Questions tagged [software]

Computer software, or just software, is a collection of computer programs and related data that provides the instructions for telling a computer what to do and how to do it.

Filter by
Sorted by
Tagged with
0 votes
0 answers
35 views

PDF security analysis tool for non-experts

I occasionally come across PDFs from shady sources. Is there a tool that a non-expert can use, which can check them for common vulnerabilities? I have seen this question: Malicious PDF Analysis but I'...
user avatar
0 votes
1 answer
60 views

Are computers exposed when software is installed on a system?

As a neophite in security, I'm very curious to understand if companies can audit computers that their software is being installed on during the installation process, and report back to their servers? ...
user avatar
0 votes
1 answer
48 views

Need secure site substitute for printfriendly.com [closed]

At the present time, the website "printfriendly.com" is not available in my work environment. I had submitted an appeal to our helpdesk to have this site reviewed. Their response: That site ...
user avatar
1 vote
0 answers
50 views

Does Google Update perform cryptographic checks against releases?

My company is looking to allow Google Chrome to self-update, a necessity as we are finding it difficult to keep up with their release cycle in order to mitigate vulnerabilities. On the pro side, ...
user avatar
  • 169
0 votes
0 answers
26 views

Is using free product key or license key safe [duplicate]

I have installed VMWare Workstation Pro from the official website. Now after the trial version has ended, I have searched for free products key on the internet. If I use these product keys, will it be ...
user avatar
  • 33
1 vote
0 answers
187 views

Do anti-cheat software actually "patch" the UEFI firmware on your motherboard?

I've recently read about the new game called Bloodhunt containing an Anti-Cheat, which had a bug, in which the anti-cheat service would stay installed even though the game is removed. The top Steam ...
user avatar
2 votes
1 answer
203 views

How to maintain and enforce an approved list of software?

I work in a software-development company where we have a lot of tech-savvy people. For ISO27001 certification we need to maintain list of approved software. And I'd like to understand how in practice ...
user avatar
  • 23
0 votes
1 answer
111 views

Some introductory reverse engineering help on finding a string

I understand the crackme I am researching is from 2007, however this was the point in my life when I initially became interested in reverse engineering and wish to complete it for nostalgia sake. ...
user avatar
0 votes
0 answers
569 views

Is there a more convenient, yet safe, way to run DOSBox-X than I'm currently doing it?

I recently learned about DOSBox-X. It's basically a somewhat less awful version of the basically-abandoned DOSBox. I currently have it installed inside a Windows 10 VM inside of my Windows 10 bare ...
user avatar
  • 1
1 vote
0 answers
142 views

How to stop 3rd party libraries from being reported as malicious, if they were part of malicious programs in the past?

Some are standard user space dll’s and another one is actually a windows driver. The libraries alone are not dangerous and are pure utilities but they can be used by bad guys, like most software tools....
user avatar
  • 141
1 vote
1 answer
707 views

How dangerous is Code With Me, a remote pair programming tool from Jetbrains?

I've been looking into this very useful remote pair programming plugin from JetBrains called Code With Me, but want to understand all the security implications. From their FAQ page: How is data ...
user avatar
  • 111
0 votes
1 answer
215 views

How can a program remove the menu in Control-Alt-Delete (Secure desktop) in Windows?

In reference to another post about the Respondus Lockdown Browser, I was wondering how can a program edit and remove parts of the "Secure Desktop" Ctrl+Alt+Del menu in Windows, as well as ...
user avatar
0 votes
1 answer
99 views

Building software in group [closed]

If one made software, but later needed others to work on the project, how to secure the software files and source code if one of the developers tried to share the source code with others or if someone ...
user avatar
26 votes
5 answers
6k views

How can a non-admin program cover your entire screen with a window?

This year, since many students are online, College Board (the company that administers AP Exams in the US, along with the SAT) recently released its Digital Testing App. Once installed, and going ...
user avatar
  • 361
0 votes
1 answer
136 views

The difficulty of securely storing a password

We have an open source software that allows users to be created. The users are saved in an LDAP directory. The software connects to the LDAP as an administrator to write a new entry for a new user, or ...
user avatar
1 vote
0 answers
87 views

Shuffle Tool / Software [closed]

I use GPG symmetric, to encrypt text file. Is it possible to use GPG symmetric, to encrypt a text file, and at the same time, add additional setting to the encrypted file, to give us 2 conditions: ...
user avatar
  • 11
1 vote
1 answer
133 views

Is Acronis True Image encryption safe? [duplicate]

This question has been asked before but a lot of time has passed since then. The older question had an answer that the Eula said that Acronis can decrypt the data. I can no longer find that part. Can ...
user avatar
1 vote
1 answer
161 views

How do I destroy references to wiped files?

I partially wiped my hard drive using the null-fill method through command prompt by copying a 1 Gigabyte file filled with NULL over and over until I ran out of space. After that I tried recovering ...
user avatar
1 vote
1 answer
153 views

Use of SoftHSM2 in commercial products

I came across SoftHSM2 from OpenDNSSec(BSD license) which is a drop-in replacement for HSM except that SoftHSM2 only lacks physical security. Also, being the fact that PKCS#11 is the standard ...
user avatar
0 votes
1 answer
144 views

How to distribute bash scripts to multiple IOT devices securely

Here is the dilemma we're having: we developed proprietary bash scripts that do something, which is meant to be secure and closed source. Our customers however will have to buy separate IOT devices ...
user avatar
  • 667
1 vote
2 answers
231 views

how to download software without fear of viruses? [duplicate]

I've always been afraid of downloading software because of viruses, and that has affected my life as a programmer a lot. So, I want some tips to be able to install and download software without fear ...
user avatar
0 votes
1 answer
123 views

Is it possible to use pass, the command line PW manager, without leaking details? Does it matter?

I'm familiar with password managers like KeePass, and that there are a variety of interfaces for them. However, I've decided that I rather like the charm of pass. It's command-line oriented, and ...
user avatar
  • 1,745
0 votes
1 answer
162 views

MFA using PKI certificates [closed]

I'm trying to set up a multi factor authentication using PKIs certificates. A PKI infrastructure is ready to use and i'm planning to put these certificates on smart cards. I was looking for a smart ...
user avatar
  • 1
0 votes
1 answer
290 views

Recommendations on minimal alternatives to openssh [closed]

Although openssh is awesome, I'm interested in exploring some more lightweight FLOSS alternatives to use for connecting to servers I'm administrating (and using alone). Since I only need a minimal ...
user avatar
  • 121
5 votes
2 answers
729 views

How do EDR prevent you from uninstalling even as local admin?

I have an CrowdStrike EDR and it seems like the only way to disable this on all OS is to provide maintenance-token or ask CrowdStrike to disable the defences so you can uninstall it. I also have a ...
user avatar
3 votes
1 answer
2k views

How can wkhtmltopdf be used without introducing a security vulnerability?

Background Per the project website, wkhtmltopdf is a "command line tool to render HTML into PDF using the Qt WebKit rendering engine. It runs entirely "headless" and does not require a ...
user avatar
0 votes
1 answer
114 views

Security of downloaded softwares [duplicate]

I downloaded Rufus and Win32 Disk Imager from Sourceforge and used them on a flash drive to boot another operating system. I'd like to know if it's possible that one of these infected my OS or ...
user avatar
0 votes
2 answers
118 views

Connect Cables in pc and it’s affect [closed]

Is there anyway I can know if the cable I use to charge my phone in it was connect to my pc before or not? Is there something in pc can let me see that because my pc contain some malware and spy files ...
user avatar
5 votes
1 answer
260 views

There seems like a wide gaping hole in the process for checking integrity of e.g. linux distro releases

Many Linux distributions (e.g. Fedora) recommend using downloaded signing keys to verify the integrity of downloaded checksums. This seems utterly ridiculous to me, since the downloaded keys are just ...
user avatar
0 votes
1 answer
113 views

Software update process (dependencies) in organization

Wondering how other organizations manage software update process. We are a startup, were we try to define components owners, which should update them (security updates etc). This does not to seem to ...
user avatar
  • 937
9 votes
1 answer
989 views

Does HTTP/2 prevent security vulnerabilites like CRLF injection?

Which vulnerabilites does HTTP/2 prevent? More specifically: Does it prevent HTTP request smuggling? Does it prevent HTTP response splitting / CRLF injection?
user avatar
1 vote
0 answers
112 views

Protect USB from reading by using PC identity

Is there any way (software or hardware solution) to create a usb drive that can make its contents readable only on specific PCs using their hardware serial numbers?
user avatar
-1 votes
2 answers
176 views

Encrypt files without leaving a hint of the encryption algorithm used [closed]

I noticed after encrypting some files with 7zip that they contained the information about the encryption algorithm used AES 256, i want to know if there is a better software that doesn't leave traces ...
user avatar
  • 5
4 votes
2 answers
137 views

How could malware disable third party security software?

I'm asking this question with the assumption that anything the user can do, so can malware. I'm using a third party firewall on my system to control which programs are able to access the internet. ...
user avatar
1 vote
4 answers
275 views

What are the names of software vulnerabilities? [closed]

In web apps there are vulnerabilities like SQLi or XSS and many more. I heard that for hackers to hack a computer they have to find a vulnerability in a software that is running on an open port. ...
user avatar
  • 33
2 votes
2 answers
138 views

Do bug bounties ensure that software is secure?

I've been looking into third-party encryption tools and noticed that this particular provider has a bounty going on. Does this mean that they take security more seriously than other providers? How ...
user avatar
0 votes
1 answer
277 views

What are security best practices and compliance areas in Agile Software Development process

How do you ensure on a high level that developed software is secure and compliant. We want to introduce a service checklist that will list each item, including "Security and Compliance" section. It ...
user avatar
  • 937
-2 votes
1 answer
246 views

Why, with such insanely powerful computers, are no efforts to speak of spent on security? [closed]

The only technology "news" I ever hear about go on about "performance this" and "performance that". I haven't felt that my computer was "slow" since the 1990s. 20 years ago. Yet this is the only thing ...
user avatar
0 votes
0 answers
89 views

Possible to verify the integrity of AIDE itself?

I recently installed the package AIDE (Advanced Intrusion Detection Environment) on my Linux server. This is a web server installed about a year ago. Since no integrity checks have been done before on ...
user avatar
  • 151
0 votes
0 answers
116 views

How to restrict software distribution or make sure it should not be copied [duplicate]

I Want to release software and it is going to be hosted on the client system. How to make sure that it should not be copied or how to restrict unpaid users using the software. I have 2 questions. ...
user avatar
-2 votes
1 answer
139 views

Upgrading Software Version: risk of an unknown vs known vulnerabilities

Is there any evidence or research into the likelihood, as well as damage, via vulnerabilities in previous versions compared to following iterations of software? For example, with every software ...
user avatar
  • 218
1 vote
2 answers
183 views

Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]

Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
user avatar
0 votes
0 answers
120 views

What are good examples of "Dynamic opaque predicates"?

I am studying the concept of software obfuscation and come across this interesting scheme, dynamic opaque predicate: Basically it either goes two false branches, or two true branches, and ...
user avatar
1 vote
4 answers
186 views

Could've previous owner installed tracking software on my phone, even if I changed the SIM card?

I recently bought a used mobile Android phone. Is there any way to install malware, tracking software etc. that is not on the SIM card, but on some other kind of memory disc?
user avatar
1 vote
0 answers
75 views

Is there any security advantage of installing into AppData folder? [duplicate]

A lot of programs today allow to install into user appdata subdirectory to avoid installing system wide. Is there any advantage of this? Can programs installed system wide be more exploited than ...
user avatar
2 votes
0 answers
333 views

Can developers stop their software from being flagged as malicious by AV products?

This may not be the correct community for this question, I apologize if that's the case. Scenario: A software development company has created a collection of small desktop applications. They have ...
user avatar
  • 121
1 vote
1 answer
88 views

VPN gateway software check enforcement as part of access policie

Can a VPN gateway enforce policies in form of checking whether a particular software or set of software is installed on the endpoint and based on that allow / deny the remote connection to be ...
user avatar
  • 1,498
5 votes
6 answers
434 views

If a digital camera can be "hacked" in the ransomware sense, how best to protect it?

Increasingly, I hear of hackers gaining control over digital devices for their own gain or merely to be a nuisance. I don't know but suspect that when tethered to another device such as a computer, ...
user avatar
2 votes
1 answer
1k views

Is anything missing in the offline software licensing plan?

I'm working on a piece of software written in VB.NET for Windows machines (mainly Windows Server). I have some understanding of cryptography and security, but I want some good old fashioned peer ...
user avatar
2 votes
1 answer
113 views

When writing software do all programs have a signature? [closed]

I have always been curious if all software have a signature for whatever reason or is only related to AV.
user avatar
  • 35

1
2 3 4 5