All Questions

Filter by
Sorted by
Tagged with
2 votes
1 answer
113 views

What are good data-at-rest encryption strategies for sensitive data?

I need to protect sensitive data by doing data encryption at rest. Context : I have at least the data of 20 app to protect. I want protection from those with legitimate access to the virtual machine ...
loic midy's user avatar
1 vote
1 answer
66 views

How to tell if BlackByte NT ransomware is on my computer?

The company I work at sadly fell victim to BlackByte NT ransomware this week. It ransomed many of the Windows machines on our factory floor. I have used my personal laptop (Windows 10 Home, version ...
Intrastellar Explorer's user avatar
0 votes
1 answer
68 views

What happens at a low level when authenticating server certificates?

Regarding the TLS 1.3 Handshake Protocol: When the Server sends it's certificate, exactly how does the Client validate this? I know at a high level the Client is verifying the data the Server sent ...
rare77's user avatar
  • 145
0 votes
1 answer
54 views

Is it possible to combine RSA and XOR?

For my project in uni I need to combine asymmetric and symmetric cryptosystems. I wanted to do thing with AES and RSA but it's a little difficult for me and I want something easier. So I thought that ...
karalesus's user avatar
0 votes
2 answers
115 views

Kernel level attack?

In a Unix-like system, the concept of privileged and non-privileged users is used for security, preventing numerous attacks. When a non-privileged user executes malicious code at a normal level, the ...
Student's user avatar
  • 101
1 vote
0 answers
46 views

Using Android Wireless Hotspot while connected to Hotel internet via VPN

I want to make sure I understand the security implications of this scenario: I am staying in a hotel. I have a VPN on my android phone. I connect to the hotel's unencrypted WiFi network with the ...
stochastic's user avatar
0 votes
1 answer
105 views

Does Firebase App Check provide CSRF protection?

Quoting the OWASP Cheat Sheet on CSRF Prevention: Using the Synchronizer Token Pattern: CSRF tokens should be: Unique per user session. Secret Unpredictable (large random value generated by a secure ...
Joel Burget's user avatar
0 votes
0 answers
25 views

Subdomain vs Virtual Path discovery by bots

I have a website with a URL of lets say "123.example.com" where I am hosting a large ERP system. Does hosting the application at "123.example.com/myapp" provide any layer of ...
Freeman Helmuth's user avatar
0 votes
0 answers
30 views

If I hibernate my Linux distro (which has an encrypted partition) and store it in a unencrypted swap partition, can an attacker access all my data?

Is it possible? How? Should I encrypt my swap partition? If I don't encrypt it, basically I make encryption in the main partition useless.
Allexj's user avatar
  • 115
-2 votes
0 answers
42 views

Is it possible to arpspoof without connecting to a Wifi network?

On the Internet they say no. What if you send ARP requests knowing the IP range on the network you have not connected to? Will devices overwrite their ARP tables? If so, is it possible to intercept ...
ushi YT-майнкрафт's user avatar
0 votes
0 answers
7 views

How to deploy Gophish in a running IIS Server [migrated]

I am a beginner in Windows Server management. Currently, i have a VPS which already has a website running in IIS 10. Also have a domain which already point out to the Server's IP Address for that ...
Bang Fady's user avatar
6 votes
3 answers
3k views

Escalating user privileges on Linux

I've been battling with one school task for a couple of days and can't seem to find any idea how to solve it. The task is pretty simple: On the server there is a secret.txt file in the /root folder, ...
Paul's user avatar
  • 75
0 votes
0 answers
83 views

I need help properly encrypting my computer SSD

My main laptop recently broke down and i've been forced to use an older laptop I had in storage. This machine was encrypted years ago with veracrypt and only has an SSD. It's around 250 GB of storage. ...
Elizabeth Vogue's user avatar
0 votes
0 answers
6 views

Why is my TPM bugged? If I enable checks on PCR 8,9,10, it ALWAYS asks for decryption password even if it shouldn't [migrated]

I've also checked with systemd-analyze pcrs if PCRs are the same at every reboot, and they are. Only at first reboot I don't know why the only PCRs that change are 8,9,10 lol(I don't know why)... but ...
Allexj's user avatar
  • 115
1 vote
1 answer
30 views

What's the relation between Mathematica's authentication keys called MathID, activation key, and password?

I'm curious about how desktop softwares' installation authentication/validation process work in general, and hopefully apply it to softwares I make. But to start with a specific example, consider ...
qazwsx's user avatar
  • 123
1 vote
0 answers
51 views

Why the TPM PCRs does not consider a UEFI settings change? If someone resets CMOS, it's undetected

In my laptop I've set up a bios password when I power on the laptop, and once I enter it the laptop starts my linux distro and decrypts the disk without asking any other password. To do this I've set ...
Allexj's user avatar
  • 115
0 votes
0 answers
32 views

openssl: Not able to verify 3rd in the chain with self-signed certificate [duplicate]

(Disclaimer: Checked all the openssl related topics, no success). OpenSSL version: OpenSSL 1.1.1s 1 Nov 2022 I'm trying to generate the chain of certificates, root -> intermediate -> user1,...
unalignedmemoryaccess's user avatar
0 votes
0 answers
23 views

Wpa ptk and gtk in detail

I have been checking Pairwise and Group Transient keys in a network for security. I understand PTK is derived from = PMK, AP nonce (ANonce), STA nonce (SNonce), AP MAC address, and STA MAC address ...
C.Unbay's user avatar
  • 207
0 votes
0 answers
30 views

Phishing mails to hidden Azure mailboxes

After some research, I couldn't find a clear answer: in Azure Cloud Domain, some users received phishing emails to hidden mailbox addresses. How can that be? How can those mailbox addresses be known ...
Loay's user avatar
  • 1
0 votes
1 answer
55 views

How much info can employers find out about an employee publicly?

We all know that digital footprint is traceable and possibly left forever. When being hired by a new company whether as an employee or contractor, certain things like name, email, phone number, ...
No Name's user avatar
  • 217
0 votes
0 answers
6 views

VMWare Workstation Player 17 Virtual Machine Screen Blinking/Logging Out [migrated]

Problem: Screen for VM is blinking and logging out. Not able to RDP into Caldera Linux machine to complete project training. Solutions Attempted: Disable 3D Acceleration Suspend/Start VMs Checked ...
IcemanE4H's user avatar
1 vote
0 answers
56 views

Newsletter Spam Attack - Somehow by not directly attacking?

Our website(shopify website) has been getting a bot attack on our newsletter subscription form. Not sure if emails are real or not but there is some from gmail and hotmail etc or some from weird ...
tarik's user avatar
  • 11
0 votes
2 answers
88 views

Why don't we sandbox email clients company-wide?

Following on to questions like Sandbox for attachment accessment and How do I safely inspect a suspicious email attachment?. Why don't we sandbox email clients company-wide? I must be missing ...
Danny Schoemann's user avatar
0 votes
1 answer
48 views

Snort rule doesn't match the content in Meterpreter session packet

I'm working on a university project and I'm trying to identify a reverse shell attack with Snort IDS. For the attack I used Meterpreter/reverse_tcp and analyzed the packets via Wireshark for traces to ...
Mattia cavaliere's user avatar
0 votes
1 answer
97 views

Threat and risk analysis of Microsoft Teams

I look on all the corporations and firms that have embraced Microsoft Teams in the past and I can not stop wondering if it is a disaster waiting to happen or if I am missing something important. We ...
Marek Puchalski's user avatar
0 votes
0 answers
44 views

Microsoft Mouse Without Borders: are data of the first pc private?

I would like to use Microsoft Mouse Without Borders to share the mouse and keyboard of my workstation with my personal tablet (basically, I need an extra monitor to write work notes while I am using ...
franz1's user avatar
  • 481
0 votes
1 answer
57 views

Is the information from SD card still recoverable if I use full format (uncheck quick format) in Windows?

I need to wipe SD card so that information from it is not recoverable. If I perform full format in Windows by unchecking the "Quick Format" check box and format SD card that way is the ...
vasili111's user avatar
  • 209
0 votes
0 answers
50 views

How to Safely Research a Suspected Malicious Website by Using A VM [duplicate]

I am aware of a website that I suspect is, at the very least, pulling user data from visitors and possibly performing other malicious activity on visitors. Of course, the safest course of action is to ...
Evan Leahy's user avatar
1 vote
1 answer
34 views

Is it safe to store the OIDC token in a private field of a javascript object?

I would like to initialise a React application with an OIDC token. This token will be stored in a private field of the "api client" object. This object will be used to execute API calls and ...
Marco Altieri's user avatar
0 votes
0 answers
137 views

Guidance: S/MIME Signed Certificate invalid for many clients even though it worked previously and still works

I have a very strange problem and i would like to get some guidance on this. Problem description: My application is sending S/MIME signed Email messages to clients. It worked perfectly no problems ...
Lorem ipsum's user avatar
0 votes
0 answers
10 views

Is IP routing subject to data transfer laws? [migrated]

Some regions and territories have data sovereignty and localisation laws that prevent, for example, personal data from being transferred outside of that jurisdiction. Do such laws, if they even ...
Xophmeister's user avatar
0 votes
0 answers
27 views

certificate relies on legacy Common Name field, use SANs instead [duplicate]

I'm trying to create a Kubernetes service that uses TLS (in order to be called from an admissionWebhook). Unfortunately, the service calls fails with the following error message: certificate relies ...
E. Jaep's user avatar
  • 111
0 votes
1 answer
38 views

Why is OCSP must-staple secure?

Trying to understand OCSP stapling and OCSP must-staple, I've read multiple explanations, but I still don't understand what makes OCSP must-staple secure. My understanding is that, during TLS, the ...
not2savvy's user avatar
  • 752
1 vote
0 answers
71 views

Hundreds of bots creating accounts using sign-in with Google

We are getting hundreds of bots creating accounts using sign-in with google, like this in this format: Colin Bush: [email protected] Tambra Lockett: [email protected] Marjorie ...
Zeone line's user avatar
0 votes
2 answers
132 views

Is WIFI that is 'open' but requires a password to access the internet safe?

It is common knowledge that connecting to open public WIFI networks can pose a security risk (e.g. to man-in-the-middle attacks). However, I have come across 'open' WIFI networks that require no ...
user246795's user avatar
0 votes
1 answer
36 views

Burpsuite proxy does not get HTTP error 429 but vanilla python requests do?

When I make a normal python request to some site without any proxies I am getting a 429 response, too many requests. However when I open up burpsuite proxy and add proxies = { "http": &...
Lorde213423432e43434's user avatar
3 votes
1 answer
186 views

Benefits of the Double Ratchet protocol over the constant Ephemeral DH key exchange

I've been reading lately about the Double Ratchet protocol, how it works conceptually. I understand generally the idea behind the protocol, that it provides Forward Secrecy and Post-Compromise ...
cliffroot's user avatar
  • 133
0 votes
0 answers
20 views

Is it possible to count SYN and ACK flags separately in a single rule in Snort?

I want to write a rule for Snort to detect lost traffic in the network. Is it possible to write a rule that, by combining two flags, SYN and ACK, it declares that if the number of SYNs to the server ...
user16385455's user avatar
0 votes
1 answer
65 views

token leak by copying cookie

Imagine this scenario: I have a website where the token is stored in cookies without any session validation. If I were to take this exact token and use it in another web browser, I would be logged ...
Jacson - ANLS's user avatar
0 votes
1 answer
53 views

Isn't there a critical built-in vulnerability in OAuth's Implicit flow?

I've read some blogs and did some labs regarding OAuth's implicit flow, but it seems to me everyone just turn a blind eye to a very critical point in the flow. Assuming that site A uses the implicit ...
Trigosin Darom's user avatar
0 votes
2 answers
36 views

Is "avert" a valid term in Risk Management?

I recently came across the term "avert" as an answer in a multiple choice question in an exam which has a module on risk management. I am au fait with the terms "avoid", "...
daikin's user avatar
  • 1,069
0 votes
0 answers
72 views

Problem exploiting buffer overflow

I have the following program in C: #include <stdio.h> #include <string.h> void some_function(char * name) { char buf[128]; strcpy(buf, "The next step is... "); strcat(...
Jan's user avatar
  • 3
1 vote
0 answers
219 views

Security risks in using ‘no @thankyou.com’ to bypass Microsoft account login when installing Windows 11

One of the recommended methods for bypassing Microsoft account login during the Windows 11 OOBE is to attempt to log in using a locked account (no @thankyou.com being the most commonly recommended ...
Brybeck's user avatar
  • 111
2 votes
1 answer
319 views

In the modern context, what max harm can a webpage do, if the creator is malignant? [duplicate]

Note: this does not answer my question as it mentions Java/Flash(not in the modern context. The question is from like 10 years ago so probably outdated), and mentions weakness introduced by the user(...
Nicholas's user avatar
  • 131
1 vote
0 answers
62 views

Detecting hard to detect stalkerware - a theoretical question

Suppose you have a stalker and this person has access to professional advice. Suppose your Android phone was hacked by means of physical access, i.e. known unlock pattern or stolen password note, with ...
LiamNiam's user avatar
0 votes
1 answer
89 views

Does 7z or RAR5 offer better resistance to brute force attacks?

Does 7z or RAR5 offer better resistance to brute force attacks?
oqdn's user avatar
  • 1
-1 votes
0 answers
65 views

How can a stolen computer card be protected from being re-manufactured and resold?

In this scenario, the attacker is not trying to discover secret information or break the system. Instead, his objective is to create an exact replica of the card and sell it at a lower price. This ...
Michael's user avatar
  • 21
0 votes
1 answer
53 views

How to mitigate spoofing, keylogging password, stealing public key with smart card with external/internal smart card reader?

Here is my thought process: I want to use smartcards without passwords for my setup. We don't want to use Iris or fingerprint or voice. I only want to put in the card whenever something needs to ...
user300431's user avatar
-1 votes
0 answers
4 views

Printer used to work, not anymore? [migrated]

I have an older HP8600 All-in-one-Printer which has always worked great. For some reason it is no longer working. Having trouble connecting to my WiFi I think. It’ll say I am connected but when I try ...
Kyla Ramos's user avatar
4 votes
1 answer
174 views

Suspicious indexing of non-existent pages

Just recently, the Google search engine started indexing my site with a crazy number of requests. When I logged into the console, 600,000 pages were indexed, and 919,000 more were not indexed. For ...
Володька's user avatar

15 30 50 per page