-1
votes
0answers
1 view

Android email encryption

is there a reliable open-source application for handling (send/receive + en-/decrypt) encrypted emails on Android? I mean reliable in terms of security -- it's not imperative that its Debian-like ...
0
votes
0answers
4 views

On firefox behind corporate proxy, intercepting on WebGoat using burp Suite error

i'm following a tutorial on hacking web application WebGoat using burp suite I've downloaded webGoat which now runs on port 8080, set up burp suit and the browser connection as in the pictures, but ...
1
vote
0answers
11 views

How could honeypot be vulnerable?

We've been hacked for the 2nd time without knowing how/who did it. Luckily we were able to shutdown everything! We're trying to deploy Honeypot to be in control of what is going on from our local ...
0
votes
0answers
10 views

Is it possible to lock guest VMs (or processes) to sticks of physical RAM to prevent row hammer attacks?

I was wondering if it is possible through some means to isolate processes (or preferably guest VMs) to physical sticks of RAM. This would be to prevent row hammer like attacks from using physical ...
0
votes
1answer
14 views

Suspicious wifi networks from distant places and hotels

When I check my mac book's network settings I see some unfamiliar wifi networks from distant places like famous hotels. It's impossible to connect that networks for me because I've never been that ...
0
votes
0answers
12 views

Are there any regulations regarding password storing schemes in the EU or US?

I'm interested in the existence of regulations (mostly EU, but US is also relevant) that particularly state some minimal requirements on the schemes used for storing passwords, applicable for ...
-2
votes
0answers
15 views

What is the most secure way to stream video?

If the privacy is primary, when video is streaming from RPi surveillance camera to only one user, what is the best protection of transferred data, which encoding and which protocols are suitable? ...
3
votes
1answer
50 views

Deleting credit card information after every transaction

There have been many reports of hackers compromising credit card information in the databases of online shopping websites. Will deleting my credit card information from my account after every ...
-1
votes
0answers
17 views

Split Wireless Card For Fake Access Point? [on hold]

I'm trying to make a fake access point. Here are the steps I'm taking. How can I split my wireless card, so I have one half being the Access Point, and the other half leading to the internet. Is this ...
-3
votes
0answers
13 views

verification code problem, can't continue on my Yahoo inbox [on hold]

Please help. I can log in with my Yahoo but it needs a verification code to continue to my inbox and I've lost my phone.
1
vote
2answers
87 views

Is browsing http sites insecure?

So for example this site, security.stackexchange.com, when I look in my browser it doesn't say that it uses https and it does say that my connection is not encrypted. The same goes for, say, ...
-6
votes
0answers
22 views

Public and private key geerating in C Code source ? [on hold]

I'm looking to a public and private pair key with C ( like this one in the link below ) , is there any one have the source code of it ? any help would be appreciated ! Thank you . Create RSA public, ...
-7
votes
0answers
21 views

shared wifi router problen [on hold]

i have shared wifi in my home but one of our member once she used her laptop the signal goes too slow and shutoff my signal, is he had been hacked? or how can i protect my router even one of my shared ...
0
votes
2answers
41 views

Ways to secure administrative pages of a portable site

I made a CMS (using PHP) that is basically drag and drop to be live (under linux/apache hosts), now I need the communications between the administrative/login pages of said CMS and the client (recent ...
3
votes
1answer
40 views

Bypassing XSS filter

<script> Something.execute("injectionpoint"); }, true); </script> I am trying to bypass an XSS filter but its not working since since " is filtered as \" or ;\" depending on where " is ...
-4
votes
0answers
17 views

Server side script to check if browser is vulnarable to SSLv3 Poodle

I want to implement a browser SSLv3 Poodle vulnerability test like https://zmap.io/sslv3/sslv3test.html on my web application. My idea is to put a routine in the application first page to tell to my ...
2
votes
2answers
31 views

Securely delete a file in Ubuntu?

I have been reading about government standards for secure data erasure by overwriting the file location with random data [wikipedia: data erasure standards]. I am wondering if Ubuntu's default Delete ...
0
votes
1answer
19 views

Are DLLs in URLs executed on users local machine or on the remove machine?

In this question I am referring to DLLs listed in URLs such as this one: http://survey1.sendyouropinions.com/mrIWeb/mrIWeb.dll When this kind of URL is navigated to, is the code in the DLL executed ...
-5
votes
0answers
15 views

how to write fragmented attack code? [on hold]

what kind of attack of fragmented attack do? is all kinds of attack be rewritten into fragmented attack code? what kind of attack that fragmented attack can not do? where do fragmented packet ...
2
votes
1answer
25 views

Choosing a group of symbols that contains a password

My bank employs a step in its authentication process besides [the card itself and] the regular password, where the user has a secondary password (3 small sequences of letters, such as Hy X Ba) ...
-2
votes
0answers
12 views

Is there a MITM tool for forcing weak SSL cipher suite like by using ettercap or mitmproxy? [duplicate]

I know that this question has already been asked before, but i could not get an answer of how to do it?
1
vote
1answer
24 views

VM production server and low entropy

I'm monitoring a VM functioning as our production server. I noticed it has at many times, quite low entropy (/proc/sys/kernel/random/entropy_avail). On average our server(which among other stuff does ...
3
votes
1answer
36 views

Can user send fake request if it has JWT token?

I developed an android application that request to a REST service for do actions! My questions are: If anyone trace the requests and responses, Can he get the token from headers? Where should I ...
-2
votes
0answers
38 views

Problem with Nessus scanner [on hold]

I downloaded Nessus scanner (home edition) and installed it. Then i updated its plugins and choose a WebSite for scanning ( Web Application Scanning mode ) But it ends after 5-6 seconds :| What's the ...
1
vote
1answer
24 views

is there a Virus that attempted to foil generic decryption techniques and how it did that?

is there a Virus that attempted to foil generic decryption techniques and how it did that ? need t o know the VIRUs name because i tried searching and unable to locate any virus who did that and the ...
0
votes
1answer
15 views

Win server 2008 partition security

I am trying to lock a partition in the server so, that it is accessible by only one domain admin, and not even the administrator can open it. But at the same time I want to keep it shared so, that the ...
0
votes
0answers
18 views

Timestamp response behaviors in different tools [migrated]

I was testing out icmp time stamp response on one of my servers using ping and hping3. Here is result of hping3 # hping3 --icmp-ts x.x.x.x HPING x.x.x.x: icmp mode set, 28 headers + 0 data bytes ...
1
vote
1answer
58 views

backdoor php trojan still dangerous on my local machine?

I recently removed and fixed a lot of backdoor trojans in some files in one of my servers, and I copied those files to my local computer. But the issue is that now that I run the virus scanner on my ...
-8
votes
1answer
42 views

How to attack a web page to gain username and password of any or specific user? [on hold]

Web page does not use SSL. Server uses SQL. Given that passwords are not stored in plaintext in database. I want to find out methods to do so.
-7
votes
1answer
33 views

How to attack on a web page to gain username and password? [on hold]

In a situation where a web page is not using SSL and someone wants to attack to gain the username and password. How it can be done? Given the situations: Passwords are not stored in plain text. ...
2
votes
0answers
48 views

Can Google tech be trusted? [on hold]

With the Snowden leaks, Google has been implicated in the activities of the NSA. There really is no way for ordinary citizens to know with certainty what the exact reality of this involvement is. In ...
0
votes
0answers
29 views

How to secure peer-to-peer chat (includes video) - school project [on hold]

I am making a school project in which I have a private network (but not always) of peers in which everyone can contact everyone and I need to secure it somehow. Everyone has their own IP address. I am ...
0
votes
1answer
22 views

Sharing sensitive information across servers on visits from the same browser

I have this scenario: Webserver domain A. Generates sensitive information when a request from a browser is received but this information is not disclosed to the browser. Webserver domain B. ...
-4
votes
0answers
31 views

blocking skype or webcam signals via router? [on hold]

hello guys i wanted to block skype through my router, is this possible? anyone know how? if thats impossible, is there a way to block a webcam from sending video signals through my router? thanks
3
votes
2answers
115 views

How can I explain “zero knowledge proof” to an end user?

A ZKP allows proof of knowing the answer to a secret, without actually disclosing what that answer is. Is there any analogy that can help people put this concept into everyday practice? A "lie to ...
1
vote
1answer
41 views

Which security documents do providers typically share with their customers?

In the context of managed/cloud hosting, what level of information does a provider typically share (under NDA) with its customers for compliance audit/3rd party risk assessment purposes? What are ...
-4
votes
1answer
51 views

How to make my PHP website vulnerable to SQL injection [duplicate]

For training purposes, I want to make a demo website vulnerable to SQL injection. I went to the .htaccess file in the server and added these 2 lines: php_flag magic_quotes_gpc Off php_flag ...
-4
votes
0answers
37 views

How to hack hearing aids [on hold]

I have hearing aids. They came with this lovely remote https://starkeypro.com/surflink-mobile/ which I can do cool things like direct phone calls and music directly to my hearing aids. However the ...
0
votes
0answers
23 views

How come UAC logs are not being stored in Event Viewer? [migrated]

In Event Viewer, under Applications and Services Logs, UAC logs are not being stored. How do I enable them? Could Domain/OU group policy have them disabled? If so where can I see that it is disabled ...
-4
votes
0answers
48 views

How to perform simple DOS attack for my class presentation? [on hold]

I am in a computer networks class at my college. I am going to be doing a presentation on DOS attacks for that class. Does anyone have any ideas on how I could perform a simple DOS attack on ...
0
votes
0answers
25 views

Is it possible to configure Azure Web site SSL protocols & ciphers [on hold]

I want to be able to disable TLS 1.0 protocol and the RC4 cipher on an Azure website (or Web App) and I can't figure out if it's possible or not. I know what registry settings to update but the ...
3
votes
6answers
106 views

Disadvantages of Using a VPN?

I've got a yearly subscription to a VPN service which is real quick and from the research I did at the time seems to be pretty legitimate, but are there any disadvantages or scenarios where you ...
0
votes
2answers
43 views

How can I stop an account I don't control from sending spam email in my name to my contacts?

Recently I received an email from a friend with "My" email to them attached. The email "I" sent them was obviously spam, one of those "You have to see this..." emails. The email had been sent to ...
0
votes
3answers
90 views

Please critique my encryption scheme for a very small microcontroller [on hold]

I am new here and not an cryptography expert; but I have been using encryption library for a while. My company is working on a small hardware device. It is powered by a microcontroller so memory is an ...
3
votes
1answer
36 views

Mobile authentication with password as param in get request over ssl

I'm building out a new services layer for an existing mobile application. The mobile application authenticates with the existing services layer by providing the user name and password as url params in ...
0
votes
0answers
22 views

Shared control scheme [on hold]

For the shared control concept, each party has part of the key to avoid having 1 person having the entire key. I'm given the following rules, but whenever I try out numbers on the rules I do not get ...
1
vote
1answer
33 views

Is adding apt keys using wget secure?

Many (I would even say most) projects that have Debian repo give instructions like this (https://www.dotdeb.org/instructions/): 3. Fetch and install the GnuPG key wget ...
0
votes
2answers
47 views

Sniffer attack on mobile

I have Nokia lumia 625. And a guy hacked it using sniffer. That's how much I know about it. He has access to all my online texts(eg. Whatsapp, messenger etc) . and also to offline carrier text ...
2
votes
1answer
51 views

What's the mechanism used to extract my user name on a website? [on hold]

I was browsing this forum http://openelec.tv/forum/64-installation/40869-putting-openelec-onto-sd-card-using-usb-reader-from-a-mac-for-raspberry-pi ,and realised that they show my hostname and my ...
1
vote
1answer
63 views

How does Amazon Fire TV know my name/account? [on hold]

I bought a Fire TV stick and inserted it into the HDMI-port of my TV. I was presented with a dialog to select my wireless router so it can connect online. Just after I did that, it asked me if I am ...

15 30 50 per page