All Questions

Filter by
Sorted by
Tagged with
1 vote
0 answers
11 views

Highly suspicious System.Map (5.14.21-150500.55.68) - Linux compromised? [migrated]

I'm running the 5.14.21-150500.55.68 x86_64 kernel on OpenSuSe Leap 15.5. I have over 20 years of experience with many different distros, but I always come back to OpenSuSe for several reasons. I have ...
new_sec_from_scratch's user avatar
0 votes
0 answers
19 views

Old Routers are what compared to new ones besides the 6E upgrade [closed]

Why would I need to replace my gig bit router with a new one? What do I gain from the new one when the network has not changed? Mac Filtering is necessary.
AmazingMaz's user avatar
1 vote
1 answer
46 views

Root CA blocked by OS - would apps programmed to trust the root CA be affected?

The situation: Custom Root CA is created by some country. Not trusted by major browsers but trusted by some local ones. Also used by some local sites which direct users to install this root CA. some ...
Tauri's user avatar
  • 111
1 vote
0 answers
10 views

Forcing OpenVPN process to run with a specific group using nmcli [migrated]

I am struggling with this script of mine that should prepare a secure VPN connection with VPN kill switch and I need some help. What I am trying to do (in general): My goal is to set up a very strict ...
PleaseLetThisWork's user avatar
1 vote
0 answers
19 views

Are ECC CSR always different and if yes, why? [closed]

I've noted that SHA256 of CSRs for RSA keys, generated as openssl req -new -config leaf.conf -key rsa.key rsa.csr are always the same, given the same key and configuration. In the same time, every ...
simon's user avatar
  • 181
0 votes
0 answers
59 views

Can we catch signals from a cellphone using AI to interpret the encrypted data?

Would it be possible for someone to steal EM waves from our mobile devices to listen to our conversations or get our OTP? Whatever encryptions they have they are just EM waves. Based on the patterns ...
Newtron Malayalam's user avatar
2 votes
1 answer
48 views

How much should we generally trust security-only support of a legacy version of a software and what should we look out for? [closed]

Many software vendors maintain old versions by providing security-only fixes. Some examples include: Android on Google Pixel Phones. Python. Firefox ESR. My understanding is that people are most ...
xuhdev's user avatar
  • 121
4 votes
3 answers
789 views

What is the next layers of defence against cookie stealing if GET parameter is vulnerable to XSS and there is no HttpOnly flag in a website?

If a GET parameter in a website is vulnerable to XSS and the user input is reflected without any change or escaping or filtering and also HttpOnly is not set for session cookie, is stealing the cookie ...
fed's user avatar
  • 51
0 votes
0 answers
8 views

Kernel 6.8.11-amd64 Headers not being able to install [migrated]

I am not able to install the linux-headers-6.8.11-amd64 kernel even after repeated trying. I tried several methods - apt-get update, apt-get upgrade, apt-get dist-upgrade dkms --configure linux-...
vidyarthi's user avatar
  • 113
0 votes
0 answers
26 views

How to Protect NTP Servers from Cyberattacks? [closed]

I am a beginner in cyber security and they asked me to build a secure architecture for time servers. I have 3 three NTP servers on Ubuntu, each configured with chrony, nptd, NTP (In order to test them ...
faten-zz's user avatar
0 votes
0 answers
18 views

Rcvd Error Response - Attribute Not Found for Heart Rate Measurement [closed]

I’ve been using the Fitbit Charge 6 Fitness Tracker with the Obsidian Silicone Strap and encountered a persistent issue related to heartbeat rate data retrieval. I consistently encounter the error ...
abdul's user avatar
  • 23
5 votes
2 answers
104 views

Use of TPM to encrypt data of my application in practice

I am not very familiar with TPMs, but from what I can tell their main benefit for the user is to make the system as a whole more secure, if you take the appropriate measures, e.g. by checking the boot ...
mist's user avatar
  • 53
1 vote
0 answers
44 views

Ubuntu upgrade changed my home directory permissions - malicious or mistake? [migrated]

My setup I have a private server (Ubuntu 22.04.4) that I use as a test server for my web development code. Every couple of weeks I update it (sudo apt update; sudo apt upgrade -y). I don't usually ...
Dr Phil's user avatar
  • 111
4 votes
0 answers
27 views

PCI-DSS Scope - How to determine client scope segmentation

We are a medium sized organization and use Payment Service Providers for all purchases, including credit card and non-credit card purchases. We get yearly audits and our internal payments platform is ...
jtkline's user avatar
  • 41
1 vote
0 answers
16 views

Windows 10 - Block File Transfer [migrated]

I would like to disable file transfer via Bluetooth while allowing other Bluetooth services to function normally such as mouse, keyboard, audio, etc. The devices are not on a domain and are not ...
Andam's user avatar
  • 111
0 votes
0 answers
7 views

Implementing end to end encryption (react js , laravel) [migrated]

I need to implement end to end encryption between front (reactjs) and back (laravel). What I try to do is encrypt data in front using package cryptojs, send it using axios to backend, in the backend I ...
user26307664's user avatar
1 vote
0 answers
28 views

TPM PCR values change after the first reboot

My setup consists of a QEMU image with u-boot 2024.01 and 6.6 Linux kernel. As a TPM I'm using swtpm. For some reason, if I reboot the device the PCR register values are different in the initial boot ...
Avaruusmuikku's user avatar
1 vote
0 answers
15 views

Is Kerberos Constrained Delegation (KCD) deprecated?

Referred to the official microsoft documentation on KCD where they are using the terms KCD & Resource Based Constrained Delegation (RBCD) almost interchangeably which got me confused. They have ...
Aryan's user avatar
  • 31
1 vote
0 answers
40 views

Where to store Refresh Token in custom Authentication

I am currently trying to build an authentication flow where the front end lives on one domain, say X.com and the backend lives on Y.com. I have implemented a refresh/access token system where when a ...
Kiran Manicka's user avatar
1 vote
0 answers
41 views

Pegasus spyware, computers, and spam [duplicate]

I just received an email in my spam folder saying I had been infected with Pegasus. After a few searches, it looks like Pegasus is a multi-million dollar toolkit used by Israelis and others to ...
floor cat's user avatar
  • 111
1 vote
2 answers
104 views

How did he find my full real name based on my Steam or FACEIT Profile? [closed]

Yesterday, I was playing a counterstrike game on FACEIT, when all of sudden one of my teammates started bullying me for my bad plays. It was standard trash-talking for a bit, but then all of a sudden, ...
Game Account's user avatar
0 votes
0 answers
36 views

CVSS 3.0 score for reflected XSS vulnerability in GET parameter [closed]

There is a website that allows searching for content (without need for authentication). It uses GET parameter named "query" to search and it is vulnerable to reflected XSS. What is CVSS 3.0 ...
user26317030's user avatar
0 votes
1 answer
56 views

Why are 2 IP addresses mapped to a single MAC address not an evidence of ARP spoofing? (confusion with slide eg)

I am going through the slides at: https://www.slideshare.net/slideshow/packet-sniffing-85873158/85873158 i.e. we have 3 machines: A’s ARP cache shows: B’s IP address is associated with Z’s MAC ...
user2994783's user avatar
1 vote
0 answers
36 views

CVSS Score for brute force attack [closed]

A website is given to pentester. It is observed that the website has a login page at https://example.com/admin. In this login page it is also possible to enumerate from error messages that the user &...
user26317030's user avatar
1 vote
0 answers
20 views

"PUF CRPs authentication requires trust in manufacturer since it's him who performs the storage of CRPs"....?

"PUF CRPs authentication requires trust in manufacturer since it's him who performs the storage of CRPs". So does it mean that we have to trust manufacturer, because he could replace the ...
allexj's user avatar
  • 129
1 vote
1 answer
113 views

Understanding how to correctly migitate CVE-2024-38095

I am trying to understand under which circumstances CVE-2024-38095 applies. When reading the advisory (https://github.com/dotnet/runtime/security/advisories/GHSA-447r-wph3-92pm), one finds the ...
Felix's user avatar
  • 271
1 vote
0 answers
38 views

Laser pulse/injection attacks, Xray inspection, Test-based(like JTAG scan chain) attacks, Microprobing attacks... are these invasive or non-invasive?

Laser pulse/injection attacks, Xray inspection, Test-based(like JTAG scan chain) attacks, Microprobing attacks... are these invasive or non-invasive? Just curiosity. I don't know how to categorize. My ...
allexj's user avatar
  • 129
10 votes
2 answers
3k views

A web site allows upload of pdf/svg files, can we say it is vulnerable to Stored XSS?

It is possible to have JavaScript code in pdf or svg files. I think JavaScript inside svg runs in almost all browsers and I think JavaScript inside pdf generally always runs in chrome. So during a ...
user26317030's user avatar
1 vote
1 answer
63 views

Is electronic signature a proper/sufficient mean for identification/authentication?

We have received an electronically signed GDPR data request from a person who has only provided his name and surname. We wanted to be sure that this person is who he claims he is, so we have asked to ...
ZygD's user avatar
  • 279
2 votes
1 answer
44 views

How can a timing/cache side-channel attack be performed? How can attack know the time of which certain instructions are performed by the victim?

About timing my question is: How can attack know the time of which certain instructions are performed by the victim? And about the cache, how can attacker know which cache line is being accessed by ...
allexj's user avatar
  • 129
1 vote
0 answers
245 views

Detecting “Harvest Now, Decrypt Later” Attacks Using AI/ML Models

I’m researching strategies to detect the “Harvest Now, Decrypt Later” attack, also known as “store now, decrypt later” or “retrospective decryption.” This surveillance approach involves acquiring and ...
Mallikarjunarao Kosuri's user avatar
0 votes
0 answers
17 views

Identifying outdated component in CI/CD pipeline [closed]

How could we identify outdated 3rd party components if the application is using to build ? How are we addressing this issue ? If we detect any component which is outdated at later stage , it could ...
Samarendra Barik's user avatar
1 vote
0 answers
28 views

Leveraging MS SSO for teams tab secure?

I have an app I want to embed as a tab in MS Teams. Users may already have an account outside of teams and I use magic login link to typically to log users in. I want to know if I can leverage teams ...
user25622659's user avatar
1 vote
0 answers
23 views

How to manage temporary AWS credentials for on-premises Kubernetes clusters?

We have several on-premises Kubernetes clusters that need to utilize AWS services. Currently, we use traditional IAM Users with static credentials, but we recognize this is a bad practice. We want to ...
Catriel Goodman's user avatar
-3 votes
0 answers
129 views

I dated the LINUX developer himself, Jory Pratt, and he controls all my devices, i need help please [closed]

I dated THE Linux developer, and he has so much control on all my devices, no matter is I factory reset them. He will be in control in just a few minutes. I don't know how or what to do, can some ...
Again New's user avatar
1 vote
0 answers
27 views

Possibility of eavesdropping on app-server comms after redirect to deep link

I'm being asked to investigate a possible attack vector that I don't understand and I don't want to take action that is useless or even negatively affects users if it isn't going to address something ...
iftheshoefritz's user avatar
2 votes
1 answer
63 views

Are there any motherboards / UEFI that support hardware encryption on SED?

I found that Thinkpads have hdd password support, which in terms uses some bizarre password hashing and ends up with 90 bits of entropy, which is again used as ATA security password to SED, which in ...
mmja's user avatar
  • 93
1 vote
1 answer
77 views

How can Bitlocker do this?

Im about to upgrade my CPU that has TPM in it. Bitlocker is TPM+PIN+Keyfile. Now, naturally when upgrading CPU I will suspend Bitlocker, shutdown, change CPU and reboot. OK, I can understand that ...
mmja's user avatar
  • 93
3 votes
2 answers
591 views

How is EFS key protected and unprotected when Windows Hello PIN is used?

EFS private key is normally encrypted by users Windows password, but when PIN (and TPM magic) is used to sign user in using Windows Hello, the user's passphrase is not used at all…so how can Windows ...
mmja's user avatar
  • 93
0 votes
0 answers
29 views

Is MS number-matching MFA still amenable to bypass in this scenario?

On August 2, 2023, the Microsoft security blog presented this scenario, in which the protection normally afforded by number-matching MFA on MS Authenticator can be thwarted: In this activity, ...
Peter Collins's user avatar
1 vote
0 answers
40 views

benefits of a common session key over a common password [migrated]

Password-authenticated key exchange (PAKE) is a method in which two or more parties, based on their knowledge of a shared password, establish a cryptographic key using an exchange of messages, such ...
yolooow's user avatar
  • 25
1 vote
0 answers
21 views

Why is the "Scope Changed" CVSS Metric for Kernel Crash Vectors always "Unchanged"? [closed]

Looking at all the recent Linux kernel crash CVEs I see that the "Scope Changed" metric is always "Unchanged" indicating that "The vulnerable component is the affected ...
Whome's user avatar
  • 1,259
1 vote
0 answers
37 views

Is PUF Challenge-Response Authentication applied on every power-up event? [closed]

Are PUFs used, EVERY time we power on the computer to verify that nothing has been tampered with (by using CRP authentication)? Which element performs this authentication? (bios, secureboot, I don't ...
allexj's user avatar
  • 129
0 votes
0 answers
10 views

dump a pod from kubernetes [migrated]

I have a docker image running in Kubernetes that I suspect to contain a malicious code, unfortunately I can't download it directly from the docker hub as there is a restriction on where it can be ...
Barttttt's user avatar
  • 459
15 votes
5 answers
5k views

Is it a security issue to expose PII on any publically accessible URL?

I am designing a e-commerce based website, part of which will be a order summary page. This order summary page, will contain the address and name of the person who ordered a product. My plan was to ...
karatecode's user avatar
2 votes
2 answers
64 views

Security Risks of Deriving Crypto Wallet Seed Phrases Using Deterministically Derived Salt

I'm working on a project where I want to generate a set of crypto wallet seed phrases from an existing seed phrase. The reason for this is so that using just the original seed phrase the wallet holder ...
jgy's user avatar
  • 21
0 votes
0 answers
33 views

Is it suspicious that netstat shows many established connections related with vivaldi [closed]

Is it suspicious that netstat shows many established connections related to Vivaldi, as well as other applications such as msedgewebview2.exe and onedrive.exe- even though I do not have these ...
Junaid Nur's user avatar
0 votes
0 answers
23 views

What are the list of Cyber Security Industry wide - Security Standards and Controls Educational Purpose? [closed]

I would like ot know more about What are the list of Cyber Security Industry wide - Security Standards and Controls Educational Purpose? e.g.: ISMS -> Information Security Management System -> ...
AshwinP's user avatar
  • 101
1 vote
1 answer
85 views

How to update BIOS before BIOS infected Host reinfects BIOS?

I learned about the BIOS being able to be written to by malware. It reminded me I have a used laptop that performs noticeably slower than any comparable devices, so I went ahead an downloaded BIOS ...
I like to code's user avatar
15 votes
1 answer
6k views

Is a "single" cpu safer than multiple cores?

Should I use the plain "bsd" or "bsd.mp" kernel if I need a safer operating system? eg.: against side-channel attacks. Thinking of that even 2 physical core CPUs can share ...
peterK88's user avatar
  • 153

15 30 50 per page
1
2 3 4 5
1383