Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

1
vote
0answers
37 views

Is it possible to identify the source of message in whatsapp?

Is it possible to identify the real source of message in whatsapp? Scenario : Texting whatsapp message to a group,one of the group member forwards it to another and it goes on atlast one day it ...
6
votes
1answer
80 views

Would a DMZ be safe to use with a software firewall for home networking?

If I set up a Windows 10 PC with a software firewall (TinyWall, which is a front end for Windows Firewall) and blocked all traffic except for a few applications and ports I would be using (Minecraft ...
0
votes
1answer
39 views

How is UDP hijacking even possible?

My doubt is this: UDP has no sequence numbers, so what indeed is the concept behind UDP session hijacking?
0
votes
0answers
18 views

Why is Fragmentaion done on layer 3 (Network layer) [on hold]

Why is fragmentation done on network layer and why not on other layers ? Fragmentation means splitting the packet into to small pieces and sent from source to destination. The maximum MTU size is ...
1
vote
0answers
55 views

Unknown MAC in network

A few days ago, I noticed an unknown MAC address in the statistics page of my home router. The OUI lookup yields Cisco as manufacturer. However, I don't have such a device in my network -- actually, I ...
-1
votes
2answers
29 views

RBAC togehter with AAA?

I'm taking a network course and my teacher has not been answering my emails. I'm supposed to set up "Role based access using privileges with AAA" I thought RBAC and AAA stood in contrast to one and ...
27
votes
5answers
5k views

Advantages to killing sessions after 5 minutes?

I'm dealing with a server that isn't mine to configure. Something somewhere between me and this server kills any connection after 5 minutes if no traffic passes between the two machines. This includes ...
-1
votes
1answer
45 views

Hardening switch vs router [closed]

I'm currently working on a newtwork project and it is time to harden the network devices. I made some searches for googling switches and routers, but basically the same results keep popping up. Is ...
0
votes
0answers
7 views

Link Layer, E2EE encryption [closed]

Do you know how I can find out more about link layer and E2EE encryption also with related topics. I hove more network books in my library but I could not find any topics about OSI encryption, in ...
3
votes
1answer
114 views
+50

Authenticate tracking device with TCP server

I am building a tracking device and am looking for a secure authentication method to use when the device wants to establish a connection to the server. The server is a TCP server that we open a ...
25
votes
3answers
3k views

Does using a live CD make you more vulnerable to remote attacks?

Some people recommend the use of a Linux live CD for online banking, but doesn't that make you more vulnerable to network attacks since it's not updated? I tried installing updates and it required me ...
0
votes
0answers
29 views

Mac OS 10.9.5: Accidentally Safe Booted while connected to network with other Macs on it - what's the risk? [closed]

Title says it all. For some reason my Mac did a "safe boot" instead of a regular boot. Someone else (with a poor history of being able to protect computers from crapware) on the same LAN was also ...
0
votes
2answers
128 views

What can I do about being heavily port scanned?

I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to ...
1
vote
0answers
47 views

I am hoping someone can shed some light on these nmap scan results

I am concerned that a friends computer may be compromised. They were complaining about the computer getting really hot, difficulty maintaining an online connection, finding unread non junk emails in ...
0
votes
1answer
41 views

How to find a spoofed packet with matching TTL?

To detect spoofed packets, TTL is recorded and it if does not match, its declared spoofed. Is there any technique to find an IP address whose TTL to the target is same as your TTL to the target ? I ...
1
vote
0answers
11 views

Why is the maximum port range 65535 in the TCP/IP Suite ? [migrated]

My doubt is that - a port is just logical, so why such restriction ? Why can't I have a port of 9924593 or something like that ?
0
votes
0answers
18 views

PostScript/Jet Direct port TCP 9100 mandatory for printers?

I'm trying to acquire more knowledge on the topic in order to find and fix a few security issues on printer infrastructures to prevent misuse, pranks and secure all data in it. Currently I have a few ...
-4
votes
2answers
47 views

What are all the IT security concerns of a small business? [closed]

We are in the process of updating our IT infrastructure and part of this will be a security review. I want to make sure we review every relevant security point. So, what are all the IT security ...
0
votes
0answers
7 views

Few questions about MAC addresses and related material [migrated]

I have a few questions, but all under the same umbrella topic. If I find out a MAC address of a machine on a LAN, and I spoof my MAC to match that particular machine and join their LAN, how will ...
0
votes
6answers
117 views

Does MAC address filtering provide security? [duplicate]

Sometimes I need to configure the router and choose which devices can connect to my network (MAC address filtering). For example, limit connections to 3 specific machines. But for an advanced user, it ...
0
votes
1answer
69 views

What's Google Inbox request/response obfuscation skill? [closed]

I Inspected Google Inbox network resources via Chrome Developer Tool. I saw some request/response payload and result. This object type is not readable for human. I've never seen this kind of ...
1
vote
4answers
96 views

How can I mitigate the risk of my wifi key being shared with strangers through apps?

Sometimes a guest asks for my wifi password, and I gladly give it to them. Sometimes that guest has a wifi sharing app, and said app shares the key with totally random strangers (I know there is some ...
1
vote
1answer
158 views

I have internet at home, need to know who visited what? Possible? [closed]

I have internet at home. I wanted to keep a watch on who visited what without putting a computer on for 24 hours and running some proxy software on it. Is there a possibility to get a track of all the ...
94
votes
14answers
27k views

How can mom monitor my internet history from a distance?

This might sound like a funny question from a twelve-year-old. The less funny part is that I am 21 and currently studying at university (I don't live at University, although I am 15 minutes away. I do ...
0
votes
1answer
35 views

Encrypted traffic analysis

If i tunnel any tcp traffic true ssh or any ssl encrypted protocol will some one capturing the traffic capable of do some kind of offline decrypting using the capture file ?? What technic they use to ...
2
votes
1answer
67 views

Securely sending packets without them being spoofed

I'm working on a simple multiplayer game to break the ice with network programming. I have a system where if the player moves, the server receives a move packet that contains some stuff like the ...
2
votes
2answers
113 views

Is a router without inbound firewall a security issue across the internet?

Imagine this scenario: Alice has a private subnet (192.168.1.0/24) connected to a router which is also connected to local network B. Alice's router performs NAT (only using MASQUERADE; outbound ...
-4
votes
1answer
111 views

whats with Chinese and Russian proxy servers?

I keep hearing that if you commit some network activity via Chinese or Russian proxy servers you are very difficult to be tracked down. What is the reason for this other than lack of international ...
1
vote
1answer
78 views

Arp spoofing blocks internet [duplicate]

I work on a fresh Kali install running in a VM. I have an external Wi-Fi NIC used only by the VM (I try to not use the internet connection of the host). The network is protected (hum) by WEP, with ...
1
vote
0answers
18 views

Azure Networking VPN

Company is exploring the option of connecting Azure VNET to the on premise network using either Site-to-Site or ExpressRoute. There are concerns regarding potential vulnerability of internal resources ...
-2
votes
1answer
76 views

Clicking a lot of website links in Google Maps, then sent through multiple URL redirects, and lastly to a page that made my laptop start beeping?

I was in Google maps clicking on all the website links listed in the side panel, looking at every website really fast. Note, they were all tattoo parlors. One of the links I clicked bounced me through ...
0
votes
0answers
6 views

Change local IP address programmatically? [migrated]

I have a local network in my home with my ADSL(Router) modem. We can change our IP with the following setting in Windows Is it possible do it programmatically, e.g. using C#.Net?
9
votes
4answers
1k views

How to determine if a VPN provider respects data confidentiality?

I've read about why I really should use a VPN and I've been looking into different providers, but there's one thing I'm worried about. Can't a VPN provider just look at my traffic all they want and ...
1
vote
1answer
80 views

How does a malicious user connect to a private network?

I have followed these instructions for setting up a couple of servers to have private networking. It ends by saying "It is important to secure your private networking interface the same way you would ...
1
vote
1answer
49 views

man in the middle attack over internet

I've performed some man in the middle attacks (arp poisoning) using ettercap, stuffs on kali linux and i know how exactly it is working. but i was wondering if this attack could be even performed ...
1
vote
1answer
43 views

Is it possible to utilize an outbound proxy to upgrade to TLS

Given a situation where legacy technology exists from a system and we don't want to do a complete upgrade (.net in this case w/ version that doesn't have any support for TLS 1.1/1.2) as the product ...
1
vote
0answers
36 views

Inconsistent duplicate TCP packets

How often does it happen that we benignly see a TCP packet that is retransmitted but has a different payload the second time? In other words, how often is it that we see a TCP packet with sequence ...
5
votes
1answer
490 views

Can mobile network operators read WhatsApp metadata?

After turning on end-to-end encryption for WhatsApp is it possible for the network operators to read the metadata of the messages being exchanged? I see here (in Transport security) that metadata ...
0
votes
0answers
60 views

Could someone explain what this error about? [migrated]

Test connection ([Triatin_SALESBANK_SFTP_Receive_Triatin], [SFTP Receive]) failed with message: Unable to logon[user: ****] into target server [***********:22] via SOCKS proxy ...
3
votes
2answers
99 views

Is it safe to use TFTP on a local network

Is it safe to use TFTP on a local network to backup configurations? For example we had an experiment where there was an attacker using MITM technique to read all traffic destined for a server. On a ...
0
votes
1answer
58 views

What could an attacker do with informations about devices in my local network?

If a malicious website would scan my local network (via WebRTC) for devices, what could the attacker do it with it? Does it need to be in the same WIFI-Network in order to login to a service? (for ...
1
vote
1answer
70 views

Password sent over TLS: threats other than TLS compromise?

One of my findings during a security audit was a password, sent as is over the network. As bad as it sounds, this happens only over HTTPS connection. Some authors suggested here that additional ...
7
votes
1answer
1k views

Why would a switch be configured to Fail Open?

I can't understand why a switch would be configured to Fail Open? Surely an attacker could easily exploit this by MAC Flooding which will cause the switch to act like a hub and broadcast messages to ...
0
votes
0answers
26 views

Setting specific geoIP in piratebrower

I'm using Piratebrowser. In-order to set specific country's IP, I used the line "ExitNodes {in}" Its working. I'm getting Indian IP in dnsleaktest; but my geolocation is getting a Japan ...
3
votes
1answer
131 views

Is UPnP still insecure?

Here's my question: In today's world, on equipment that is properly updated to the latest software/firmware, is UPnP still insecure, or have its vulnerabilities been fixed? This type of question ...
4
votes
1answer
135 views

What about Long Router Passwords and WPS Push-Buttons

I have a question related to the WPS push-button capability on my router. I know that there is some material on the web about this question, but I haven't found anything that's current enough for my ...
2
votes
4answers
183 views

How could online encryption ever work? [duplicate]

I have recently read about the german enigma machine in WW2, It worked in a way that every day the machine configuration was sent per mail to the different operators. (I couldn't find official sources ...
2
votes
2answers
35 views

Why do ALGs restrict traffic on a given TCP port based on the protocol?

My understanding is that application level gateways restrict the traffic they proxy based on port and protocol - say HTTP over port 80 or MQTT over port 1883. Both types of traffic are using TCP as ...
9
votes
4answers
184 views

How to design a home network for IoT devices?

I'm trying to work out how best to design a home network which contains (potentially hostile) devices. I'm running into my limits of networking knowledge! I have two challenges. Unsecure Devices ...
1
vote
1answer
88 views

How to pick an enterprise VPN provider?

We have always deployed our own VPN using an open source package, but as our company is growing we've become increasingly aware of the importance of scaling this solution, especially now we operate ...