Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [desktop]

The tag has no usage guidance.

0
votes
0answers
12 views

Secure application from being copied from one PC to another [migrated]

I've created a JavaFX application. Now I would like to secure it from being copied to other computers. More detailed I sell the application to one customer and after installation of this application, ...
2
votes
0answers
112 views

OWASP Testing Guide Equivalent for Desktop Applications [closed]

I was wondering if any of you know of a guide similar to the OWASP Testing Guide but meant specifically for desktop applications? I had no luck searching the Internet. I am looking for something ...
3
votes
2answers
218 views

Luks+Sleep: Login screen security?

Situation: A Desktop Linux (eg. Debian, Xfce desktop, Lightdm login) with LUKS-encrypted partitions (as far as possible, eg. Efi files are not encrypted of course). The computer is in sleep mode (not ...
1
vote
1answer
514 views

Should I get an antivirus for Linux Desktop

On a non-international forum I was reading a discussion about using an Antivirus on Linux Desktops. There are two opinions: 1. Anti-Virus is best-practise regardless of the OS used 2. Anti-Virus on ...
5
votes
4answers
270 views

If I want a more secure and up-to-date Linux, in what cases should I avoid the official repositories?

The problem is this: Linux repositories (depending on the distribution) provide software and updates, but usually that software is not the latest official version, but it's an old version or branch ...
4
votes
1answer
50 views

Local server applications using a web frontend on multi-user desktop environments

Currently I have multi-user linux servers where developers access through remote desktop and use the session as work environment. But I'm a bit concerned about the increasing popularity of ...
2
votes
2answers
77 views

Self-signed certificates in mobile and desktop applications - are they enough? [duplicate]

I want to secure my data transfer using TLS between my own mobile and desktop client applications and my server. I am not at this time interested in web-based applications, so I don't really care that ...
5
votes
1answer
207 views

Do any non-GNU/Linux display managers provide the same isolation as Wayland?

In discussions around the ongoing transition from X.org to Wayland, I regularly come across comments along the lines of "Linux security is not there yet". This refers to Wayland's promise of better (...
1
vote
1answer
269 views

Can malware have its own GRUB/boot-loader and use it to be active?

I use Ubuntu 16.04. After I mounted an ISO which may or may not have had malware in it, my system sometimes ends up showing a blank screen after logging into Ubuntu or reboots a minute or two after I ...
3
votes
4answers
1k views

Private Key Storage in a Java Desktop Application

I am talking about system private keys for API, Google Analytics and etc... (not user´s private key) Where is the best place to store it? (Java class, properties, hidden file, preferences) (Cross-...
1
vote
2answers
343 views

Strange activity on my computer, possibly hacking?

So yesterday I got on my computer and changed my desktop, the next day I got on my computer and it froze so I rebooted it. But when I did my desktop background had changed and when I went on google ...
36
votes
5answers
7k views

Password manager: safer on laptop or on smartphone?

I want to recommend a password manager to my non-tech friends and family and help them set it up and use it. One of the decisions I have to make is whether I recommend one that works on laptops or one ...
1
vote
1answer
119 views

Store github credentials

I am new to the security section. I want to write a cross-platform Java Desktop application which ask a user for their credentials and connects to their github account.What I want to do is If the ...
17
votes
1answer
801 views

How to verify Google sign-in screen is legit? (Linux Desktop) [duplicate]

I've installed an Electron app "Google Play Music Desktop Player" which presents a Google login screen: This is in a standalone window with no URL displayed. Although I have no reason not to trust ...
4
votes
3answers
576 views

Admin Interface: Web vs Desktop

I am working to build a system that requires an interface to control existing data and add new ones. It's really nothing complex, just a few objects related to users, organisation etc. The problem is ...
0
votes
4answers
1k views

Do Linux desktop environments add security risks?

I'm thinking about migrating to Fedora, but I'm not a big fan of Gnome3 so I'm thinking about using their Cinnamon spin. I've read in the past arguments whether or not Linux Mint is as secure as other ...
3
votes
3answers
323 views

I am leaving my company. I have been asked to leave my company laptop and a password to access it. What should i log out of

I have been asked to leave my company laptop with a password(which I will change and share) to access it. The reasons for this have been explained to me and are invalid, alas. I am going to assume ...
0
votes
1answer
255 views

Security of a desktop application's source code [closed]

How easy is it to get the source code from a desktop application? Are there any protections in place to stop someone from viewing an application's code?
0
votes
1answer
1k views

Does WhatsApp use certificate pinning?

Does WhatsApp use certificate pinning? I found a post by Preatorian Security from February 2014 that points the lack of certificate pinning as a major security problem, and mentions: Update 02/21/...
1
vote
2answers
1k views

ArcSight logging - Windows Workstations

I am reviewing a security configuration for Workstation security log review, we have an environment wherein the logs are captured and sent to ArcSight tool for analysis. However, how do we validate ...
2
votes
2answers
3k views

Can someone using (the Join Me) screen sharing software use it to access my PC's files?

When using Join Me, can a file on a desktop be stolen by those viewing? I was using Join Me and another person was communicating with me to set up log in and access to My Vault, when I noticed a ...
2
votes
1answer
232 views

Why would a corporation NOT want to allow users on a corporate network to RDP to their specific desktops?

I have a multitude of users that are requesting the ability to RDP from other workstations, on the same network, to their specific desktop computers. I would like to know what the risks of this are ...
41
votes
6answers
5k views

Why do mobile apps have fine-grained permissions while desktop apps don't? [duplicate]

Androids apps use fine-grained permissions for security reasons, iOS apps (afaik) do it as well. Windows 8.1 applications don't have a permission schema like that, all Linux versions which I have ...
4
votes
1answer
320 views

What security problems does copying .Xauthority to another user present?

If I want to use a GUI application with another user (example: webbrowser), I can copy the .Xauthority file to that given user's home then I can "su - user" and start the GUI app. Question: but what ...
4
votes
2answers
527 views

Prevent a desktop client application from abusing an API access token obtained through OAuth2 on behalf of an application

I have the following use case: I want to write a desktop application that makes use of a third-party API (e.g. Dropbox) This API requires an access_token to be sent to the server with each request. ...
0
votes
1answer
115 views

Does Linux and Mac OSX have built-in Credential/Password Managers with API access? [closed]

Does Linux and Mac OSX have built-in Credential/Password Managers with API access like Windows has with its CredMan (CredWrite, etc). It would be preferrable if they could be used without the need to ...
1
vote
1answer
246 views

Is it “cross-platform attack” if first OS is not attacked at all?

I am analyzing a mobile application, which has embedded files(Worms) to attack a desktop OS. But this application does not do any harm to the mobile platform. Mobile is just a medium to deliver ...
2
votes
2answers
434 views

How do I secure X server against spyware in a GUI application?

Suppose you have a GUI application, that potentionally may be too curious about your environment, such as the list of window titles. How do I limit application's ability to enumerate windows, capture ...
-1
votes
1answer
340 views

Which hardening methods are used in large linux desktops environments (i.e. Goobuntu)? [closed]

Im courious to know about how these large enterprises secure their linux desktop as Google does with ubuntu LTS. I am the only user at home with linux on the desktop and had already created some ...
1
vote
1answer
556 views

Securing login form in a desktop app

I currently have a desktop application which requires the user to have a username and a password. These credentials are stored on a webserver (myserver.com), so when he types the username and the ...
8
votes
4answers
599 views

Same-origin policy for desktop application?

The same-origin policy is one of the most important security feature in our browser. It basically provides sandboxing for our applications which is protecting our users. Desktop application can read ...
0
votes
1answer
841 views

Can a VM be used as a home computer?

Our old computer is getting replaced, and I want to secure the new computer right from the get go. So I figured if I install something like VirtualBox first thing, I could then create one very ...
9
votes
2answers
416 views

Why are apps for mobile devices more restrictive than for desktop?

Application devlopement for mobile devices is generally more restrictive, i.e. the apps runs in a sandboxed environment, they have many limitations when accessing the filesystem, etc. compared to ...
2
votes
5answers
1k views

running firefox as unprivileged user on Linux

On a typical desktop (with no listening services such as Apache, SSH, ...) it seems to me, the browser is the most exposed application and a potential security compromise (and even more so with Java ...
-1
votes
3answers
454 views

What kind of software can be used to remove Rootkit.Sirefef.Gen? [closed]

My System has the rootkit Rootkit.Sirefef.Gen. I would like to know how I can remove this rootkit.
21
votes
3answers
5k views

Should a hostname ever be considered a secret?

I've been told in the past that you should never give out the host names of computers on your network. I can't think of any reason why this would be the case. Could someone tell me if they should be ...
10
votes
4answers
448 views

Alternatives to the “open PC” security model

Today, PCs (laptops, desktops, etc.) generally work under what I'll call the "open PC" security model. Users have full, system administrator/developer-level access to their own machine. Users can ...
4
votes
4answers
1k views

Application to monitor software activities [closed]

I am doing black box testing on a software which is installed in my local machine. I want to analyze and see the list of files and registry entries that software create/modify/delete. Basically ...
2
votes
4answers
6k views

How to effectively save database password inside desktop application?

Suppose we are in the field of desktop applications which need to store their data in a database. How do I store the password for this database avoiding the most obvious mistakes, which are: 1) hard ...
5
votes
3answers
4k views

Security Scanning for Desktop Applications

Our company develops Windows desktop applications. We offer off the shelf solutions - not custom development. A potential new customer wants to add a section to our standard contract that requires ...
2
votes
2answers
720 views

What's the secure way to change UNIX permissions on a harcoded file often?

I'm writing a daemon that monitors something in the OS and flips execution permissions on a file in /run/ back and forth. The file has static contents and the file name is hardcoded in the daemon. I ...
5
votes
1answer
632 views

In the light of recent information about RarVM, can we still trust RAR files?

See: http://blog.cmpxchg8b.com/2012/09/fun-with-constrained-programming.html https://github.com/taviso/rarvmtools It would seem according to these two sources that rar files can contain custom code ...
6
votes
3answers
722 views

Virtualization as a layer of security for desktop computers?

Given the amount of 3rd party plugins required to browse the web, I've been compelled to virtualize my online habits to gain an additional layer of security. There is of course some obvious drawbacks:...
11
votes
3answers
2k views

Attacks against windows kiosk software

I am interested in potential/actual attacks against kiosk software. I am not talking about physical access, or specifically designed kiosk operating systems or shells, bur rather software that runs ...
39
votes
6answers
8k views

Secure Linux Desktop

I'm looking for hints about secure linux desktops. Securing servers is no problem. Most recent Software Updates, run only the services required etc. But what about desktops? I'm thinking about details ...
55
votes
3answers
48k views

How does the Windows “Secure Desktop” mode work?

Can anyone explain (or provide a link to a simple explanation) of what the Windows "Secure Desktop" mode is and how it works? I just heard about it in the KeePass documentation (KeePass - Enter ...
30
votes
1answer
4k views

Passive and active attacks via X11. Is Wayland any better?

In The Linux Security Circus: On GUI isolation - The Invisible Things Lab's blog, Joanna Rutkowska describes attacks from one X11 app on another and the general problem of the lack of GUI-level ...