All Questions

Filter by
Sorted by
Tagged with
4
votes
2answers
1k views

Can one get infected through visiting a site with a PHP script on it and if yes, how?

I can imagine a clientside JavaScript that gets executed in a vulnerable browser to do some harm, but how can this be done with PHP? Since it's serverside it shouldn't have access to the visitor's ...
3
votes
1answer
2k views

Can SSL server choose a session ID '0' in the 'Server Hello' message?

Can s SSL server in response to 'CLIENT_HELLO' request choose a NULL value for the session ID in its response, SERVER_HELLO? Is it OK?
7
votes
3answers
2k views

How secure are self decrypting HTML files for data storage?

I recently came across a JavaScript self decrypting archive. Is it secure enough to be used as a portable password storage tool? The author has even challenged it to be cracked.
20
votes
4answers
6k views

Role Based Access Control + Data Ownership based permissions

Is there a common system or pattern that combines the permissions given by a role in a RBAC-system with permissions in relation to data ownership? For example: Bob is a doctor and has the role ...
3
votes
1answer
3k views

encode der with openssl

When you issue openssl dgst -sign key <file it follows the PKCS#1 standard to generate a digital signature. hash file with some hash digest function encode the hashed value in DER format, ...
7
votes
4answers
984 views

Is a wireless receiver a security weak point?

I have bought the Logitech Wireless Presenter R400, and it includes a Wireless receiver that it should be plugged in to the computer in order for the remote send signals to the computer. I would like ...
4
votes
1answer
1k views

X.509 algorithm identifier parameters vs. extension values

From the X.509 specs: AlgorithmIdentifier ::= SEQUENCE { algorithm OBJECT IDENTIFIER, parameters ANY DEFINED BY algorithm OPTIONAL } ...
3
votes
1answer
2k views

Why doesn't asn1parse parse all DER encoding strings?

I have a file - crl.txt - that contains the following: MDYwNKAyoDCGLmh0dHA6Ly93d3cyLnB1YmxpYy10cnVzdC5jb20vY3JsL2N0L2N0cm9vdC5jcmw= It's from one of the extensions in a particular X.509 cert. Why ...
6
votes
3answers
314 views

Is XSS dangerous on web without login/sensitive user's data?

Is XSS dangerous when the web application doesn't have a login/register function, the user isn't logged in or when the website doesn't store any sensitive user information?
5
votes
3answers
6k views

My server is used for DDoS attacks

I have webserver (centos + cpanel), and one of the clients used my server for DDoS-ing, how can I identify that client/user? What logs should I look to, is there any settings I can modify so such ...
5
votes
1answer
1k views

Sniffing IMAPS traffic! Are there any tools for this?

I've got a problem where someone has implemented a custom IMAP Server. I need to write a custom application to get a list of emails, and fetch messages. Problem is, every library I've tried to use ...
0
votes
1answer
5k views

i, I, o, O packet inspection points inside a Check Point firewall

In a Check Point firewall, can you please explain what occurs between the POSTIN (I) and PREOUT (o) inspection points?
4
votes
4answers
3k views

A “good enough” digital signature, with short key

In my application, I want to hide debug feature behind a password. I don't want the password to be easily known by issuing strings executable, so I want to rely on digital signature. We want Debbie ...
8
votes
1answer
5k views

SSL encryption and SSL certificates

I know for a fact that it's possible for for an SSL\TLS session to go on without an SSL certificate, meaning you pass encrypted data, but you don't have a solid foundation of who you are really ...
8
votes
2answers
7k views

Scanning my network with NMAP

Each computer is assigned one ip address on my network, and my ISP supplies one IP for my network. If I try to scan the ip supplied by my ISP what I got is the OS running on the router, running on the ...
2
votes
0answers
223 views

Does OtR require than IM applications remember multiple keys per contact? [closed]

I noticed the Guardian Project has developed a converter to move your off-the-record messaging keys between different IM applications. I'm curious what happens if your using multiple off-the-record ...
4
votes
3answers
4k views

What career path do I need to follow to become a CISO?

I'm a security researcher and I want to know what career path you think I need to follow to become a Chief Information Security Officer. What skills are necessary in this position ? What field of ...
2
votes
3answers
7k views

Determining a reasonable session timeout limit [closed]

What's a resonable session timeout limit and how can you determine it?
2
votes
1answer
317 views

CIS vs CS for Information Systems Security?

I would like to know which degree out of these two would better prepare me for Information Systems Security. I want to eventually work with the CIA as a Information Systems security specialist however ...
16
votes
1answer
1k views

General purpose slow/unique hash routine for dup checking of private data, without storing the data itself?

I am wondering if there is a percentage of uniqueness known to be lost with every repeat of various hash routines, like MD5, SHA1, and how that might compare with other algorithms. If theoretically I ...
1
vote
1answer
87 views

Are user-provided translation strings an attack vector

Twitter and various other web companies allow users to help translate the user interface into their language. Crowdsourcing translations isn’t new for us. Since October, 2009, we’ve counted on ...
5
votes
2answers
6k views

PHP Vulnerability May Halt Millions of Servers - max_input_vars!

Recent version of PHP 5.3.9 has been released a couple days ago, and Hash Collisions have been fixed, most of the servers actually didn't upgrade their server until now, including my website's server. ...
28
votes
5answers
21k views

Recover the prior contents of RAM from a turned-off PC?

I've heard that if your PC is turned off, then an attacker can recover the RAM from the last session. I find this hard to believe. How could it be done?
11
votes
3answers
8k views

Storing Credit Card Numbers

I'll be making a website with a membership type of option for the website, and I'll be most likely using Authorize.Net to make the transactions, however, I need to know what kind of encryption I can ...
-1
votes
1answer
8k views

How to know all the Connected devices to my Access Point including Phones [closed]

I need to list all the connected devices in my AP wireless network including mobile phones, also if it possible to know more information about each device, I am using Windows 7 and my access point is ...
2
votes
2answers
3k views

Microsoft ASMX Web Services Test form available on remote machines

I have been doing some research about Web Services security. I noticed that some sites are using Ajax and JQuery to consume ASMX WebServices. I navigated to the Web Service EndPoint and I realized ...
0
votes
2answers
3k views

Wireless Adapters for Testing with BackTrack

I would like to begin testing and working with BackTrack. I have heard that the Alfa AWUS036H wireless adapter works well with BackTrack and allows for packet injection. This adapter, however, is ...
34
votes
4answers
14k views

What is a cryptographic oracle?

I came across the term "cryptographic oracle" and despite a bit of googling I was unable to come across a clear, concise definition. What is a cryptographic oracle and what does it do? Can anyone ...
5
votes
1answer
7k views

Why MA-SSL has been introduced?

If my knowledge is correct with respect to simple SSL, Mutually Authenticated-SSL has the advantage that both end parts are authenticated one to another: Not only the Client endpoint knows that he ...
2
votes
1answer
2k views

Which crypto-algorithem uses iOS in NSDataWritingFileProtection and what is the keysize?

I need to know the crypto algorithm and key strength of NSDataWritingFileProtection. I would like to know the same things for using the Keychain and NSFileManager. I searched the Apple Developer ...
2
votes
3answers
678 views

Implementation of an IDS

I am starting my final year project and I have decided to make an Intrusion Detection System, but I am a little confused where to start. I have read some papers and those have been pointing out the ...
2
votes
1answer
256 views

Are auto-mounting hard drives a security issue?

Why are hard drives mounted by default in Windows OS, while they aren't in Linux OS? Is that a security issue? If your computer was hacked, can unmounted drives be considered clean?
25
votes
7answers
11k views

How to prevent cheating (extra votes) in online contests?

Mitigating Cheating & Voter Fraud in Online Contests… We run online contests of various sorts that involve users voting on entries (usually one vote per user per day). The prizes range from ...
7
votes
4answers
4k views

What does a common workstation setup look like for pentesting and vulnerability research?

I'm a security enthusiast, and am in need of some guidance to get me into the branch. I've always been held back by lack of methodology in my research, and it tends to break down my motivation towards ...
4
votes
4answers
2k views

Can SMS text messages be used to verify a person's unique identity through a short code system?

We run online contests and want to eradicate cheating (yeah right), or at least mitigate it. I've asked the question regarding user experience here: https://ux.stackexchange.com/questions/15980/ways-...
7
votes
5answers
4k views

VM hypervisior that doesn't leak that it's a VM to the guest?

I need a VM Hypervisor that will not leak to the guest that its in a VM. The guest should believe its on a full physical machine. Apparently VirtualBox fails at this, along with Virtual PC and VMWare....
4
votes
4answers
1k views

Is this non-cookie based session scheme horribly vulnerable to some attack?

I am working on a large web application that runs entirely within a single web-page. For various reasons we do not want to use cookies in this web application, at all, but we need to keep track of ...
15
votes
2answers
2k views

Can it be proved that two CDs were burned by different computers?

A friend of mine made a personal data CD. Days later he found a copy elsewhere. He wants to prove the copy didn't come from his computer, but that someone took the CD and copied it from another ...
1
vote
0answers
233 views

How Do I Secure Apache Web Server [duplicate]

Possible Duplicate: Apache Server Hardening I'm going to make a web server on Apache 2. What are the security issue I will be looking at? And how do I secure it? I have been reading news about ...
3
votes
1answer
641 views

Apple Developer Account Hacked?

I just did a fresh install of Snow Leopard on a newly-formatted hard drive. Logged into the iPhone Developer Page with Google Chrome (latest build) here: http://developer.apple.com/iphone/index....
6
votes
1answer
1k views

Security issues related to public keys and SSH

Do I have to mind something specific when using public keys and SSH? Well of course, I have to keep my private key secret (and therefore I should choose a strong pass phrase). But is there something ...
2
votes
2answers
173 views

How can I protect a client's mirror of the server's database?

The scenario is as follows: There are clients that users can access and work with. These clients can be online or offline. There is a central database on a server, holding all the authorization data. ...
2
votes
2answers
2k views

Why is my firewall blocking on some files but not others?

I'm behind a corporate firewall which restricts access to certain urls and most downloads. The download restriction is mainly on .exe(but it allows some exe files to be downloaded and I don't know why!...
2
votes
1answer
373 views

Possible Hijacked Email Server [closed]

MAILER-DAEMON notices are spamming our email administrator account, causing it to fill up, and bringing down our email server. Our email server is a Virtual FreeBSD box hosted by Verio. Their ...
6
votes
4answers
888 views

How bad is a source code leak for an antivirus?

I was reading that Symantec suffered a source code leak and I was wondering how bad this is for a anti-virus product. Do these products rely heavily upon "(in)Security Through Obscurity" or does it ...
3
votes
2answers
258 views

How to demo a new 0-day security product?

We are a development team working on a new 0-day protection security product. We aim to protect against new unknown 0-days attacks against servers. We have a very strong solution ready to demo. The ...
1
vote
2answers
2k views

anti-CSRF tokens vs Referer and POST testing

I understand anti-CSRF tokens to be a chunk of data sent in the response that is expected to match in subsequent requests, but is not stored in cookies. For example, a form with a hidden value that ...
7
votes
1answer
3k views

anti-CSRF tokens in HTTPS environment

Does it really make sense to use anti-CSRF tokens in a web application that is accessed by HTTPS only? If yes, then what are the possible ways to attack such a web application if anti-CSRF tokens are ...
5
votes
2answers
236 views

In the case of the Gawker data breach, would strong passwords be ok?

In the Gawker data breach, was just the database stolen and that gave free access to all user data? Or did the hackers still need to read the MD5's of the usernames and passwords to gain access to the ...
8
votes
3answers
343 views

Would using distinct IP addresses help support browsers with older SSL implementations?

We have a site with two wildcard certificates: *.foo.com and *.bar.foo.com. All of our subdomains resolve to the same IP address. Newer browsers work fine with this, but IE7, for example, does not. ...

15 30 50 per page