Questions tagged [restrictions]
The restrictions tag has no usage guidance.
24
questions
1
vote
0
answers
353
views
How do I convert any arbitrary .EXE to .DLL, in order to bypass program restrictions?
On a computer that blocks third-party programs, I figured that you could use use PowerShell and C#'s DllImport() function to import a native C program as a DLL and run it, and the program would simply ...
- 37
0
votes
0
answers
104
views
Secure Registry Keys
Is it possible to restrict access to the registry keys, just like Microsoft does on some of the keys(ex. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend)?
I was able to get a similar ...
0
votes
0
answers
106
views
How to implement internal certification mechanism for my web applications?
Our company develops web applications and uses them on the internal network. We need to set up a mechanism to control and monitor internal network traffic so that only approved applications on the ...
- 1
2
votes
1
answer
265
views
PDF User Password always give access to the Owner Password, even when encrypted with AES-128
I've been messing around with qpdf, and noticed something that seems huge: that a document's Owner Password is essentially useless, as it can be easily unset, and therefore that only the User Password ...
- 979
-1
votes
1
answer
117
views
How do VPN providers exactly encrypt traffic from client to their server?
I'm thinking to build a VPN for personal use on a VPS but am unable to understand one thing. How exactly VPN providers encrypt data from client to their server? Suppose if I simply configure IP of my ...
- 1
8
votes
2
answers
1k
views
Is restricting a Google API key for an Android app useless?
According to Google, one can add the SHA-1 certificate fingerprint and the name of the package in the Google Developers Console to restrict the usage of his API key to his Android app, so that ...
- 81
0
votes
3
answers
819
views
Prevent users from copying sensitive data
I got a strange requirement as part of a recent project that our company is involved with. The project involves sensitive information and hence the data is restricted to only the team members involved ...
2
votes
1
answer
78
views
Block AzureRM PowerShell Module
Is there a way to block AzureRM PowerShell module commands from being executed by certain Azure AD users somewhere in Azure group policy? Or is there a way to do this with PowerShell tools?
- 23
4
votes
1
answer
6k
views
UUID in URL - how safe from accidental discovery is my proposed solution?
Here is what I want to do:
We create reports for customers, normally we send them as pdf to our customer who then shares them with colleagues across his company.
We want to switch now to digital ...
- 51
3
votes
1
answer
175
views
How do they determine that "It's likely that you're behind VPN or proxy" if I have my own custom VPN? [closed]
I have my own VPN server on a remote server on VPS. On some websites, very unknown and small ones, I've faced up to a restriction stating "It's likely that you're behind VPN or proxy, you're not ...
- 31
4
votes
2
answers
167
views
What access does installing custom certificate file give?
I recently installed a custom CA certificate from a trusted authority to access some blocked resources. Android popped up with a message "The network can be monitored"
This made me question what can ...
- 143
1
vote
0
answers
78
views
Implementing user access restriction Bluetooth LE
I have been working on a system that needs simple access restriction to a bluetooth module. I was going to use a set pin code, but it turns out that Bt LE no longer uses pairing pins. What would be ...
- 244
0
votes
1
answer
2k
views
How to globally limit Bluetooth functionality on Android and iPhone
I recently got my parents a Bluetooth speaker, and they are very new to the smartphone arena. What I would like is to disable all of the Bluetooth functionality in their phones except for the ability ...
- 101
0
votes
1
answer
834
views
How is it possible to bypass single-site restriction set by ISP? [duplicate]
What's going on in this video?
https://www.youtube.com/watch?v=lXVqdezJf1A
Here, the ISP restricts access to all other sites but one (twitter.com) when the user's account balance is insufficient. In ...
- 133
5
votes
1
answer
7k
views
Why is `cd` restricted in rbash/restricted bash?
The bash manual says:
A restricted shell behaves identically to bash with the exception that
the following are disallowed or not performed:
Changing directories with the cd builtin.
Why is ...
- 153
1
vote
0
answers
141
views
Device Control Policy
I want to blacklist all the external storage devices and only allow specific brand of device such as SanDisk. I had blacklisted the external storage devices by using USBSTOR* and whitelist all the ...
- 101
2
votes
1
answer
201
views
Folder Access restriction in Shared Hosting
In a shared hosting I use (where I don't have access to httpd.conf files) I want PHP files in "MyTargetFolder" to not have ability to access anything in upper directories.
It needs some configuration ...
- 2,707
3
votes
4
answers
708
views
Securing Data at Rest in Android
Here's a situation.
I am the author of an app that allows my customers to stream videos on their local android device. I also allow them to download the video and store it locally on their android ...
- 1,512
2
votes
1
answer
468
views
How safe are networking ACLs based on IP-address?
As far as I know, a determined attacker would have no major issues in hacking the IP address of the packets contained by his (web) request.
Therefore, I cannot see how an Access Control List (such as ...
- 123
1
vote
2
answers
524
views
Blocking access to social media on Windows
I would like to block websites like Facebook, YouTube and other social sites as part of my job and would need your advice on how to manage that. There are about 120 PCs in the building. Is something ...
- 13
1
vote
1
answer
945
views
How can I implement DVD copy protection?
I want to make a DVD movie which will be playable on a standard DVD player, but I want to make it copy restricted.
I know it is practically impossible, but I just want security to protect it from ...
- 111
37
votes
6
answers
108k
views
Is it possible for a hacker to download a php file without executing it first?
I have a php website where everything is in the public_html\ folder, including an includes folder with config and classes. I told my developer to move it away from public folder but he said there is ...
- 471
6
votes
2
answers
989
views
Is IP restriction enough or should I SSL my web authentication?
I want to connect to my home install of phpmyadmin. I restricted the connection for this to my 2 IPs.
But I don't really understand this whole OSI layering. I do know that the IP is saved in the ...
- 193
36
votes
1
answer
29k
views
Which properties of a X.509 certificate should be critical and which not?
RFC5280's section 4.2 states
Each extension in a
certificate is designated as either critical or non-critical. A
certificate-using system MUST reject the certificate if it encounters
a critical ...
- 7,668