatar
  • 3,866
-1 votes
2 answers
41 views

Why a mounted encrypted volume with bitlocker is accessible as if it weren't encrypted at all?

When we encrypt a volume with bitlocker, it takes time to encrypt the data according to the amount of the data but Once the encrypted volume is mounted the contents are transparently accessible to ...
user avatar
  • 3
-1 votes
1 answer
61 views

Why doesn't iMessage allow users to block unknown contacts?

Why is it so easy to send spam messages via iMessage? Does this shortcoming make using Pegasus exploits easier for attackers? I assume Signal, Facebook Messenger, which allow users much more control ...
user avatar
  • 1
0 votes
1 answer
31 views

Who starts with change cipher spec in a TLS handshake?

After looking at many explanations about the TLS handshake I noticed that sometimes the server starts with the change cipher spec command and sometimes the client starts with it. I'm wondering why. Is ...
user avatar
0 votes
1 answer
54 views

What is Akamai Ghost?

After making requests to certain domain and their responses being either 4xx or 5xx status codes, the server response header shows Akamai Ghost. Is this response coming from Akamai's firewall or their ...
user avatar
0 votes
2 answers
107 views

is it safe to use pirated software if AVs don't detect anything malicious about it?

I want to know whether it's safe to use a pirated software if during all of the processes including (downloading, running installer, installing, using and scanning installed files) the system's ...
user avatar
  • 13
0 votes
0 answers
30 views

Nessus vulnerability 11411 in Fortigate

I have a Fortigate device and a Nessus vulnerability scan set up. When I ran the scan, it said that there was some kind of .htaccess~ file in my Fortigate device. This is the vulnerability it found. ...
user avatar
0 votes
1 answer
12 views

IdP Personal/Signer Certificates

We are implementing SAML/OIDC-based SSO across our enterprise and wanted to get a feel for best practices when it comes to using Personal/Signer Certificates within our IdP. Historically we've ...
user avatar
1 vote
1 answer
51 views

Is there a downside to free online privacy protection?

Is there a downside to free online privacy protection? For example, Discover card has a new "Online Privacy Protection" that you can activate for free. It sounds good, but is there a ...
user avatar
  • 11
0 votes
1 answer
16 views

How do I remove malware with Defender for Cloud Apps?

I'm new to the role and my operational analyst left a few days before I started, I'm his manager, now it's just me. I'm familiar with the tooling but have never had to operate it myself. I've had an ...
user avatar
  • 103
0 votes
0 answers
15 views

Securing SSH reverse proxy from app in an untrusted environment to server

I'm adding a feature to my web app that will allow remote configuration of various devices via their built-in web apps. For forwarding the HTTP traffic from my web app to the remote device I'm ...
user avatar
  • 101
0 votes
1 answer
35 views

Fraud Detection - 2FA Bypass Methods and SIM Cloning

I am assisting another Data Scientist with helping a bank detect and prevent fraud via data analysis and predictive modeling (Machine Learning). It's a challenge because the proportion of known ...
user avatar
  • 213
1 vote
0 answers
44 views

How does google recognize my device when I login and have 2FA

I have 2FA turned on for my google account. I was using incognito to log in, and google still recognized my device; I tried using a VPN to change my IP address, but it still recognized my device. I'm ...
user avatar
-1 votes
0 answers
30 views

Freelancer or equivalent IT Security Specialist Help Needed

We recently had a incident where some of our endpoints have been compromised. I am in need of someone, qualified with the relevant certifications and experience, to come and assess a issue for me. ...
user avatar
-1 votes
0 answers
38 views

Drupal Site Hacked

Noticed some weird behavior with my Drupal site today. Some of the external links have been replaced with an IP domain. I rewrite my external links behind a 302 internal redirect such as mysite.com/...
user avatar
  • 1
0 votes
0 answers
17 views

Can one security advisory affect more than one RPM package?

On RedHat and derived Linux distributions, vulnerability warnings are available in form of security advisories which are usually derived from CVEs. The rules for the CVE numbering authorities state ...
user avatar
  • 101
0 votes
1 answer
33 views

Browsers don't trust SSL certificates of network-local host signed by own CA

I've got a Mayan EDMS running on a computer on the local network. The Web App is exposed via HTTPS on the non-standard port 8001 and it uses an SSL certificate that is signed by our own CA. The CA is ...
user avatar
0 votes
0 answers
15 views

openssl undefined references

I am getting multiple undefined references when gcc attempts to link my code. I built openssl-3.0.5 using "./Configure --api=1.0.0 no-deprecated linux-x86_64" and I am linking against the ...
user avatar
  • 1
0 votes
1 answer
63 views

Why my certificate is still not recognized by some hosts?

My website certificate is not recognized by all hosts. I already scanned here https://www.ssllabs.com/ssltest/analyze.html?d=eleicoesjustas.org. Is that because of Java trust store? Unfortunately some ...
user avatar
  • 203
2 votes
0 answers
37 views

What are the main PII data brokers? (How do certain online companies get accurate age verification?)

A long time ago, I signed up for Apple Pay Cash. After a bit of using the service, I was asked to input my name and birthdate to continue using the service. At the time, I was underage. I input ...
user avatar
  • 21
0 votes
1 answer
41 views

Where could I find a list of keys not to use for DES encrypting

We have a process that encrypts a URL, it uses DES encryption. I suspect someone may have figured out the key and is decrypting it to crawl information. This was set up many years ago, I just want to ...
user avatar
  • 111

15 30 50 per page
1
2 3 4 5
1318