Questions tagged [software]

Computer software, or just software, is a collection of computer programs and related data that provides the instructions for telling a computer what to do and how to do it.

Filter by
Sorted by
Tagged with
-1
votes
2answers
116 views

Encrypt files without leaving a hint of the encryption algorithm used [closed]

I noticed after encrypting some files with 7zip that they contained the information about the encryption algorithm used AES 256, i want to know if there is a better software that doesn't leave traces ...
1
vote
4answers
197 views

What are the names of software vulnerabilities? [closed]

In web apps there are vulnerabilities like SQLi or XSS and many more. I heard that for hackers to hack a computer they have to find a vulnerability in a software that is running on an open port. ...
2
votes
1answer
46 views

How could malware disable third party security software?

I'm asking this question with the assumption that anything the user can do, so can malware. I'm using a third party firewall on my system to control which programs are able to access the internet. ...
2
votes
2answers
97 views

Do bug bounties ensure that software is secure?

I've been looking into third-party encryption tools and noticed that this particular provider has a bounty going on. Does this mean that they take security more seriously than other providers? How ...
8
votes
1answer
2k views

ASLR bypass with info leak

Working through the Modern Binary Exploitation course from RPI here. I'm having trouble with an example on exploiting ASLR which is supposed to use a memory leak to gain information about the stack to ...
3
votes
1answer
153 views

How do I verify that my TurboTax software is legitimate

I bought TurboTax software from Amazon (downloaded Mac version). Therefore, I know it is safe to use. However, if one wants to verify the software has not been tampered with, how do we do that? Mac ...
0
votes
1answer
82 views

What are security best practices and compliance areas in Agile Software Development process

How do you ensure on a high level that developed software is secure and compliant. We want to introduce a service checklist that will list each item, including "Security and Compliance" section. It ...
-3
votes
1answer
199 views

Why, with such insanely powerful computers, are no efforts to speak of spent on security? [closed]

The only technology "news" I ever hear about go on about "performance this" and "performance that". I haven't felt that my computer was "slow" since the 1990s. 20 years ago. Yet this is the only thing ...
0
votes
1answer
89 views

Software Signing Standards

Is there a software signing certificates standard, officially or by popularity? As I understand the SSL/TLS/https certificates rules are specified by the RFCs. Mixed use of servers and clients from ...
0
votes
0answers
100 views

Hardware vulnerabilities vs software threats

What are the key differences between them? I find both of them would also be able to retrieve data from the host system and both also could cause harm. I do not understand why there are people who ...
0
votes
0answers
26 views

Possible to verify the integrity of AIDE itself?

I recently installed the package AIDE (Advanced Intrusion Detection Environment) on my Linux server. This is a web server installed about a year ago. Since no integrity checks have been done before on ...
0
votes
0answers
53 views

How to restrict software distribution or make sure it should not be copied [duplicate]

I Want to release software and it is going to be hosted on the client system. How to make sure that it should not be copied or how to restrict unpaid users using the software. I have 2 questions. ...
-2
votes
1answer
84 views

Upgrading Software Version: risk of an unknown vs known vulnerabilities

Is there any evidence or research into the likelihood, as well as damage, via vulnerabilities in previous versions compared to following iterations of software? For example, with every software ...
1
vote
2answers
89 views

Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]

Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
1
vote
4answers
131 views

Could've previous owner installed tracking software on my phone, even if I changed the SIM card?

I recently bought a used mobile Android phone. Is there any way to install malware, tracking software etc. that is not on the SIM card, but on some other kind of memory disc?
91
votes
7answers
102k views

Is MD5 considered insecure?

After all these articles circulating online about md5 exploits, I am considering switching to another hash algorithm. As far as I know it's always been the algorithm of choice among numerous DBAs. Is ...
0
votes
0answers
37 views

What are good examples of “Dynamic opaque predicates”?

I am studying the concept of software obfuscation and come across this interesting scheme, dynamic opaque predicate: Basically it either goes two false branches, or two true branches, and ...
1
vote
0answers
55 views

Is there any security advantage of installing into AppData folder? [duplicate]

A lot of programs today allow to install into user appdata subdirectory to avoid installing system wide. Is there any advantage of this? Can programs installed system wide be more exploited than ...
2
votes
0answers
134 views

Can developers stop their software from being flagged as malicious by AV products?

This may not be the correct community for this question, I apologize if that's the case. Scenario: A software development company has created a collection of small desktop applications. They have ...
0
votes
1answer
302 views

USB stick encryption on specific network/domain

I am in a difficult situation here. For my company I need to make the use of USB sticks secure, their demand is that when someone uses a USB stick it will only be readable and accessible on the ...
1
vote
1answer
115 views

What guidelines can I follow to know if I can trust a software editor? [closed]

At work or at home, I often find some useful piece of software. Sometimes I may find it on a forum, mentioned on a video, or by talking to a colleague. But how do I know if the editor of the software ...
5
votes
6answers
221 views

If a digital camera can be “hacked” in the ransomware sense, how best to protect it?

Increasingly, I hear of hackers gaining control over digital devices for their own gain or merely to be a nuisance. I don't know but suspect that when tethered to another device such as a computer, ...
1
vote
1answer
47 views

VPN gateway software check enforcement as part of access policie

Can a VPN gateway enforce policies in form of checking whether a particular software or set of software is installed on the endpoint and based on that allow / deny the remote connection to be ...
1
vote
1answer
320 views

Is anything missing in the offline software licensing plan?

I'm working on a piece of software written in VB.NET for Windows machines (mainly Windows Server). I have some understanding of cryptography and security, but I want some good old fashioned peer ...
4
votes
1answer
117 views

What measures beyond those for general software, if any, should be taken when preparing a work PC for lunchtime or after-hour gaming?

In some companies (not the one I work for), there are certain groups of employees that have permission of management to play certain games on their office network after the work day has ended. This ...
2
votes
1answer
66 views

When writing software do all programs have a signature? [closed]

I have always been curious if all software have a signature for whatever reason or is only related to AV.
1
vote
2answers
124 views

Notepad++ updater had no tittle or info. Is this okay?

While updating Notepad++, the updater window showed no title or information. Is this okay from security point of view ?
0
votes
0answers
182 views

How do hacking groups get a license anonymously for threat emulation software like Cobalt Strike?

I've seen that a lot of hacking groups replicate techniques and attacks from red teams using software like Cobalt Strike and Powershell frameworks for offensive security and red teaming like Nishang ...
1
vote
2answers
89 views

Can plugins for text editors and IDEs be malicious?

I'm always a little cautious about plugins I install for text editors or browsers, but can they be dangerous and cause the text editor or browser to behave in a malicious way? For example, can a ...
0
votes
1answer
735 views

Meterpreter reverse shell alternative

What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
3
votes
1answer
69 views

Why are security properties non-compositional?

I had a lecture in security and it was stated that security properties are non-compositional. I don't quite understand what that means and can't find anything in the internet about that. Can anyone ...
-2
votes
1answer
56 views

Is Using A Firewall with LibreOffice Enough If Not, Any Recommendations? [closed]

I recently learned a little about LibreOffice and OpenOffice. I am considering using LibreOffice on my laptop but am concerned about security. What I've read online (the terminology) is over my head. ...
15
votes
3answers
71k views

What does Blue Coat Unified Agent application do?

I've experienced a crash of the Blue Coat Unified Agent tray application on my business laptop. I was wondering what is the exact purpose of this software, and how is it supposed to help me or the ...
3
votes
1answer
519 views

Understanding which privacy tools provide very similar functionality

https://amiunique.org/tools has a list of recommended privacy tools. uBlock Ghostery HTTPS Everywhere Lightbeam AdBlock Plus Disconnect Privacy Badger NoScript Self-destructing cookies However, aren'...
5
votes
1answer
13k views

What software can be used to read data from smart cards? [closed]

I have recently got this smart card reader. In the description it says that it can be used to read data from fidelity smart cards, library cards, etc. The technical card compatibility support is as ...
1
vote
2answers
425 views

How to search for all computers running memcached on shodan

Memcached is a caching software typically used in web servers. Many web servers like wikipedia, wordpress, flickr cache their data using Memcached software. Memcached server typically runs on port ...
1
vote
4answers
417 views

What exactly is endpoint security?

Would someone explain what endpoint security is, exactly? What do companies like McAfee and Symantec sell with their endpoint security suites? I also would like to learn if endpoint security ...
0
votes
0answers
57 views

Does WinRar leave cache of opened Zip Archives (Nothing extracted)

Downloaded a .zip, via a secure app that deleted the only place it was downloaded (supposedly, who knows if defragmentation left other traces, the download happened by accident, on main OS WIN10, no ...
15
votes
3answers
543 views

Are browser wrappers in software bad for users?

These days I see a lot of browser wrappers in software. For example: when you purchase something in the Steam desktop application and use PayPal, you enter your PayPal security details in a browser ...
-1
votes
1answer
90 views

Is it (reasonably) save to install wechat on my linux?

Apparently it is possible to install wechat on Linux now, which I would like to do. I have no illusions that my conversation might be monitored by wechat itself or the Chinese government. However, I ...
5
votes
7answers
5k views

Software Testing vs (Web) Penetration Testing

I would like to ask about the differences between Software Testing and Web Application Penetration Testing. I am aware of usage different tools in both disciplines Software Testing (JIRA/Selenium) ...
4
votes
2answers
186 views

How can I generate short signatures?

I'm looking to create a licensing system, and I need a serial generation scheme. I want to sign some data with a private key and verify it with a public key embedded in the software. I don't need ...
1
vote
2answers
76 views

What risks do I take using an application that always requires admin access and AV exception listing?

My knowledge level about OSs and security is extremely low. Is anyone willing to tell me whether it's risky for me to use an application that requires me to run it with admin permissions and to put it ...
-2
votes
1answer
118 views

Unauthorised transfers to developer's account in bank transaction software [closed]

Our organization has software for transactions. The person who designed this software illegally designed it in such a way that when any transaction is performed 0.5 percent of the transaction goes ...
15
votes
5answers
7k views

Is KeePass a good defense against keyloggers?

KeePass is a program in which you can store your password and copy and paste them into websites. Does anyone know if it is safe against key logging software? Does key logging software pick up what you ...
16
votes
2answers
1k views

How to decide “I'll trust this software” for closed-source or precompiled software?

I am interested in watching an upcoming webinar that will discuss Puppet on AWS. In order to participate one needs to install a software application. Naturally, I won't do that as I can find enough ...
-1
votes
1answer
80 views

Does Google Chrome collect data unrelated to browsing activity?

I'm exclusively running Firefox, but I'd like to install the leading browser Chrome for troubleshooting purposes. Browsing-related data collection isn't a concern in this case, but I'm worried if the ...
2
votes
0answers
213 views

Is This a Virus?

i want to ask about a program is it a malware or a program from mozilla? When i turn on my pc it start normally but i see an open program called update.exe and it have a firefox icon on it, when i ...
2
votes
1answer
164 views

Are there ways in determining if devices such as router have been tampered with?

In working with a number of non-profit organizations, devices such as routers that may have been used by other businesses are often acquired. Equally, devices are often inherited through other ...
-1
votes
1answer
119 views

Does Bloatware on a brand new PC create security risks?

Some new computers come with software I don't need or want. It is not advertised as part of the product I am purchasing. Generally this is called Bloatware. Bloatware 1.(n) Software that ...