Questions tagged [protection]
The protection tag has no usage guidance.
0
votes
1answer
127 views
How a computer can infect others devices on the same network?
As I said in this post, my father is very careless about online security. Besides what I already said on that post, yesterday I saw in his android that the permission to install of third-party apps ...
2
votes
3answers
132 views
How to prevent an infected PC from infecting other machines on the same network? [duplicate]
My father is pretty careless about his security and this is not new. He even said to me that in the last year he used Tor to access some links just for curiosity because he read about it in some news ...
0
votes
0answers
21 views
Is this type of attack possible? [duplicate]
I'm wondering if it is possible for an attacker to spoof his IP address to look like mine. For example, in Facebook's connection logs, would it be possible for an attacker to log into my account while ...
0
votes
0answers
37 views
Protecting/Crypting an external storage
We have an camera with sd card in which it records. AFAIK its software, recording parts etc., cannot be stepped in. We wish a mechanism/methodology that whenever it is plugged into usb socket of a ...
1
vote
1answer
88 views
100% detectable backdoor attacks on network
Every article I have read on backdoor attack prevention says pretty much this:
Protecting against them may be difficult.
I am tired of reading how it can be ~difficult~ to protect against. ...
40
votes
4answers
8k views
How to protect printers from being hacked
Recently it got to my attention that someone has hacked around 50,000 printers and used them to print the message they wanted to. (link)
As someone who doesn't have a lot of knowledge about networks ...
2
votes
0answers
50 views
Protecting website from content theft [duplicate]
I have a website called http://example.com. there is another website called http://example1.com it has the same content as for my website.
If I upload file on my website like http://example.com/test....
0
votes
2answers
101 views
What is the thought process behind, Endpoint protection is better than firewalls?
I keep reading about, and seeing people post and recommend in the oddest places, that strong endpoint protection is better than having a in-service/supported/receiving security updates firewall.
What ...
1
vote
3answers
343 views
How to detect when one or more devices in my local network have become DDOS attack nodes?
I have a home network, big family, with around 20 devices on it at any given time. It seems like every year or so, some device gets a virus or a security flaw is revealed, and the device starts ...
2
votes
1answer
96 views
When to logout a user? [closed]
I am working on a security project which gives an admin control over certain devices in a company.
When using the web-based product, say the user switches context and opens another tab or skips to ...
4
votes
2answers
1k views
How does Google protect against scraping?
I'm trying to implement security against scraping on my website to prevent basic scraping techniques.
Google seems to have a very good protection against scraping, but it's so good that I'm unable to ...
0
votes
1answer
210 views
Is hiding my Java desktop app inside a VM the best way to protect my Java source code?
I need to distribute a Java desktop app to the user. I am looking at different ways to protect my source code from reverse engineering.
One method is to distribute a Virtual Machine (says Linux) ...
1
vote
3answers
114 views
dongle development
I am to provide a hardware+software solution. The software is an application in c++ running on windows. The hardware is motherboard+processor+disk+memory. In order to protect the solution, I need to ...
2
votes
5answers
2k views
I have to write down credit card information on paper and send it. How can I minimize my risk?
I am filling out a form to set up a recurring payment with a local government building. The form requests that I put my credit card number, expiration date, and CVV number, which I'm a little hesitant ...
0
votes
0answers
36 views
VoIP/SIP Secured Real Time Protocol (SRTP): Which key length is appropriate nowadays?
Many critics say that current key lengths for SRTP-encryption in popular phone apps like Linphone or CSipSimple are not sufficient anymore.
What should be a recommended key length nowadays?
2
votes
2answers
356 views
Protecting Python source code on physical product?
How would you protect Python source code on a physical product (like a IoT device), which comes with Ubuntu installed on a mini-PC running Python code?
Few methods we thought about:
Compiling the ...
2
votes
1answer
680 views
AngularJS Sanitize function vs. server-side output encoding
I mainly audit web applications and provide the companies with security countermeasures and recommendations. Currently, I have an issue with giving a correct recommendation when it comes to AngularJS ...
-1
votes
1answer
716 views
Heads firmware and OS is more secure than Whonix, Qubes or Tails?
Developers stated Heads combines physical hardening and flash security features with custom Coreboot firmware and a Linux boot loader in ROM. This moves the root of trust into the write-protected ROM ...
0
votes
2answers
101 views
connect to another ip address remotely via tunnel can be traced? [duplicate]
if I connect through the tunnel to my friend's friend work LAN, will use only his LAN (IP) and will not have my own internet at all, force entry connection and getting their internet to host my ...
8
votes
5answers
2k views
How to protect myself online from the government? [closed]
I need something trusted and secure. I need to make “onion layers security” with the most secure and hard to hack/crack software.
How to protect yourself from the government on the internet?
I’m ...
1
vote
1answer
107 views
Accessing SQL database from Java Android app. How do I store the SQL database details so they are safe?
So I am developing a Java app which is going to be free and would preferably not require a sign up process. I cannot seem to think of an idea to store the log in details safely.
I have thought of ...
1
vote
1answer
66 views
How to secure mine as well as other people' passwords on the computer used by my receptionist?
My friend runs an office in which the computer used by the receptionist is used by so many people including my friend and others (so many people come there for job recruitment) who frequently save ...
0
votes
5answers
361 views
Why would I protect my computer?
I see a lot of posts about how to protect your precious computer, but what is it that we are trying to protect?
Note: Before you flame me, I'm not trying to ask a stupid question. I just see many not ...
5
votes
0answers
155 views
How do I protect my old devices against BlueBorne? [duplicate]
I have a bunch of Android devices for which there either is no patch to protect them against the BlueBorne exploit or I cannot install a patch without losing all the data.
The most obvious thing ...
0
votes
1answer
26 views
Medicare card & SSN - What can be done to prevent unauthorized SSN disclosure?
Those of us on Medicare realize that the card displays our SSNs just like the Social Security card.
There was the case of the guy from LifeLock who published his, promising that his company would ...
0
votes
0answers
33 views
Public key (asymmetric) watermarking: detect from small chunk of file?
Public key watermarking uses a private key to embed the watermark and a corrosponding public key to detect.
Is it possible to detect a watermark from only a small chunk of the file? Does it matter ...
0
votes
0answers
57 views
Clarification regarding the “nosniff” content type protection
According to my understanding I should add the nosniff header on each download dialog: X-Content-Type-Options: nosniff
How should I protect an upload dialogs?
Will the header X-Content-Type-Options: ...
4
votes
2answers
139 views
How big a vulnerability is phone number theft and how to protect against this? [closed]
This interesting article in the NYT discusses how attackers are stealing phone numbers of their intended victims by phoning up Verizon, AT&T, etc., giving them a sob story about an emergency and ...
1
vote
1answer
589 views
“Smashing The Stack For Fun And Profit” - Remediations
i was reading this famous article:
Aleph One - Smashing The Stack For Fun And Profit
and i have no idea how stack canaries/NX support/ASLR can avoid an attack like that. I'll try to explain me ...
1
vote
0answers
144 views
Overwrite USB write protection switch on MP3 players [closed]
I found a bunch of old USB MP3 players that are knockoffs of the iPod Nano.
They have no logos on them. Some of them have a hold switch and on the computer it appears to offer write protection and ...
6
votes
3answers
504 views
What causes the “This site may be hacked” or “This site ahead contains malware” messages?
How does Google exactly detect if a site may/is hacked? What exactly triggers the warnings?
I've seen plenty of companies offer services that help to remove these warnings on websites and get your ...
0
votes
3answers
329 views
Can OS protect us from backdoored CPU? [closed]
I was wondering if O.S. can act in such a way to hide from CPU what it is doing? I know that everything is computed only in CPU, but O.S. decides what that is, and keeps track of file system, etc.
For ...
3
votes
1answer
151 views
How could supply chain counterfeiting be combated by using a blockchain?
In the popular technology and business press (e.g. example1, example2 and example3) there is a lot of excitement around the application of a blockchain to "revolutionize the supply chain" of physical ...
3
votes
0answers
247 views
Can anti virus kill or defeat a BSOD protected (critical process) malware in Windows [duplicate]
As the title says can anti virus kill or delete a Malware that made itself critical? I'm writing a Monero miner service and I've added BSOD protection to it and I know that it'll be known as Malware ...
0
votes
2answers
1k views
Mail address spoofing : how to protect myself [duplicate]
I have a mail server, postfix for SMTP and Dovecot for IMAP, both require authentication. I just received an email from MY address, but coming from an other SMTP server. And of course, in message ...
0
votes
1answer
58 views
Tools and approaches in order to teach software security? [duplicate]
I am going to teach software security for a course lab. I would like to know is there any software- simulator and etc for providing an appropriate environment for practising common types of security ...
2
votes
1answer
148 views
In-memory code signing
Since a lots of malicious code are running in memory-only, wouldn't it be possible to sign each eXecutable codes (functions etc) of each PE files and check before each new started thread the code (in-...
2
votes
2answers
414 views
Rename important files to any file type to protect from ransomware
Is it a good solution that rename an important files to a new file type that only owner od the file know? like Data.Rar rename it to Data.BEATURAN, so it will become BEATURAN File and just rename ...
3
votes
1answer
191 views
Deauth as a protection
In the case that there is an ongoing attack in my network, where the attacker is using WLAN to access my network and I recognize it, would it be possible to send a broadcast deauth in my network to ...
2
votes
0answers
130 views
Why isn't the “RAP - Reuse Attack Protector” in the mainline Linux kernel?
https://grsecurity.net/rap_announce_ret.php
https://grsecurity.net/download.php#test
Q: If the RAP - Reuse Attack Protector - is such an extreme great idea, why isn't it already included in the ...
0
votes
0answers
34 views
Is there a common general placeholder name for the “protected secret”?
I wonder if there is a general name for the "protected information" that you are trying to protect.
Sometimes it's a code or a password or a token and I would like to know if there is a word for ...
1
vote
2answers
551 views
How to protect an offline proprietary software from being stolen
We are currently developing a software that is supposed to run on every computer of a world wide company which has many domains.
We are thinking about security as we want the software to be used only ...
3
votes
3answers
808 views
Do certain Virtual Machine programs “Sandbox”/protect the main OS better than others? Does the category of VM matter?
I am looking into VMs to use, and from wiki https://en.wikipedia.org/wiki/Virtual_machine
I notice there are 3 main types of VMs.
FULL VIRTUALIZATION
In full virtualization, the virtual machine ...
2
votes
1answer
89 views
How to protect ourself to divulge information [duplicate]
In the film Citizenfour, around the 33:33 mark, Edward Snowden said
I mean, you could literally shoot me or torture me, and I could not disclose the password if I wanted to.
Um... You know, I ...
0
votes
1answer
26 views
Split Production and “public” Webspaces
We're developing a Software, using Git and some web based organsiation software on one of our members webspace.
This webspace is as far isolated, thus none could access it without knowing the address.
...
-1
votes
1answer
454 views
Does Windows firewall stop attack use bandwidth?
If I block all the international traffic except an IP range and an attacker starts a DDoS attack on my IP, will it effect on my bandwidth?
1
vote
2answers
106 views
How to protect a PC against sensitive data access by malicious app/driver
As a software developer I frequently work with various USB-attached peripherals in the prototype stage and their drivers.
Sometimes the peripherals come from companies that I do not know well or ...
2
votes
1answer
155 views
Which Extensible Provisioning Protocol (EPP) status-values provide sufficient protection against domain hijacking?
The Extensible Provisioning Protocol (EPP) as described in RFC 5730, can possibly be protective against domain hijacked. The protocol consists of the 17 following status-values as described in RFC ...
2
votes
5answers
673 views
What are safe solutions to protecting important credentials in source code [duplicate]
I am doing some Java work for a company that has some code that they want protected in an application that they are giving to their customers.
For example what if you have information such as FTP or ...
1
vote
1answer
73 views
Protecting vs Defending a system
What is the difference between saying defending a system from attacks or protecting a system from attacks?
This question might be trivial to most of you but I really don't see the fine line here. In ...
