Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [operating-systems]

The operating system is the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardware knowledge. Questions on the topic of operating system security should use this tag; you may also ...

0
votes
1answer
30 views

Security/Privacy OS With Boot On Thumbdrive

I am looking for a security-centered Linux OS that allows you to take the /boot partition on a thumb-drive to alleviate concerns of an Evil Maid Attacks! What OS is it easy to remove the /boot ...
0
votes
0answers
21 views

Information on process control block [on hold]

How is the process control block of any process guarded from tampering and what are the security implications and vulnerabilities regarding PCB?
1
vote
1answer
64 views

Qubes OS or TENS for security? Is Qubes a good idea for a total beginner? [on hold]

What would be the most appropriate to use for as much security as possible? TENS looks very simple and straightforward, which is why I like it. However I have barely seen anyone suggesting it, I ...
2
votes
1answer
433 views

Is there a multi-layered DoS protection which can be tightly integrated with cloud hosting services?

I know that one can deny services (DoS) in any of the 7 layers of the OSI model and that in principle, a denial can be done by a single entity (human or machine) or from 2 or more such entities ("...
1
vote
2answers
110 views

If C uses shared libraries, is it possible to write a program that will modify the code that opens a file

If C uses shared libraries, is it possible to write a program that will modify the fopen function to execute a malicious code? How can the OS protect the user from this?
-1
votes
1answer
125 views

Explain how a BIOS/UEFI infection may compromise the security of the Operating System [closed]

Explain how a BIOS/UEFI infection may compromise the security of the Operating System.
3
votes
1answer
101 views

How to enforce on the OS level to recognise only certain keyboards

I give employees AES wireless keyboards. I would like to enforce the OS to only recognise the keyboard we supply. Is that possible? Assuming my employees OS are Windows 10, Ubuntu, Mac OSX. How could ...
0
votes
2answers
85 views

Risk of infecting the host OS if the guest OS is out of date [duplicate]

I'd like to know how much the risk changes if I don't update the software on the guest OS in a VM (applications and the guest operating system itself), compared to the risk in case it's all kept up-to-...
0
votes
3answers
68 views

Can Windows take data from other OS running on same hardware?

I am looking for the way how to set up the my environments as I need more than one OS at once. I care about privacy and securities the most, that is my priority. But I can't refuse Windows in full. ...
0
votes
0answers
62 views

Are running systems more susceptible than shut-down systems?

Suppose an attacker gained physical access to a device (a smartphone, for example). Would be be harder for the attacker to perform malicious actions on the phone when the phone is shut down? I’m ...
1
vote
2answers
61 views

Is it possible to restrict clipboard access to specific processes?

I'm not sure if somebody has implemented this before, but I think it'd be helpful if we can make certain clipboard messages only available to specific processes if they are not meant to be public. Is ...
1
vote
2answers
146 views

How protected mode in CPU is really implemented?

I know what is real and protected mode of cpu execution. But how CPU implements protected mode ? AFAIK cpu does everything what the program says it to do. Where is the protected mode behaviour ...
1
vote
3answers
185 views

Can BIOS/UEFI change OS code?

I know that the OS is the boss of programs (once OS is loaded). Is BIOS/UEFI the boss of the everything before OS is loaded? Can an OS be a sitting duck for any BIOS/UEFI related malware? In other ...
-1
votes
1answer
88 views

Best book for learning information security [closed]

What is the best book(s) on the market right now for mastering network security. In other words, what are the best materials out right now to learn hacking/protecting operating systems and software.
3
votes
2answers
192 views

How do hackers find vulnerabilities in closed source operating systems?

I'm not planning on hacking anything, but I'm just wondering how hackers find vulnerabilities in closed source operating systems such as Windows, since they don't know exactly what the code is doing? ...
-1
votes
1answer
90 views

Does Windows perform TCP and/or UDP port scans? [closed]

I want to know whether Windows Operating System does TCP/UDP port scans, and how often if it does? Thanks for your time.
1
vote
1answer
39 views

Can request from different software on same machine to a server be identified to be from same origin by tracking TLS handshakes?

If two different users visit an website from two different browsers via HTTPS, can they be identified by the server to be from same origin (same client machine) using information available from TLS ...
4
votes
2answers
188 views

When running shell scripts, is it safer to pass sensitive information using stdin or as a string option?

I'm building a number of automated scripts that will run within an encrypted environment (full disk encryption). Many commands in both Windows and *nix have two ways of entering sensitive information ...
1
vote
1answer
83 views

Preventing OS fingerprinting

I am working on a project and I need to hide my Linux OS from nmap or other OS identification tools. I read many articles about TCP/IP stack and changed many properties such as TTL and packet size but ...
2
votes
3answers
174 views

Is it possible to check if a USB's firmware is unmodified when plugged in?

Let's say I have some USB stick that I know and trust. I can examine the firmware and generate a checksum for it. Can I use this checksem to ensure that when the USB is next plugged in the firmware ...
4
votes
2answers
346 views

How can Linux be secure if it allows for open source contributions from the public?

From my brief understanding of Linux, developers from around the globe submit code to be included into a Linux update. It's then reviewed by security administrators. When approved, it's passed onto ...
11
votes
2answers
662 views

What are the criteria to choose a secure operating system?

Let's say I have a new and empty desktop or laptop computer and I want to decide which operating system to use. I plan to use this computer in a small home LAN with internet access. There are other ...
0
votes
0answers
67 views

Opened .dmg file, but didn't click on the application inside. Am I safe?

I downloaded an untrusted .dmg file (that I'm fairly sure was malicious) on macOS High Sierra and double-clicked it to open it, mounting it. I didn't double-click or open the actual application ...
0
votes
0answers
24 views

OS - Security Issues - Text Appearing - Performance Downgrade [duplicate]

First, I noticed PC performance downgrade, then random text started appearing in the different text fields (e.g. in Word when I was typing my text, half of page of some random text could appear or in ...
3
votes
2answers
105 views

Turing-completeness impact on system security

I always find in many papers discussing different kind of system security subject that the authors always trying to highlight the danger of some vulnerabilities by assuming an attacker, by exploiting ...
0
votes
1answer
92 views

Username visibility on network

People in the security world recommend changing the hostname of a computer to something that is not connected to the user. For example: "don't name it: MacbookPro Erica." This way IT staff and '...
1
vote
1answer
129 views

Install Metasploitable on PC

I am a teacher giving pentesting classes and I have a group of students that I have been teaching for 4 years now. I would like to make a little "hacking contest" in which there is a vulnerable ...
-1
votes
1answer
147 views

How can I protect my cloud processing from everyone … even those with root access?

How can I run my top secret code and data on any cloud hosting provider such that everyone even the hosting vendor with root is denied access ? ... a research proposal What is the current state of ...
0
votes
0answers
160 views

Are buffer overflows “obsolete” for all modern operating systems? [duplicate]

All modern operating systems have the following mechanisms enabled: ASLR: Stack starts at random address in memory. ROP-prevention: Shared libraries, e.g., DLLs, are loaded at random adresses ...
0
votes
0answers
54 views

Which logon method is better, PIV-based or HMAC-SHA1 challenge-response?

I use macOS 10.13.3 with PIV smart-cards support and Yubikey-4. The key provides not only PIV functionality but also Challenge-Response HMAC-SHA1. The OS can be configured to require the latter for ...
5
votes
1answer
167 views

Do any non-GNU/Linux display managers provide the same isolation as Wayland?

In discussions around the ongoing transition from X.org to Wayland, I regularly come across comments along the lines of "Linux security is not there yet". This refers to Wayland's promise of better (...
0
votes
1answer
110 views

how may I see if a .iso file is original (to avoid security troubles)?

I bought a license key for Windows Enterprise on eBay. The seller sent me a .iso file (Windows Enterprise cannot be downloaded from the Microsoft website directly). He told me he sent a version of ...
3
votes
1answer
217 views

Is it possible data which was generated with JavaScript in Google Chrome could exist in my Mac'sRAM?

I generated a private key using this website: https://www.stellar.org/account-viewer/#!/ I was supposed to write down the private key but I didn't and I lost it. I have since unplugged the internet ...
0
votes
3answers
147 views

Degree of safety of an unencrypted hard-drive and the general theory behind it

I always thought that everything on computer hard-disk is encrypted which can only be read(and understood) after passing my username and password to decrypt it. However, this is clearly not the case. ...
0
votes
0answers
47 views

What would be the best method to intercept process creation - Sandbox Design for Windows

I've been researching designing a sandbox for Windows that sandboxes web-browsers and smtp-pop programs. It's understood that these sort of programs cannot be trusted because of the potential they ...
8
votes
3answers
939 views

Why is accessing kernel memory a security risk?

A lot of the news regarding the Meltdown vulnerability is emphasizing that it allows programs to read memory that should be off limits to the user. While I understand that this should not happen, few ...
0
votes
0answers
41 views

How can third-party VPN applications tunnel all traffic of all processes on sandboxed operating systems?

How can (third-party) VPN applications tunnel all communication of all processes on sandboxed operating systems (such as OSX, etc)? Can they access the traffic of other apps and redirect them? Why is ...
13
votes
3answers
3k views

How do I hide the OS I am using from internet sites?

I am currently trying to mask the OS system I am using from the websites I visit. I'm doing this for an added layer of security. How would I go about hiding the OS from websites?
0
votes
1answer
124 views

Can we stop aimbots by introducing a “Protected Input Path” that ensures that mouse input really comes from the mouse?

When playing First Person Shooters online it's possible to stumble on opponents using aimbots. They are really a plague, and I was wondering whether there is anything that can be done to block them. ...
0
votes
5answers
191 views

Are software vulnerabilities limitless?

Ok. I believe no one has thought of this perspective, so here goes. I really don't understand why software need to be constantly patch for security when programmers do a good and complete job in the ...
1
vote
1answer
344 views

XSS attack on to get root priveleges

Is there any way of execute an xss attack inside a Linux machine to get to sudo mode? I know Linux is designed to separate the two types of user. I guess, i don't really know but I guess diferent ...
0
votes
1answer
59 views

Do privacy settings guarantee privacy?

In Windows 10 and many other proprietary operating systems, you can "seemingly" opt out of sending usage data. However, if the operating system is proprietary, how can we be sure that the OS is not ...
3
votes
2answers
4k views

What are the technical reasons for Tails requiring 2 USB sticks to install?

In the Tails documentation there is something I find strange. They say that creating a live USB stick that will contain the Tails OS must be done in a two step process. This is true of most platforms -...
45
votes
12answers
8k views

Would it be more secure or not if all computers in the network use the same operating system?

If all the computers use the same operating system, attackers only need to focus on one operating system, would it be unsafe?
12
votes
1answer
1k views

How can Process Hacker view my password manager's memory without administrative rights?

I use Process Hacker as a replacement for Window's Task Manager on my computer. While looking at the various information available about a selected process, I found the Memory tab. I figured this was ...
5
votes
1answer
2k views

How SS7 attack first enter into SS7 network?

I've read the following article about SS7 attack: https://berlin.ccc.de/~tobias/31c3-ss7-locate-track-manipulate.pdf I have some questions about this kind of attack: Is SS7 attack can be done ...
1
vote
2answers
228 views

Where am I most vulnerable when running Mac OS 10.6.8 Snow Leopard?

I have a challenge at work, one of our computers is running Mac OS 10.6.8 Snow Leopard. We have legacy software that's required to run the business, and so we have to have it online and on our network....
-8
votes
1answer
434 views

What is a directory in Kali Linux? [closed]

I watched many videos which are introduction videos to Kali Linux and all of them are talking about directories as if it is common sense, without explaining what is it's main function or why would we ...
7
votes
3answers
538 views

Is penetration testing becoming objectively “harder” as apps/protocols/operating systems become more secure?

I am currently enrolled in Offensive Security's "Penetration Testing with Kali" course, which is aimed at newcomers to penetration testing. The course is great, with many examples/exercises, and a ...
0
votes
2answers
445 views

Can HDD without OS contain active virus

I bought a Free-dos computer with 128gb SSD and 1 TB HDD some time ago, installed Windows 10 on the SSD. After months of usage by many people, I question the security of the computer, I see sudden cpu,...