Questions tagged [protection]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
104
votes
10answers
14k views

Prevention measures against laptop seizure at US borders

Since laptop and other electronic device seizures at US borders became legal without a warrant (including making copies of data), 7% of ACTE's business travelers reported being subject to a seizure as ...
77
votes
6answers
63k views

How do large companies protect their source code?

I recently read the canonical answer of our ursine overlord to the question on How do certification authorities store their private root keys? I then just had to ask myself: How do large companies (e....
51
votes
10answers
40k views

Can a steel woven wallet prevent RFID scanning of credit card information?

According to the Popular Mechanics article RFID Credit Cards and Theft: Tech Clinic, the fact that many new credit/debit cards have a RFID chip embedded on it, there is a risk (albeit, small according ...
42
votes
7answers
83k views

Somebody hacked my router and changed my wifi SSID

One of my neighbours hacked the password of my router and he uses my limited internet package. I change the wifi SSID almost daily, but he can hack it easily. Today, he changed the SSID to a hate ...
40
votes
4answers
11k views

How to protect printers from being hacked

Recently it got to my attention that someone has hacked around 50,000 printers and used them to print the message they wanted to. (link) As someone who doesn't have a lot of knowledge about networks ...
37
votes
2answers
14k views

What is protection ring -1?

Due to the Lenovo firmware ThinkPwn bug I'm trying to understand privileges and rings. If the kernel is Ring 0 and SMM (System Management Mode) is Ring -2, what could be in between that is Ring -1?
31
votes
2answers
6k views

How trustworthy is `sudo apt-get install (package name)` in Ubuntu?

One of the easy ways to install a program in Ubuntu Linux is to type a command in the terminal, but how do I know that the program is coming from a trusted source and not from somewhere dangerous? ...
28
votes
2answers
4k views

Is it possible for my password to have more than one password combination?

Can my password have more than one password combination? I read up on physical combination locks (the lock you open with numbers) and I learned that a combination lock can have more than one ...
24
votes
8answers
7k views

Is there a way to make a WEP-secured AP uncrackable?

For some days, I was feeling that my Internet bill was booming. Then, I recently found out that a boy near my house was accessing my router to use the Internet. Then, I read some articles how to crack ...
22
votes
8answers
6k views

Protect API from being tampered?

I'm building an API with websocket that serializes data through JSON. The App itself is a chat application. I came up with the following structure to send my data: {date: '2020-05-31', time: '14:28:...
21
votes
6answers
21k views

Would removing spaces in a string protect against SQL injection?

I was curious if it's possible to protect against an SQL injection attack by removing all spaces from an String input? I have been reading up on SQL Injection at OWASP, but they don't mention ...
21
votes
4answers
5k views

Keylogger web application protection

I'm trying to improve security in a web application. The application has an admin site and keyloggers are a concern that I'm trying to solve. Can the application do something that can prevent ...
20
votes
3answers
3k views

Could my bank's two-factor authentication be hacked?

When I attempt to log in to my bank, an SMS code is sent to my phone. I then type this nine-character code into the bank's Web site, to login to my account. Is this vulnerable to attack, without ...
20
votes
4answers
1k views

Protecting Health Care Database

I am doing a minor project on information security in which i am implementing techniques listed below to protect a HEALTH CARE database. Preventing SQL Injection (using prepared statements,validating,...
15
votes
4answers
2k views

What measures should be taken when losing an iPad

When losing a tablet that has been used to access email accounts , beside changing the passwords, is there anything more can be done? What are the most common problems that might occur if the iPad ...
14
votes
4answers
10k views

How can I protect myself from Evercookies?

I recently learned about the existence of the Evercookie. Is there any way I can prevent an Evercookie being placed on my computer without disabling JavaScript or cookies entirely? I don't want ...
14
votes
1answer
2k views

How to protect from caller-id spoofing?

Yesterday, I listened about caller-id spoofing and was left astonished as its misuse can result in severe consequences for victim. Please tell me how to protect myself from this prank and is there ...
14
votes
2answers
1k views

How do large companies protect their private (code-signing) keys?

Some time ago I read the canonical answer of our ursine overlord concerning CAs and their private (root) keys. More recently I stumbled across the question on the question on how to manage code ...
10
votes
3answers
7k views

SQL Injection if table structure/db structure not known

could an attacker who'd just found out that you're using mysql make an SQL Injection attack with only this information? If you don't know Any table/db name how come you can find it out? Is that even ...
9
votes
2answers
2k views

Can a malicious WIFI network force a connection

Say I enter a place with public WIFI. Of course, I would not connect to the network since I know it's risky, but I do have my computer turned on. Can an attacker know my computer is there and force a ...
8
votes
5answers
2k views

How to protect myself online from the government? [closed]

I need something trusted and secure. I need to make “onion layers security” with the most secure and hard to hack/crack software. How to protect yourself from the government on the internet? I’m ...
7
votes
4answers
1k views

How to trace the actions performed by a virus?

Is that possible to trace the actions performed by a virus? Run Time , stolen data and the files consulted and get the relative impact on my pc.?
7
votes
6answers
466 views

How important is it to protect demo data by HTTPS enabled server?

If the application is not in production mode, there is no commercial contract signed with customer yet, and you just want to give a link to the customer (or give the demo yourself) so that they can ...
6
votes
2answers
3k views

Ring 1 and Ring 2 Memory Protection Architecture

I have heard that Ring 1 and Ring 2 memory protections are basically no-longer used within modern systems. However, when I checked into things, all I found was that these rings are somehow associated ...
6
votes
3answers
652 views

What causes the “This site may be hacked” or “This site ahead contains malware” messages?

How does Google exactly detect if a site may/is hacked? What exactly triggers the warnings? I've seen plenty of companies offer services that help to remove these warnings on websites and get your ...
6
votes
4answers
164 views

When testing out security vulnerabilities on sites such as OWASP Projects, should we be in a secured/protected environment?

I was curious if there is any need to secure/protect ourselves when doing projects on sites like OWASP to learn about vulnerabilities or "Wargames/Challenges" such as what's posted in these links How ...
5
votes
1answer
4k views

How does time-limited trial software work? [closed]

I'm curious about how time-limited (e.g. 30-day trial) software works. I know how serial keys are generated and designed, but the time-limiting part is more complicated to understand, because it is ...
5
votes
3answers
624 views

Why don't sites implement a system where a wrong password causes a 3 second delay?

I am into bitcoin right now, and the password threats scare me a little... Not so much for me, because I use LastPass and generate new passwords at 20 characters and it includes symbols, upper and ...
5
votes
2answers
213 views

What are the risks of sending sensitive documents that are on physical media and password protected via postal carrier using registered mail?

Background The company I work for is extremely risk averse when it comes to adopting the use of cloud services for improving business flows. We currently use a very famous search company's business ...
5
votes
1answer
841 views

How does “password / keyboard-input protection” work?

I do own Kaspersky Internet Security (KIS) and BestCrypt Volume Encryption (BCVE) (unrelatedly) and both offer some mechanism (KIS) to "protect my passwords while I enter them". Kaspersky primarily ...
5
votes
0answers
156 views

How do I protect my old devices against BlueBorne? [duplicate]

I have a bunch of Android devices for which there either is no patch to protect them against the BlueBorne exploit or I cannot install a patch without losing all the data. The most obvious thing ...
4
votes
2answers
462 views

Hardware Level Write Protection for a CD-R

Let's say you burn a CD-R and it is finalized. Later, if you put it into a CD drive with some OS running, is it possible for the OS to write to it ? Obviously, this shouldn't typically happen, ...
4
votes
1answer
14k views

IPS fail close vs IPS fail open, what are the risks and benefits?

If a desicion is to be be made on selecting a mode of fail for an inline IPS that is protecting servers, what are the criteria that should be considored for selecting one of the failure modes: 1- ...
4
votes
2answers
2k views

How does Google protect against scraping?

I'm trying to implement security against scraping on my website to prevent basic scraping techniques. Google seems to have a very good protection against scraping, but it's so good that I'm unable to ...
4
votes
1answer
535 views

Building a project on ARM Cortex-M, anything I can do to keep IP secure? Dealing with Chinese knockoffs and sick of it

Chinese have decided to ripoff a PIC product I make. Switching to ARM for other reasons anyhow, mainly that Microchip is a joke, either STM32 or NXP LPC, exact chip is open still. There are sites ...
4
votes
2answers
2k views

Is it possible to dump an exe from ram and create a distributable exe from it?

Is it possible to dump the ram and get an exe and use that ram dump to distribute an app? If so, is this something that is a practical concern and if so how best should a developer protect against it? ...
4
votes
2answers
172 views

How big a vulnerability is phone number theft and how to protect against this? [closed]

This interesting article in the NYT discusses how attackers are stealing phone numbers of their intended victims by phoning up Verizon, AT&T, etc., giving them a sob story about an emergency and ...
4
votes
0answers
1k views

How exactly does “Apache Shiro's” hashing work when using a Desktop-Client

I was looking at this question How does storing hash passwords work? and every answer essentially says that Hashing is done via the server, or most of it should, as that is the safest way to do it. ...
3
votes
3answers
4k views

Protect partition from formatting

How can i protect my Linux and Windows partitions from being wiped,from a windows installation CD,with password?
3
votes
2answers
2k views

Linux Memory Protection from buffer overflow

I am practicing Linux buffer overflow exploitation. when trying to exploit a vulnerability in crossfire, everything works well and I get the shellcode placed in the right place, and the program flow ...
3
votes
1answer
155 views

How could supply chain counterfeiting be combated by using a blockchain?

In the popular technology and business press (e.g. example1, example2 and example3) there is a lot of excitement around the application of a blockchain to "revolutionize the supply chain" of physical ...
3
votes
2answers
458 views

How Secure Rooted or Jailbroken Devices are?

I am just wondering, but how can I harden the security of jailbroken or rooted devices? I understand that SD Card can be still accessible, but how could potential adversaries compromise for example ...
3
votes
3answers
1k views

Do certain Virtual Machine programs “Sandbox”/protect the main OS better than others? Does the category of VM matter?

I am looking into VMs to use, and from wiki https://en.wikipedia.org/wiki/Virtual_machine I notice there are 3 main types of VMs. FULL VIRTUALIZATION In full virtualization, the virtual machine ...
3
votes
0answers
124 views

Add another layer of security in accounts except phone number

I recently came across articles where an attacker contacted a telecom company and got them to change the sim card registered with the target's phone number. After doing so, he was able to reset the ...
3
votes
0answers
364 views

Can anti virus kill or defeat a BSOD protected (critical process) malware in Windows [duplicate]

As the title says can anti virus kill or delete a Malware that made itself critical? I'm writing a Monero miner service and I've added BSOD protection to it and I know that it'll be known as Malware ...
2
votes
5answers
5k views

I have to write down credit card information on paper and send it. How can I minimize my risk?

I am filling out a form to set up a recurring payment with a local government building. The form requests that I put my credit card number, expiration date, and CVV number, which I'm a little hesitant ...
2
votes
3answers
20k views

Copy protection in SD cards

I have created a map for using with GPS devices. The map is copied to a microSD card and then, GPS can read the map data from the card. How can I create copy/clone protection of my data on microSD ...
2
votes
3answers
18k views

How can I send and receive untraceable emails? [duplicate]

I have been receiving threatening emails from someone, and I don't want them to know my location for my safety's sake, but I need to send them a "Cease and Desist" notice. This person has great ...
2
votes
2answers
821 views

Disk encryption with OTP to protect source code

We have to ship a hard- and software prototype to a customer for a first field test. The software is just not ready (protected - too much Python code) for distribution without the possibility, that ...
2
votes
5answers
811 views

What are safe solutions to protecting important credentials in source code [duplicate]

I am doing some Java work for a company that has some code that they want protected in an application that they are giving to their customers. For example what if you have information such as FTP or ...