All Questions

0
votes
0answers
24 views

Personal file separation in office workstation

Background: The company I work for is SOC2 and some other Compliant. So to comply with that regulatory compliance they asked us to install SolarWinds RMM agent in our workstations (Not production ...
0
votes
0answers
37 views

Web Site Access - Port Whitelisting

I am able to access a certain website https://buzzlightyear.acme.com:68080 from within a corporate network (Obviously the default https port 443 has been allowed in the windows firewall of the machine ...
0
votes
0answers
42 views

Browser to remember Camera selection, without the browser setting but through a cookie set [closed]

I am developing a website, for the employees, they must take a picture of themselves. How can you avoid browser from keep asking whether to allow to access to camera: Even if you change the browser ...
0
votes
1answer
186 views

Man-in-the-middle attacks in end-to-end encryption

I am reading about how to implement end-to-end encryption in IMs. Then I find this question. I cannot understand how the man-in-the-middle attack happens when the author of the answer says: Note ...
1
vote
1answer
105 views

Unknown automatically generated email in sent folder

I just noticed a strange email in my sent folder that I did not send. Here is the header information: To: 5f3d36eb61801dda4063@cloudmailin.net From: ********@gmail.com Date: Mon, 10 Jun 2019 06:54:17 ...
10
votes
1answer
267 views

Private messaging for protesters

Hello I am a protester in Hong Kong. Many protesters use telegram group. I have heard recently from the News that a group admin was tricked by the police to unlock their phone (police cannot force ...
1
vote
2answers
166 views

How to completely destroyed all data from an iPhone before reselling it?

I would wish to know more about how to erase 100% data of a used iPhone. Basically, technician from Apple Store only said “Erase & Clear” within the iPhone setting could do all the work perfectly ...
2
votes
0answers
36 views

Split tunneling to speed up Windows update

We have almost 10 years worth of Win7 updates that need to be done and the amount of bandwith can't be handled by our VPN. Are the security risks of enabling split-tunnel a lot smaller when its just ...
0
votes
0answers
64 views

Proving Authenticity of Emails from Office 365 [closed]

I have a situation where the authenticity of emails sent and received to an Office 365 account is being questioned. The claim is that the email conversation (a back and forth of about a dozen emails) ...
0
votes
0answers
46 views

Generate & secure private keys in a private network

I have seen latest mobile authentication solution where private key is generated and kept securely in a Secure Enclave/TrustZone and public key is sent to authentication server on a cloud. During User ...
0
votes
1answer
83 views

Understand the “Windows Key Store”

I work in a enterprise environment and I often hear the use of the "Windows Key Store" to store various keys including symmetric. I do understand there is a "Windows Certificate Store" which as the ...
0
votes
0answers
78 views

How can i connect to victim's backdoor when i only have private IP [closed]

let's consider the folowwing senario: I can successfuly make the victim download a malicious program that can provides a shell. I want to be able to connect to the program but the following obstacles ...
0
votes
1answer
119 views

Why isn't free software signed with self-signed certificates? [duplicate]

A majority of free software (in particular, Linux ports for Windows) are not signed. As I understand it, it is quite easy to create a self-signed CA, and sign the software. Distribution would be ...
0
votes
0answers
73 views

What is the risk of allowing user input in Python's 're' module

Some context I'm currently building an application which lets user's set up dynamic, queries they can execute later. A great addition to this seems like a regex module, in which users can filter ...
-1
votes
0answers
125 views

Hi, This account has been hacked! [closed]

Attached an image telling that an email address in my company has been hacked. Please analyze with me the header and let me know how to avoid this hacking method. and what to learn is it ethical ...
0
votes
1answer
107 views

CORS issue detected by Burp, but test code poc doesn't work [on hold]

Here the response after changing the Origin via Burp HTTP/1.1 200 OK Server: nginx Date: Thu, 13 Jun 2019 12:29:07 GMT Content-Type: application/json;charset=UTF-8 Connection: close Vary: Accept-...
1
vote
2answers
74 views

Secure Boot - Verifying applications

I have been reading up on Secure Boot, in particular what it actually checks during the boot process. According to Microsoft the Secure Boot process works as follows: Firmware Boot Components: The ...
0
votes
2answers
110 views

Docker container which reads memory belonging to another container

The field of maliciously accessing another process's memory has been broadly studied in the Linux environment. But for some reason I am not able to find similar discussion/similarities for the ...
0
votes
0answers
45 views

Potentially unusual open ports on my Mac [closed]

I did a portscan recently for open ports on my mac and had some slightly unusual results: I ran sudo lsof -n -i :{port} | grep LISTEN on all of these and got back associations with the following ...
0
votes
0answers
54 views

Does psexec exist by default on all Windows 7 machines?

During a review of the registry editor, I found psexec and psloggedon installed upon my personal laptop. A few times, I have also observed my anti-virus restricting communication with a external ...
0
votes
0answers
49 views

OpenVPN error=unsupported certificate purpose

OpenVPN fails at this error Thu Jun 13 10:27:52 2019 us=490780 ###.###.###.###:52064 Incoming Ciphertext -> TLS Thu Jun 13 10:27:52 2019 us=491055 ###.###.###.###:52064 VERIFY ERROR: depth=0, ...
0
votes
2answers
50 views

OAuth 2.0, what should it be returned in the authorize endpoint if the client_id is wrong and no redirect_uri is passed

We have been working on a OAuth 2.0 IDP implementation, and during the implementation of the authorize endpoint, i couldnt find in the RFC 6749, what should happen if the client_id is not passed in ...
0
votes
0answers
46 views

How does Cloudflare Flexible SSL work [closed]

According to the description of Cloudflare SSL service, the flexible mode means that we can get https connection between client and CDN while our server can still use http. I am confused that how can ...
0
votes
0answers
31 views

Differences in the result of the security tab of folders [closed]

Why is it that when I check the security tab of one folder I could see "Everyone" (but not authenticated users) and in other folders I see "Authenticated Users"? My question is When is that set? and ...
1
vote
1answer
90 views

How secure is a Mac if it passes Apple Diagnostics?

Recently I brought my MacBook Air to a Genius Bar to perform a clean MacOS installation. For security purposes, I asked for a hardware check as well. The Genius Bar technician ran Apple Diagnostics, ...
0
votes
0answers
42 views

How can I MitM a Flash application?

I have a browser-based Flash application. What's the easiest way for me to edit the messages the application sends to the server?
0
votes
0answers
12 views

How can be implemented a well working data replication strategy? [migrated]

How can be implemented a well working data replication strategy ? I realize that this question may be a bit naive, but I dare ask because it's very important to me and, above all, I think relevant to ...
52
votes
7answers
10k views

How can caller ID be faked?

My late brother was contacted by someone on landline number operated by a carrier in Australia and which displayed on caller ID. I traced the number to a company and though they did call him on a ...
0
votes
0answers
47 views

What are the best apps to keep an android device clean and malware-free? [closed]

Windows has things like ublock origin, malwarebytes, anti-rootkits, adware detectors and so on. So I was wondering if Android also has a good set of apps that can detect most or all malware. I could ...
-2
votes
1answer
125 views

How to protect my site from XSS

I own a chat site {https://trixac.com}. It uses BoomChat's code. Recently I banned a troll and now he is back and hes running XSS injections against my site and it's working for some odd reason. I've ...
-4
votes
0answers
32 views

How to decode this long string of decimals? [duplicate]

69299350231777143073933039096647200271721308179581238245359016367359518575223628522640775213009798215776023461621242930796666980119825788275816258161588748921874117803012120359108969918907476169787297....
0
votes
0answers
28 views

Tomcat OIDC Authenticated Realm

I am currently using a tomcat authenticator implementation (https://github.com/boylesoftware/tomcat-oidcauth). The authenticator is implemented as a tomcat valve. This implementation still requires a ...
0
votes
0answers
31 views

What are the security protections in using a TPM generated VSC to create a CSR

I am extremely new to the field of information security but was given a project to create a secure TLS certificate signed by our CA for a new security process. I found this thread (How to generate a ...
1
vote
1answer
66 views

Windows RDP logging into itself?

There is a computer system that has to have RDP on an open port(I fought against this of course). I secured this via RDPGuard which worked phenomenally. Anyway, after a few weeks I check back on those ...
1
vote
1answer
77 views

Isn't it almost always not helpful to just change the password of a container after a leak?

Let's assume, an attacker gains access to an encrypted container with a weak password. They start a brute-force attack and I assume they will succeed. To protect any content which has been added to ...
-5
votes
0answers
64 views

What software do spooks use to surveil public Wifi? [closed]

In my region of the USA, there is a group of very obvious law-enforcement freelancers who visit Starbucks, sit and watch people's laptop use. Often they arrive in pairs, with obviously nothing in mind ...
0
votes
2answers
61 views

TSA server with OpenSSL

From OpenSSL documentation of openssl-ts command: HTTP server support is provided in the form of a separate apache module Does anybody know which module is the one? I haven't found any module to ...
1
vote
1answer
35 views

Spam/Phishing detection when there is no MX record

While SPF/DKIM/DMARC are standard, foundational tools to help protect an email-sending domain from spoofing, what about domains that do not send emails? How do spam or phishing filters treat emails ...
0
votes
2answers
103 views

Why do Browsers in their TLS1.3 Client Hello do not request for CCM ciphers?

As per TLS 1.3 RFC 8846, following 5 ciphers are supported. TLS_AES_128_GCM_SHA256 TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_CCM_SHA256 TLS_AES_128_CCM_8_SHA256 ...
0
votes
0answers
30 views

Is it still not advisable to use recent versions of EncFS >1.7 to encrypt Dropbox?

I'd like to use EncFS to encrypt files synced with Dropbox. Unfortunately, its Wikipedia page https://en.wikipedia.org/wiki/EncFS mentions security concerns from an audit of version 1.7: EncFS is ...
1
vote
1answer
60 views

Where do TLS clients fetch intermediate CA certificates from? [duplicate]

When I use my browser (a TLS client) to navigate to a secure web page (e.g. https://example.com), during the TLS handshake, the browser will receive an end-entity certificate from the web server of ...
2
votes
1answer
58 views

Secure Boot - Usage of blacklist DB

I have been reading up on the details of Secure Boot, in particular the authorized and forbidden databases: Before enabling UEFI Secure Boot (by setting the PK) the white and black lists DB & ...
0
votes
0answers
65 views

Government Root CA installed on computer/browser and Man-In-The-Middle [duplicate]

Some countries already have their government Root CA installed on computer/browsers. Is it possible for these countries to read Google etc. mails by using Man-In-The-Middle or similar technique(s)?
1
vote
0answers
45 views

Bruteforcing via port 88 on MacOS

Macos has open port 88 by default. Is it possible to check validity of the password via this port from Linux and how? If the vncserver is active, it is possible to know also the username (by ...
1
vote
0answers
50 views

Designing distributed authentication/authorisation system

I'm trying to design a system that has the following elements: the main backend REST API (currently one, probably multiple in the future) front-channel client(s) -- JS-based single-page app(s) back-...
0
votes
0answers
58 views

xss attack on value field by bypassing encoded double quotes

consider a website that handles search query like this: <input class="something" type="search-field" value="SEARCHQUERY"> if i try to inject this script it doesnt work... " onerror="alert(0) ...
1
vote
1answer
85 views

CSP: What is script-src-attr and script-src-elem?

script-src-attr and script-src-elem directives are new additions in CSP3. I am not able to understand how are they different from the script-src directive. https://w3c.github.io/webappsec-csp/#...
1
vote
1answer
112 views

How to get the password from Windows Application?

I have an application call Metatrader 5. I had logged in way before and now I lost my password. The login could be seen but the password is hidden. I want to know if there is a way to get the hidden ...
0
votes
0answers
44 views

Collect Visible Credit Card Details & Remain PCI Compliant? [closed]

I need to make payments on behalf of clients to 3rd parties. This means I need to actually see the credit card details to input them into the 3rd parties' online payment facilities. What is the ...
0
votes
0answers
58 views

Where are NTLM and LM hashes stored in a password protected microsoft presentation file

I have a password protected presentation file (MS office 2003). My assignment required me to either remove the password or find it. In my research i found out that presentation use ntlm and/or nt ...

15 30 50 per page