Questions tagged [software]
Computer software, or just software, is a collection of computer programs and related data that provides the instructions for telling a computer what to do and how to do it.
235
questions
2
votes
1
answer
73
views
How much should we generally trust security-only support of a legacy version of a software and what should we look out for? [closed]
Many software vendors maintain old versions by providing security-only fixes. Some examples include:
Android on Google Pixel Phones.
Python.
Firefox ESR.
My understanding is that people are most ...
- 123
0
votes
1
answer
94
views
Salvageable computer parts after being hacked [duplicate]
(edited)
My question main is much pretty where can malware hide after it's infected your computer and what parts should I keep and throw away to make sure the infection no longer spreads. Does factory ...
- 9
15
votes
7
answers
4k
views
Choosing laptop brand for company
Recently we have been wondering whether it makes a difference (from a security and privacy perspective) what brand laptops should be used in our company. I have heard wild stories about backdoors ...
- 151
0
votes
2
answers
138
views
Is it possible to make whitelisted software do custom, malicious things?
Let's say there's a keylogger secretly installed in an employee's computer. The keylogger recorded a bunch of information, but the well-configured firewall blocked the keylogger from sending that ...
- 217
-1
votes
1
answer
341
views
bruteforce local software's password
There is a lot of online tools to bruteforce online server like hydra and offline with hashes like hashcat. Yet it seems very weird that there is not a single offline bruteforcing app for software. ...
1
vote
0
answers
89
views
Where to find updated best practice on using unmaintained or legacy software on a patched OS?
I assume most of the security issues with old software are
that scripts or .exe will run against the bugs in the software.
and that the firmware on the device OS bugs aren't patched.
Or some parts of ...
- 129
-1
votes
2
answers
550
views
Is end-to-end encryption really secure?
If a software uses end-to-end encryption and the encryption key of a client never leaves the device, isn't it still relatively "simple" to get the encryption keys of clients?
A hacker just ...
- 99
4
votes
1
answer
242
views
Is it possible to see the previous contents in a word file?
I have a word document where I have turned off the tracking history so technically no one could track my previous changes. What if I send the word document via email? Could someone possibly use a ...
- 41
0
votes
1
answer
126
views
Are computers exposed when software is installed on a system?
As a neophite in security, I'm very curious to understand if companies can audit computers that their software is being installed on during the installation process, and report back to their servers?
...
0
votes
1
answer
224
views
Need secure site substitute for printfriendly.com [closed]
At the present time, the website "printfriendly.com" is not available in my work environment. I had submitted an appeal to our helpdesk to have this site reviewed. Their response: That site ...
1
vote
0
answers
102
views
Does Google Update perform cryptographic checks against releases?
My company is looking to allow Google Chrome to self-update, a necessity as we are finding it difficult to keep up with their release cycle in order to mitigate vulnerabilities.
On the pro side, ...
- 179
0
votes
0
answers
28
views
Is using free product key or license key safe [duplicate]
I have installed VMWare Workstation Pro from the official website. Now after the trial version has ended, I have searched for free products key on the internet. If I use these product keys, will it be ...
- 43
1
vote
0
answers
615
views
Do anti-cheat software actually "patch" the UEFI firmware on your motherboard?
I've recently read about the new game called Bloodhunt containing an Anti-Cheat, which had a bug, in which the anti-cheat service would stay installed even though the game is removed. The top Steam ...
- 1,633
4
votes
1
answer
2k
views
How to maintain and enforce an approved list of software?
I work in a software-development company where we have a lot of tech-savvy people.
For ISO27001 certification we need to maintain list of approved software. And I'd like to understand how in practice ...
- 143
0
votes
1
answer
988
views
Some introductory reverse engineering help on finding a string
I understand the crackme I am researching is from 2007, however this was the point in my life when I initially became interested in reverse engineering and wish to complete it for nostalgia sake. ...
- 211
0
votes
1
answer
3k
views
Is there a more convenient, yet safe, way to run DOSBox-X than I'm currently doing it?
I recently learned about DOSBox-X. It's basically a somewhat less awful version of the basically-abandoned DOSBox.
I currently have it installed inside a Windows 10 VM inside of my Windows 10 bare ...
- 1
1
vote
0
answers
182
views
How to stop 3rd party libraries from being reported as malicious, if they were part of malicious programs in the past?
Some are standard user space dll’s and another one is actually a windows driver. The libraries alone are not dangerous and are pure utilities but they can be used by bad guys, like most software tools....
- 171
3
votes
1
answer
2k
views
How dangerous is Code With Me, a remote pair programming tool from Jetbrains?
I've been looking into this very useful remote pair programming plugin from JetBrains called Code With Me, but want to understand all the security implications.
From their FAQ page:
How is data ...
- 143
0
votes
1
answer
443
views
How can a program remove the menu in Control-Alt-Delete (Secure desktop) in Windows?
In reference to another post about the Respondus Lockdown Browser, I was wondering how can a program edit and remove parts of the "Secure Desktop" Ctrl+Alt+Del menu in Windows, as well as ...
- 31
0
votes
1
answer
136
views
Building software in group [closed]
If one made software, but later needed others to work on the project, how to secure the software files and source code if one of the developers tried to share the source code with others or if someone ...
26
votes
5
answers
6k
views
How can a non-admin program cover your entire screen with a window?
This year, since many students are online, College Board (the company that administers AP Exams in the US, along with the SAT) recently released its Digital Testing App. Once installed, and going ...
- 361
0
votes
1
answer
200
views
The difficulty of securely storing a password
We have an open source software that allows users to be created. The users are saved in an LDAP directory. The software connects to the LDAP as an administrator to write a new entry for a new user, or ...
- 123
1
vote
0
answers
129
views
Shuffle Tool / Software [closed]
I use GPG symmetric, to encrypt text file.
Is it possible to use GPG symmetric, to encrypt a text file, and at the same time, add additional setting to the encrypted file, to give us 2 conditions:
...
- 11
1
vote
1
answer
243
views
Is Acronis True Image encryption safe? [duplicate]
This question has been asked before but a lot of time has passed since then.
The older question had an answer that the Eula said that Acronis can decrypt the data. I can no longer find that part.
Can ...
- 13
1
vote
1
answer
216
views
How do I destroy references to wiped files?
I partially wiped my hard drive using the null-fill method through command prompt by
copying a 1 Gigabyte file filled with NULL over and over until I ran out of space.
After that I tried recovering ...
- 11
1
vote
1
answer
305
views
Use of SoftHSM2 in commercial products
I came across SoftHSM2 from OpenDNSSec(BSD license) which is a drop-in replacement for HSM except that SoftHSM2 only lacks physical security. Also, being the fact that PKCS#11 is the standard ...
0
votes
1
answer
246
views
How to distribute bash scripts to multiple IOT devices securely
Here is the dilemma we're having: we developed proprietary bash scripts that do something, which is meant to be secure and closed source.
Our customers however will have to buy separate IOT devices ...
- 687
1
vote
2
answers
593
views
how to download software without fear of viruses? [duplicate]
I've always been afraid of downloading software because of viruses, and that has affected my life as a programmer a lot. So, I want some tips to be able to install and download software without fear ...
- 113
0
votes
1
answer
173
views
Is it possible to use pass, the command line PW manager, without leaking details? Does it matter?
I'm familiar with password managers like KeePass, and that there are a variety of interfaces for them. However, I've decided that I rather like the charm of pass. It's command-line oriented, and ...
- 1,835
0
votes
1
answer
284
views
MFA using PKI certificates [closed]
I'm trying to set up a multi factor authentication using PKIs certificates.
A PKI infrastructure is ready to use and i'm planning to put these certificates on smart cards.
I was looking for a smart ...
- 1
0
votes
1
answer
569
views
Recommendations on minimal alternatives to openssh [closed]
Although openssh is awesome, I'm interested in exploring some more lightweight FLOSS alternatives to use for connecting to servers I'm administrating (and using alone). Since I only need a minimal ...
- 121
6
votes
2
answers
2k
views
How do EDR prevent you from uninstalling even as local admin?
I have an CrowdStrike EDR and it seems like the only way to disable this on all OS is to provide maintenance-token or ask CrowdStrike to disable the defences so you can uninstall it. I also have a ...
- 773
4
votes
1
answer
5k
views
How can wkhtmltopdf be used without introducing a security vulnerability?
Background
Per the project website, wkhtmltopdf is a "command line tool to render HTML into PDF using the Qt WebKit rendering engine. It runs entirely "headless" and does not require a ...
- 452
0
votes
1
answer
156
views
Security of downloaded softwares [duplicate]
I downloaded Rufus and Win32 Disk Imager from Sourceforge and used them on a flash drive to boot another operating system. I'd like to know if it's possible that one of these infected my OS or ...
0
votes
2
answers
148
views
Connect Cables in pc and it’s affect [closed]
Is there anyway I can know if the cable I use to charge my phone in it was connect to my pc before or not? Is there something in pc can let me see that because my pc contain some malware and spy files ...
5
votes
1
answer
297
views
There seems like a wide gaping hole in the process for checking integrity of e.g. linux distro releases
Many Linux distributions (e.g. Fedora) recommend using downloaded signing keys to verify the integrity of downloaded checksums. This seems utterly ridiculous to me, since the downloaded keys are just ...
- 53
0
votes
1
answer
153
views
Software update process (dependencies) in organization
Wondering how other organizations manage software update process.
We are a startup, were we try to define components owners, which should update them (security updates etc).
This does not to seem to ...
- 997
9
votes
1
answer
2k
views
Does HTTP/2 prevent security vulnerabilites like CRLF injection?
Which vulnerabilites does HTTP/2 prevent?
More specifically:
Does it prevent HTTP request smuggling?
Does it prevent HTTP response splitting / CRLF injection?
- 253
1
vote
0
answers
152
views
Protect USB from reading by using PC identity
Is there any way (software or hardware solution) to create a usb drive that can make its contents readable only on specific PCs using their hardware serial numbers?
- 111
-1
votes
2
answers
250
views
Encrypt files without leaving a hint of the encryption algorithm used [closed]
I noticed after encrypting some files with 7zip that they contained the information about the encryption algorithm used AES 256, i want to know if there is a better software that doesn't leave traces ...
- 5
4
votes
2
answers
181
views
How could malware disable third party security software?
I'm asking this question with the assumption that anything the user can do, so can malware.
I'm using a third party firewall on my system to control which programs are able to access the internet. ...
1
vote
4
answers
324
views
What are the names of software vulnerabilities? [closed]
In web apps there are vulnerabilities like SQLi or XSS and many more. I heard that for hackers to hack a computer they have to find a vulnerability in a software that is running on an open port.
...
- 33
2
votes
2
answers
179
views
Do bug bounties ensure that software is secure?
I've been looking into third-party encryption tools and noticed that this particular provider has a bounty going on. Does this mean that they take security more seriously than other providers? How ...
0
votes
1
answer
353
views
What are security best practices and compliance areas in Agile Software Development process
How do you ensure on a high level that developed software is secure and compliant.
We want to introduce a service checklist that will list each item, including "Security and Compliance" section.
It ...
- 997
-2
votes
1
answer
276
views
Why, with such insanely powerful computers, are no efforts to speak of spent on security? [closed]
The only technology "news" I ever hear about go on about "performance this" and "performance that". I haven't felt that my computer was "slow" since the 1990s. 20 years ago. Yet this is the only thing ...
- 15
0
votes
0
answers
154
views
Possible to verify the integrity of AIDE itself?
I recently installed the package AIDE (Advanced Intrusion Detection Environment) on my Linux server. This is a web server installed about a year ago. Since no integrity checks have been done before on ...
- 201
0
votes
0
answers
178
views
How to restrict software distribution or make sure it should not be copied [duplicate]
I Want to release software and it is going to be hosted on the client system. How to make sure that it should not be copied or how to restrict unpaid users using the software.
I have 2 questions.
...
-2
votes
1
answer
210
views
Upgrading Software Version: risk of an unknown vs known vulnerabilities
Is there any evidence or research into the likelihood, as well as damage, via vulnerabilities in previous versions compared to following iterations of software?
For example, with every software ...
- 218
1
vote
2
answers
239
views
Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]
Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
- 261
0
votes
0
answers
238
views
What are good examples of "Dynamic opaque predicates"?
I am studying the concept of software obfuscation and come across this interesting scheme, dynamic opaque predicate:
Basically it either goes two false branches, or two true branches, and ...
- 183