All Questions

Filter by
Sorted by
Tagged with
0 votes
1 answer
72 views

Is there a good case of passwords to be hidden on the screen to the extent it is? [closed]

In the olden days most computer displays involved a coaxial lead attached to a cathode ray tube. This functioned as a radio transmitter of what was displayed on the screen. I understood the response ...
User65535's user avatar
  • 189
1 vote
0 answers
120 views

How to diagnose a DDOS on a home network?

I'm a user with a consumer level modem and a plain wifi router. I have been seeing activity where for long periods of time over night, my internet connection will shut off for 10-20 minutes at a time. ...
tuskiomi's user avatar
  • 202
0 votes
0 answers
82 views

NTRU - How is the master key and session key generated?

I am learning the PKC topics and would like to understand about the master and session key generation process regarding NTRU. Let's make it a scenario, if a user wants to register during the ...
Chris Lo's user avatar
0 votes
0 answers
470 views

Is URL:Blacklist a harmful threat?

res.public.onecdn.static.microsoft and Avast says my C:\ProgramFiles(x86)\Microsoft\Edge\Application\msedge.exe was infected with URL:Blacklist from https://res.public.onecdn.static.microsoft/owamail/...
Capalbo Alessandra's user avatar
15 votes
7 answers
5k views

Preventing Javascript in a browser from connecting to servers

I have a webpage I would like to use locally (the JSON-LD Playground). It appears to be designed to operate without connecting to a server. I would like to have a strong confidentiality guarantee ...
Cort Ammon's user avatar
  • 9,416
0 votes
0 answers
9 views

Can signing into a compromised account on a new device infect the new device? [duplicate]

Can signing into a gmail account that was compromised/hacked infect a new device? (Account was compromised on one device, and a new device is used to sign in). What about for other accounts, like ...
question48710947's user avatar
0 votes
1 answer
257 views

XSS against improper character sanitization [closed]

I have the following code from an XSS challenge and I've been told that it's vulnerable to XSS. And the hint to the question points to https://html.spec.whatwg.org/multipage/parsing.html#tag-open-...
arian_lrd's user avatar
0 votes
0 answers
42 views

Does the Samsung keyboard for Android phones send user input anywhere?

I've heard of this rumor (here, for example) but no clear investigation/confirmation.
2080's user avatar
  • 101
0 votes
1 answer
35 views

Is there a difference between data origin authentication and sender authentication?

Here the author writes "sender authentication". Does he mean data origin authentication? Or is sender authentication something different? Wikipedia says that "data origin authentication ...
allexj's user avatar
  • 129
0 votes
1 answer
49 views

How do regular software updates to Apple’s secure enclave remain secure?

The Secure Enclave is isolated from the main processor to provide an extra layer of security and is designed to keep sensitive user data secure even when the Application Processor kernel becomes ...
security_paranoid's user avatar
2 votes
0 answers
49 views

Why is every port open on every scan i do [duplicate]

I have been hired to do some tests on networks but however everytime i do a scan every port is open. This is using nmap and homemade tools. This has been a ongoing problem. I created a script to check ...
Don Schulz's user avatar
2 votes
0 answers
75 views

When gets reads a string, it does not read \x00, which is the NULL character. So how to separate two different addresses to complete ROP?

First I used ROPgadget to find two assembly instructions: xor rax; ret and pop rcx; ret, They are at 0x401270 and 0x40133b. Then I tried to put them at the top of the stack, but because the gets ...
Maple's user avatar
  • 21
1 vote
0 answers
47 views

How to analyze anomalous behavior in network having network log?

I have an assignment in which I have three logs from a network. One for control, from which I can define a typical behaviour pattern, one in which I have strange behaviour from accesses within the ...
dyxcvi's user avatar
  • 11
1 vote
0 answers
35 views

Cheap unhackable secuity cameras (perhaps with usb transfer)? [closed]

Cheap unhackable secuity cameras (perhaps with usb transfer)? The key is that it should not be hacked by anyone (i.e. they will need access to my room to tamper with it). I have up to 200 pounds to ...
user66697's user avatar
  • 111
-1 votes
1 answer
80 views

If a vulnerability is discovered on a website, is it better to contact the business owner or site designer/owner? [closed]

There are plenty of questions on this site about how to report a vulnerability (such as SQLi or XSS,) but none of them really answer my question of who to. I understand for a big corporation (although ...
security_paranoid's user avatar
1 vote
1 answer
70 views

How can I prevent ISP DNS snooping when using piHole [duplicate]

I have home network set up to use piHole and piHole uses 1.1.1.1 and 8.8.8.8 as DNS resolvers. This, however, doesn't prevent ISP snooping on my DNS traffic, as DNS traffic is UDP unencrypted, as I ...
masiton's user avatar
  • 43
0 votes
1 answer
57 views

Are there better methods of sustaining forensic integrity apart from disk hashing?

As far as I've heard, hashing a disk image before computer forensics is started, and then comparing that hash to a new hash after the forensics is finished is the most common way to make sure that ...
security_paranoid's user avatar
1 vote
2 answers
130 views

Problem overiding the return address when performing a buffer overflow, what am I missing?

Playing around with probably the most basic buffer overflow attack there is on my raspberry pi, looks like this #include <stdio.h> #include <string.h> int main(int argc, char *argv[]) { ...
Salviati's user avatar
1 vote
1 answer
125 views

Why does AWS strongly recommend a non-self-signed, code-signing certificate?

I am developing a hardware device that utilizes AWS IoT OTA via FreeRTOS. On this AWS web page, it says We recommend that you purchase a code-signing certificate from a company with a good ...
kackle123's user avatar
  • 113
2 votes
0 answers
19 views

In MS Purview DLP, how do I prevent inline (in body) images when sending Exchange EMail?

In Microsoft Purview DLP (Data Loss Prevention), how do I prevent inline (in body) images when sending Exchange EMail? My last attempt at a DLP Rule, summary: Header contains words or phrases: Content-...
George 2.0 Hope's user avatar
1 vote
1 answer
55 views

What are the risk of using http when capturing open events on an email

I want to configure a custom domain for open and click tracking in Amazon Simple Email Service (SES). However, I've encountered a limitation where Amazon SES only allows HTTPS domains for tracking ...
dandaman12's user avatar
1 vote
1 answer
80 views

Edge browser + Docker: proxy settings for Burp Suite

This is my case: I'm trying DVWA in a Docker container localhost:4280. I want to test this webapp with Burp Suite (which listen to port 8080) and Microsoft Edge browser. I'm on Windows 11 The way to ...
ranemirusG's user avatar
1 vote
1 answer
46 views

Preventing Unauthorized Public Exposure of Repositories

Recently, a developer accidentally made a private repository public, which contained secret keys. Although a third-party application promptly flagged and rotated the exposed credentials, the ...
Akhil's user avatar
  • 11
1 vote
1 answer
68 views

Restructure PGP Keys

How do I restructure my keys from current/old setup to new setup? The new setup would allow better key-management: isolation of primary-key and rotation of sub-keys. Current/Old Setup: PrimaryKey - CS ...
R G's user avatar
  • 31
1 vote
1 answer
54 views

Encrypted ids to break inter-service dependencies

Let say I have “transactions” and “users” services managing transactions and users data respectively. Transaction record only has sender user id, but on display I want to show sender’s email. I also ...
averbin's user avatar
  • 113
2 votes
1 answer
101 views

Ghidra detecting malware in game mods?

Can Ghidra in Windows 11 detect malvare in game mods and in modding tools? Got over 10 severe malwares after downloading (very) popular mods and modding tools from Nexus Mods, Moddb, Github etc. Not ...
ingenting's user avatar
0 votes
0 answers
28 views

The Boot Process - Sequence of Events, Boot Integrity Checks, and BitLocker OS Volume Encryption

Apologies if any of these questions have been answered previously. Also, apologies for the sheer number of questions asked here. I've done some digging, and have been unable to find a good resource ...
user309532's user avatar
0 votes
3 answers
118 views

Is Homomorphic SQL Query Encryption a good idea - and should I use It?

My web app still needs a lot of work on it in the security department, so I'm considering implementing homomorphic encryption for my SQL database- to help protect from the outcomes of SQLi. I know the ...
security_paranoid's user avatar
0 votes
0 answers
25 views

Why cannot we use TLS in the data link layer instead of EAPTLS? [duplicate]

since EAPTLS also makes use of the TLS protocol features to provide authentication why cannot we just make use of TLS in datalink layer. What is the exact difference between them.
Rahul Acharya's user avatar
1 vote
1 answer
59 views

Looking for feedback and advise on security of my application [closed]

I have built a secure password management application using python. From my understanding I have completed the implementation in a secure manner. I would like to see if there are any flaws in my ...
Krishna Raju's user avatar
1 vote
2 answers
101 views

JWTs as refresh tokens, beside the JWT access token?

While reading up on refresh tokens, I've come by some interesting comments in this answer: Refresh tokens can be in the form of a JWT as well After going through all the responses and doing some ...
Advena's user avatar
  • 139
1 vote
1 answer
111 views

Refresh tokens for impersonating user credentials: how to implement them?

The web app I'm developing makes use of the concepts of "access token" and "refresh token", even though it uses its own auth scheme. In certain situations, the web app needs to get ...
Fabio A.'s user avatar
  • 125
1 vote
0 answers
24 views

Sending photo of debit card over email [duplicate]

I have seen/heard online stores (not necessarily within the U.S., maybe international) asking buyers to provide a picture of their debit cards via email (e.g., for verifying identity). My intuition ...
Beerus's user avatar
  • 111
0 votes
1 answer
52 views

Keychain iOS: info on other users

I am analyzing an iOS mobile application. I discovered that the app saves all logged-in users in the keychain, specifically saving their first name, last name, email, and id_token. This id_token, ...
moskino11's user avatar
  • 127
0 votes
0 answers
41 views

How to track thread termination if Invoke-Phant0m terminates a thread with no trace in Sysmon?

I recently learned about such a tool as Invoke-Phant0m, this tool has several implementations, one of which is a PowerShell script. The Invoke-Phant0m.ps1 script is a PowerShell script that uses WMI (...
0rdum's user avatar
  • 1
-2 votes
1 answer
195 views

Why are passwords in the Linux terminal unmasked? [closed]

When entering a password into the password field in a Linux terminal- the password is just in the clear! This is a commonly known fact. But what if I'm in public, like in an office, and need to enter ...
security_paranoid's user avatar
2 votes
0 answers
47 views

Books about security patterns and anti-patterns? [closed]

Information security was the topic of my Ph.D. dissertation, but I was investigating a rather specific sort of issue, and I am now starting to think about the notion of (information) security in ...
Aaron B.'s user avatar
0 votes
0 answers
20 views

Hiding/Obfuscating workspace GUIDs in Sentinel Cross-workspace queries

noticed with cross-workspace queries, using functions to obfuscate workspace GUID's still leaves subscription IDs exposed in the RequestContext table. Is there a way to use watchlists or other means ...
hx.m4v's user avatar
  • 21
0 votes
0 answers
31 views

Conventions regarding Sysmon rules

Recently, I started researching the Blind Eagle attack and was also able to emulate it properly with the appended documentation. I would like to view data about it in my Splunk and Wazuh dashboards. ...
Aka's user avatar
  • 1
1 vote
1 answer
158 views

nmap does not work through proxychains

Despite the already existing answers about this topic, I am still unable to use nmap through proxychains. I would like to scan the port 80 of a machine I can connect using SSH. To do so, I enabled ...
Pierre's user avatar
  • 133
17 votes
4 answers
7k views

How to deal with monitoring software on a personal PC used for work?

My husband currently uses his personal computer for virtual work. The agency he works for insists that all employees install monitoring software that can see everything on the computer. I have heard ...
Stephanie M's user avatar
4 votes
1 answer
478 views

How important is HOTP/TOTP secret key security?

I'm prototyping an application that generates MFA codes. For developer simplicity I'm storing source data in clear text in Google Authenticator URI format (ex: otpauth://totp/totp@authenticationtest....
mrjonleek's user avatar
1 vote
1 answer
44 views

Advantages of using IAK over EK for attesting purposes on a TPM

I want to use an IoT device's TPM as a new Intermediate CA. I can prepare the device during manufacturing, and would like to then create new CAs during operation. Traditionally, one would create an ...
Lemon Sky's user avatar
  • 185
7 votes
4 answers
4k views

Should order numbers be guessable?

We wrote a e-commerce system where we were asked to generate orders based on a format provided to us The format was extremely simple which was today's date with total number of orders in the database +...
KeithViking's user avatar
0 votes
1 answer
89 views

What are the consequences of cookies, including the session cookie, being stolen?

I have recently been wondering what the consequences would be if an attacker got access to a user’s cookies, including the session cookie, for my web app? Could they impersonate said user? Could they ...
security_paranoid's user avatar
2 votes
1 answer
81 views

What are the infection risks for a SMB/Samba file share from an infected client PC?

I have a PC on my home network that I consider potentially infected by exposure to an untrusted program from the internet. (Antivirus detected nothing, and the PC runs fine, but I'm choosing to err on ...
hypernova365's user avatar
1 vote
1 answer
74 views

Why use access token for Google Artifact Registry access?

Applications using a Google service account can use that service account's key (a long-lived credential) to obtain a short-lived access token for Google Artifact Registry and documentation strongly ...
Kent Rancourt's user avatar
0 votes
0 answers
32 views

Python os.system() does not change EUID to 0, but os.execl() does, why? [duplicate]

I was working on a CTF challenge that involved a setuid-enabled binary, '/usr/bin/python' where the owner is 'root'. The user I assumed was "www-data", with UID=33. The goal was to create a ...
theptr104's user avatar
0 votes
0 answers
41 views

Is creating an internal API within a VPN a recommended practice for securing database access for customer-facing applications?

The InfoSec team of the client I work with has mandated that any customer-facing application's backend should not directly access the database for that application. They require we create another ...
muad'dib's user avatar
0 votes
1 answer
61 views

mTLS set up - Does it require any offline certificates exchange?

My company is exposing a few APIs to one of our partner systems (external). We're looking at mTLS authentication here than any credentials based Auth schemes. My understanding is, My system (server) ...
user1189332's user avatar

15 30 50 per page
1
3 4
5
6 7
1383