All Questions

Filter by
Sorted by
Tagged with
0
votes
0answers
60 views

linux server appears to find and kill any tool which looks at the box's processes [on hold]

Something alerts on a linux box - so I take a look, then things get odd trying to fix it. Best to give an example: # top Killed # ps aux Killed Ok (I tried every other process based thing, pstree ...
1
vote
0answers
30 views

Could filtering & proxying untrusted print jobs help me avoid compromising my corporate printers?

I learned PostScript and PDF libraries had security bugs with code-execution potential in the past; I expect more of those to be discovered. Yet I have so far not identified a printer vendor that ...
-2
votes
0answers
87 views

I found out my flatmete has thousands of people info [on hold]

Names dates of birth and places they live all over the world. is she involved with ID fraud?
3
votes
0answers
41 views

Is it a good idea to store TOTP tokens in a (synchronised) password safe? [duplicate]

Bitwarden (as an example) allows you to store your TOTP tokens in it. That is: you can use the mobile app to scan the QR code that (e.g.) Amazon AWS gives you, and then it'll generate TOTP codes. So ...
0
votes
0answers
39 views

Malware egress and detection [on hold]

I've been researching if malware could be physically installed on a device (the device is never connected to a network and does not have the hardware to support this), inject malicious code, and ...
0
votes
0answers
18 views

In Asymmetric public/private key over a web connection, how does the client decrypt what the server sends? [duplicate]

When I go to a secure site and they have a good certificate, etc., and they encrypt a message to me, I do not understand how I am decrypting it. Where did I, the client, get the private key to ...
0
votes
0answers
41 views

UTM in place of IPS [on hold]

I understand UTM nowadays is difficult to truly define, in terms of feature set. Largely due to so many manufacturers tailoring them to accomplish various things. Some center around Malware detection, ...
-1
votes
0answers
39 views

Is Apple Keyring data stored locally-only on devices? [migrated]

I would like to understand if the keyring database is stored only on the local Apple device or if it is also stored on servers on the internet.
2
votes
1answer
113 views

Should a browser make its own password manager?

I'm trying to figure out if products such as Firefox's Lockwise are a superb idea or a terrible one. On the one hand, installing a third-party addon to your browser comes with inherent risks, so ...
0
votes
0answers
32 views

Wireless SD cards are secured? [on hold]

What type of network security is used in modern wireless SD cards? What is the best practices for securing wireless SD cards?
0
votes
0answers
45 views

Intercept https traffic using burpsuite? [on hold]

Precisely said, I am trying to intercept https traffic using https_proxy environment variable. I tried below but it is not working: set environment variable using bash export https_proxy="https://...
0
votes
0answers
64 views

How to decrypt in PHP without knowing a key? [on hold]

I encrypted a text using a key and would like to understand this method if it is vulnerable or not. Could you tell me if it's easy to decrypt, what methods exist and if maybe I should change the ...
2
votes
1answer
108 views

Encrypting a blob with a password

Is there anything to say against to have an amount of public keys, which encrypt a common password for a blob encrypted? So Users 1,2,3 have all certificates for themselves and can use them to get ...
1
vote
2answers
69 views

PC Component Firmware integrity and security

I recently bought a new laptop. If you read the news you must've noticed Vault 6 and Vault 7 leaks (from Wikileaks), which contain rootkits which sit on your Hard Drive Firmware, MBR and other ...
3
votes
0answers
27 views

XXE OOB Large File Extraction

Most of examples for extracting files through XXE OOB (Out of Band) sets up a listening HTTP server and listens to incoming request on the URL requested. However, since the URL length is limited to ...
5
votes
2answers
178 views

How can I protect the confidentiality, integrity and authenticity of my communication if I am victim of a Man-in-the-Middle attack?

Consider a scenario where my ISP attempts to use a Man-in-the-Middle attack against me to read and possibly modify my Internet traffic. What can I do to access the Internet and still ensure the ...
0
votes
0answers
52 views

Design and implement a centralised authentication system? [on hold]

I want to develop an authentication system for my web app and mobile app with same user account, also for third-party. But I don't know about centralized user managers or an authentication mechanisms ...
0
votes
0answers
59 views

Port Forwarding Port 80 to PS4 - what about other devices on port 80 [migrated]

I would like to forward several ports, including port 80, to my husband's PS4 for gaming purposes. On our network I know that there are a few other devices using port 80, notably a nanny-cam. These ...
5
votes
2answers
164 views

How does Tor protect against MITM attacks between the client and relay nodes?

According to robertheaton.com: When a Tor client constructs a circuit, it negotiates TLS sessions with each of the nodes it has chosen for its circuit using the nodes’ TLS certificates and public ...
0
votes
0answers
24 views

United States HIPAA and New Zealand HISO from outside these countries [closed]

We are developing a software product for storing and managing health records in Australia, with the software product primarily targeted towards Australian healthcare organisations. This requires us to ...
0
votes
0answers
68 views

If I was compromised, what are the solutions? [closed]

Yesterday evening, on Sunday I was using the computer as usual. I was streaming music from SomaFM's DEF CON channel via mpv. I wanted to download a video from YouTube with youtube-dl. I ran the ...
0
votes
1answer
56 views

SNMP - need help with terminology

In many resources, I see that community strings are also called default passwords. But in the Server Manager, I see "Community name" and it makes more sense. So why people often use the phrase "...
1
vote
1answer
114 views

Mindlessly clicked days old phishing email link appeared dead

Was multitasking and mindlessly clicked Squarespace phishing email. Page didn't load, and right away I realized my mistake. Completed several malware scans which came back clean. The button link ...
0
votes
0answers
43 views

device control in enterprises [closed]

I was reading about products that vendors like to call device control and it got me thinking, how do companies deal with removable devices/media? Is it a common step to lock down everything or perhaps ...
5
votes
6answers
109 views

If a digital camera can be “hacked” in the ransomware sense, how best to protect it?

Increasingly, I hear of hackers gaining control over digital devices for their own gain or merely to be a nuisance. I don't know but suspect that when tethered to another device such as a computer, ...
-1
votes
0answers
57 views

Contacting duckduckgo. How do you? [closed]

Does anyone know if they have a contact email?
0
votes
0answers
29 views

Need Advice on SystemX Wiretapping and / or Possible GSM Eavesdropping [closed]

I have an issue with what appears to be someone listening in on my telephone conversations and need some advice on the activity in order to try and identify what it is that I am dealing with and where ...
1
vote
1answer
145 views

How secure is Websocketd?

Is it secure enough for extremely sensitive information like used in banks? What kind of attack vectors and vulnerabilities does it have? Is the technology used making the contraption safe enough? ...
0
votes
1answer
58 views

Why does arp spoofing on a local network 'break' internet access for the victim?

I'm doing some experimenting with Kali on my home network and was wondering about something regarding ARP spoofing. When I ARP spoof another device AND the default gateway, Internet access stops ...
1
vote
1answer
49 views

Protect server in CTF challenge when exploting input() vulnerability in python

There was this challenge in one of the CTF's I played in which you had to exploit the input vulnerability of Python 2.x . I was just wondering that since the input function in Python 2.x is same as ...
0
votes
1answer
104 views

Facebook Knows About my Search History in Other Browsers

I use a private IE window to browse facebook (theoretically no data stored locally). I log in to facebook maybe once every 6 months. Two months ago, I used Chrome on the same machine to search for ...
0
votes
1answer
82 views

Free/online penetration testing tools [closed]

My employer has used an external consultant for penetration testing. The web development team not involved in the pentesting itself and we only received the results and suggestions on how to improve ...
3
votes
0answers
45 views

How are the Voyager spacecraft protected from hackers? [duplicate]

I just read https://space.stackexchange.com/questions/37980/does-the-voyager-team-use-a-wrapper-fortran77-to-python-to-transmit-current and it struck me: how does NASA prevent satellites like this to ...
0
votes
0answers
14 views

ZDI-CAN-8296 repro steps

Does anyone know how to check/test the ZDI-CAN-8296 vulnerability? Cant find enough details... However there's a lot of references like https://portswigger.net/daily-swig/nginx-server-bugs-could-lead-...
-1
votes
0answers
29 views

Secret PHP File executed randomly [closed]

In a wordpress installation i have created a file named test_random_name.php. Last night something strange happened. Somebody executed the file but i have no clue how they did it. No directory ...
1
vote
1answer
100 views

Malicious 'specially crafted' MP4 file [on hold]

I came across CVE-2019-2107 that says ".... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video (with tiles enabled - ps_pps->...
0
votes
3answers
54 views

Connecting to VPN send login credentials encrypted or unencrypted?

I searched for a specific answer to this question and although there are many answers about VPN encryption, I did not find this specific question answered. Setup as follows: MyPC -> VPN -> ...
0
votes
0answers
17 views

What kind of security compliance does one need to store stripe customer data in db for california? [closed]

I have a project that is trying to store some stripe data (including sales data and emails), what kind of security compliance does one need in california? I am not storing credit card data so I don't ...
0
votes
0answers
36 views

Hacking attempts to our server - what does this code do? [duplicate]

Every so often I go back and check our server and find random files uploaded to the domain root directory. They are seemingly cryptic and have names like css2.php db_model.php ....
0
votes
0answers
32 views

Methodologies to conduct technical IT risk assessment [closed]

In the picture below (screenshot from a pluralsight course on ISO 27005), we can see that "IT risk technology" is not "Information Risk". The latter is broader. For information risk, methodologies I ...
1
vote
2answers
102 views

Google searches seen by ISP

When you enter something in the search bar right before it connects to google, can an ISP see that?
1
vote
0answers
45 views

Finding XSS vulnerabilities [on hold]

My hosting company have pulled my Drupal website because modsecurity highlighted Pattern match "(?:\b(?:(?:type\b\W?\b(?:text\b\W?\b(?:j(?:ava)?|ecma|vb)|application\b\W*?\bx-(?:java|vb))script|c(?:...
1
vote
1answer
46 views

Why CORS is still securing an open api where all requests have a wildcard (*)?

In case of an open API, the only possible value for Access-Control-Allow-Origin is a wildcard (*), since you can't have a list of allowed domains. Still, this seems not to bug developpers and appears ...
0
votes
0answers
81 views

Is server authentication in SSH secure enough?

Possible ways of SSH server authentication are: Server public key fingerprint verification Implicit authentication Explicit authentication In case of fingerprint verification everything runs on ...
-1
votes
0answers
43 views

Exploiting SQL-Injection Vulnerability in Oxid eShop CE 6.0.2 with SQLMAP [closed]

I installed Oxid eShop CE 6.0.2 on my local webserver to analyze the last SQL-injection vulnerability in this webapp. I found out that it is possible to inject SQL via the sorting parameter (GET). So ...
0
votes
0answers
27 views

Secure access to MS SQL from web applications

MS SQL provides two primary authentication methods, Windows Authentication or SQL Server Authentication. Since local MS SQL accounts are problematic to maintain and monitor this option is not ...
0
votes
2answers
163 views

Why do medical institutes block VPNs? [closed]

I was faced with a security control i never saw before, recent i was in a local hospital and i tried to connect to a VPN server via NordVPN mobile app. The effect? A graphical infinite loop showed up ...
0
votes
0answers
6 views

How to recover the unreadable files on the mounted standard VeraCrypt container? [migrated]

My hard disk had 3 partitions C, D and E, and I formatted everything on the E drive and extended the size of the D drive using Easeus Partition Master by adding E drive to D. So now the size of the ...
-3
votes
0answers
39 views

How improve bandwidth chaining 4-5 or more VPNs [closed]

I have good ISP. Chain 4 VPNs get 13Mbit download 3.5Mbit upload 500ms. Chain 5 VPNs get 4Mbit download 2Mbit upload 800ms. Computer is great. Plenty of cores. I know performance hit expected. I hop ...
0
votes
1answer
67 views

How to communicate Credit Card details to customers when instantly approved in PCI-DSS compliant way?

Would displaying the full Credit Card details (PAN, Expiry date and CVV/CVC) in Online Banking and / Mobile Banking be considered both PCI-DSS and secure? Or what would be Best practice to display the ...

15 30 50 per page