Questions tagged [operating-systems]

The operating system is the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardware knowledge. Questions on the topic of operating system security should use this tag; you may also like to use one of the [windows], [linux] or [macos] tags.

Filter by
Sorted by
Tagged with
-1
votes
0answers
21 views

Is possible to Access to read/write the ipad/ios memory? [closed]

There is a method to read the memory of an ipad ? What i mean is not to read about the data stored in the ipad but I'll need to read what data ( like os , the file system and bootloader ) are inside ...
0
votes
0answers
34 views

How do I use my Android smartphone as a firewall for my PC? [closed]

Is there such application for my smartphone than can monitor and block the internet traffic of my PC? Or should I use something like a WireShark eqivalent to intercept the PC's traffic? Reason behind ...
0
votes
0answers
50 views

Using nmap to detect realtime operating system

I would like to understand whether nmap can be used to detect the operating system type for realtime OS (Vxworks, threadx, free RTOS, etc.). Has anyone done similar work before? Or if you have any ...
49
votes
7answers
13k views

Can you hide your OS from programs? Can you trick a program into thinking you are on a different OS?

Is there a way or program to make another program think I am using a different system? For example, let's say currently I am on Windows 7 32-bit and I want the program to detect Windows 10 64-bit or ...
3
votes
3answers
150 views

Should operating system passwords be complex if full disk encryption is used that has a complex passphrase?

If a device uses full disk encryption such as LUKS, BitLocker (with a pin), Veracrypt and others and boots using a complex password, what is the need for complex passwords to log into the operating ...
1
vote
1answer
137 views

Is an OS more vulnerable while it is being updated?

Are there any additional attack vectors that apply when an OS is being updated? For example, would the services that are being updated be unstable? An OS is generally more secure after being updated, ...
2
votes
3answers
212 views

Would services or whole operating systems written in pure Python/Java be safer?

Many Windows and Linux services are written in C and/or C++. Due to that fact, they can be exploited in several ways due to the lack of memory security (buffer overflow, etc.). Are services written ...
156
votes
14answers
25k views

Why is the OS obfuscation defense against “It's a Unix system!” not widely implemented?

The Jurassic Park scene referenced in the title is infamous for how ludicrous it sounds to those who are tech literate. But it also illustrates what seems to me to be a glaringly huge hole in web ...
2
votes
2answers
174 views

FarCry 1 Server Security Risks?

Some friends and I want to play FarCry version 1.40 on PC over the internet on our own private server but we have some security concerns. Since the game was released 15 years ago and we'll be running ...
1
vote
1answer
98 views

Is there any method or tool other than nmap for the detection of an OS?

I wanted to know if there was any other way to detect the OS of a network (other than nmap) since nmap doesn't detect most versions of Windows 10 at all and identifies them as a different OS ...
2
votes
1answer
81 views

Access to foreign memory address

Modern operating systems like Windows 10 isolate memory addresses for processes so how is it possible that Cheat Engine can get these addressed and change their values? At this forum it has already ...
0
votes
0answers
61 views

Learning how to audit a linux system, what does it mean to configure password & system auth?

I'm currently using Linux Red Hat OS, and I need to configure it accordingly to /etc/pam.d/password-auth and /etc/pam.d/system-auth under CIS Red Hat Enterprise Linux 8 Benchmark v1.0.0-1. What page ...
-1
votes
2answers
130 views

If my computer system is on, but none of my network connections are active, can someone work on hacking into my OS?

I thought I read that if my network connections, both wifi/ethernet, are NOT on, that if someone wanted to try and work on hacking my OS, that they would have to wait until the network connection is ...
0
votes
1answer
76 views

Blocking mimikatz on the OS level?

I want to know under which case would Mimikatz still run despite disabling WDigest? Whether wdigest is set to 1 or 0, mimikatz still worked. (tested on Windows 7, 8, 2012) Is there a better way to ...
4
votes
2answers
206 views

How can a VM handle a compromised host?

How can I protect a VM build e.g. with LinuxKit, if my host system is compromised? Are there methods available or am I always at the host's mercy? And is it possible to isolate what's going on inside ...
2
votes
0answers
95 views

Computer that can't upgrade beyond Windows 1803 - safe to use until when? [closed]

I have an old computer that can't (at least according to Windows Update) upgrade beyond Windows 1803. (Probably due to the manufacturer not releasing updates to drivers.) Until when will it be safe to ...
0
votes
1answer
125 views

How can vulnerability researchers find flaws in OSes / Embedded Systems?

Operating Systems and Embedded Systems usually don't come with source code or binaries that one can review. How can a vulnerability researcher look for flaws in a system (Architecture, Protocols, etc....
34
votes
2answers
8k views

Why is there a need to modify system call tables in Linux?

I have been learning about rootkits recently and have noticed this hooking techniques that kernel-land rootkits use in order perform malicious actions. Where a typical hooking operation would be to ...
-1
votes
1answer
111 views

Can a rootkit hide its data in slack space of pages in memory instead of disk?

So I'm asking about Linux or Windows type of rootkit/malware is this possible? can a rootkit use the slack space in the pages of the memory instead of disk to hide data? if so, has this ever been ...
1
vote
2answers
156 views

Can a rootkit write to a virtual memory of a kernel process and rewrite a instruction to jump into his own malicious code inside that process?

So lets say we have a rootkit on our system can this rootkit write something inside a kernel process? for example in windows, can a rootkit write to ntoskrnl process, changing some functions and ...
1
vote
2answers
147 views

Security measures to take upon acquiring a new laptop?

I'm planning on buying a regular HP laptop. However, I'm still a novice when it comes to information security. I'm planning on using this laptop to SOLELY login to my bank accounts and NO OTHER ...
1
vote
3answers
676 views

If x86 architecture has overflow flag in the CPU, then why can't we use it to detect integer overflows in C binaries? [closed]

I'm talking about the overflow flag that is used in some architectures like x86: https://en.wikipedia.org/wiki/Overflow_flag why aren't operating systems using this overflow flag to stop integer ...
66
votes
4answers
9k views

Is an up-to-date browser secure on an out-of-date OS?

Windows 7 support will end on January 14, 2020. Assuming that after that day I still use an updated browser, is it true that I'm still safe? Can it "patch" the OS-based security holes? Minor question:...
94
votes
9answers
24k views

Can a virus destroy the BIOS of a modern computer?

In the late 1990s, a computer virus known as CIH began infecting some computers. Its payload, when triggered, overwrote system information and destroyed the computer's BIOS, essentially bricking ...
1
vote
2answers
301 views

Are the CPU protection rings meant to protect against malicious programs or against unintentional programming mistakes?

I am trying to understand what is the purpose of the CPU protection rings (specifically user mode and kernel mode). I don't think that the CPU protection rings are meant to protect against malicious ...
0
votes
3answers
214 views

Can you detect that new files were added to a hard drive that was removed and replaced?

The internal HDD was removed from my laptop (with Windows 7) and connected to another machine to tamper with. Some new files were also created/copied by the mischief maker. After the tampering was ...
5
votes
1answer
412 views

How can I find a web application's document root using a path traversal vulnerability?

I am performing a penetration testing on an application hosted on an Ubuntu environment. So using a path traversal vulnerability, I can download any file. The API web application runs as root (...
-1
votes
2answers
117 views

How can I ensure that I can trust to OS?

How can I ensure that some OS can be trusted? I'm not speaking about possible security problems which can happen everywhere but about something like a backdoor left by a developer. Can such a thing ...
2
votes
1answer
517 views

How to do forensis MBR hex dump?

I take OS first 512 hexdump using dd command. what kind of information extract using that and what are the tools or command(linux) can be used for analysis ? I take copy bytes dump using my Ubuntu ...
0
votes
1answer
92 views

What are the security implications if systemd is not restarted after it has been updated?

My understanding is that systemd is the parent process for all other processes running on Linux. If systemd has been updated on production devices such as servers and the service is not restarted, ...
0
votes
1answer
56 views

Security/Privacy OS With Boot On Thumbdrive

I am looking for a security-centered Linux OS that allows you to take the /boot partition on a thumb-drive to alleviate concerns of an Evil Maid Attacks! What OS is it easy to remove the /boot ...
1
vote
1answer
1k views

Qubes OS or TENS for security? Is Qubes a good idea for a total beginner? [closed]

What would be the most appropriate to use for as much security as possible? TENS looks very simple and straightforward, which is why I like it. However I have barely seen anyone suggesting it, I ...
2
votes
1answer
483 views

Is there a multi-layered DoS protection which can be tightly integrated with cloud hosting services?

I know that one can deny services (DoS) in any of the 7 layers of the OSI model and that in principle, a denial can be done by a single entity (human or machine) or from 2 or more such entities ("...
1
vote
2answers
137 views

If C uses shared libraries, is it possible to write a program that will modify the code that opens a file

If C uses shared libraries, is it possible to write a program that will modify the fopen function to execute a malicious code? How can the OS protect the user from this?
-1
votes
1answer
324 views

Explain how a BIOS/UEFI infection may compromise the security of the Operating System [closed]

Explain how a BIOS/UEFI infection may compromise the security of the Operating System.
3
votes
1answer
112 views

How to enforce on the OS level to recognise only certain keyboards

I give employees AES wireless keyboards. I would like to enforce the OS to only recognise the keyboard we supply. Is that possible? Assuming my employees OS are Windows 10, Ubuntu, Mac OSX. How could ...
0
votes
2answers
137 views

Risk of infecting the host OS if the guest OS is out of date [duplicate]

I'd like to know how much the risk changes if I don't update the software on the guest OS in a VM (applications and the guest operating system itself), compared to the risk in case it's all kept up-to-...
0
votes
3answers
112 views

Can Windows take data from other OS running on same hardware?

I am looking for the way how to set up the my environments as I need more than one OS at once. I care about privacy and securities the most, that is my priority. But I can't refuse Windows in full. ...
1
vote
2answers
74 views

Is it possible to restrict clipboard access to specific processes?

I'm not sure if somebody has implemented this before, but I think it'd be helpful if we can make certain clipboard messages only available to specific processes if they are not meant to be public. Is ...
1
vote
2answers
842 views

How protected mode in CPU is really implemented?

I know what is real and protected mode of cpu execution. But how CPU implements protected mode ? AFAIK cpu does everything what the program says it to do. Where is the protected mode behaviour ...
3
votes
3answers
382 views

Can BIOS/UEFI change OS code?

I know that the OS is the boss of programs (once OS is loaded). Is BIOS/UEFI the boss of the everything before OS is loaded? Can an OS be a sitting duck for any BIOS/UEFI related malware? In other ...
-1
votes
1answer
300 views

Best book for learning information security [closed]

What is the best book(s) on the market right now for mastering network security. In other words, what are the best materials out right now to learn hacking/protecting operating systems and software.
3
votes
2answers
1k views

How do hackers find vulnerabilities in closed source operating systems?

I'm not planning on hacking anything, but I'm just wondering how hackers find vulnerabilities in closed source operating systems such as Windows, since they don't know exactly what the code is doing? ...
1
vote
1answer
50 views

Can request from different software on same machine to a server be identified to be from same origin by tracking TLS handshakes?

If two different users visit an website from two different browsers via HTTPS, can they be identified by the server to be from same origin (same client machine) using information available from TLS ...
4
votes
2answers
608 views

When running shell scripts, is it safer to pass sensitive information using stdin or as a string option?

I'm building a number of automated scripts that will run within an encrypted environment (full disk encryption). Many commands in both Windows and *nix have two ways of entering sensitive information ...
1
vote
1answer
501 views

Preventing OS fingerprinting

I am working on a project and I need to hide my Linux OS from nmap or other OS identification tools. I read many articles about TCP/IP stack and changed many properties such as TTL and packet size but ...
2
votes
3answers
235 views

Is it possible to check if a USB's firmware is unmodified when plugged in?

Let's say I have some USB stick that I know and trust. I can examine the firmware and generate a checksum for it. Can I use this checksem to ensure that when the USB is next plugged in the firmware ...
4
votes
2answers
383 views

How can Linux be secure if it allows for open source contributions from the public?

From my brief understanding of Linux, developers from around the globe submit code to be included into a Linux update. It's then reviewed by security administrators. When approved, it's passed onto ...
11
votes
2answers
1k views

What are the criteria to choose a secure operating system?

Let's say I have a new and empty desktop or laptop computer and I want to decide which operating system to use. I plan to use this computer in a small home LAN with internet access. There are other ...
3
votes
2answers
278 views

Turing-completeness impact on system security

I always find in many papers discussing different kind of system security subject that the authors always trying to highlight the danger of some vulnerabilities by assuming an attacker, by exploiting ...

1
2 3 4 5
8