Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [reference-request]

A reference request is a request to be provided with (links to) documentation, official papers, and specs related to one or more specific security procedures or security analyses, to provide a trusted base for what's being said or written.

1
vote
0answers
58 views

Where is this quote about the philosophy of hacking from? [closed]

Before downvoting this question as off-topic, please read this answer in meta SE. If you are looking for a specific quote but do not know its exact wording, it is almost certainly on-topic as a ...
-5
votes
1answer
120 views

Is getting intercept request of HTTPS in clear text is a bug [closed]

I am new in pentesting so I don't know what to expect. I am intercepting HTTPS requests of Android apps in my phone through Fiddler for pentesting purposes. I have installed the Fiddler certificate on ...
0
votes
1answer
110 views

Requiring regular password change counterproductive [duplicate]

According to http://www.csoonline.com/article/3195181/data-protection/vendors-approve-of-nist-password-draft.html "There have been multiple studies that have shown requiring frequent password ...
5
votes
0answers
150 views

Using instruction set architecture (ISA) to stop stack overflows

I have been learning about using stack overflows to get arbitrary code execution, one of the tricks used is overwriting the return address to make control flow go the way you want it. Assuming our ...
1
vote
0answers
266 views

List of default SNMP MIB tree values / OIDs? [closed]

I'm trying to find a resource that lists default SNMP mib values and object identifiers for various vendors / operating systems to use with snmpwalk. I have a list of MIB tree values for Microsoft ...
-1
votes
1answer
404 views

How many security questions should be asked? [closed]

We currently use 5 security questions but Operations team is asking us if we could lower down to 3. With that,What is the best practice for this one? How many security questions should be asked?
2
votes
1answer
183 views

Which tier to apply security

In my organization we have database as backend, application servers then web servers and then proxy servers. I know it is usually best to have security implemented closest as possible to the data and ...
1
vote
1answer
87 views

Question regarding keylogger references [closed]

For educational purposes I would like to learn how keyloggers have been made so far... from the simplest to most complex keyloggers. I can't seem to find a book focusing on them, most of the books I'...
4
votes
1answer
141 views

How do iTunes movie rentals work?

I've been wondering how iTunes movie rentals work from a security standpoint. Given that the "rented" files are actually downloaded to the user's computer and then played from there, it seems like ...
12
votes
3answers
16k views

How to use a found USB key safely

I found a USB drive while riding the subway and I want to read it to see if I can return it back to it's owner. If I can't find any info on the stick, I'll use it for my own means. Assuming I have a ...
0
votes
1answer
286 views

What is “web of trust” in PGP and S-MIME? [duplicate]

I'm studying network and system security and I came across the phrase Web of Trust: In cryptography, a web of trust is a concept used in PGP, GnuPG, and other OpenPGP-compatible systems to ...
8
votes
2answers
3k views

LTE networks and MITM

2G would leave you vulnerable to spoofed base stations. 3G tried to somewhat fix that using mutual authentication. Now, I tried to check how LTE handles this but I couldn’t find any usefull ...