Computer software, or just software, is a collection of computer programs and related data that provides the instructions for telling a computer what to do and how to do it.

learn more… | top users | synonyms

0
votes
2answers
99 views

Can someone use IP spoofing to access your facebook profile as an administrator?

Do any IP addresses have security so they cannot be used by a hacker to access secure pages? For example, could a hacker spoof a Facebook IP address to enter someones profile page and make changes as ...
0
votes
1answer
41 views

Basis for “trusting” third party code and services

I remember reading an article mentioning, that third party services and code should not be trusted, meaning blind trust. So, i was thinking, everyone uses third party code in software development ...
0
votes
1answer
124 views

Protect software from copy [duplicate]

Imagine I wrote some software on .NET which will run on client machine. Is it possible to detect that someone copied my software to different computer? (Assuming my software can connect to a remote ...
5
votes
0answers
188 views

Ethical Hacking Certification (CEH v9) From A Web Developer's Perspective [closed]

I just finished a week of training for the CEH v9 certification. I have two questions: What are some strategies I can take for studying for the CEH v9 certification coming at the test as a web ...
0
votes
2answers
115 views

What exactly is endpoint security?

Would someone explain what endpoint security is, exactly? What do companies like McAfee and Symantec sell with their endpoint security suites? I also would like to learn if endpoint security ...
3
votes
1answer
52 views

Secure Software Distribution: Is serving a file through HTTPS good enough?

I'd like to know whether HTTPS can be used as a secure means of software distribution. Concretely, can I put up a file on a server making it accessible through a public HTTPS URL and be sure that it ...
111
votes
9answers
15k views

Why is Steam so insistent on security?

Is there any particular reason why the Steam application attempts to be so secure? It seems to force you to take more security measures (two-factor authentication, emails confirming all trades, etc) ...
6
votes
1answer
155 views

How does WifiKill work?

How is possible for Wifi Kill to block someone from using Wi-Fi, even if you don't have access to the router settings and you even don't use MITM (I think)?
5
votes
2answers
90 views

Secure Software: How to ensure caller is authentic?

For multiplayer (competitive) games, there is often the issue of needing to detect illegitimate players so they can be denied service. On the other hand, legitimate players should of course be ...
-2
votes
2answers
4k views

Why is Kickass Torrents banned in my browser? [closed]

I am trying to access Kickass Torrents, but getting warning from the browser like this: Reported Unwanted Software Page! This web page at kat.cr has been reported to contain unwanted software ...
2
votes
2answers
50 views

Is library version specification (Java's pom.xml, Python's requirements.txt, etc) fundamentally insecure?

Everytime I see a pom.xml file or requirements.txt that says that a given project requires a specific legacy version of a library, it makes me cringe. Am I right when I assume that it's usually ...
4
votes
1answer
98 views

How does Trusteer Rapport make accessing websites more secure?

Trusteer claims that: Trusteer Rapport verifies that you are really connected to the genuine website as opposed to a fake website created by criminals. Surprisingly, it is not trivial to reach a ...
1
vote
0answers
66 views

Connect to a wifi through code [closed]

Is there any way a person could write a software using for example C++ to connect to a wifi completely by using code?
-4
votes
3answers
93 views

Reverse Engineer and Exploits researching [closed]

Can some one give me a start point for finding exploits in software and reverse engineering? I need some kind of a book or a site... I have background with programming with high and low level such ...
1
vote
0answers
72 views

Docker: Central daemon model is flawed?

I've read this article about CoreOS's new container runtime, rkt, and I'm curious about this section: Why not just fork Docker? From a security and composability perspective, the Docker ...
0
votes
0answers
80 views

SDN Security - why not attack the controller itself?

I have been looking into SDN (Software Defined Networking) and one advantage of using this is to be able to redirect traffic to stop DDoS attacks. The traffic is ultimately thrown away. My question ...
1
vote
0answers
144 views

How to monitor kernel mode driver traffic (ESEA client)

E-Sports Entertainment Association (ESEA) is an alternative method of finding players to match up against in (among others) Counter Strike GO. They are known for having the best anti-cheating measure ...
3
votes
1answer
57 views

Is there reliable information on the prevalence of debug backdoors in software?

Developers sometimes forget to turn off the debug features of the software they ship: CWE-489 It is said here that About 20% of home routers have a backdoor in them, and 50% of industrial ...
4
votes
3answers
403 views

Is there a way to use VirusTotal.com offline?

I live at a place where we don't always always have internet. I wonder if there is something like VirusTotal but that could work without internet connection and sync when I have some wifi to update ...
-4
votes
3answers
255 views

How do I find vulnerabilities in software? [closed]

I read an answer here which talked about becoming a PenTester. The answer said that you have to learn to break software. I posted a comment on the answer asking where do I start learning to break ...
3
votes
2answers
314 views

Security Bugs in Scala Code

I'm currently reading "Software Security: Build Security In" by Gary McGraw, and he makes the distinction between security bugs and security flaws. Security bugs being implementation errors in code, ...
-1
votes
5answers
125 views

Security software to shutdown PC unless specific approach? [closed]

For future refence: In light of answers and critique, my question should have been: 1. How does one make sure a physical attacker with access to a powered, but locked FDE PC fails his/hers attempt to ...
3
votes
1answer
88 views

Is there a full disk encyption software that shows different content depending on what password has beeen used? [closed]

I'm searching for a 256-bit full disk encryption software that allows me to access different content on the same disk with different passwords. Like: Password A opens partition 1, password B opens ...
1
vote
1answer
89 views

Is the security of this .net application flawed?

Ok, I know that every obfuscated .Net application can be reverse engineered. And I know that it is better if I go the open source way if possible. But unfortunately I cannot because there is no ...
10
votes
1answer
1k views

How to decide “I'll trust this software” for closed-source or precompiled software?

I am interested in watching an upcoming webinar that will discuss Puppet on AWS. In order to participate one needs to install a software application. Naturally, I won't do that as I can find enough ...
-1
votes
1answer
1k views

Where to find safe downloads of R.A.T. like Dark Comet or Nj Rat?

How serious hackers find them ? Because when I search, it seems that most of the downloads I come across may contain backdoor. Is there some kind of "official" site for one good R.A.T.? Thanks.
0
votes
2answers
206 views

Why should I add a certificate to “Trusted Root Certification Authorities”?

I want to use a programm, which lets me modify touchpad gestures. http://www.multiswipe.com/faq But I need to add their certificate ( see in FAQ [ How to install MultiSwipe? ] ) to make it work. ...
2
votes
5answers
851 views

Software Testing vs (Web) Penetration Testing

I would like to ask about the differences between Software Testing and Web Application Penetration Testing. I am aware of usage different tools in both disciplines Software Testing (JIRA/Selenium) ...
5
votes
2answers
91 views

How can I generate short signatures?

I'm looking to create a licensing system, and I need a serial generation scheme. I want to sign some data with a private key and verify it with a public key embedded in the software. I don't need ...
1
vote
1answer
126 views

What precautions I can take to secure software against user?

I want to build a client that connects to my server and uses server API. You can consider this as a banking application because data security is the most important thing. Since the users or hackers ...
3
votes
2answers
190 views

Is it possible to dump an exe from ram and create a distributable exe from it?

Is it possible to dump the ram and get an exe and use that ram dump to distribute an app? If so, is this something that is a practical concern and if so how best should a developer protect against it? ...
1
vote
1answer
74 views

Downloading and updating the software via Playstore

I'm using android play store to download and update software for my phone. And some times its automatically updated as by settings.The play store is linked to one of my Gmail account. Here my question ...
6
votes
6answers
415 views

Looking for credit card data and other PII in files

I'm looking for ways to check for the presence of credit-card data and other personally identifiable information in files on a network I'm testing. Currently i'm doing this manually with the usual ...
0
votes
1answer
67 views

What should I do if I get no response from a security mailing list I reported a vulneratility to?

Two weeks ago I reported a vulnerability to a security mailing list of a large open source software organization. I provided details of how to reproduce the issue and the exact place in the code where ...
0
votes
2answers
49 views

To release as Open Source for Audit or to Keep “in house”

For cryptography, it is considered good practice to release the code so others can audit it...is this also true for penetration testing software?
4
votes
1answer
179 views

Proving SQL Injection Vulnerability

I have recently come across what I believe to be a serious flaw in the security of a 3rd party computer program used within my company. Apologies for deliberately keeping details vague, but I hope you ...
2
votes
0answers
377 views

Fosshub as an alternative to sourceforge for osx open source project, is it safe to use? [closed]

I want to download a well known open source app for OSX (security/encryption related), but I don't want to use Sourceforge for my download because I'm worried about malware. This is the second time ...
1
vote
0answers
434 views

Online Activation Succeeds, Website Registration of same Serial Key Does Not [closed]

I need to ascertain the validity of software I purchased. It passes one check (online activation) and fails another (registration of a software title at the manufacturer website). I am a belated ...
2
votes
1answer
52 views

Outsourced software development ISO27002 definition

In ISO27002 section 14.2.7 it sets out the requirements for outsourced software development. By Outsourced software development are they referring to bespoke software or does this also include ...
1
vote
1answer
274 views

How can Stolen Laptop tracking softwares survive OS reinstall?

Some softwares such as Computertrace claim that it can survive on a laptop even if the thief successfully reinstalls the operating system, reformats the hard drive, or (in some laptop models) swaps ...
0
votes
3answers
251 views

Hardware encryption for Flash Drives

Could someone tell me the difference between Hardware encryption and Software encryption? (With regards to flash drives, if it makes any difference). From what I understand, software encryption is ...
54
votes
5answers
4k views

Should security-critical code be reused or rewritten?

Usually, in programming, reusing code is always a better idea than writing your own implementation of an algorithm. If an implementation has been around for a long time and is still used by lots of ...
2
votes
1answer
138 views

Is it a security risk to have 'Control + j' functionality enabled in a production instance of PeopleSoft?

The control + j feature within PeopleSoft outputs a list of potentially interesting data for a potential attacker. The feature is generally used to aid in debugging. Here is a the [censored] output ...
2
votes
1answer
85 views

Should reverse connections be used to bypass NATs?

I'm planning on doing a demonstration on how remote administrative tools work for my schools computer security club. I plan on writing a RAT in C++ and demonstrating/explaining how it works. I ran ...
0
votes
0answers
168 views

Asking for more information about AlienVault.com using Spiceworks, viability of “suspicious IP” alert

Website here: alienvault.com I've been trying out Spiceworks for about a week, seeing what use I get out of it. Today I log in and see an alert: "(my computer) has established a connection to ...
1
vote
1answer
199 views

Malware infected ATMs in China via specialized device

Hackers inserted a specialized device which was connected to the notebook into the card reader slot on the ATM and installed malicious software. 100 thousand US dollars were stolen from at least seven ...
0
votes
2answers
65 views

Software validation process

Two days ago I asked that question: Are web browser able to use camera without permission? and I got an answer saying : "there have been multiple vulnerabilities in Flash, Chrome and even Facebook" ...
2
votes
1answer
154 views

Examples of software web clients (web browsers, IM clients, etc) written in “secure” / managed languages

After reading this article ("Everything is broken" by Quinn Norton) I was about to ask a question similar to this one (Why are security-crucial software written in unsafe languages?)... but actually I ...
0
votes
1answer
100 views

Do software systems become more secure every year? [closed]

It seems to me that computer software is becoming more secure every year - there are fewer zero-day exploits to be found, many hacker-proof concepts are becoming widespread (such as virtualization and ...
2
votes
2answers
281 views

Obstacle in Implementing a Time Limited/Number of Use Limited Software

How does one implement a trial period in a product properly, e.g. a trial period that lasts 30 days, or limits the number of product uses to 10? Storing the entries, even in an encrypted form, isn't ...