Questions tagged [software]

Computer software, or just software, is a collection of computer programs and related data that provides the instructions for telling a computer what to do and how to do it.

Filter by
Sorted by
Tagged with
-5
votes
0answers
60 views

Adobe Photoshop has killed my creativity by introducing so much anti-privacy, anti-security, and dumbed-down bloat [closed]

I could pick so many angles to this, but I will focus on a very famous piece of software which has been utterly ruined in recent years: Adobe Photoshop. This is not a rant, but related both to ...
0
votes
0answers
24 views

Hardware vulnerabilities vs software threats

What are the key differences between them? I find both of them would also be able to retrieve data from the host system and both also could cause harm. I do not understand why there are people who ...
0
votes
0answers
22 views

Possible to verify the integrity of AIDE itself?

I recently installed the package AIDE (Advanced Intrusion Detection Environment) on my Linux server. This is a web server installed about a year ago. Since no integrity checks have been done before on ...
0
votes
0answers
46 views

How to restrict software distribution or make sure it should not be copied [duplicate]

I Want to release software and it is going to be hosted on the client system. How to make sure that it should not be copied or how to restrict unpaid users using the software. I have 2 questions. ...
-2
votes
1answer
80 views

Upgrading Software Version: risk of an unknown vs known vulnerabilities

Is there any evidence or research into the likelihood, as well as damage, via vulnerabilities in previous versions compared to following iterations of software? For example, with every software ...
1
vote
2answers
81 views

Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]

Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
0
votes
0answers
33 views

What are good examples of “Dynamic opaque predicates”?

I am studying the concept of software obfuscation and come across this interesting scheme, dynamic opaque predicate: Basically it either goes two false branches, or two true branches, and ...
1
vote
4answers
127 views

Could've previous owner installed tracking software on my phone, even if I changed the SIM card?

I recently bought a used mobile Android phone. Is there any way to install malware, tracking software etc. that is not on the SIM card, but on some other kind of memory disc?
0
votes
0answers
50 views

Is there any security advantage of installing into AppData folder? [duplicate]

A lot of programs today allow to install into user appdata subdirectory to avoid installing system wide. Is there any advantage of this? Can programs installed system wide be more exploited than ...
2
votes
0answers
128 views

Can developers stop their software from being flagged as malicious by AV products?

This may not be the correct community for this question, I apologize if that's the case. Scenario: A software development company has created a collection of small desktop applications. They have ...
1
vote
1answer
46 views

VPN gateway software check enforcement as part of access policie

Can a VPN gateway enforce policies in form of checking whether a particular software or set of software is installed on the endpoint and based on that allow / deny the remote connection to be ...
5
votes
6answers
200 views

If a digital camera can be “hacked” in the ransomware sense, how best to protect it?

Increasingly, I hear of hackers gaining control over digital devices for their own gain or merely to be a nuisance. I don't know but suspect that when tethered to another device such as a computer, ...
1
vote
1answer
199 views

Is anything missing in the offline software licensing plan?

I'm working on a piece of software written in VB.NET for Windows machines (mainly Windows Server). I have some understanding of cryptography and security, but I want some good old fashioned peer ...
2
votes
1answer
65 views

When writing software do all programs have a signature? [closed]

I have always been curious if all software have a signature for whatever reason or is only related to AV.
1
vote
2answers
122 views

Notepad++ updater had no tittle or info. Is this okay?

While updating Notepad++, the updater window showed no title or information. Is this okay from security point of view ?
0
votes
0answers
158 views

How do hacking groups get a license anonymously for threat emulation software like Cobalt Strike?

I've seen that a lot of hacking groups replicate techniques and attacks from red teams using software like Cobalt Strike and Powershell frameworks for offensive security and red teaming like Nishang ...
1
vote
2answers
86 views

Can plugins for text editors and IDEs be malicious?

I'm always a little cautious about plugins I install for text editors or browsers, but can they be dangerous and cause the text editor or browser to behave in a malicious way? For example, can a ...
3
votes
1answer
65 views

Why are security properties non-compositional?

I had a lecture in security and it was stated that security properties are non-compositional. I don't quite understand what that means and can't find anything in the internet about that. Can anyone ...
-2
votes
1answer
51 views

Is Using A Firewall with LibreOffice Enough If Not, Any Recommendations? [closed]

I recently learned a little about LibreOffice and OpenOffice. I am considering using LibreOffice on my laptop but am concerned about security. What I've read online (the terminology) is over my head. ...
0
votes
0answers
53 views

Verify that a Software Restriction Policy (SRP) rule is effectively applied?

I am running Windows 10 Pro and I would like to check the software restriction policies, with timestamps on the logs if possible. Indeed, I found a solution but without timestamping on the logs. ...
2
votes
1answer
383 views

Understanding which privacy tools provide very similar functionality

https://amiunique.org/tools has a list of recommended privacy tools. uBlock Ghostery HTTPS Everywhere Lightbeam AdBlock Plus Disconnect Privacy Badger NoScript Self-destructing cookies However, aren'...
3
votes
1answer
100 views

how to verify turbotax software

I bought turbotax software from amazon (downloaded mac version). Therefore, I know it is safe to use. However, if one wants to verify the software has not been tampered with how do we do that ?. Mac ...
0
votes
0answers
53 views

Does WinRar leave cache of opened Zip Archives (Nothing extracted)

Downloaded a .zip, via a secure app that deleted the only place it was downloaded (supposedly, who knows if defragmentation left other traces, the download happened by accident, on main OS WIN10, no ...
1
vote
1answer
93 views

What guidelines can I follow to know if I can trust a software editor? [closed]

At work or at home, I often find some useful piece of software. Sometimes I may find it on a forum, mentioned on a video, or by talking to a colleague. But how do I know if the editor of the software ...
-1
votes
1answer
77 views

Is it (reasonably) save to install wechat on my linux?

Apparently it is possible to install wechat on Linux now, which I would like to do. I have no illusions that my conversation might be monitored by wechat itself or the Chinese government. However, I ...
0
votes
1answer
85 views

Software Signing Standards

Is there a software signing certificates standard, officially or by popularity? As I understand the SSL/TLS/https certificates rules are specified by the RFCs. Mixed use of servers and clients from ...
1
vote
2answers
43 views

What risks do I take using an application that always requires admin access and AV exception listing?

My knowledge level about OSs and security is extremely low. Is anyone willing to tell me whether it's risky for me to use an application that requires me to run it with admin permissions and to put it ...
-2
votes
1answer
118 views

Unauthorised transfers to developer's account in bank transaction software [closed]

Our organization has software for transactions. The person who designed this software illegally designed it in such a way that when any transaction is performed 0.5 percent of the transaction goes ...
15
votes
3answers
495 views

Are browser wrappers in software bad for users?

These days I see a lot of browser wrappers in software. For example: when you purchase something in the Steam desktop application and use PayPal, you enter your PayPal security details in a browser ...
-1
votes
1answer
78 views

Does Google Chrome collect data unrelated to browsing activity?

I'm exclusively running Firefox, but I'd like to install the leading browser Chrome for troubleshooting purposes. Browsing-related data collection isn't a concern in this case, but I'm worried if the ...
1
vote
2answers
385 views

How to search for all computers running memcached on shodan

Memcached is a caching software typically used in web servers. Many web servers like wikipedia, wordpress, flickr cache their data using Memcached software. Memcached server typically runs on port ...
2
votes
0answers
185 views

Is This a Virus?

i want to ask about a program is it a malware or a program from mozilla? When i turn on my pc it start normally but i see an open program called update.exe and it have a firefox icon on it, when i ...
2
votes
1answer
134 views

Are there ways in determining if devices such as router have been tampered with?

In working with a number of non-profit organizations, devices such as routers that may have been used by other businesses are often acquired. Equally, devices are often inherited through other ...
-1
votes
1answer
118 views

Does Bloatware on a brand new PC create security risks?

Some new computers come with software I don't need or want. It is not advertised as part of the product I am purchasing. Generally this is called Bloatware. Bloatware 1.(n) Software that ...
1
vote
2answers
85 views

When are you done decomposing threats?

Our development teams are getting the hang of STRIDE threat discovery, but one issue that remains is related to threat decomposition. The way we see threat analysis is that it consists of identifying ...
2
votes
0answers
92 views

Ethical Hacking/Bug Bounty programs: Best way to get started professionally? [closed]

I am self-employed (degree in computer science) and I have been fighting a serious illness for the past several years (and still am) which makes it pretty much impossible to take on client projects as ...
0
votes
4answers
251 views

Track who leaks your software

I'm releasing some software in python which is impossible to fully encrypt. I was thinking of changing the variable names slightly for every copy that I release. Is this a good way to figure out who ...
0
votes
1answer
707 views

Meterpreter reverse shell alternative

What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
0
votes
1answer
110 views

CSIRT Softwares [closed]

I'm wondering what kind of software Computer Security Emergency Response teams use to manage their work? For example to catalog incidents, responses and manage risks.
0
votes
1answer
149 views

Are there any good brute force programs in C#? [closed]

I'm planning to research & learn from brute force methods, but all the popular ones I found like John the Ripper or hashcat are written in C & OpenGL which I don't have much knowledge about so ...
3
votes
3answers
682 views

How to assure my customer that my software is malware proof?

We are delivering an application which our customers can use on their network cluster. Now, is there any way that we can certify that the software is malware proof and is not going to spread malware ...
16
votes
3answers
3k views

Should crash dumps (e.g. from Breakpad, Windows) be encrypted and signed?

As a software developer, should my crash dumps (e.g. from Breakpad, Windows) be encrypted and signed? I provide the ability to export crash dumps so that I can pinpoint the problem when the user ...
1
vote
1answer
47 views

How to verify Ruby on Rails projects are at current patch levels?

I've got a few Ruby on Rails systems running Ubuntu 14.04LTS. The Ubuntu version of supported Ruby is 1.9.1 but the developers use a Gemfile and Bundler which (AFAIK) installs Ruby (and gems) out-of-...
1
vote
2answers
151 views

Do software do an integrity check before executing?

I am testing a software that I need to install on my computer locally. It seems I can modify one of the .exe or .dll using msfvenom to include a malicious payload, like a reverse shell. From there, I ...
3
votes
1answer
4k views

does karabiner elements on Mac OSX contain or potentially contain malware?

I'm using Karabiner elements, an open-source program to remap the keys on my macbook air (running the latest Mac OSX High Sierra) and my apple wireless keyboard. It works very nicely. However, I am ...
3
votes
2answers
87 views

What approaches exist for ensuring security when deploying software in non-trusted environments?

Is it possible to deploy software in such a way that a rogue actor who has physical access to the hardware is unable to glean any information on the code that is running or what is being stored in ...
2
votes
2answers
70 views

Dangers in hosting software on a webserver?

I'm interested in hosting a competition in which participants (all of whom are remote) will be creating FPGA/RTL designs and judged on certain performance metrics such as speed/latency/size/etc. The ...
6
votes
1answer
94 views

Why default settings are generally weaker than optimal ones?

In nearly all software (that I've used so far) that allows to set the encryption settings, default settings are kind of weak. There is always something that you should tweak to achieve better ...
0
votes
1answer
107 views

Building software safely for malware-free distribution

I wrote a program. I want to publish a compiled executable for downloading by the public. How can I compile and distribute it without contact with my (presumably insecure and infected) operating ...
1
vote
1answer
62 views

Can an unloaded malicous.dll placed on the “drive by download ” directory be remotly exploited?

Some programs can be downloaded to the drive-by download directory through the browser , the easy way is to unpack the program on the /download directory (It is the default path if the user doesn't ...