New answers tagged attacks
0
You should definitely contact your ISP about this and let them know as this is something they should block.
Some ISP's renew the IP of the subscriber every time the router/modem resets, I recommend you try this too.
1
You are asking a quite open question, and I think you are in a too-theoretical situation, whereas in the outside world you would probably find that the critical system is using a Windows XP that hasn't been patched in the last 15 years.
Obviously more security checks will lead to “more complexity” in the code/design, which means a larger surface where ...
-2
"what could be the consequences of a security countermeasure failure on a component or system safety?"
The impact would be proportionate to the square root of the damaged quality rate of the countermeasures, criticality rate, and the elevated number of controls that interact with the damaged countermeasures (which can open up more consequences).
Managing ...
0
If you were connected by WiFi to the router, the attack that were surely made to you is a "client deauthentication".
That is based on sending packages so that the client disconnects from the router and losing the connection. In many cases, another point of access is usually lifted with your same network SSID network so that you connect to a malicious access ...
2
If the user account you are using is not in the Administrator group, it will make it harder for a Rubber Ducky to operate.
The weakness of the Rubber Ducky is running pre created scripts (payloads), and most of them are meant to accounts that like most Windows PCs are in the Administrator group. In a limited account, you will need to enter the Administrator ...
2
You may be overthinking the problem.
If you distribute a client to them, you can just query the OS directly. The best route is likely to ask users for their specs and query silently; they are unlikely to put forth the (rather substantial) effort to fabricate data if they don't know you are collecting it.
On Windows, you could query the ...
2
At least fish, ksh93, yash and zsh are available in Ubuntu, but not installed by default, and don't drop privileges when they start. Perl and Python are installed by default and don't drop privileges.
This is not a “critical security check”. If an adversary can cause an interpreter to be setuid, they can also run code as that user. If they can inject code ...
0
I reached out to SoxRox (an assistant developer of PixieWPS) and this is what he told me:
"It’s different for every case, but for the average case, most routers
don’t have enough storage to keep massive logs, and they’re generally
disabled by default.
The only way they could know is if they see WPS is locked in the GUI
or if they were passively ...
Top 50 recent answers are included
