Questions tagged [protection]
The protection tag has no usage guidance.
166
questions
-1
votes
0answers
32 views
Outlook app credential protection measures
I was a bit grumpy after discovering that git on Windows just stored credentials to my workplace repo in the Windows credential manager where it can be read by any other application I run. Having ...
1
vote
1answer
56 views
Blocking reflected XSS on common web servers
How is it possible to block reflected XSS on common web servers, such as IIS, Apache HTTP Server and Nginx?
The Content-Security-Policy: reflected-xss filter doesn't work on latest Chrome and X-XSS-...
0
votes
3answers
92 views
Password protect an internal hard drive in a shared Windows PC where all users are administrators
It is a laptop shared by my lab. Today I use it, another day one of my student takes it on a field trip. I have 3 hard drives. I wanna leave 2 hard drives for my students and 1 for myself. On my hard ...
4
votes
0answers
106 views
Can the glue of glitter-hot-glue sticks be used to provide evidence of electronics-hardware tampering?
I've been researching low-cost, yet strong, tamper-evident mechanisms, and purchased some low-cost glitter-hot-glue sticks as part of this research. The Amazon page advertising the sticks, seems to ...
0
votes
2answers
150 views
Ransomware/Virus/Malware - modern protection(s)
Just found this on GitHub:
https://github.com/gnxbr/Fully-Undetectable-Techniques/tree/main/minizinh0-FUD
I can imagine similar ransomware, malware, viruses exist.
AV is useless?
Is only Behavior ...
3
votes
2answers
149 views
How can I protect data in SQL tables?
Inspired by the many data leaks where whole databases/tables with personal user information were leaked, what are best practices to protect those assets?
I‘m especially concerned if someone was able ...
2
votes
2answers
291 views
What steps can I take if I know that someone [Government, Special agents,..etc] is spying on me?
If I know someone is trying to spy on me, and they are tracking me both online and in the physical worls, what steps can I take to neutralize the risk? Keep in mind that I'm a normal person with ...
0
votes
1answer
182 views
Can malicious applications running inside a docker container still be harmful? [duplicate]
I am very new to docker (and don't usually program at a 'systems' level). I will be working on an open source project with complete strangers over the web over the next couple of months. I trust them, ...
2
votes
3answers
4k views
Protecting firmware .bin from reverse engineering
I would like to protect my .bin ( squash fs ) file after compiling process in order to avoid reverse engineering techniques ( i.e. binwalk could simply unsquash my .bin firmware and see all the file ...
1
vote
1answer
82 views
Password protected wall
I'm currently building a website where you have an account and can do "dangerous" things with it. I want to password-protect these things, so the user has to type their password, if they ...
22
votes
8answers
7k views
Protect API from being tampered?
I'm building an API with websocket that serializes data through JSON. The App itself is a chat application. I came up with the following structure to send my data:
{date: '2020-05-31', time: '14:28:...
1
vote
3answers
91 views
How to stop malicious WIFI from infecting my computer?
Was reading this: How to check if a Wi-Fi network is safe to connect to?
When I came across some comments
I can redirect you to other pages without your interaction. Install key loggers. Heck if your ...
9
votes
2answers
2k views
Can a malicious WIFI network force a connection
Say I enter a place with public WIFI. Of course, I would not connect to the network since I know it's risky, but I do have my computer turned on. Can an attacker know my computer is there and force a ...
2
votes
2answers
228 views
How to protect web server private keys on Ubuntu with Nginx without exposing any plain text credentials?
I'm developing a set of internal websites and services for a customer who has high levels of bureaucracy and strict formal rules about many things, one of them being "not storing passwords in plain ...
0
votes
1answer
104 views
WiFi Router, current status of security options?
I'm about to buy a new WiFi router tomorrow (probably) & I'm wondering what kind of security features I should choose (Like: AES, WPA2, DMZ, TKIP, SPI, ...)
What is the current status of what is ...
1
vote
1answer
88 views
How to detect use of personal NAS devices from corporate machines?
We have an issue where people are taking laptops home and connecting them to their personal home networks in order to backup corporate data to their private NAS devices. From a DLP standpoint we have ...
2
votes
1answer
105 views
Tamper Protected VS. Tamper Proof for write-protected memories
I read in the answer here by Marcus that ROM is Tamper-proof.
What is the difference between tamper-proof, tamper protected and tamper-resistant?
Now, there are some re-writable memory (eg. eNVM) ...
2
votes
1answer
136 views
Best practice to secure hard-drive in case of theft or loss or unauthorized access?
Scenario:
a person owns and used only a laptop (or PC) and on its hard drive is stored sensitive information, in addition, in browsers the logged-in sessions to gmail, facebook, server, etc...etc..
...
1
vote
1answer
79 views
Does the HTML password field include any protection against XHR/AJAX exfiltration?
In HTML when we describe a certain field as a password field is it somehow secured against sending out the data via XHR/AJAX/similar technologies?
This is relevant in case we have to deal with script ...
1
vote
0answers
492 views
How does Sony's MagicGate technology work?
I own a Memory Stick Pro Duo Mark-II (MagicGate compatible). It is used as a storage medium in my Playstation Portable.
Upon searching on Google for the same, I only found a wikipedia page of it, ...
1
vote
0answers
87 views
Defense Evasion - Unhooking Windows API
Since most of EDR vendor hook userland APIs, Is Unhooking Windows API or DLL Unhooking is the best way to bypass EDR Protection?
3
votes
0answers
127 views
Add another layer of security in accounts except phone number
I recently came across articles where an attacker contacted a telecom company and got them to change the sim card registered with the target's phone number. After doing so, he was able to reset the ...
0
votes
0answers
75 views
How to protect from being the spoofed number on caller ID?
The question How to protect from caller-id spoofing? focuses on how to protect oneself from incoming calls with spoofed caller ID information.
This question is about how to protect oneself when ...
-8
votes
1answer
125 views
How can you safeguard yourself, when banks and government offices know your (1) full name (2) birth date (3) address and (4) signature? [closed]
Assume that it's impossible to dodge or forswear your government and corporations like credit card companies and banks from knowing your (1) full name (2) birth date (3) address (4) and signature. ...
0
votes
1answer
2k views
How a computer can infect others devices on the same network?
As I said in this post, my father is very careless about online security. Besides what I already said on that post, yesterday I saw in his android that the permission to install of third-party apps ...
2
votes
3answers
919 views
How to prevent an infected PC from infecting other machines on the same network? [duplicate]
My father is pretty careless about his security and this is not new. He even said to me that in the last year he used Tor to access some links just for curiosity because he read about it in some news ...
0
votes
0answers
41 views
Protecting/Crypting an external storage
We have an camera with sd card in which it records. AFAIK its software, recording parts etc., cannot be stepped in. We wish a mechanism/methodology that whenever it is plugged into usb socket of a ...
1
vote
1answer
137 views
100% detectable backdoor attacks on network
Every article I have read on backdoor attack prevention says pretty much this:
Protecting against them may be difficult.
I am tired of reading how it can be ~difficult~ to protect against. ...
40
votes
4answers
12k views
How to protect printers from being hacked
Recently it got to my attention that someone has hacked around 50,000 printers and used them to print the message they wanted to. (link)
As someone who doesn't have a lot of knowledge about networks ...
2
votes
0answers
64 views
Protecting website from content theft [duplicate]
I have a website called http://example.com. there is another website called http://example1.com it has the same content as for my website.
If I upload file on my website like http://example.com/test....
0
votes
2answers
117 views
What is the thought process behind, Endpoint protection is better than firewalls?
I keep reading about, and seeing people post and recommend in the oddest places, that strong endpoint protection is better than having a in-service/supported/receiving security updates firewall.
What ...
1
vote
3answers
1k views
How to detect when one or more devices in my local network have become DDOS attack nodes?
I have a home network, big family, with around 20 devices on it at any given time. It seems like every year or so, some device gets a virus or a security flaw is revealed, and the device starts ...
2
votes
1answer
111 views
When to logout a user? [closed]
I am working on a security project which gives an admin control over certain devices in a company.
When using the web-based product, say the user switches context and opens another tab or skips to ...
4
votes
2answers
2k views
How does Google protect against scraping?
I'm trying to implement security against scraping on my website to prevent basic scraping techniques.
Google seems to have a very good protection against scraping, but it's so good that I'm unable to ...
0
votes
1answer
424 views
Is hiding my Java desktop app inside a VM the best way to protect my Java source code?
I need to distribute a Java desktop app to the user. I am looking at different ways to protect my source code from reverse engineering.
One method is to distribute a Virtual Machine (says Linux) ...
1
vote
3answers
179 views
dongle development
I am to provide a hardware+software solution. The software is an application in c++ running on windows. The hardware is motherboard+processor+disk+memory. In order to protect the solution, I need to ...
2
votes
5answers
6k views
I have to write down credit card information on paper and send it. How can I minimize my risk?
I am filling out a form to set up a recurring payment with a local government building. The form requests that I put my credit card number, expiration date, and CVV number, which I'm a little hesitant ...
0
votes
0answers
56 views
VoIP/SIP Secured Real Time Protocol (SRTP): Which key length is appropriate nowadays?
Many critics say that current key lengths for SRTP-encryption in popular phone apps like Linphone or CSipSimple are not sufficient anymore.
What should be a recommended key length nowadays?
2
votes
2answers
1k views
Protecting Python source code on physical product?
How would you protect Python source code on a physical product (like a IoT device), which comes with Ubuntu installed on a mini-PC running Python code?
Few methods we thought about:
Compiling the ...
2
votes
1answer
1k views
AngularJS Sanitize function vs. server-side output encoding
I mainly audit web applications and provide the companies with security countermeasures and recommendations. Currently, I have an issue with giving a correct recommendation when it comes to AngularJS ...
-1
votes
1answer
1k views
Heads firmware and OS is more secure than Whonix, Qubes or Tails?
Developers stated Heads combines physical hardening and flash security features with custom Coreboot firmware and a Linux boot loader in ROM. This moves the root of trust into the write-protected ROM ...
0
votes
2answers
134 views
connect to another ip address remotely via tunnel can be traced? [duplicate]
if I connect through the tunnel to my friend's friend work LAN, will use only his LAN (IP) and will not have my own internet at all, force entry connection and getting their internet to host my ...
8
votes
5answers
2k views
How to protect myself online from the government? [closed]
I need something trusted and secure. I need to make “onion layers security” with the most secure and hard to hack/crack software.
How to protect yourself from the government on the internet?
I’m ...
1
vote
1answer
293 views
Accessing SQL database from Java Android app. How do I store the SQL database details so they are safe?
So I am developing a Java app which is going to be free and would preferably not require a sign up process. I cannot seem to think of an idea to store the log in details safely.
I have thought of ...
1
vote
1answer
71 views
How to secure mine as well as other people' passwords on the computer used by my receptionist?
My friend runs an office in which the computer used by the receptionist is used by so many people including my friend and others (so many people come there for job recruitment) who frequently save ...
1
vote
5answers
386 views
Why would I protect my computer?
I see a lot of posts about how to protect your precious computer, but what is it that we are trying to protect?
Note: Before you flame me, I'm not trying to ask a stupid question. I just see many not ...
5
votes
0answers
156 views
How do I protect my old devices against BlueBorne? [duplicate]
I have a bunch of Android devices for which there either is no patch to protect them against the BlueBorne exploit or I cannot install a patch without losing all the data.
The most obvious thing ...
0
votes
1answer
33 views
Medicare card & SSN - What can be done to prevent unauthorized SSN disclosure?
Those of us on Medicare realize that the card displays our SSNs just like the Social Security card.
There was the case of the guy from LifeLock who published his, promising that his company would ...
0
votes
0answers
65 views
Clarification regarding the “nosniff” content type protection
According to my understanding I should add the nosniff header on each download dialog: X-Content-Type-Options: nosniff
How should I protect an upload dialogs?
Will the header X-Content-Type-Options: ...
4
votes
2answers
193 views
How big a vulnerability is phone number theft and how to protect against this? [closed]
This interesting article in the NYT discusses how attackers are stealing phone numbers of their intended victims by phoning up Verizon, AT&T, etc., giving them a sob story about an emergency and ...
