New answers tagged

-1

Control Flow Integrity prevents bugs from becoming exploits. It validates a program during execution and enforces at run-time what the programmer intended at compile-time, even in the presence of vulnerabilities that would otherwise allow an attacker to alter control flow. Buffer overflow protection is any of various techniques used during software ...


2

I know it isn't the answer to your question -- but I think having a completely separate bucket for the publicly accessible items makes more sense than trying to limit a single folder within the bucket. Buckets are freely created, and hence there's little value in keeping all private and public objects in a single bucket, as they're likely to have different ...


2

Restrict access to your S3 buckets or objects by: Writing AWS Identity and Access Management (IAM) user policies that specify the users that can access specific buckets and objects. IAM policies provide a programmatic way to manage Amazon S3 permissions for multiple users. For more information about creating and testing user policies, see the AWS Policy ...


0

Control flow integrity and buffer over flow protection are measures against exploiting coding bugs in a program. Access control is about controlling who can access some device or application etc. By assuming that access control would be sufficient you assume that a) access control itself is perfect and never has any bugs and b) access control makes sure ...


0

The Raspberry Pi has both a video port and USB ports on the side. A malicious user that happens to be alone with the device could bring their own monitor and keyboard and hook up to the Raspberry Pi and run an application that could call the same functions that open and close the valve. How can I prevent this from happening? Superglue. This may be "...


2

@multithr3at3d gives a good answer about what you are directly asking for. However, you may not have considered whether your "personal security" is diminished as a result of this policy: If some individual or government knows your IP address, by turning off your modem on a holiday, this tells a third-party that you're away from the house.


5

Generally speaking, a vulnerable device/network doesn't become less vulnerable if it is turned off some of the time. Or if you have infected devices on the network, this won't make them any less infected. However, it may reduce the probability of your router or any exposed service from becoming infected any given day. I guess you could also argue that an ...


0

I would suggest disallowing the putPolicy* API call for each of the service supporting resource policies for all of the non-admins. Then providing a structured interface to make changes to these policies. I'm fairly certain users can still create S3 Buckets and SQS queues without having the putPolicy permission. I do think you need to have the putPolicy ...


Top 50 recent answers are included