All Questions

0
votes
0answers
3 views

RFC: Distribution of Google's Proprietary DLP (Alternatively: Google's Leaked Data Leak Prevention System)

This morning, On ~03:51AM Google's DLP has leaked. I was the first to purchase the leak, in exchange for 5 hours of supercomputer access including storage. Here is the leak. I'm assuming you've ...
0
votes
1answer
4 views

PCI Compliance on scanned images of expired cards

What is the requirement on images of expired card numbers? The images are over ten years old. If the data is old do I still need to encrypt the data?
-2
votes
1answer
15 views

Creating wordlist with some hints

I want create a wordlist with rules below, wordlist length 8 character, two letters and six numbers but i don't know permutation.
0
votes
2answers
19 views

How long is Key lifetime of AES-GCM key?

As I know the AES-GCM used a nonce and if the two message has the same nonce then the secret key can be retrieved. If two computers use the AES-GCM to encrypt exchange messages, then what is the key's ...
2
votes
0answers
35 views

How is it possible that the Metasploit meterpreter can take pictures without “notifying” the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
0
votes
0answers
15 views

I've downloaded file through curl in mac OS but now i can't locate its location in my system [migrated]

command i've used -> curl link... | bash I've downloaded file from github through curl in mac OS but now i can't locate its location in my system though i can access it. I don't want it in my ...
0
votes
0answers
21 views

In what important ways can a digital signature be invalid?

I am trying to write some code to verify that a digitally signed file came from my company. I was horrified to stumble across this deeply buried answer on Stack Overflow, an out-of-left-field ...
0
votes
0answers
6 views

Extra features required for TrustZone to provide main security features

The paper Trustworthy Execution on Mobile Devices: What Security Properties Can My Mobile Platform Give Me? describes 5 desired security features for mobile devices: Isolated Execution Secure Storage ...
0
votes
0answers
23 views

How Windows 8 and Windows 10 hash account password?

I need some accurate information about how Windows 8 and Windows 10 perform hashing user account passwords. I know that they are stored in SAM file and NTLMv2 algorithm is used. But while using ...
0
votes
0answers
12 views

Worth taking CEH? [on hold]

I was thinking about taking the CEH certificate. At the moment I don't have any other certificates/education. Would it be worth it taking this exam?
0
votes
0answers
31 views

Is this identity theft or something else? [on hold]

I got a phone call from an 8 digit number which was my birthdate. No one was there. Is this a new scam?
1
vote
2answers
65 views

Is it good practice to delete old accounts?

Is it a good idea to delete all old accounts you no longer use? This was asked specifically about email here, but what about your Stack Exchange account? Or your social media accounts, old forum ...
2
votes
1answer
48 views

Name of this cipher/encoding method?

I see a common method of encoding in PHP malware where there's some bytes of key, which gets used to decode that many bytes of encoded text. Decoded bytes get appended to the key on the fly. The ...
0
votes
2answers
53 views

Malware Analysis

What would be a good approach for testing malware or bad url's from things picked up from my SIEM to validate them? I was told to setup a VM for these tests but don't want it to hit the internal ...
1
vote
0answers
29 views

Angular JS alternative xss payload?

Basically, I have a situation right now where the registration website allow to register via email address and then redirects me to another website (subdomain) of the original website. The subdomain ...
34
votes
2answers
2k views

Does pressing a car remote many times offer denial of service attack for rolling codes?

My understanding of remote car key fobs, and similar security devices with rolling codes, is that the key device is a transmitter that, each time the button is pressed, sends the next secret in a ...
1
vote
1answer
43 views

Can an unprivileged program modify an HTTP request response on the local machine?

Imagine you have a simple GET request going to server 123.456.111.222. Your client executable creates a winsock on the server IP (TCP) and sends the HTTP request (unencrypted) to the server. If a ...
0
votes
1answer
29 views

Security for FTP connection within a server

In PHP, I am accessing another user's files using FTP on the same server. In this case, do I need to use secure FTP or is it ok to have normal FTP as both source and destination are on the same server?...
8
votes
2answers
2k views

Hashing email addresses for GDPR compliance

We'd like to keep users old account email addresses in a database for the sole purpose of allowing them to reconnect old accounts of their new accounts. This would benefit them and be a cool feature, ...
1
vote
1answer
35 views

Blockchain + shared unused bandwidth as the proxy front = ddos mitigated?

Pentesting the new webapp that we have developed before having an external source have a go at it and give us a risk assessment. Now we have come to the portion right at the end; DDOS. For the most ...
1
vote
1answer
31 views

Persistent Bootable USB with Write Protection?

I am developing a series of extraction scripts (currently python 2.7) for a university project - these tools will be provided on a bootable USB for use by first responders when encountering a suspect ...
0
votes
0answers
14 views

HIPAA : Writing Policies and Process For Workstation Surroundings

I am writing policies that the company will follow and I am going through the HIPAA compliance check list as a guide. I am trying to make sense of this item though. To me a lot of these seem vague and ...
0
votes
1answer
67 views

Server getting probed: why can I see successful GET requests to other sites?

I put up my site yesterday and this morning I saw a lot of requests in the logs. I have seen this before, and immediately could tell it was someone/something probing the server. Most of the requests ...
3
votes
2answers
119 views

Remote Code Execution in apt/apt-get

Recently, a vulnerability has been found in apt that allows arbitrary code execution, see here. Is it reasonable just to update the system? Or we should be worried that this has been used and so ...
0
votes
0answers
25 views

Any good analysis tool for wireshark captures to find malicious activities? (forensics) [on hold]

If someone has a Wireshark capture file (pcapng), and this is given to a professional digital investigator, how does he/she proceed to analyze a capture that has more than 200k packets and a lot of ...
0
votes
0answers
14 views

Would it be possible to exploit spectre vulnerability with typed lambda calculus?

In my understanding, to exploit the spectre vulnerability you need a language with an execution semantics close enough to the hardware to be able to introduce branches at will. Semantics of typed ...
0
votes
0answers
14 views

Storing files in database through encryption and Viewing them only on providing key for the file

I have this use case: User1 uploads his file into the database which should be encrypted. Any other users who request that file, user1 will be notified for approval, on approving other users should ...
0
votes
1answer
39 views

What are MITM proxies used for in enterprises?

My company (like many others I assume), uses a "man in the middle" proxy with a personal root CA. Disclaimer : I'm not a security expert so perhaps I do not correctly understand what this network ...
0
votes
0answers
20 views

Preventing admin from changing proxy settings

I am using a proxy server for my environment deployed on premises for internal hosts and on the cloud from BYOD. When a user takes their device off the premises, the proxy changes to an external proxy ...
0
votes
0answers
12 views

Is there value in using an identiy theft prevention service? [on hold]

Is there an impartial service that ranks the identity theft prevention services?
2
votes
3answers
148 views

Should I be worried about old viruses from a hard drive that hasn't been used in the last 13 years?

I recently built a new PC with windows 10 and I was recovering some pictures from an old hard drive that I had in one of my PCs from about 13 - 15 years ago. The hard drive has just been sitting in a ...
2
votes
2answers
76 views

A (spoofed?) trusted device has logged in from an unrecognized location

Recently my google account was hacked. I have 2-factor authentication turned on. 2-factor authentication was not required for the hacker to gain access to my account, nor did the hacker trigger Google'...
48
votes
10answers
8k views

Has it been mathematically proven that antivirus can't detect all viruses?

What analysis was Bruce Schneier referencing when he wrote: Viruses have no “cure.” It’s been mathematically proven that it is always possible to write a virus that any existing antivirus program ...
1
vote
1answer
30 views

What is the difference between full end-to-end encryption and end-to-end encryption?

What is the difference between full end-to-end encryption and end-to-end encryption? Are there any differences between these two terms?
0
votes
1answer
23 views

PCI-DSS scoping when there is no CDE

We are a merchant who processes over 2m transactions a year. However, we have outsourced all the payment functions to compliant 3rd party providers. Understand that PCI is about people, process and ...
0
votes
2answers
79 views

Is a password box with pseudo-random number of stars more secure?

I use a program that confused me while typing the password. It acts like this when I type the password ABC: I type: A Display: *** I type: B Display: ***** I type: C Display: ** I can think of the ...
1
vote
3answers
118 views

Schneier is telling me to write my bank security password and keep it in my wallet? Is that right?

Bruce Schneier Writes Down Passwords. So Can You ... But how should people deal with all of this in the real world, or on line? "Relax," he says emphatically. Surprisingly for a security ...
1
vote
1answer
64 views

Big insurance website exposing StackTrace of Java JSON Parser

Recently I coincidentally have discovered that an api endpoint of an insurance company is sending a StackTrace of a JSON parser as response to a http POST message with bad formatted JSON in the ...
2
votes
2answers
58 views

Are there use cases where a mutually authenticated TLS is preferred?

I am trying to see if there are use cases where a mutually authenticated TLS is preferred over a one way authentication. Usually the authentication of the client/user is done over the TLS tunnel. ...
0
votes
1answer
43 views

Obtaining plain-text passwords from a Domain Controller

Is there anyway to log the plaintext passwords of accounts that authenticate against a domain controller? I know most of the Mimikatz attacks and they all recover credentials from memory, but they're ...
0
votes
1answer
42 views

How to prevent replay attacks without exposing stored password security?

A common way to prevent replay attacks when logging in is for the server to present a challenge (chall) and request a response in the form hash(chall+secret) where the secret is already known by the ...
0
votes
0answers
25 views

Block/spam an email that doesn't match a rule

Is there anything we can put in place such to verify that if the sender's name = "John Doe" and the domain is not company.org (or legitimate verified SPF sender), then the message is marked as spam or ...
1
vote
0answers
58 views

Collection #1: Do we know the source of the leaks? [on hold]

With Collection #1 yet another large data set of email addresses and passwords was found out there. I happens that one of my frequently used email addresses shows up as 'pwned' when checked against ...
0
votes
0answers
14 views

macchanger conflicting with network-manager [on hold]

I used macchanger with these commands: sudo ifconfig eth0 down sudo macchanger -r eth0 sudo ifconfig eth0 up I am using it with virtualbox on a local network, I've never had issue with that before, ...
0
votes
0answers
13 views

NMAP: Action section is not executing [on hold]

I'm trying to get response from some live links running Nessus server. nmap --script nessus-detection.nse -p8834,8890 <target> Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-22 06:45 PST ...
0
votes
1answer
27 views

Can I adjust the X509v3 Name Constraints on my internal CA after I have issued certificates? [duplicate]

We have generated an internal root Certificate Authority for our organization and added X509v3 Name Constraints for our domain (example.com) We issued a number of certificates for servers under that ...
0
votes
0answers
5 views

It is possible to remove previous layers in M3UA pcap file? [on hold]

I ask this question in reverse engineering site of SE but they suggested me to ask in this site. I have a MTP3 pcap file that when I open in Wireshark shows Frame1 Ethernet IPV4 MTP2 MTP3 SCCP TCAP ...
0
votes
0answers
27 views

How to Secure API Calls [on hold]

What are the basic ways of ensuring that API calls (retrieving data) are secure? I have searched around and all I can find are ways to secure REST API itself.How do I ensure the data being retrieved ...
-1
votes
1answer
38 views

Does making a pdf searchable make it more vulnerable? [on hold]

I would like to know if making a pdf 'searchable' somehow make it less secure?
0
votes
1answer
76 views

Is a temporary local hotspot on an Android device secure enough for my purposes?

I intend to deploy some embedded software on Raspberry Pi devices. All will have WiFi capability, but not all will have internet access. I want to occasionally be able to update the firmware in all, ...

15 30 50 per page