Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [operating-systems]

The operating system is the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardware knowledge. Questions on the topic of operating system security should use this tag; you may also ...

3
votes
1answer
74 views

How to enforce on the OS level to recognise only certain keyboards

I give employees AES wireless keyboards. I would like to enforce the OS to only recognise the keyboard we supply. Is that possible? Assuming my employees OS are Windows 10, Ubuntu, Mac OSX. How could ...
-1
votes
0answers
22 views

Secure operating system (qubes / tails) for everyday use [closed]

What do you think about security in OS's like Qubes or Tails. If I would use VPN on my normal OS like Windows or standard Linux distributions then should I consider it also on Qubes or Tails? And are ...
0
votes
2answers
81 views

Risk of infecting the host OS if the guest OS is out of date [duplicate]

I'd like to know how much the risk changes if I don't update the software on the guest OS in a VM (applications and the guest operating system itself), compared to the risk in case it's all kept up-to-...
0
votes
3answers
67 views

Can Windows take data from other OS running on same hardware?

I am looking for the way how to set up the my environments as I need more than one OS at once. I care about privacy and securities the most, that is my priority. But I can't refuse Windows in full. ...
0
votes
0answers
30 views

Are running systems more susceptible than shut-down systems?

Suppose an attacker gained physical access to a device (a smartphone, for example). Would be be harder for the attacker to perform malicious actions on the phone when the phone is shut down? I’m ...
1
vote
2answers
40 views

Is it possible to restrict clipboard access to specific processes?

I'm not sure if somebody has implemented this before, but I think it'd be helpful if we can make certain clipboard messages only available to specific processes if they are not meant to be public. Is ...
1
vote
2answers
95 views

How protected mode in CPU is really implemented?

I know what is real and protected mode of cpu execution. But how CPU implements protected mode ? AFAIK cpu does everything what the program says it to do. Where is the protected mode behaviour ...
1
vote
3answers
158 views

Can BIOS/UEFI change OS code?

I know that the OS is the boss of programs (once OS is loaded). Is BIOS/UEFI the boss of the everything before OS is loaded? Can an OS be a sitting duck for any BIOS/UEFI related malware? In other ...
-1
votes
1answer
81 views

Best book for learning information security [closed]

What is the best book(s) on the market right now for mastering network security. In other words, what are the best materials out right now to learn hacking/protecting operating systems and software.
2
votes
2answers
168 views

How do hackers find vulnerabilities in closed source operating systems?

I'm not planning on hacking anything, but I'm just wondering how hackers find vulnerabilities in closed source operating systems such as Windows, since they don't know exactly what the code is doing? ...
-1
votes
1answer
85 views

Does Windows perform TCP and/or UDP port scans? [closed]

I want to know whether Windows Operating System does TCP/UDP port scans, and how often if it does? Thanks for your time.
1
vote
1answer
38 views

Can request from different software on same machine to a server be identified to be from same origin by tracking TLS handshakes?

If two different users visit an website from two different browsers via HTTPS, can they be identified by the server to be from same origin (same client machine) using information available from TLS ...
4
votes
2answers
155 views

When running shell scripts, is it safer to pass sensitive information using stdin or as a string option?

I'm building a number of automated scripts that will run within an encrypted environment (full disk encryption). Many commands in both Windows and *nix have two ways of entering sensitive information ...
0
votes
1answer
72 views

Preventing OS fingerprinting

I am working on a project and I need to hide my Linux OS from nmap or other OS identification tools. I read many articles about TCP/IP stack and changed many properties such as TTL and packet size but ...
2
votes
3answers
144 views

Is it possible to check if a USB's firmware is unmodified when plugged in?

Let's say I have some USB stick that I know and trust. I can examine the firmware and generate a checksum for it. Can I use this checksem to ensure that when the USB is next plugged in the firmware ...
4
votes
2answers
342 views

How can Linux be secure if it allows for open source contributions from the public?

From my brief understanding of Linux, developers from around the globe submit code to be included into a Linux update. It's then reviewed by security administrators. When approved, it's passed onto ...
11
votes
2answers
528 views

What are the criteria to choose a secure operating system?

Let's say I have a new and empty desktop or laptop computer and I want to decide which operating system to use. I plan to use this computer in a small home LAN with internet access. There are other ...
0
votes
0answers
66 views

Opened .dmg file, but didn't click on the application inside. Am I safe?

I downloaded an untrusted .dmg file (that I'm fairly sure was malicious) on macOS High Sierra and double-clicked it to open it, mounting it. I didn't double-click or open the actual application ...
0
votes
0answers
24 views

OS - Security Issues - Text Appearing - Performance Downgrade [duplicate]

First, I noticed PC performance downgrade, then random text started appearing in the different text fields (e.g. in Word when I was typing my text, half of page of some random text could appear or in ...
3
votes
2answers
79 views

Turing-completeness impact on system security

I always find in many papers discussing different kind of system security subject that the authors always trying to highlight the danger of some vulnerabilities by assuming an attacker, by exploiting ...
1
vote
1answer
92 views

Username visibility on network

People in the security world recommend changing the hostname of a computer to something that is not connected to the user. For example: "don't name it: MacbookPro Erica." This way IT staff and '...
1
vote
1answer
63 views

Install Metasploitable on External Device

so I am a teacher giving pentesting classes. And I have a group of students that I have been teaching for 4 years now. So I would like to make a little "hacking contest" in which there is a vulnerable ...
-1
votes
1answer
144 views

How can I protect my cloud processing from everyone … even those with root access?

How can I run my top secret code and data on any cloud hosting provider such that everyone even the hosting vendor with root is denied access ? ... a research proposal What is the current state of ...
0
votes
0answers
118 views

Are buffer overflows “obsolete” for all modern operating systems? [duplicate]

All modern operating systems have the following mechanisms enabled: ASLR: Stack starts at random address in memory. ROP-prevention: Shared libraries, e.g., DLLs, are loaded at random adresses ...
0
votes
0answers
47 views

Which logon method is better, PIV-based or HMAC-SHA1 challenge-response?

I use macOS 10.13.3 with PIV smart-cards support and Yubikey-4. The key provides not only PIV functionality but also Challenge-Response HMAC-SHA1. The OS can be configured to require the latter for ...
5
votes
1answer
148 views

Do any non-GNU/Linux display managers provide the same isolation as Wayland?

In discussions around the ongoing transition from X.org to Wayland, I regularly come across comments along the lines of "Linux security is not there yet". This refers to Wayland's promise of better (...
0
votes
1answer
107 views

how may I see if a .iso file is original (to avoid security troubles)?

I bought a license key for Windows Enterprise on eBay. The seller sent me a .iso file (Windows Enterprise cannot be downloaded from the Microsoft website directly). He told me he sent a version of ...
3
votes
1answer
217 views

Is it possible data which was generated with JavaScript in Google Chrome could exist in my Mac'sRAM?

I generated a private key using this website: https://www.stellar.org/account-viewer/#!/ I was supposed to write down the private key but I didn't and I lost it. I have since unplugged the internet ...
0
votes
3answers
108 views

Degree of safety of an unencrypted hard-drive and the general theory behind it

I always thought that everything on computer hard-disk is encrypted which can only be read(and understood) after passing my username and password to decrypt it. However, this is clearly not the case. ...
0
votes
0answers
44 views

What would be the best method to intercept process creation - Sandbox Design for Windows

I've been researching designing a sandbox for Windows that sandboxes web-browsers and smtp-pop programs. It's understood that these sort of programs cannot be trusted because of the potential they ...
8
votes
3answers
782 views

Why is accessing kernel memory a security risk?

A lot of the news regarding the Meltdown vulnerability is emphasizing that it allows programs to read memory that should be off limits to the user. While I understand that this should not happen, few ...
0
votes
0answers
41 views

How can third-party VPN applications tunnel all traffic of all processes on sandboxed operating systems?

How can (third-party) VPN applications tunnel all communication of all processes on sandboxed operating systems (such as OSX, etc)? Can they access the traffic of other apps and redirect them? Why is ...
13
votes
3answers
2k views

How do I hide the OS I am using from internet sites?

I am currently trying to mask the OS system I am using from the websites I visit. I'm doing this for an added layer of security. How would I go about hiding the OS from websites?
0
votes
1answer
116 views

Can we stop aimbots by introducing a “Protected Input Path” that ensures that mouse input really comes from the mouse?

When playing First Person Shooters online it's possible to stumble on opponents using aimbots. They are really a plague, and I was wondering whether there is anything that can be done to block them. ...
0
votes
5answers
188 views

Are software vulnerabilities limitless?

Ok. I believe no one has thought of this perspective, so here goes. I really don't understand why software need to be constantly patch for security when programmers do a good and complete job in the ...
1
vote
1answer
313 views

XSS attack on to get root priveleges

Is there any way of execute an xss attack inside a Linux machine to get to sudo mode? I know Linux is designed to separate the two types of user. I guess, i don't really know but I guess diferent ...
0
votes
1answer
59 views

Do privacy settings guarantee privacy?

In Windows 10 and many other proprietary operating systems, you can "seemingly" opt out of sending usage data. However, if the operating system is proprietary, how can we be sure that the OS is not ...
3
votes
2answers
3k views

What are the technical reasons for Tails requiring 2 USB sticks to install?

In the Tails documentation there is something I find strange. They say that creating a live USB stick that will contain the Tails OS must be done in a two step process. This is true of most platforms -...
45
votes
12answers
8k views

Would it be more secure or not if all computers in the network use the same operating system?

If all the computers use the same operating system, attackers only need to focus on one operating system, would it be unsafe?
12
votes
1answer
925 views

How can Process Hacker view my password manager's memory without administrative rights?

I use Process Hacker as a replacement for Window's Task Manager on my computer. While looking at the various information available about a selected process, I found the Memory tab. I figured this was ...
5
votes
1answer
2k views

How SS7 attack first enter into SS7 network?

I've read the following article about SS7 attack: https://berlin.ccc.de/~tobias/31c3-ss7-locate-track-manipulate.pdf I have some questions about this kind of attack: Is SS7 attack can be done ...
1
vote
2answers
207 views

Where am I most vulnerable when running Mac OS 10.6.8 Snow Leopard?

I have a challenge at work, one of our computers is running Mac OS 10.6.8 Snow Leopard. We have legacy software that's required to run the business, and so we have to have it online and on our network....
-8
votes
1answer
405 views

What is a directory in Kali Linux? [closed]

I watched many videos which are introduction videos to Kali Linux and all of them are talking about directories as if it is common sense, without explaining what is it's main function or why would we ...
7
votes
3answers
520 views

Is penetration testing becoming objectively “harder” as apps/protocols/operating systems become more secure?

I am currently enrolled in Offensive Security's "Penetration Testing with Kali" course, which is aimed at newcomers to penetration testing. The course is great, with many examples/exercises, and a ...
0
votes
2answers
402 views

Can HDD without OS contain active virus

I bought a Free-dos computer with 128gb SSD and 1 TB HDD some time ago, installed Windows 10 on the SSD. After months of usage by many people, I question the security of the computer, I see sudden cpu,...
1
vote
1answer
75 views

How to determine if an unexpected behavior is due to software bugs or malware?

Not sure if this is a subjective question. Suppose I encountered an unexpected behavior in the operating system, e.g. random shutdowns, rendering issues, software crashes etc: I know a lot of known ...
1
vote
2answers
769 views

Is Whonix 100% Anonymous?

I have imported and run Whonix - Anonymous Operating System appliance in my VirtualBox. I am seriously excited about anonymity that given by this OS. How can I trust and verify the anonymous state of ...
2
votes
0answers
781 views

system(“/bin/sh”) exits without waiting for user input [OverTheWire narnia0 challenge] [closed]

Problem : Why does system("/bin/sh") process exits immediately instead of waiting for user input? Code : int main(){ long val=0x41414141; char buf[20]; printf("Correct val's value from ...
3
votes
1answer
482 views

Are there specific sub-fields of Hacking? [closed]

For example, network hacking, operating system hacking, website hacking, malware deployment. Pardon my inexperience, but these seem like they require very specific skill-sets and labelling them all ...
3
votes
5answers
442 views

Designing a sandbox or how to “perfectly” isolate an app?

I have been thinking on how an app could be "perfectly" isolated from the rest of the system. Now I know we will never achieve "perfect" in practice, but in theory, how could one go about it? I put ...