Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [crime]

Questions relating criminal activity, performed (or aided) with the usage of a computer system.

0
votes
2answers
188 views

Will it be a crime if I post data into someone's website using cURL? [closed]

I found a website which is not secure and tried to post a form on that site using cURL request in PHP and it worked successfully. However, that is a simple site with contact form and no special or ...
1
vote
1answer
96 views

Is a fake address/info to an ISP/service enough to be untraceable in theory?

It got me thinking recently. Wouldn't a fake/incorrect address be enough to deter investigating/finding a criminal via cyberspace? The reason we know it's so easy to find someone is because they give ...
3
votes
2answers
242 views

SSL/TLS compression attacks on mail servers (smtp)

Currently, we know few compression attacks on the SSL/TLS protocol (such as Crime or Breach). I wonder for few days if these attacks are practicable on a mail server (smtp). Is CRIME attack ...
-1
votes
1answer
77 views

Why aren't more wifi points compromised? [closed]

Especially in light of the recent KRACK problem. Wifi has been compromised before; and undoubtedly it will again. So I have to wonder, why don't criminal organizations travel around major cities, ...
2
votes
1answer
196 views

Why is Pastebin still widely used by malicious actors for sensitive data dumps, given that it's public and easily parsable?

If you scrape Pastebin for research or even just out of curiosity, it quickly becomes apparent that there is an abundance of compromised data that is uploaded there by unknown malicious actors. My ...
-1
votes
1answer
106 views

What are the potential pitfalls of running a VPN business? [closed]

Disclaimer: I am pretty noob on this issue. I made my research but could not find satisfying information. The question is pretty straightforward but I still want to elaborate a little bit more: ...
0
votes
1answer
126 views

Why does a perfc file cure/kill Petya ransomware (is it a bug or a deliberate decision of the creators)?

Why does a perfc file in the Windows directory prevent the recent Petya ransomware? Is it a bug in the ransomware that halt's it from executing? Or is it a deliberate attempt of the creators to allow ...
0
votes
1answer
131 views

Can automatic-reply emails be used to find a home address? [closed]

I recently received an automatic reply to an email indicating that the recipient was on holiday and giving his cellphone/mobile number so that he could be contacted while away. The email was from a ...
0
votes
2answers
139 views

How much is known about who is responsible for all the database breaches?

Troy Hunt claims that those responsible for data breaches are often just teenagers and there are reports that a lot of the breaches would appear to come from insiders. But we also hear a lot about the ...
4
votes
3answers
515 views

IP addresses readily available on black market?

I know that criminals can readily find on the black market large dumps of password databases from hacked sites. These may contain the username, password, and email address for millions of users. But ...
7
votes
3answers
3k views

Why aren't ransomware deployers arrested? [closed]

Why aren't people who use ransomware to extort money from people arrested? Using ransomware is illegal, presumably. The idea that Bitcoin is anonymous is a myth. Given this, it seems like they ...
9
votes
2answers
2k views

Magnet to wipe HDD [duplicate]

This question is for HDD, not SDD. Would a Neodymium magnet like this one be strong enough to wipe the contents of a hard disk drive? How long would such an act take to destroy any data so it's not ...
2
votes
1answer
79 views

What effect on internet crime did the more recent developments in encryption have? [closed]

I'm doing a presentation on the effect of encryption on internet enabled/based crime, what would people say is the largest development in encryption of say the last 5-10 years what and what kind of ...
2
votes
2answers
130 views

What prevents criminals from buying a new PC and going on public wifi? [closed]

Imagine this scenario: A criminal wants to commit a crime online. He buys a brand new pc, finds an open WIFI, connects to TOR network, and commits a crime. How would authorities possibly detect/find ...
13
votes
3answers
7k views

Is gzipping content via TLS allowed?

So I have these few compression directives at http level in nginx: gzip on; gzip_http_version 1.1; gzip_vary on; I read that this should be avoided because of CRIME/BREACH attack, is this correct?
35
votes
13answers
7k views

Laptop Anti-Theft Measures

A law firm I've been in contact with has recently been broken into 3 times in the past 4 months. In spite of a number of laptops and other equipment containing sensitive information being stolen, the ...
2
votes
3answers
325 views

Is it possible to make cracking a password pointless to an attacker with database access?

I've been reading information on making passwords secure, but what are the reasons an attacker would want to put effort into getting the original password? If an attacker does indeed have a copy of ...
3
votes
1answer
180 views

Clarification on organized cyber crime concept

We had a small presentation by my colleagues on 'Organized Cyber Crime' and they presented the topic with a supporting case on The Ashley Madison Hack. Well, I disputed the case presentation by saying ...
1
vote
1answer
78 views

Is there a vulnerability when TLS is decrypted, then encrypted with OpenSSL that is vulnerable to BEAST or CRIME?

Assume that the following TLS proxy exists User <-----> Load Balancer that decrypts, encrypts <------> WebServer Where the web server is running a vulnerable version of OpenSSL. Can ...
65
votes
9answers
10k views

Can attackers get anything with DoS attacks except crashing the service?

A DoS (short for "denial of service") attack is a form of attack used on web services which aims to "crash" the service. Is there any motive of this form of attack besides crashing the service / ...
6
votes
1answer
341 views

Realistic: Exploiting a computer on BIOS/ hardware level in less than an hour? (Infinite preparation time)

I wonder how hard it it to infect a laptop or netbook in 60 minutes or less in a way the victim cannot easily clean their machine by wiping hard disk drives. Let's assume the following: The attacker ...
11
votes
2answers
1k views

Are social security numbers useless by themselves?

453.7 million social security numbers have been issued to date. There are only 1 billion = 1000 million distinct 9 digit integers. This means that if I were to make up any 9 digits, I would have ...
9
votes
2answers
2k views

Why do so many cracking attempts originate from China?

I recently put a Linux server online and it didn't take long until I had the first attempts to brute-force the SSH login. It's not that I am worried about that - I trust the security of my server. But ...
7
votes
2answers
297 views

Are there any known cases where antivirus software has deliberately ignored malware?

Are there any known cases where antivirus companies for some reason have choosen to make their product allow/ignore malicious software? The reason could be government coercion or former trustworthy ...
1
vote
1answer
5k views

Someone borrowed my phone and Im scared its hacked [closed]

I am from Australia and I use a iPhone 4. Today, a young guy asked to borrow my phone, since he was out of credit and since I was trying to be a good samaritan, let him borrow my phone (also we were ...
-2
votes
1answer
108 views

Privacy vs monitoring cyber crime [closed]

So , how does the police find/monitor criminals' actions (eavesdropping) that do cyber crime(pornography , drug trafficking etc..) without breaking their privacy, and succesfully catch em and provide ...
-12
votes
1answer
474 views

Viable way to ruin a milk corporation? [closed]

Hack into their system and change the "Sell by" date so that it is immediately bad. How long do you think until they notice, if you pull it off?
1
vote
2answers
2k views

Clients breaking after avoiding RC4-MD5

As per http://projects.webappsec.org/w/page/13246945/Insufficient%20Transport%20Layer%20Protection , we have been recommended to stop using RC4-MD5. The clients supported by our Application are IE ...
9
votes
1answer
2k views

Whats the best custom compression method to use when I have SSL?

Suppose I have an application which does encryption using SSL and provided you cannot control what cipher suite is being negotiated, and assuming that I have some custom compression over the data ...
3
votes
2answers
316 views

Is revealing your residence physical address when browsing the web a security risk?

I live in a large apartment building that provides a wireless service for residents. All of that traffic goes through a proxy server, and the domain name on that server contains the name of the ...
0
votes
1answer
179 views

Mobile Broadband, e-Fraud & Anonymity Against My Website [closed]

I was wanting to know if the blend in the title of this post provides e-criminals an open field to explore. What I mean is this: say a fraudster goes and buys a pay-as-go SIM card from a certain ...
5
votes
6answers
19k views

How to Investigate Wi-Fi Intrusion and where to look for evidence?

I'm trying to figure out how to configure a network so that I can tell what an intruder did (in the past) while on the network after they are detected. eg. If someone with a wi-fi enabled laptop ...