All Questions
65,854
questions
0
votes
0
answers
10
views
Converting a PE executable to a RAW format
I am on a red team exercise and want to try wePWNise to form a malware DOC with an executable that I have created and tested and know to pass the target's AV. Does anybody know how to convert a PE ...
- 11
0
votes
0
answers
25
views
Solutions for out of band biometric login
I am enhancing our login flow to include biometric verification via your phone. The user will log in to the desktop app but will have to verify their identity via their phone. We already have an app ...
- 101
0
votes
0
answers
27
views
How to determine validation process of a certificate used by a website using HTTPS?
When visiting a website that uses HTTPS, we can see its certificate in the browser. But how can we know for sure which validation process the company or domain behind the website has gone through?
...
- 13
0
votes
0
answers
14
views
Limitation on SafeSEH
I'm reading this article
And quote:
Does anyone know which method in NTDLL does this check? I'm trying to reverse engineer it with IDA, but I don't know which method to look at.
- 1,695
0
votes
1
answer
27
views
Is NAT66 increasing security?
NAT is so standard for IPv4 that nobody thinks about it but for IPv6 it's considered a really bad option. (Article from APNIC) Of course there's the stateless NPTv6 and the firewall can be configured ...
- 197
0
votes
0
answers
9
views
Protocols used during a Single Sign-On between Okta Universal Directory and AWS IAM Identity Center(aka SSO)
Single Sign-On between Okta Universal Directory and AWS allows users in your company using OKTA to connect to AWS using SSO after first agreeing and setting up the use of identities by AWS IAM ...
- 111
0
votes
1
answer
31
views
Can an attacker perform MiTM attacks on non-web based clients such as Microsoft Outlook using a Rogue Access Point?
I understand an attacker could perform MiTM on Rogue Access Points and capture cleartext traffic between a web client and server. However, is it possible that an attacker could do similar MiTM attacks ...
- 115
0
votes
2
answers
54
views
Are bandwidth sharing apps such as peer2profit, IPRoyal and PacketStream risky?
Apps like peer2profit, IPRoyal and PacketStream allow you to sell your unused internet bandwidth to others for passive income. Supposedly you could earn about 30 to 75 dollars a month from using these ...
- 145
0
votes
0
answers
32
views
Virtualization softwar that doesn't phone home and is secure? [closed]
I know QEMU with KVM is a really good choice but the performance if you are using a desktop is terrible. It's capped at around 30hz is the main issue, not to mention the trouble you have to go through ...
- 1
0
votes
2
answers
56
views
Site "can't" change user info, why?
I know this might not be the best place to ask this but there's some pretty smart people on here and I've tried asking this elsewhere and got either no replies or just a bunch of worthless arguments ...
- 1
-4
votes
0
answers
47
views
VMWare Player is closed-source, does it phone home or has backdoors? Any security audits? [closed]
I put privacy and security as even top priorities when choosing any software. I never use any closed-source applications. However I am considering using VMWare because it's just superior to anything ...
- 1
0
votes
0
answers
13
views
how to match source code in vault with that in production environment
I want to clear out my concept since I'm not a developer by trade. Imagine there is source code vault where codes/binaries are checked in. Developers check out this code and deploy them in the ...
0
votes
0
answers
27
views
Suspicious incoming connection attempts from random IPv6 addresses on local network on macOS
I've been using Little Snitch on my Macbook and I have since a long time a rule to alert on any incoming IPv6 connection, which would be suspicious since I use IPv4 only.
Since a couple of days I've ...
- 101
0
votes
2
answers
33
views
What type of attacks can be carried against an OS with FDE, if we assume OS and FDE are implemented correctly?
The question is mainly stated in the title. I was wondering what kind of attacks can be launched on such a setup, where someone has access to a running OS with locked screen (needs password for the ...
- 101
1
vote
1
answer
52
views
Does a Honda Civic send vehicle telemetry to its servers?
I recently read an article by the IEEE on Tesla's vehicle telemetry and after reading that, I also realised that Honda Civics also have vehicle infotainment systems, including in-cabin microphones.
...
- 111
3
votes
1
answer
54
views
Why would websites ask users to reauthenticate after a password change?
I was discussing with a non-IT friend after he came to me with a question regarding security and password change.
As he puts it: "Why do websites ask me to re-authenticate after a password change?...
- 676
1
vote
1
answer
42
views
Is there a security-related motivation for prompting me for my email address, and then my email and password?
Often when I am signing into web sites, I am prompted for credentials in two steps. First, they ask me to enter my email address. I type it in and click a button. Then they ask me for my password. I ...
- 657
2
votes
2
answers
69
views
OpenSSH Disabling Diffie-Hellman (DHE) key exchange
I'm seeking to mitigate CVE-2002-20001 by disabling DHE key exchange through OpenSSH on an Ubuntu instance.
I understand this can be achieved through editing the /etc/ssh/sshd_config at line
...
- 21
0
votes
1
answer
49
views
Using Single Sign-On and the usage of password managers is discouraged. Whay are alternatives for storing tokens for example?
What are the alternatives of storing tokens when password managers are discouraged?
Some of the ideas that come to my mind are storing in a text file and encrypting with GnuPG but that's asks for ...
- 293
0
votes
1
answer
31
views
Can you use an LTE router as an IMSI catcher?
I'm wondering if you could use an LTE router as a 4G IMSI catcher and what tools you would need for this, if any.
0
votes
0
answers
45
views
What kind of security is it? Base64/MD5. Key with 22 characters and 32 characters
What kind of security do you suggest for this case?
What do you think is the security flow?
It is happening in a web which download a PDF document, inside the document has a QR code. This QR code has ...
0
votes
0
answers
17
views
What should argon2id parameters be
I plan to use it locally on mobile devices. These seems to do not offer computational power as good as on a server.
So what could be a secure argon2id parameters that run around 1s since offline apps ...
- 35
0
votes
0
answers
39
views
Difference Between Reflected XSS and Reflected-DOM XSS
What's the difference between Reflected XSS (RXSS) and Reflected-DOM XSS (RDOMXSS). After some research, I think it can be concluded that Reflected-DOM XSS is:
Similarities:
The value is reflected by ...
1
vote
0
answers
17
views
Is iCloud Private Relay leaking my DNS queries to my ISP?
So I noticed recently that despite iOS settings saying all DNS queries go through iCloud Private Relay's DNS servers, despite Private Relay using Oblivious DNS over HTTPS, and even despite dnsleaktest....
1
vote
1
answer
32
views
ThinkShield secure wipe - SSD does it forbid data recovering?
I have to give my computer back to my boss.
I want to delete all the data from my SSD. I found "ThinkShield secure wipe" which is implemented in the BIOS apparently.
It gives me two options:
...
- 13
0
votes
1
answer
103
views
I change everything but again Instagram knows it's me?
I change my device, my public dynamic IP address, account, username, password, email, browser, app, cookies and everything and again Instagram knows it's me, and my question was do you know that can ...
- 11
0
votes
1
answer
24
views
Interpreting OWASP prohibition: no sensitive-account login to any frontend interface
OWASP’s Authentication Cheat Sheet states unequivocally:
Do NOT allow login with sensitive accounts (i.e. accounts that can be used internally within the solution such as to a back-end / middle-ware /...
- 103
14
votes
1
answer
3k
views
What is this potential identity leak that NoScript warns about?
Recently, while using the Tor Browser, NoScript popped up the following warning when I opened a stack overflow link in a new tab from duckduckgo:
Potential Identity Leak
You are about to load a page ...
- 11.1k
-1
votes
2
answers
32
views
When using Google Translate's "website" functionality, do passwords entered go through Google?
I'm looking at the functionality offered by Google Translate's option to translate an entire website. It opens in a new tab with the domain https://whatever-is-the-website-domain-com.translate.goog/.
...
- 311
0
votes
1
answer
27
views
How to prevent a user retaining file access with an open handle on Windows?
Suppose a user is a member of a group, and they open (in the Windows API sense) a file whose DACL grants access to that group.
Then, the user stops being a member of the group.
Since access checks are ...
- 3,866
-1
votes
2
answers
41
views
Why a mounted encrypted volume with bitlocker is accessible as if it weren't encrypted at all?
When we encrypt a volume with bitlocker, it takes time to encrypt the data according to the amount of the data but Once the encrypted volume is mounted the contents are transparently accessible to ...
- 3
-1
votes
1
answer
61
views
Why doesn't iMessage allow users to block unknown contacts?
Why is it so easy to send spam messages via iMessage? Does this shortcoming make using Pegasus exploits easier for attackers? I assume Signal, Facebook Messenger, which allow users much more control ...
- 1
0
votes
1
answer
31
views
Who starts with change cipher spec in a TLS handshake?
After looking at many explanations about the TLS handshake I noticed that sometimes the server starts with the change cipher spec command and sometimes the client starts with it.
I'm wondering why. Is ...
0
votes
1
answer
54
views
What is Akamai Ghost?
After making requests to certain domain and their responses being either 4xx or 5xx status codes, the server response header shows Akamai Ghost.
Is this response coming from Akamai's firewall or their ...
0
votes
2
answers
107
views
is it safe to use pirated software if AVs don't detect anything malicious about it?
I want to know whether it's safe to use a pirated software if during all of the processes including (downloading, running installer, installing, using and scanning installed files) the system's ...
- 13
0
votes
0
answers
30
views
Nessus vulnerability 11411 in Fortigate
I have a Fortigate device and a Nessus vulnerability scan set up. When I ran the scan, it said that there was some kind of .htaccess~ file in my Fortigate device. This is the vulnerability it found.
...
0
votes
1
answer
12
views
IdP Personal/Signer Certificates
We are implementing SAML/OIDC-based SSO across our enterprise and wanted to get a feel for best practices when it comes to using Personal/Signer Certificates within our IdP.
Historically we've ...
1
vote
1
answer
51
views
Is there a downside to free online privacy protection?
Is there a downside to free online privacy protection?
For example, Discover card has a new "Online Privacy Protection" that you can activate for free. It sounds good, but is there a ...
- 11
0
votes
1
answer
16
views
How do I remove malware with Defender for Cloud Apps?
I'm new to the role and my operational analyst left a few days before I started, I'm his manager, now it's just me. I'm familiar with the tooling but have never had to operate it myself.
I've had an ...
- 103
0
votes
0
answers
15
views
Securing SSH reverse proxy from app in an untrusted environment to server
I'm adding a feature to my web app that will allow remote configuration of various devices via their built-in web apps.
For forwarding the HTTP traffic from my web app to the remote device I'm ...
- 101
0
votes
1
answer
35
views
Fraud Detection - 2FA Bypass Methods and SIM Cloning
I am assisting another Data Scientist with helping a bank detect and prevent fraud via data analysis and predictive modeling (Machine Learning). It's a challenge because the proportion of known ...
- 213
1
vote
0
answers
44
views
How does google recognize my device when I login and have 2FA
I have 2FA turned on for my google account. I was using incognito to log in, and google still recognized my device;
I tried using a VPN to change my IP address, but it still recognized my device. I'm ...
- 111
-1
votes
0
answers
30
views
Freelancer or equivalent IT Security Specialist Help Needed
We recently had a incident where some of our endpoints have been compromised.
I am in need of someone, qualified with the relevant certifications and experience, to come and assess a issue for me.
...
- 1
-1
votes
0
answers
38
views
Drupal Site Hacked
Noticed some weird behavior with my Drupal site today. Some of the external links have been replaced with an IP domain. I rewrite my external links behind a 302 internal redirect such as mysite.com/...
- 1
0
votes
0
answers
17
views
Can one security advisory affect more than one RPM package?
On RedHat and derived Linux distributions, vulnerability warnings are available in form of security advisories which are usually derived from CVEs.
The rules for the CVE numbering authorities state ...
- 101
0
votes
1
answer
33
views
Browsers don't trust SSL certificates of network-local host signed by own CA
I've got a Mayan EDMS running on a computer on the local network. The Web App is exposed via HTTPS on the non-standard port 8001 and it uses an SSL certificate that is signed by our own CA.
The CA is ...
- 103
0
votes
0
answers
15
views
openssl undefined references
I am getting multiple undefined references when gcc attempts to link my code. I built openssl-3.0.5 using "./Configure --api=1.0.0 no-deprecated linux-x86_64" and I am linking against the ...
- 1
0
votes
1
answer
63
views
Why my certificate is still not recognized by some hosts?
My website certificate is not recognized by all hosts.
I already scanned here https://www.ssllabs.com/ssltest/analyze.html?d=eleicoesjustas.org.
Is that because of Java trust store?
Unfortunately some ...
- 203
2
votes
0
answers
37
views
What are the main PII data brokers? (How do certain online companies get accurate age verification?)
A long time ago, I signed up for Apple Pay Cash. After a bit of using the service, I was asked to input my name and birthdate to continue using the service. At the time, I was underage. I input ...
- 21
0
votes
1
answer
41
views
Where could I find a list of keys not to use for DES encrypting
We have a process that encrypts a URL, it uses DES encryption. I suspect someone may have figured out the key and is decrypting it to crawl information. This was set up many years ago, I just want to ...
- 111