Questions tagged [protection]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
1answer
230 views

Deauth as a protection

In the case that there is an ongoing attack in my network, where the attacker is using WLAN to access my network and I recognize it, would it be possible to send a broadcast deauth in my network to ...
2
votes
0answers
156 views

Why isn't the “RAP - Reuse Attack Protector” in the mainline Linux kernel?

https://grsecurity.net/rap_announce_ret.php https://grsecurity.net/download.php#test Q: If the RAP - Reuse Attack Protector - is such an extreme great idea, why isn't it already included in the ...
0
votes
0answers
36 views

Is there a common general placeholder name for the “protected secret”?

I wonder if there is a general name for the "protected information" that you are trying to protect. Sometimes it's a code or a password or a token and I would like to know if there is a word for ...
1
vote
2answers
782 views

How to protect an offline proprietary software from being stolen

We are currently developing a software that is supposed to run on every computer of a world wide company which has many domains. We are thinking about security as we want the software to be used only ...
3
votes
3answers
938 views

Do certain Virtual Machine programs “Sandbox”/protect the main OS better than others? Does the category of VM matter?

I am looking into VMs to use, and from wiki https://en.wikipedia.org/wiki/Virtual_machine I notice there are 3 main types of VMs. FULL VIRTUALIZATION In full virtualization, the virtual machine ...
2
votes
1answer
101 views

How to protect ourself to divulge information [duplicate]

In the film Citizenfour, around the 33:33 mark, Edward Snowden said I mean, you could literally shoot me or torture me, and I could not disclose the password if I wanted to. Um... You know, I ...
0
votes
1answer
28 views

Split Production and “public” Webspaces

We're developing a Software, using Git and some web based organsiation software on one of our members webspace. This webspace is as far isolated, thus none could access it without knowing the address. ...
-1
votes
1answer
522 views

Does Windows firewall stop attack use bandwidth?

If I block all the international traffic except an IP range and an attacker starts a DDoS attack on my IP, will it effect on my bandwidth?
1
vote
2answers
115 views

How to protect a PC against sensitive data access by malicious app/driver

As a software developer I frequently work with various USB-attached peripherals in the prototype stage and their drivers. Sometimes the peripherals come from companies that I do not know well or ...
2
votes
1answer
191 views

Which Extensible Provisioning Protocol (EPP) status-values provide sufficient protection against domain hijacking?

The Extensible Provisioning Protocol (EPP) as described in RFC 5730, can possibly be protective against domain hijacked. The protocol consists of the 17 following status-values as described in RFC ...
2
votes
5answers
786 views

What are safe solutions to protecting important credentials in source code [duplicate]

I am doing some Java work for a company that has some code that they want protected in an application that they are giving to their customers. For example what if you have information such as FTP or ...
1
vote
1answer
76 views

Protecting vs Defending a system

What is the difference between saying defending a system from attacks or protecting a system from attacks? This question might be trivial to most of you but I really don't see the fine line here. In ...
1
vote
1answer
5k views

Prevent external hard disk drive from infection

Will partition of my hard drive help me to protect my essential files? I want to divide my 1 TB Hard disk drive into 4 partitions and store my files accordingly. For example I am keeping my movies in ...
1
vote
1answer
202 views

Check if PXN is enabled?

I am looking for a way to check on a mobile device if PXN(Privileged Execute-Never) Protection Mechanism is enabled.
-1
votes
1answer
2k views

What file extensions do ransomware encrypt? [closed]

Is someone have a generic list of files that payment walls encrypt? I want to build software to protect only those kind of files. I know that this changes from time to time. Let me know if the list ...
1
vote
2answers
698 views

How does software developer protect their code against binary patching?

Supposing we have a software that checks on a remote server online if the input entered by a user (a license key) is valid. The server sends in a socket to the client True or False if the license is ...
-1
votes
2answers
5k views

What is meaning of the term Whitelisting in antivirus?

How exactly does whitelisting work and what does it mean in terms of antivirus software?
5
votes
1answer
820 views

How does “password / keyboard-input protection” work?

I do own Kaspersky Internet Security (KIS) and BestCrypt Volume Encryption (BCVE) (unrelatedly) and both offer some mechanism (KIS) to "protect my passwords while I enter them". Kaspersky primarily ...
36
votes
2answers
13k views

What is protection ring -1?

Due to the Lenovo firmware ThinkPwn bug I'm trying to understand privileges and rings. If the kernel is Ring 0 and SMM (System Management Mode) is Ring -2, what could be in between that is Ring -1?
2
votes
2answers
798 views

Disk encryption with OTP to protect source code

We have to ship a hard- and software prototype to a customer for a first field test. The software is just not ready (protected - too much Python code) for distribution without the possibility, that ...
21
votes
6answers
20k views

Would removing spaces in a string protect against SQL injection?

I was curious if it's possible to protect against an SQL injection attack by removing all spaces from an String input? I have been reading up on SQL Injection at OWASP, but they don't mention ...
-1
votes
1answer
774 views

How to protect EXIF data against editing/deleting in jpeg file?

Is there any option to protect EXIF data against editing or provide password protection? I came accross the idea of creating executable file from image file, so that someone can view image the way is ...
6
votes
2answers
2k views

Ring 1 and Ring 2 Memory Protection Architecture

I have heard that Ring 1 and Ring 2 memory protections are basically no-longer used within modern systems. However, when I checked into things, all I found was that these rings are somehow associated ...
6
votes
4answers
164 views

When testing out security vulnerabilities on sites such as OWASP Projects, should we be in a secured/protected environment?

I was curious if there is any need to secure/protect ourselves when doing projects on sites like OWASP to learn about vulnerabilities or "Wargames/Challenges" such as what's posted in these links How ...
0
votes
1answer
56 views

What is LinkedIn's “email challenges” feature?

A LinkedIn blog post about the recent password dump says: We take the safety and security of our members' accounts seriously. For several years, we have hashed and salted every password in our ...
4
votes
0answers
1k views

How exactly does “Apache Shiro's” hashing work when using a Desktop-Client

I was looking at this question How does storing hash passwords work? and every answer essentially says that Hashing is done via the server, or most of it should, as that is the safest way to do it. ...
5
votes
2answers
207 views

What are the risks of sending sensitive documents that are on physical media and password protected via postal carrier using registered mail?

Background The company I work for is extremely risk averse when it comes to adopting the use of cloud services for improving business flows. We currently use a very famous search company's business ...
2
votes
1answer
1k views

How to identify and patch a hardware vulnerability?

Software and systems vulnerabilities are often patched with updates, or by avoiding the use of some OS or softwares that have multiple flaws. Regarding hardware vulnerabilities, I do not have a lot of ...
21
votes
4answers
5k views

Keylogger web application protection

I'm trying to improve security in a web application. The application has an admin site and keyloggers are a concern that I'm trying to solve. Can the application do something that can prevent ...
7
votes
4answers
1k views

How to trace the actions performed by a virus?

Is that possible to trace the actions performed by a virus? Run Time , stolen data and the files consulted and get the relative impact on my pc.?
-4
votes
3answers
202 views

Is there a way to secure a Linux machine in a way that no one else (but me) can access its contents? [closed]

And I mean, even if someone tries rooting with a Live CD, even if one takes the HDD away and plug it in somewhere else, etc... I want to be able to give a client a machine with a service running, but ...
14
votes
2answers
1k views

How do large companies protect their private (code-signing) keys?

Some time ago I read the canonical answer of our ursine overlord concerning CAs and their private (root) keys. More recently I stumbled across the question on the question on how to manage code ...
-5
votes
1answer
3k views

The problem I have with wikipedia showing IP addresses to the world? [closed]

I went on wikipedia, then went to the edit history of an articles I edited. To my surprise, my IP address, along with other people's IP addresses are on the articles edit history page. Why would ...
2
votes
0answers
1k views

Is possible to prevent input emulation with SetWindowsHookEx in specific application?

The one of technique of input emulation protection with automation toools like AutoIt or ACTools used most of simple game bot programs is SetWindowsHookEx usage WH_KEYBOARD_LL flags. This solution is ...
28
votes
2answers
4k views

Is it possible for my password to have more than one password combination?

Can my password have more than one password combination? I read up on physical combination locks (the lock you open with numbers) and I learned that a combination lock can have more than one ...
31
votes
2answers
6k views

How trustworthy is `sudo apt-get install (package name)` in Ubuntu?

One of the easy ways to install a program in Ubuntu Linux is to type a command in the terminal, but how do I know that the program is coming from a trusted source and not from somewhere dangerous? ...
76
votes
6answers
61k views

How do large companies protect their source code?

I recently read the canonical answer of our ursine overlord to the question on How do certification authorities store their private root keys? I then just had to ask myself: How do large companies (e....
42
votes
7answers
78k views

Somebody hacked my router and changed my wifi SSID

One of my neighbours hacked the password of my router and he uses my limited internet package. I change the wifi SSID almost daily, but he can hack it easily. Today, he changed the SSID to a hate ...
1
vote
2answers
674 views

Security precautions for beaglebone?

I am currently operating a beaglebone as the control PC of a scientific instrument. In order to increase its potential, it is connected to the internet, currently without password, i.e. everyone who ...
0
votes
2answers
185 views

Protecting data on server from illegal physical access

I am running Ubuntu (14.04) server and I saw this question: How do I reset a lost administrative password? I wondered, because my server virtual machine is on the ESXi server, I don't know if ...
2
votes
3answers
67 views

Is accessing carelessly not protected data of any service unlawfull? [closed]

The following scenario: I just visited the webpage of an phisshing company of an german service which is here in germany acting at least not unlawfull, but just trying to get money for not even giving ...
1
vote
1answer
99 views

Convert customer tracking system from web access to REST

Intro:In our company there is a service tracking website for our clients, where they can monitor the progress made in their cases with us. Our users are required to log in to that website (admin ...
2
votes
3answers
1k views

What prevents a coder from brute forcing a wifi?

I know that a coder is able to connect to a wifi through code so my question is: Is there anything that will make it difficult to brute force a wifi password?
4
votes
1answer
533 views

Building a project on ARM Cortex-M, anything I can do to keep IP secure? Dealing with Chinese knockoffs and sick of it

Chinese have decided to ripoff a PIC product I make. Switching to ARM for other reasons anyhow, mainly that Microchip is a joke, either STM32 or NXP LPC, exact chip is open still. There are sites ...
0
votes
1answer
122 views

Does a 'mailto:' hyperlink spoil any preceding email obfuscation efforts in PDF?

Assume there is a PDF file which contains the example@example.com email address as an image (the classic obfuscation method). However, what if this image is made clickable with a hyperlink which ...
1
vote
0answers
33 views

Is it possible to low level format an Virtual Machine? [closed]

I just came to wonder, if you can low level format the disk of an Virtual Machine, maybe you guys can help me with that?
1
vote
2answers
490 views

How much personal information should I provide to an identify theft monitoring company?

I've been provided credit monitoring and identity theft protection services from the company CSID. Their CyberAgent internet surveillance tool claims to "monitor thousands of websites and millions of ...
24
votes
8answers
7k views

Is there a way to make a WEP-secured AP uncrackable?

For some days, I was feeling that my Internet bill was booming. Then, I recently found out that a boy near my house was accessing my router to use the Internet. Then, I read some articles how to crack ...
0
votes
5answers
177 views

Security software to shutdown PC unless specific approach? [closed]

For future refence: In light of answers and critique, my question should have been: 1. How does one make sure a physical attacker with access to a powered, but locked FDE PC fails his/hers attempt to ...
104
votes
10answers
14k views

Prevention measures against laptop seizure at US borders

Since laptop and other electronic device seizures at US borders became legal without a warrant (including making copies of data), 7% of ACTE's business travelers reported being subject to a seizure as ...