Questions tagged [desktop]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
80 views

Escaping Windows 10 Kiosk mode?

I made a very simple cloud service (cloud gaming) using Windows 10's new feature called Assigned Access then choosing an app and a user as Kiosk PC which is used for Windows Store applications. Users ...
1
vote
0answers
97 views

Forensics methods for obtaining WhatsApp data from Windows Desktop PCs

WhatsApp has the option to download a Windows (or Mac) Desktop version. Installation requires pairing the software with a mobile phone. I have read a similar question about Android devices, and ...
2
votes
1answer
93 views

Sign a document as created with an authorized software build

I'm creating some software that essentially enforces a specific process for creating specific documents, which protects them from being challenged later. Afterwards, the file is signed with the user'...
-1
votes
1answer
150 views

What is the most secured way to store private key on the client's machine

I'm building the equivalent of a blockchain wallet, it is an end-to-end encryption desktop program, the user (client) must be the only one to know his private key, with this private key, he can send ...
0
votes
1answer
79 views

Icon on desktop [closed]

I was doing some work when I noticed new icon on my desktop called "sl_files". I couldn't help but open it. It contains CSS files, and there is some recognized as .download files. It has pictures of ...
2
votes
0answers
149 views

OWASP Testing Guide Equivalent for Desktop Applications [closed]

I was wondering if any of you know of a guide similar to the OWASP Testing Guide but meant specifically for desktop applications? I had no luck searching the Internet. I am looking for something ...
5
votes
2answers
351 views

Luks+Sleep: Login screen security?

Situation: A Desktop Linux (eg. Debian, Xfce desktop, Lightdm login) with LUKS-encrypted partitions (as far as possible, eg. Efi files are not encrypted of course). The computer is in sleep mode (not ...
1
vote
1answer
604 views

Should I get an antivirus for Linux Desktop

On a non-international forum I was reading a discussion about using an Antivirus on Linux Desktops. There are two opinions: 1. Anti-Virus is best-practise regardless of the OS used 2. Anti-Virus on ...
5
votes
4answers
276 views

If I want a more secure and up-to-date Linux, in what cases should I avoid the official repositories?

The problem is this: Linux repositories (depending on the distribution) provide software and updates, but usually that software is not the latest official version, but it's an old version or branch ...
4
votes
1answer
57 views

Local server applications using a web frontend on multi-user desktop environments

Currently I have multi-user linux servers where developers access through remote desktop and use the session as work environment. But I'm a bit concerned about the increasing popularity of ...
2
votes
2answers
107 views

Self-signed certificates in mobile and desktop applications - are they enough? [duplicate]

I want to secure my data transfer using TLS between my own mobile and desktop client applications and my server. I am not at this time interested in web-based applications, so I don't really care that ...
6
votes
1answer
400 views

Do any non-GNU/Linux display managers provide the same isolation as Wayland?

In discussions around the ongoing transition from X.org to Wayland, I regularly come across comments along the lines of "Linux security is not there yet". This refers to Wayland's promise of better (...
1
vote
1answer
404 views

Can malware have its own GRUB/boot-loader and use it to be active?

I use Ubuntu 16.04. After I mounted an ISO which may or may not have had malware in it, my system sometimes ends up showing a blank screen after logging into Ubuntu or reboots a minute or two after I ...
3
votes
4answers
2k views

Private Key Storage in a Java Desktop Application

I am talking about system private keys for API, Google Analytics and etc... (not user´s private key) Where is the best place to store it? (Java class, properties, hidden file, preferences) (Cross-...
1
vote
2answers
346 views

Strange activity on my computer, possibly hacking?

So yesterday I got on my computer and changed my desktop, the next day I got on my computer and it froze so I rebooted it. But when I did my desktop background had changed and when I went on google ...
36
votes
5answers
7k views

Password manager: safer on laptop or on smartphone?

I want to recommend a password manager to my non-tech friends and family and help them set it up and use it. One of the decisions I have to make is whether I recommend one that works on laptops or one ...
1
vote
1answer
122 views

Store github credentials

I am new to the security section. I want to write a cross-platform Java Desktop application which ask a user for their credentials and connects to their github account.What I want to do is If the ...
17
votes
1answer
980 views

How to verify Google sign-in screen is legit? (Linux Desktop) [duplicate]

I've installed an Electron app "Google Play Music Desktop Player" which presents a Google login screen: This is in a standalone window with no URL displayed. Although I have no reason not to trust ...
3
votes
3answers
662 views

Admin Interface: Web vs Desktop

I am working to build a system that requires an interface to control existing data and add new ones. It's really nothing complex, just a few objects related to users, organisation etc. The problem is ...
0
votes
4answers
1k views

Do Linux desktop environments add security risks?

I'm thinking about migrating to Fedora, but I'm not a big fan of Gnome3 so I'm thinking about using their Cinnamon spin. I've read in the past arguments whether or not Linux Mint is as secure as other ...
3
votes
3answers
327 views

I am leaving my company. I have been asked to leave my company laptop and a password to access it. What should i log out of

I have been asked to leave my company laptop with a password(which I will change and share) to access it. The reasons for this have been explained to me and are invalid, alas. I am going to assume ...
0
votes
1answer
279 views

Security of a desktop application's source code [closed]

How easy is it to get the source code from a desktop application? Are there any protections in place to stop someone from viewing an application's code?
0
votes
1answer
2k views

Does WhatsApp use certificate pinning?

Does WhatsApp use certificate pinning? I found a post by Preatorian Security from February 2014 that points the lack of certificate pinning as a major security problem, and mentions: Update 02/21/...
1
vote
2answers
1k views

ArcSight logging - Windows Workstations

I am reviewing a security configuration for Workstation security log review, we have an environment wherein the logs are captured and sent to ArcSight tool for analysis. However, how do we validate ...
2
votes
2answers
3k views

Can someone using (the Join Me) screen sharing software use it to access my PC's files?

When using Join Me, can a file on a desktop be stolen by those viewing? I was using Join Me and another person was communicating with me to set up log in and access to My Vault, when I noticed a ...
2
votes
1answer
234 views

Why would a corporation NOT want to allow users on a corporate network to RDP to their specific desktops?

I have a multitude of users that are requesting the ability to RDP from other workstations, on the same network, to their specific desktop computers. I would like to know what the risks of this are ...
42
votes
6answers
5k views

Why do mobile apps have fine-grained permissions while desktop apps don't? [duplicate]

Androids apps use fine-grained permissions for security reasons, iOS apps (afaik) do it as well. Windows 8.1 applications don't have a permission schema like that, all Linux versions which I have ...
4
votes
1answer
350 views

What security problems does copying .Xauthority to another user present?

If I want to use a GUI application with another user (example: webbrowser), I can copy the .Xauthority file to that given user's home then I can "su - user" and start the GUI app. Question: but what ...
4
votes
2answers
541 views

Prevent a desktop client application from abusing an API access token obtained through OAuth2 on behalf of an application

I have the following use case: I want to write a desktop application that makes use of a third-party API (e.g. Dropbox) This API requires an access_token to be sent to the server with each request. ...
0
votes
1answer
119 views

Does Linux and Mac OSX have built-in Credential/Password Managers with API access? [closed]

Does Linux and Mac OSX have built-in Credential/Password Managers with API access like Windows has with its CredMan (CredWrite, etc). It would be preferrable if they could be used without the need to ...
1
vote
1answer
248 views

Is it “cross-platform attack” if first OS is not attacked at all?

I am analyzing a mobile application, which has embedded files(Worms) to attack a desktop OS. But this application does not do any harm to the mobile platform. Mobile is just a medium to deliver ...
2
votes
2answers
454 views

How do I secure X server against spyware in a GUI application?

Suppose you have a GUI application, that potentionally may be too curious about your environment, such as the list of window titles. How do I limit application's ability to enumerate windows, capture ...
-1
votes
1answer
344 views

Which hardening methods are used in large linux desktops environments (i.e. Goobuntu)? [closed]

Im courious to know about how these large enterprises secure their linux desktop as Google does with ubuntu LTS. I am the only user at home with linux on the desktop and had already created some ...
1
vote
1answer
622 views

Securing login form in a desktop app

I currently have a desktop application which requires the user to have a username and a password. These credentials are stored on a webserver (myserver.com), so when he types the username and the ...
8
votes
4answers
629 views

Same-origin policy for desktop application?

The same-origin policy is one of the most important security feature in our browser. It basically provides sandboxing for our applications which is protecting our users. Desktop application can read ...
0
votes
1answer
913 views

Can a VM be used as a home computer?

Our old computer is getting replaced, and I want to secure the new computer right from the get go. So I figured if I install something like VirtualBox first thing, I could then create one very ...
10
votes
2answers
435 views

Why are apps for mobile devices more restrictive than for desktop?

Application devlopement for mobile devices is generally more restrictive, i.e. the apps runs in a sandboxed environment, they have many limitations when accessing the filesystem, etc. compared to ...
3
votes
5answers
2k views

running firefox as unprivileged user on Linux

On a typical desktop (with no listening services such as Apache, SSH, ...) it seems to me, the browser is the most exposed application and a potential security compromise (and even more so with Java ...
-1
votes
3answers
459 views

What kind of software can be used to remove Rootkit.Sirefef.Gen? [closed]

My System has the rootkit Rootkit.Sirefef.Gen. I would like to know how I can remove this rootkit.
21
votes
3answers
6k views

Should a hostname ever be considered a secret?

I've been told in the past that you should never give out the host names of computers on your network. I can't think of any reason why this would be the case. Could someone tell me if they should be ...
10
votes
4answers
463 views

Alternatives to the “open PC” security model

Today, PCs (laptops, desktops, etc.) generally work under what I'll call the "open PC" security model. Users have full, system administrator/developer-level access to their own machine. Users can ...
4
votes
4answers
1k views

Application to monitor software activities [closed]

I am doing black box testing on a software which is installed in my local machine. I want to analyze and see the list of files and registry entries that software create/modify/delete. Basically ...
2
votes
4answers
6k views

How to effectively save database password inside desktop application?

Suppose we are in the field of desktop applications which need to store their data in a database. How do I store the password for this database avoiding the most obvious mistakes, which are: 1) hard ...
5
votes
3answers
4k views

Security Scanning for Desktop Applications

Our company develops Windows desktop applications. We offer off the shelf solutions - not custom development. A potential new customer wants to add a section to our standard contract that requires ...
2
votes
2answers
730 views

What's the secure way to change UNIX permissions on a harcoded file often?

I'm writing a daemon that monitors something in the OS and flips execution permissions on a file in /run/ back and forth. The file has static contents and the file name is hardcoded in the daemon. I ...
5
votes
1answer
657 views

In the light of recent information about RarVM, can we still trust RAR files?

See: http://blog.cmpxchg8b.com/2012/09/fun-with-constrained-programming.html https://github.com/taviso/rarvmtools It would seem according to these two sources that rar files can contain custom code ...
6
votes
3answers
731 views

Virtualization as a layer of security for desktop computers?

Given the amount of 3rd party plugins required to browse the web, I've been compelled to virtualize my online habits to gain an additional layer of security. There is of course some obvious drawbacks:...
12
votes
3answers
3k views

Attacks against windows kiosk software

I am interested in potential/actual attacks against kiosk software. I am not talking about physical access, or specifically designed kiosk operating systems or shells, bur rather software that runs ...
39
votes
6answers
9k views

Secure Linux Desktop

I'm looking for hints about secure linux desktops. Securing servers is no problem. Most recent Software Updates, run only the services required etc. But what about desktops? I'm thinking about details ...
58
votes
3answers
51k views

How does the Windows “Secure Desktop” mode work?

Can anyone explain (or provide a link to a simple explanation) of what the Windows "Secure Desktop" mode is and how it works? I just heard about it in the KeePass documentation (KeePass - Enter ...