Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [windows-8]

Windows 8 is the latest release of Microsoft Windows and is the successor to Windows 7, scheduled for release on October 26, 2012. If your issue does not relate to security issues ask in superuser.stackexchange.com

0
votes
0answers
125 views

How Windows 8 and Windows 10 hash account password?

I need some accurate information about how Windows 8 and Windows 10 perform hashing user account passwords. I know that they are stored in SAM file and NTLMv2 algorithm is used. But while using ...
-3
votes
2answers
228 views

Reverse DoS Attack [closed]

Is there anything on a computer or a router that prevents a hacker from doing a DoS on you. So let's say that you are going to https://www.google.com/. When you enter that in the search bar, it sends ...
0
votes
1answer
863 views

How can I remove Sticky Keys Exploit via cmd? [closed]

Recently, on my Windows 8.1 VM, I added a "Sticky Keys" exploit because I forgot my password. Now, I wish to remove it via cmd. This is what I imputed: REG DELETE "HKLM\SOFTWARE\Microsoft\Windows NT\...
0
votes
3answers
222 views

how to protect from LM hash cracking

I have read that modifying the NoLMHash value in the registry can prevent LM hashing, but I still can dump the hash after doing this. What does this key do? How can I prevent LM password hash dumping ...
2
votes
0answers
232 views

How easily could a picture password be hacked with brute force? [duplicate]

In Windows 8.1 Microsoft introduced a method to login using gestures over a picture. The picture password is determined by size, position and direction of any combination of circles, straight lines ...
0
votes
1answer
83 views

Capture windows cmd prompt execution? [closed]

Occasionally (one/two times a day), on my Win 8.1 PC there's a cmd prompt popping up for about 0.1 sec, and closes automatically. It's scary, and I wonder if there's a way to capture who's doing it (...
2
votes
2answers
1k views

EternalBlue exploit doesn't work against windows 8

i have tried this poc: https://gist.github.com/worawit/074a27e90a3686506fc586249934a30e against a windows 8 target that i own, the code exits with an error that says: impacket.nmb.NetBIOSTimeout: ...
9
votes
2answers
1k views

Why does Chrome tell me this certificate is valid when it can't be verified?

Update: Now Chrome rejects this website for me. It seems the trusting is just cached somewhere? I guess this question isn't as interesting as I thought, but it'd be nice if someone could clarify it. ...
9
votes
3answers
3k views

Should antivirus HTTPS scanning be left on? Is it secure?

Some antivirus software MitMs, or through other methods, HTTPS connections in order to scan for malware, for example, Avast, and maybe other vendors too. Is the method they (let's say Avast as an ...
2
votes
1answer
847 views

How to set up a secure VirtualBox VM in Windows

What's a good way to make a Debian VM reasonably safe for online banking if running Windows as a host system? I thought of the following points: normal usage of the Windows system as a restricted ...
0
votes
1answer
53 views

Reinstalled Windows 8. Is the computer vulnerable during the wait for updates?

After re-installing Windows 8.1, during the wait for updates of an hour or more, is the computer vulnerable to being hacked (if it's running the Windows Firewall and an Anti-Virus program)?
2
votes
1answer
628 views

Does it Matter That Universal Windows Platform (UWP) is Open to Phishing Attacks?

A few years ago (a little over three now to be exact), I brought up what I consider to be a rather obvious (and serious) security issue with the Universal Windows Platform (UWP): The ability to use ...
5
votes
1answer
933 views

(ctrl + alt + del) on Windows 8/8.1/10

After seeing this answer I wondered, how is this done in newer versions of windows, where [ctrl + alt + del] is no longer required for login? Was this feature just removed, or is it somehow ...
1
vote
0answers
14 views

Unable to remove a trojan that affects IE [duplicate]

I'm unable to remove a Trojan from my computer (and also that of a colleague). I think it came from a compromised Drupal website which had 5 malicious PHP scripts (now removed). I have run several ...
0
votes
2answers
338 views

How reliable is the method of overwriting deleted files with large files? [duplicate]

In addition to the question posted regarding purging data without formatting and the ability to recover data with forensic tools, how reliable is the method regarding overwriting with large file sets? ...
2
votes
2answers
2k views

Deleted files and their traces

Lets say we delete various files , from hard disk A, with shift - delete , windows 8 . Then we copy new files to the same hard disk A. Then those new files we just copied there to hard disk A, we ...
0
votes
0answers
144 views

Sandboxing IE on metro interface

I hold a tablet with Windows 8.1. When I'm on the desktop interface I do use Sandboxie for normal internet usage to prevent having Windows infected. I wonder if there is a way to do the same with the ...
1
vote
0answers
144 views

Why does Windows realtime protection block specific URLs?

I have observed this strange behaviour with Windows (7 to 10). When active realtime protection is enabled, it blocks my own website. The page has nothing special (PHP and JavaScript), just good old ...
14
votes
5answers
8k views

Can autoplay USB stick spread virus to windows 8 or 10?

Autoplay was a security hole on older versions of Windows, but can I trust newer version like Windows 8 or 10 to insert USB stick without turning autoplay off?
7
votes
4answers
1k views

How to avoid local caches when I open encrypted files

For personal usage I tend to keep things that I want to hide or protect in rar archives encrypted and protected with a password. Today I launched an antivirus scan, and as result it found malware in a ...
0
votes
2answers
175 views

How to know when to install a certificate?

How do you actually know when a certificate is issued that your system doesn't recognize, whether to trust it or not? When I was setting up Outlook for Gmail I got prompted to install the following ...
18
votes
3answers
2k views

ISO27001 and Linux/Ubuntu

My company has an ISO 27001 certification. They provided me a new laptop with Windows 8 OS in it. I asked if I can have a Linux/Ubuntu OS installed, they said that it is not possible due to the ISO ...
3
votes
2answers
206 views

Can Windows 8 be PCI compliant?

I am in the process of getting PCI. I am in the last step in which I would need a secure PC on my internal network. All the scans I must run are only available through a plugin in browsers for Windows ...
1
vote
2answers
530 views

What are hardened ACLs for the Windows %systemroot% folder?

What are the recommended file permissions for %systemroot% in Windows 8.1? I couldn't find hardened file system permissions to apply to better secure a Windows installation.
1
vote
3answers
209 views

Sensitive issue regarding windows 8 password [closed]

Although I know this sort of request probably isn't exactly what stackoverflow is for, I am desperately seeking help. One of my best friends recently passed away and his parents asked me if I knew a ...
-2
votes
1answer
107 views

Official proof (document) that Linux is safer and faster than Windows [closed]

I work for the Mexican government, and even though everyone involved in Linux knows that it is safer and runs faster in most instances, I have not found an official document or authority that I can ...
2
votes
1answer
8k views

Microsoftonline.com, is this legit?

A couple weeks back I went to google and type in Office 365 to login and download the suite from my account after restoring my PC. https://www.google.co.uk/webhp?sourceid=chrome-instant&ion=1&...
0
votes
0answers
26 views

1e100.net Remote Address downloading something to my system behind the scenes [duplicate]

I have a brand new PC I got yesterday and am forced to use a dialup connection in the area I live in. Something was downloading from my internet last night behind the scenes even after I had all ...
0
votes
0answers
61 views

AutoRun/AutoPlay in Windows 8

It's widely known and accepted by most tech-savvy people, especially those with an affinity for security, that AutoRun/AutoPlay should be disabled due to a number of attack vectors that it opens up. ...
1
vote
2answers
468 views

How to be sure laptop's trusted certificates are safe

I have a Windows 8.1 Lenovo laptop. The evil Superfish app and certificate have been removed. My laptop has 36 certificates in certmgr.msc current user\third-party root certification authorities\...
-5
votes
3answers
11k views

Can I do hacking using Windows OS? [closed]

I have searched the web a numerous times but haven't found an explicit answer to my question. I've studied (at school and on my own) computer networks for 2 years, doing active programming for 4 years ...
5
votes
6answers
590 views

How to protect the company VIPs

Environment: small engineering company (<50 employees) and everyone is local administrator on their computer, including everyone in the management group. Setup: Some standard security features are ...
3
votes
2answers
962 views

Powershell opened up, switched to administrator mode and ran scripts all without me touching my computer. How worried should I be?

I'm on a laptop running Window 8.1 connected to the internet running Kaspersky. I am the sole user and administrator of this laptop. While going about my usual work, I paused for a moment (hands off ...
0
votes
1answer
154 views

Do you really have to go to the extremes this guide says? [duplicate]

http://lifehacker.com/how-can-i-stay-anonymous-with-tor-1498876762 Alright, so here's a lifehacker guide on how to remain anonymous. Do you really have to go to this high level of extreme to remain ...
1
vote
1answer
183 views

Recovering From Suspected MPEG Malware Attack

Against my better judgement I foolishly opened an MPEG video emailed to me from a friend's email address because the topic in the email was something we had recently discussed. I am fairly certain ...
9
votes
1answer
1k views

Is a local account on windows more secure than a microsoft account

I am using a local account on my Windows 8 computers rather than logging in with a Microsoft account. I see no reason why Microsoft needs to know my login credentials; it feels intrusive to me and it ...
12
votes
2answers
3k views

Does KASLR really provide more security against exploits?

I know all about how ASLR works, and how it has been implemented on both Linux and Windows systems. It provides an extra layer of protection that malware has to take into account. But nowadays with ...
3
votes
2answers
7k views

How does Bitlocker only-PIN method work?

Microsoft explained USB-key and TPM based BitLocker decryption process on this article. USB-Key process: The steps in the illustrated sequence are as follows: 1- The operating system starts ...
0
votes
1answer
5k views

System Account in Windows

I was thinking about SYSTEM account on windows 7 and while researching about it, i came to know that it is predefined account used by service control manager (SCM),The account is not recognised by ...
7
votes
4answers
39k views

Does Windows have a built-in password store?

What passwords are stored in Microsoft Windows? How can I know what password are saved in computer?
3
votes
1answer
708 views

Bitlocker on a laptop without carrying around recovery key

We have a rule in my company that all PC drives must be encrypted with BitLocker, including laptops. My own Windows 8 laptop has a tendency to hang at shutdown, black screen but the computer never ...
14
votes
2answers
3k views

How does Windows 8's Microsoft Account authentication work?

One of the new features to Windows 8 is the ability to log in to your PC using your credentials from a Microsoft Account. How is this implemented, and what steps are taken to prevent hijacking of ...
4
votes
3answers
975 views

Is Chrome in Metro Mode more secure than Chrome in Desktop Mode?

With Windows 8, Microsoft introduces the Metro Apps which run in a sandbox environment, and therefore should be more secure. I would be interested to know if this higher security that the metro apps ...
1
vote
2answers
2k views

Windows certificate store suddenly changed security level of one of my certificates

I use Windows 8.1 Pro 64 bit and IE11. I have two personal certificates (with private key) of mine in the system certificate store. They are both set to require a password before they can be used. ...
3
votes
0answers
217 views

Does Windows 8 UEFI Trusted Boot protect SSDT table from modification?

I read from a link that says: Trusted Boot takes over where Secure Boot leaves off. The bootloader verifies the digital signature of the Windows 8 kernel before loading it. The Windows 8 kernel, ...
7
votes
2answers
907 views

What are the security implications of linking a domain account with a personal Microsoft account in Windows 8?

Besides being able to mess up settings and having access to the personal SkyDrive account, what else might an attacker on the corporate network be able to do when the accounts are linked and settings ...
2
votes
2answers
2k views

Security behind the windows 8 eye

I use the Windows 8 operating system. Whenever I navigate to the login page of Internet Explorer 10, or even the login screen of the operating system, I see an eye symbol at the end of the password ...
42
votes
2answers
14k views

How secure is the Windows 8 included Anti Virus known as Windows Defender?

How secure is the new Windows 8 anti virus known as Windows Defender? Does it have a protection against malware which uses UAC bypass/process injection/rootkits/process persistence/running the binary ...
0
votes
1answer
13k views

Files deleted by some Employee . How to find what time it happened and whether done from another computer on network? [closed]

My Files got deleted by any Employee . How to find what time it happened and whether done from another computer on network ? The files were in shared drive in the computer. I am using windows 8. What ...
4
votes
0answers
413 views

PIV or GIDS compatible token availability [closed]

I am researching smartcards for corporate implementation and have hit a small bump. We need to support Windows RT, and Windows RT does not support Windows minidrivers for smartcards. Instead, it only ...