Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [microsoft]

The tag has no usage guidance.

4
votes
0answers
98 views

What personal information, if any, can be gleaned from a Microsoft APPCRASH problem signature?

I am trying to debug an "APPCRASH" problem event for a program running on Microsoft Windows 7. When this happens a problem signature is presented, like this example from SuperUser: Problem Event ...
2
votes
0answers
2k views

MS Updates for MS17-010

Anybody know what the KB numbers are for Windows 10 1607 64 bit and 64 bit for 1511? I am assuming these are them, can someone please verify this for me? Also, for the Windows 1607 there is a ...
2
votes
0answers
233 views

Is Microsoft trying to brush the Diagnostics Tracking Service under the rug?

I was working my way through disabling all of the spyware Microsoft has put into Windows 7 when I came across this Google result: "Sep 11, 2015 - Describes an update that enables the Diagnostics ...
1
vote
0answers
80 views

Extracting public key created by an UWP app in KeyCredentialManager

I know of an app that is using https://docs.microsoft.com/en-us/uwp/api/windows.security.credentials.keycredentialmanager to generate a key pair (supposedly stored in a TPM), and sequentially uses the ...
1
vote
0answers
110 views

Is Windows certificate store FIPS 140-2 level 1 certified?

I'm not really aware of FIPS 140-2 requirements, but AFAIK some MS cryptographic libraries are FIPS 140-2 level 1 certified, so here it goes my question: If I do have the following requirement: ...
1
vote
0answers
489 views

Microsoft CryptoAPI FIPS 140-2

My customer asks me to use FIPS 140-2 validated cryptographic libraries. Currently I have AES 256 encryption using Microsoft CryptoAPI in my application. First I get the provider (HCRYPTPROV) using ...
1
vote
0answers
615 views

Key usage not applied using Microsoft CA

I'm a bit of a newbie to Certificate signing, so please forgive any stupid questions I might have. I have a CSR, when I decode the CSR it cleary request the following key usages: Requested ...
1
vote
0answers
494 views

Microsoft is spying me. What can I do?

I was getting into my Windows 10 configuration and I saw a lot of options which are sending data to Microsoft. Telemetries, tracking, statistics... even sharing Windows updates on my PC to other users!...
1
vote
0answers
342 views

Microsoft IIS 7.5 from Time Based SQLi DBA to shell

I am dealing with a time-based SQLi in a Microsoft IIS 7.5 Server and I want to upload a shell. My approach is to get the internal application path, and then, try to upload a file with sqlmap --file-...
0
votes
0answers
21 views

When sharing confidential information, which is more secure share via Outlook vs store on Sharepoint then provide access?

I'm trying to figure out what is good practice and what is more secure for my small team. I wanted to set a standard or governance on how to share confidential information within our team. One person ...
0
votes
0answers
31 views

Block/spam an email that doesn't match a rule

Is there anything we can put in place such to verify that if the sender's name = "John Doe" and the domain is not company.org (or legitimate verified SPF sender), then the message is marked as spam or ...
0
votes
0answers
84 views

Mimikatz /rc4 argument for pass-the-ticket?

I'm studying how pass-the-ticket works using Mimikatz, i.e., forged Silver and Golden Kerberos tickets. The command usually takes the form (Golden tickets): kerberos::golden /sid:SID /domain:DOMAIN /...
0
votes
0answers
50 views

Has Microsoft ever official recommended forms auth over Windows Auth

My team is debating using Windows Authentication for a public facing website. I’ve been scouring the forms and can see the numerous security vulnerabilities of replying on NTML, and I can see the ...