All Questions
68,284
questions
2
votes
1
answer
113
views
What are good data-at-rest encryption strategies for sensitive data?
I need to protect sensitive data by doing data encryption at rest. Context : I have at least the data of 20 app to protect. I want protection from those with legitimate access to the virtual machine ...
- 21
1
vote
1
answer
66
views
How to tell if BlackByte NT ransomware is on my computer?
The company I work at sadly fell victim to BlackByte NT ransomware this week. It ransomed many of the Windows machines on our factory floor.
I have used my personal laptop (Windows 10 Home, version ...
0
votes
1
answer
68
views
What happens at a low level when authenticating server certificates?
Regarding the TLS 1.3 Handshake Protocol:
When the Server sends it's certificate, exactly how does the Client validate this?
I know at a high level the Client is verifying the data the Server sent ...
- 145
0
votes
1
answer
54
views
Is it possible to combine RSA and XOR?
For my project in uni I need to combine asymmetric and symmetric cryptosystems. I wanted to do thing with AES and RSA but it's a little difficult for me and I want something easier. So I thought that ...
0
votes
2
answers
115
views
Kernel level attack?
In a Unix-like system, the concept of privileged and non-privileged users is used for security, preventing numerous attacks. When a non-privileged user executes malicious code at a normal level, the ...
- 101
1
vote
0
answers
46
views
Using Android Wireless Hotspot while connected to Hotel internet via VPN
I want to make sure I understand the security implications of this scenario:
I am staying in a hotel.
I have a VPN on my android phone.
I connect to the hotel's unencrypted WiFi network with the ...
- 638
0
votes
1
answer
105
views
Does Firebase App Check provide CSRF protection?
Quoting the OWASP Cheat Sheet on CSRF Prevention:
Using the Synchronizer Token Pattern:
CSRF tokens should be:
Unique per user session.
Secret
Unpredictable (large random value generated by a secure ...
- 53
0
votes
0
answers
25
views
Subdomain vs Virtual Path discovery by bots
I have a website with a URL of lets say "123.example.com" where I am hosting a large ERP system. Does hosting the application at "123.example.com/myapp" provide any layer of ...
0
votes
0
answers
30
views
If I hibernate my Linux distro (which has an encrypted partition) and store it in a unencrypted swap partition, can an attacker access all my data?
Is it possible? How? Should I encrypt my swap partition? If I don't encrypt it, basically I make encryption in the main partition useless.
- 115
-2
votes
0
answers
42
views
Is it possible to arpspoof without connecting to a Wifi network?
On the Internet they say no.
What if you send ARP requests knowing the IP range on the network you have not connected to? Will devices overwrite their ARP tables? If so, is it possible to intercept ...
0
votes
0
answers
7
views
How to deploy Gophish in a running IIS Server [migrated]
I am a beginner in Windows Server management. Currently, i have a VPS which already has a website running in IIS 10. Also have a domain which already point out to the Server's IP Address for that ...
6
votes
3
answers
3k
views
Escalating user privileges on Linux
I've been battling with one school task for a couple of days and can't seem to find any idea how to solve it. The task is pretty simple:
On the server there is a secret.txt file in the /root folder, ...
- 75
0
votes
0
answers
83
views
I need help properly encrypting my computer SSD
My main laptop recently broke down and i've been forced to use an older laptop I had in storage.
This machine was encrypted years ago with veracrypt and only has an SSD. It's around 250 GB of storage.
...
0
votes
0
answers
6
views
Why is my TPM bugged? If I enable checks on PCR 8,9,10, it ALWAYS asks for decryption password even if it shouldn't [migrated]
I've also checked with systemd-analyze pcrs if PCRs are the same at every reboot, and they are.
Only at first reboot I don't know why the only PCRs that change are 8,9,10 lol(I don't know why)... but ...
- 115
1
vote
1
answer
30
views
What's the relation between Mathematica's authentication keys called MathID, activation key, and password?
I'm curious about how desktop softwares' installation authentication/validation process work in general, and hopefully apply it to softwares I make. But to start with a specific example, consider ...
- 123
1
vote
0
answers
51
views
Why the TPM PCRs does not consider a UEFI settings change? If someone resets CMOS, it's undetected
In my laptop I've set up a bios password when I power on the laptop, and once I enter it the laptop starts my linux distro and decrypts the disk without asking any other password. To do this I've set ...
- 115
0
votes
0
answers
32
views
openssl: Not able to verify 3rd in the chain with self-signed certificate [duplicate]
(Disclaimer: Checked all the openssl related topics, no success).
OpenSSL version: OpenSSL 1.1.1s 1 Nov 2022
I'm trying to generate the chain of certificates, root -> intermediate -> user1,...
0
votes
0
answers
23
views
Wpa ptk and gtk in detail
I have been checking Pairwise and Group Transient keys in a network for security. I understand
PTK is derived from = PMK, AP nonce (ANonce), STA nonce (SNonce), AP MAC address, and STA MAC address
...
- 207
0
votes
0
answers
30
views
Phishing mails to hidden Azure mailboxes
After some research, I couldn't find a clear answer: in Azure Cloud Domain, some users received phishing emails to hidden mailbox addresses. How can that be? How can those mailbox addresses be known ...
- 1
0
votes
1
answer
55
views
How much info can employers find out about an employee publicly?
We all know that digital footprint is traceable and possibly left forever. When being hired by a new company whether as an employee or contractor, certain things like name, email, phone number, ...
- 217
0
votes
0
answers
6
views
VMWare Workstation Player 17 Virtual Machine Screen Blinking/Logging Out [migrated]
Problem: Screen for VM is blinking and logging out. Not able to RDP into Caldera Linux machine to complete project training.
Solutions Attempted:
Disable 3D Acceleration
Suspend/Start VMs
Checked ...
1
vote
0
answers
56
views
Newsletter Spam Attack - Somehow by not directly attacking?
Our website(shopify website) has been getting a bot attack on our newsletter subscription form. Not sure if emails are real or not but there is some from gmail and hotmail etc or some from weird ...
- 11
0
votes
2
answers
88
views
Why don't we sandbox email clients company-wide?
Following on to questions like Sandbox for attachment accessment and How do I safely inspect a suspicious email attachment?.
Why don't we sandbox email clients company-wide?
I must be missing ...
- 140
0
votes
1
answer
48
views
Snort rule doesn't match the content in Meterpreter session packet
I'm working on a university project and I'm trying to identify a reverse shell attack with Snort IDS.
For the attack I used Meterpreter/reverse_tcp and analyzed the packets via Wireshark for traces to ...
0
votes
1
answer
97
views
Threat and risk analysis of Microsoft Teams
I look on all the corporations and firms that have embraced Microsoft Teams in the past and I can not stop wondering if it is a disaster waiting to happen or if I am missing something important. We ...
- 395
0
votes
0
answers
44
views
Microsoft Mouse Without Borders: are data of the first pc private?
I would like to use Microsoft Mouse Without Borders to share the mouse and keyboard of my workstation with my personal tablet (basically, I need an extra monitor to write work notes while I am using ...
- 481
0
votes
1
answer
57
views
Is the information from SD card still recoverable if I use full format (uncheck quick format) in Windows?
I need to wipe SD card so that information from it is not recoverable. If I perform full format in Windows by unchecking the "Quick Format" check box and format SD card that way is the ...
- 209
0
votes
0
answers
50
views
How to Safely Research a Suspected Malicious Website by Using A VM [duplicate]
I am aware of a website that I suspect is, at the very least, pulling user data from visitors and possibly performing other malicious activity on visitors. Of course, the safest course of action is to ...
1
vote
1
answer
34
views
Is it safe to store the OIDC token in a private field of a javascript object?
I would like to initialise a React application with an OIDC token.
This token will be stored in a private field of the "api client" object. This object will be used to execute API calls and ...
- 653
0
votes
0
answers
137
views
Guidance: S/MIME Signed Certificate invalid for many clients even though it worked previously and still works
I have a very strange problem and i would like to get some guidance on this.
Problem description:
My application is sending S/MIME signed Email messages to clients. It worked perfectly no problems ...
- 111
0
votes
0
answers
10
views
Is IP routing subject to data transfer laws? [migrated]
Some regions and territories have data sovereignty and localisation laws that prevent, for example, personal data from being transferred outside of that jurisdiction. Do such laws, if they even ...
- 143
0
votes
0
answers
27
views
certificate relies on legacy Common Name field, use SANs instead [duplicate]
I'm trying to create a Kubernetes service that uses TLS (in order to be called from an admissionWebhook). Unfortunately, the service calls fails with the following error message:
certificate relies ...
- 111
0
votes
1
answer
38
views
Why is OCSP must-staple secure?
Trying to understand OCSP stapling and OCSP must-staple, I've read multiple explanations, but I still don't understand what makes OCSP must-staple secure.
My understanding is that, during TLS, the ...
- 752
1
vote
0
answers
71
views
Hundreds of bots creating accounts using sign-in with Google
We are getting hundreds of bots creating accounts using sign-in with google, like this in this format:
Colin Bush: [email protected]
Tambra Lockett: [email protected]
Marjorie ...
- 111
0
votes
2
answers
132
views
Is WIFI that is 'open' but requires a password to access the internet safe?
It is common knowledge that connecting to open public WIFI networks can pose a security risk (e.g. to man-in-the-middle attacks). However, I have come across 'open' WIFI networks that require no ...
- 101
0
votes
1
answer
36
views
Burpsuite proxy does not get HTTP error 429 but vanilla python requests do?
When I make a normal python request to some site without any proxies I am getting a 429 response, too many requests. However when I open up burpsuite proxy and add
proxies = {
"http": &...
3
votes
1
answer
186
views
Benefits of the Double Ratchet protocol over the constant Ephemeral DH key exchange
I've been reading lately about the Double Ratchet protocol, how it works conceptually. I understand generally the idea behind the protocol, that it provides Forward Secrecy and Post-Compromise ...
- 133
0
votes
0
answers
20
views
Is it possible to count SYN and ACK flags separately in a single rule in Snort?
I want to write a rule for Snort to detect lost traffic in the network. Is it possible to write a rule that, by combining two flags, SYN and ACK, it declares that if the number of SYNs to the server ...
0
votes
1
answer
65
views
token leak by copying cookie
Imagine this scenario: I have a website where the token is stored in cookies without any session validation. If I were to take this exact token and use it in another web browser, I would be logged ...
0
votes
1
answer
53
views
Isn't there a critical built-in vulnerability in OAuth's Implicit flow?
I've read some blogs and did some labs regarding OAuth's implicit flow,
but it seems to me everyone just turn a blind eye to a very critical point in the flow.
Assuming that site A uses the implicit ...
0
votes
2
answers
36
views
Is "avert" a valid term in Risk Management?
I recently came across the term "avert" as an answer in a multiple choice question in an exam which has a module on risk management.
I am au fait with the terms "avoid", "...
- 1,069
0
votes
0
answers
72
views
Problem exploiting buffer overflow
I have the following program in C:
#include <stdio.h>
#include <string.h>
void some_function(char * name) {
char buf[128];
strcpy(buf, "The next step is... ");
strcat(...
- 3
1
vote
0
answers
219
views
Security risks in using ‘no @thankyou.com’ to bypass Microsoft account login when installing Windows 11
One of the recommended methods for bypassing Microsoft account login during the Windows 11 OOBE is to attempt to log in using a locked account (no @thankyou.com being the most commonly recommended ...
- 111
2
votes
1
answer
319
views
In the modern context, what max harm can a webpage do, if the creator is malignant? [duplicate]
Note: this does not answer my question as it mentions Java/Flash(not in the modern context. The question is from like 10 years ago so probably outdated), and mentions weakness introduced by the user(...
- 131
1
vote
0
answers
62
views
Detecting hard to detect stalkerware - a theoretical question
Suppose you have a stalker and this person has access to professional advice.
Suppose your Android phone was hacked by means of physical access, i.e. known unlock pattern or stolen password note, with ...
- 11
0
votes
1
answer
89
views
Does 7z or RAR5 offer better resistance to brute force attacks?
Does 7z or RAR5 offer better resistance to brute force attacks?
- 1
-1
votes
0
answers
65
views
How can a stolen computer card be protected from being re-manufactured and resold?
In this scenario, the attacker is not trying to discover secret information or break the system. Instead, his objective is to create an exact replica of the card and sell it at a lower price.
This ...
- 21
0
votes
1
answer
53
views
How to mitigate spoofing, keylogging password, stealing public key with smart card with external/internal smart card reader?
Here is my thought process:
I want to use smartcards without passwords for my setup. We don't want to use Iris or fingerprint or voice. I only want to put in the card whenever something needs to ...
-1
votes
0
answers
4
views
Printer used to work, not anymore? [migrated]
I have an older
HP8600 All-in-one-Printer
which has always worked great. For some reason it is no longer working. Having trouble connecting to my WiFi I think. It’ll say I am connected but when I try ...
4
votes
1
answer
174
views
Suspicious indexing of non-existent pages
Just recently, the Google search engine started indexing my site with a crazy number of requests. When I logged into the console, 600,000 pages were indexed, and 919,000 more were not indexed. For ...
- 43