Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [protection]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
56 views

Breaking the Key Management Cycle

I'm working on securing encryption keys in a software application. The common practice of storing encrypted keys in configuration files leads to the challenge of securely storing and accessing the ...
Quan Nguyen's user avatar
1 vote
0 answers
86 views

Ddos attack on the ISP [closed]

I need help in controlling my ISP from Ddos attacks it's happening for almost a month almost everyday bringing down the isp for 4 to 5 hours sometimes for the whole day anyone can help it guide what ...
Fiber beam 's user avatar
0 votes
2 answers
179 views

Mitigating vulnerabilities in audio libraries that cause physical damage

As I pointed out here in February 2022, people who gained brief direct or remote access to a machine can change the volume step or other things regarding sudden large changes to the sound volume (for ...
mYnDstrEAm's user avatar
0 votes
0 answers
247 views

Security by using USB NIC, USB to SATA adapter, etc

After reading libreboot FAQ i have some questions about USB 2.0 bus. There it is strongly recommended to use usb devices - USB network card and USB to SATA adapter (to connect HDD or SSD with it). The ...
ValoWaking's user avatar
-1 votes
1 answer
99 views

Recommended way to merge a security feature with the rest of the software? [closed]

I am searching for the best way to merge two parts of software together, so it would be as hard as possible to separate them again through reverse engineering. At the moment are both parts python, but ...
127 001's user avatar
  • 56
1 vote
2 answers
521 views

Why are @microsoft.com e-mail address not protected against spoofing

I got a lot of phishing attempts that appear to come from an actual microsoft.com e-mail address (see I need some verification about unusual login emails) I though this was odd, since I had hoped that ...
Hilmar's user avatar
  • 121
54 votes
11 answers
11k views

Why did they stop adding physical "write protect" mechanism?

Floppy disks used to have a physical means of preventing writing to them. No software could bypass that, no matter what. It had to be flicked physically and manually by a human being. Modern SD cards ...
Polnow's user avatar
  • 549
0 votes
2 answers
3k views

Local Machine certificate (certlm.msc) Import - Enable strong private key protection

We were trying key export from Windows Certificate Store as part of a certificate module development. The code is in C++ and mostly WinCrypt and openssl APIs are used. I installed a certificate that ...
Amal Jesudas's user avatar
0 votes
1 answer
2k views

UFW vs IpTables for web application security

I am trying to better understand measures that can be used to protect a web-application. I'm trying to determine which would be more effective, implementing a UFW or using IpTables. From my ...
Krellex's user avatar
  • 197
2 votes
1 answer
987 views

How can a typical researcher protect against VM escapes?

I read a similar question here on how large companies protect themselves and became intrigued about how this would transfer over to less significant operation (ie security researcher, small company, ...
belkarx's user avatar
  • 1,326
0 votes
0 answers
120 views

Implementing a protection for pie register vulnerability

I'm working on implementing a protection for a WordPress pie register plugin vulnerability being called: WordPress pie register 3.7.1.4 auth bypass / RCE I've conducted a research on the pie register ...
Amit Gabay's user avatar
0 votes
1 answer
580 views

Are there security risks to enabling 32-bit applications to run on Windows 10?

I'm installing an old game (32-bit) on my laptop (Windows 10 64-bit). This guide suggests enabling 32-bit applications to run with Internet Information Services (ISS), with the following steps:. In ...
renthus's user avatar
  • 23
0 votes
1 answer
210 views

Creating a unique password for each device/unit of the same product

We are currently working on an IoT product & having a hard time coming up with a strategy to create a unique password for each device/unit. I do understand that password based on a function of { ...
Baranikumar Venkatesan's user avatar
0 votes
0 answers
142 views

Would this way of going about protecting users' data in use be secure, or overkill?

I've got information security as high as possible with my Flutter app so far with encryption and proper storage for data at rest as well as data in transit. With this question I'm only aiming for ...
RobbB's user avatar
  • 261
0 votes
2 answers
959 views

Any way to open a maybe malicious website without having to use a VM?

Sometimes there are websites I'd like to checkout but I have the feeling that the site may have something malicious in it, the easiest way would be to just load my VM and opening the site there, but ...
Simon's user avatar
  • 11
1 vote
0 answers
199 views

SQL Injection Prevention WAF Generic Rule for Wordpress

We are trying to develop a GENERIC WAF Rule for SQLI Prevention for WordPress-based websites that can provide some level of effectiveness with a very low probability of having false positives. From my ...
ankk98's user avatar
  • 111
-1 votes
1 answer
165 views

Is it fine to save contact information on a ssh sever and is it secure?

My mom wants to find a way to store information securely and host it remotely and wants to host our own mini-server on a Raspberry Pi that'll have contact information of the customers. My sister said ...
thecomplexer's user avatar
3 votes
1 answer
4k views

CSRF double submit cookie pattern questions

I have some questions about CSRF protection, specifically about the "double submit cookie" pattern. What I have learned so far, is that this pattern has some weaknesses. But we can add some ...
Night's user avatar
  • 31
1 vote
1 answer
329 views

Blocking reflected XSS on common web servers

How is it possible to block reflected XSS on common web servers, such as IIS, Apache HTTP Server and Nginx? The Content-Security-Policy: reflected-xss filter doesn't work on latest Chrome and X-XSS-...
jwalker's user avatar
  • 33
0 votes
3 answers
919 views

Password protect an internal hard drive in a shared Windows PC where all users are administrators

It is a laptop shared by my lab. Today I use it, another day one of my student takes it on a field trip. I have 3 hard drives. I wanna leave 2 hard drives for my students and 1 for myself. On my hard ...
Millemila's user avatar
  • 103
3 votes
0 answers
224 views

Can the glue of glitter-hot-glue sticks be used to provide evidence of electronics-hardware tampering?

I've been researching low-cost, yet strong, tamper-evident mechanisms, and purchased some low-cost glitter-hot-glue sticks as part of this research. The Amazon page advertising the sticks, seems to ...
Mark Fernandes's user avatar
0 votes
3 answers
316 views

Ransomware/Virus/Malware - modern protection(s)

Just found this on GitHub: https://github.com/gnxbr/Fully-Undetectable-Techniques/tree/main/minizinh0-FUD I can imagine similar ransomware, malware, viruses exist. AV is useless? Is only Behavior ...
dev's user avatar
  • 997
3 votes
2 answers
840 views

How can I protect data in SQL tables?

Inspired by the many data leaks where whole databases/tables with personal user information were leaked, what are best practices to protect those assets? I‘m especially concerned if someone was able ...
dmuensterer's user avatar
  • 1,184
2 votes
2 answers
408 views

What steps can I take if I know that someone [Government, Special agents,..etc] is spying on me?

If I know someone is trying to spy on me, and they are tracking me both online and in the physical worls, what steps can I take to neutralize the risk? Keep in mind that I'm a normal person with ...
MaskedUser's user avatar
0 votes
1 answer
3k views

Can malicious applications running inside a docker container still be harmful? [duplicate]

I am very new to docker (and don't usually program at a 'systems' level). I will be working on an open source project with complete strangers over the web over the next couple of months. I trust them, ...
dss's user avatar
  • 103
2 votes
3 answers
5k views

Protecting firmware .bin from reverse engineering

I would like to protect my .bin ( squash fs ) file after compiling process in order to avoid reverse engineering techniques ( i.e. binwalk could simply unsquash my .bin firmware and see all the file ...
DDBE's user avatar
  • 161
1 vote
1 answer
268 views

Password protected wall

I'm currently building a website where you have an account and can do "dangerous" things with it. I want to password-protect these things, so the user has to type their password, if they ...
Myzel394's user avatar
  • 142
23 votes
8 answers
8k views

Protect API from being tampered?

I'm building an API with websocket that serializes data through JSON. The App itself is a chat application. I came up with the following structure to send my data: {date: '2020-05-31', time: '14:28:...
VladiC4T's user avatar
  • 389
1 vote
3 answers
216 views

How to stop malicious WIFI from infecting my computer?

Was reading this: How to check if a Wi-Fi network is safe to connect to? When I came across some comments I can redirect you to other pages without your interaction. Install key loggers. Heck if your ...
user1608487's user avatar
9 votes
2 answers
2k views

Can a malicious WIFI network force a connection

Say I enter a place with public WIFI. Of course, I would not connect to the network since I know it's risky, but I do have my computer turned on. Can an attacker know my computer is there and force a ...
user1608487's user avatar
2 votes
2 answers
2k views

How to protect web server private keys on Ubuntu with Nginx without exposing any plain text credentials?

I'm developing a set of internal websites and services for a customer who has high levels of bureaucracy and strict formal rules about many things, one of them being "not storing passwords in plain ...
JustAMartin's user avatar
0 votes
1 answer
200 views

WiFi Router, current status of security options?

I'm about to buy a new WiFi router tomorrow (probably) & I'm wondering what kind of security features I should choose (Like: AES, WPA2, DMZ, TKIP, SPI, ...) What is the current status of what is ...
Sebastian Norr's user avatar
1 vote
1 answer
163 views

How to detect use of personal NAS devices from corporate machines?

We have an issue where people are taking laptops home and connecting them to their personal home networks in order to backup corporate data to their private NAS devices. From a DLP standpoint we have ...
maybezoidberg's user avatar
2 votes
1 answer
610 views

Tamper Protected VS. Tamper Proof for write-protected memories

I read in the answer here by Marcus that ROM is Tamper-proof. What is the difference between tamper-proof, tamper protected and tamper-resistant? Now, there are some re-writable memory (eg. eNVM) ...
Lavender's user avatar
  • 259
2 votes
1 answer
1k views

Best practice to secure hard-drive in case of theft or loss or unauthorized access?

Scenario: a person owns and used only a laptop (or PC) and on its hard drive is stored sensitive information, in addition, in browsers the logged-in sessions to gmail, facebook, server, etc...etc.. ...
T.Todua's user avatar
  • 2,727
2 votes
1 answer
404 views

Does the HTML password field include any protection against XHR/AJAX exfiltration?

In HTML when we describe a certain field as a password field is it somehow secured against sending out the data via XHR/AJAX/similar technologies? This is relevant in case we have to deal with script ...
Sir Muffington's user avatar
1 vote
0 answers
940 views

How does Sony's MagicGate technology work?

I own a Memory Stick Pro Duo Mark-II (MagicGate compatible). It is used as a storage medium in my Playstation Portable. Upon searching on Google for the same, I only found a wikipedia page of it, ...
Vasu Deo.S's user avatar
3 votes
0 answers
203 views

Add another layer of security in accounts except phone number

I recently came across articles where an attacker contacted a telecom company and got them to change the sim card registered with the target's phone number. After doing so, he was able to reset the ...
coderDude's user avatar
  • 131
0 votes
0 answers
156 views

How to protect from being the spoofed number on caller ID?

The question How to protect from caller-id spoofing? focuses on how to protect oneself from incoming calls with spoofed caller ID information. This question is about how to protect oneself when ...
WBT's user avatar
  • 556
0 votes
1 answer
3k views

How a computer can infect others devices on the same network?

As I said in this post, my father is very careless about online security. Besides what I already said on that post, yesterday I saw in his android that the permission to install of third-party apps ...
Mycroft's user avatar
  • 768
2 votes
3 answers
2k views

How to prevent an infected PC from infecting other machines on the same network? [duplicate]

My father is pretty careless about his security and this is not new. He even said to me that in the last year he used Tor to access some links just for curiosity because he read about it in some news ...
Mycroft's user avatar
  • 768
0 votes
0 answers
106 views

Protecting/Crypting an external storage

We have an camera with sd card in which it records. AFAIK its software, recording parts etc., cannot be stepped in. We wish a mechanism/methodology that whenever it is plugged into usb socket of a ...
Soner from The Ottoman Empire's user avatar
1 vote
1 answer
284 views

100% detectable backdoor attacks on network

Every article I have read on backdoor attack prevention says pretty much this: Protecting against them may be difficult. I am tired of reading how it can be ~difficult~ to protect against. ...
Lance's user avatar
  • 632
41 votes
4 answers
14k views

How to protect printers from being hacked

Recently it got to my attention that someone has hacked around 50,000 printers and used them to print the message they wanted to. (link) As someone who doesn't have a lot of knowledge about networks ...
aMJay's user avatar
  • 3,685
2 votes
0 answers
74 views

Protecting website from content theft [duplicate]

I have a website called http://example.com. there is another website called http://example1.com it has the same content as for my website. If I upload file on my website like http://example.com/test....
iLinux85's user avatar
  • 121
0 votes
2 answers
205 views

What is the thought process behind, Endpoint protection is better than firewalls?

I keep reading about, and seeing people post and recommend in the oddest places, that strong endpoint protection is better than having a in-service/supported/receiving security updates firewall. What ...
Matt's user avatar
  • 57
2 votes
3 answers
3k views

How to detect when one or more devices in my local network have become DDOS attack nodes?

I have a home network, big family, with around 20 devices on it at any given time. It seems like every year or so, some device gets a virus or a security flaw is revealed, and the device starts ...
Nicholas DiPiazza's user avatar
2 votes
1 answer
253 views

When to logout a user? [closed]

I am working on a security project which gives an admin control over certain devices in a company. When using the web-based product, say the user switches context and opens another tab or skips to ...
AmpleUX's user avatar
  • 23
4 votes
2 answers
3k views

How does Google protect against scraping?

I'm trying to implement security against scraping on my website to prevent basic scraping techniques. Google seems to have a very good protection against scraping, but it's so good that I'm unable to ...
ShellRox's user avatar
  • 161
0 votes
1 answer
630 views

Is hiding my Java desktop app inside a VM the best way to protect my Java source code?

I need to distribute a Java desktop app to the user. I am looking at different ways to protect my source code from reverse engineering. One method is to distribute a Virtual Machine (says Linux) ...
Ken Po's user avatar
  • 1