13
votes
Anti-bot JavaScript library identification
This anti-bot library belongs to Akamai.
Clients execute the javascript and post to /_bm/data on a site behind the Akamai CDN. The CDN's bot manager (bm) then makes decisions based on the submitted ...
- 231
9
votes
Accepted
Do mail servers follow links in emails as part of a security scan before inbox delivery?
This is not a new problem.
I haven't had to work around it in a few years, so I don't know if the state of the art has changed, but there are a few things you can try:
1) don't process your link ...
- 476
6
votes
Accepted
Port-forwarding to a web server on Raspberry Pi
The problem is less the open access to a server with some unimportant task. The problem is more that this server is probably located in the same network as more important systems (unless your home ...
- 208k
4
votes
Do mail servers follow links in emails as part of a security scan before inbox delivery?
Easy enough to put a CAPTCHA on the one-time link to confirm the visitor is human before using the link. So, the mail filter will still visit the page but won't trigger the action expected by simply ...
- 141
4
votes
Pros and cons of installing security updates automatically?
If you look at CIS Controls (formerly known as TOP20 Critical Security Controls), and particularly the number #3, you will find:
Deploy automated software update tools in order to ensure that the ...
- 41
3
votes
Give users a powershell script to run - Secure?
From a security perspective there is no issue, aside from maybe an awareness problem (e.g. users being taught to execute scripts they might not understand). Do note that most computers may not allow ...
- 54.7k
3
votes
Incident Responders: Can you give some examples of Incidents / types of incidents that are suitable for fully or partly automated response?
Active responses such as dropping and ignoring requests are the only kind of automated response I've engaged in.
Any commercial IPS or Web Application Firewall does this. HIDS/HIPS can be considered ...
- 7,575
3
votes
Incident Responders: Can you give some examples of Incidents / types of incidents that are suitable for fully or partly automated response?
Of the top of my head I wouldn’t say anything. The point of a SoC/SIEM is to bring things to the attention of a human analyst in order to evaluate the incident and decide on what actions to do next. ...
- 7,859
3
votes
Pros and cons of installing security updates automatically?
Fraga gives a great answer. I'd just like to add a DevOps spin to it.
If you have serious concerns about updates causing failures in existing systems, you could mitigate that by running system ...
- 4,028
2
votes
Accepted
Anti-bot JavaScript library identification
I de-obfuscated it (see coffeescript code below) and ran it through jsbeautifier.org
stringList = [ ... list went here ]
tCode = '''
... code went here
'''
tIn = tCode
tOut = ""
while tIn != tOut
...
- 8,275
2
votes
How to tell if human is using website or automated script?
The most common method is probably a hidden field, bots tend to fill these but humans don't.
Also common is to use a captcha of course.
Then some people use JavaScript to detect page events that ...
- 7,152
2
votes
Automate ASVS with ZAP
There has been some work on this. You should check out this blog:
Automate checking ASVS controls using ZAP scripts
Basically, yes some of it can be done with ZAP and existing scan rules or additional ...
- 624
2
votes
Should one be concerned about public keys being copied to wrong servers accidentally?
Tampering with autorized_keys by insiders can be mitigated by switching to CA certification. SSH has built-in support for this.
- 535
2
votes
Any campus email systems automatically testing links?
In theory this should not happen.
But for short periods I can see it happening, in certain not carefully tested systems.
The http standard includes the following actions, HEAD, GET, POST, DELETE and ...
- 3,683
2
votes
Accepted
Automatically Open LUKS Container on System Boot in a safe manner
Rather than having a local machine periodically query the server and push the key to it if necessary, you could do it the other way around and have the server pull the key from your local machine. The ...
- 67.3k
1
vote
Do mail servers follow links in emails as part of a security scan before inbox delivery?
Obviously I don’t know your customer’s mail provider, but some service providers offer features specifically for this purpose — performing a security inspection of a message before delivery. Some, to ...
- 306
1
vote
Fetching GPG private key from Linux server to decrypt files on a Win 10 computer in production
You could send Linux the encrypted server, have it decrypt the file and return the cleartext.
This would work like a HSM: the key never leaves the server, and cryptographic operations (encrypt, ...
- 55.5k
1
vote
Do mail servers follow links in emails as part of a security scan before inbox delivery?
Depends on the functionality of the MTA, if the MTA have phishing detection capabilities (basically parse the message and extract URLs and check with a database) depends on how they make the detection ...
- 2,294
1
vote
Network with one possible unsecure device and one home assistant device
There may be a lot of vulnerabilities in your setup:
As you plan to connect your devices with wifi, you open up at least for signal jamming. There are a lot of possibilities for a thief, like ...
- 21
1
vote
How can I improve and secure automated signing?
Typically, you have two vectors here.
Loss of the Private Key
Unauthorized use of the Private Key
Generally, some hardware backing is recommended to address #1, such as an HSM, SmartCard, or other ...
- 234
1
vote
IFTTT maker channel and Security Concerns
I guess HTTPS and put the secret in the body. Other than that, I don't think you can really secure it more, which is a shame. Also, you would need a certificate for your Raspbery PI.
- 7,858
1
vote
How safe are the password prompts of the SafeNet eToken 5110 or similar cryptographic hardware tokens?
If we assume "reasonably hardened" include the "usual":
An AntiVirus software that is NOT pirated. I am in no way recommending using pirated software, but, if someone is going to ...
- 563
1
vote
How safe are the password prompts of the SafeNet eToken 5110 or similar cryptographic hardware tokens?
If a key logger is infecting your machine, any text you type, including the private key you enter to the SafeNet prompt will be stolen as you type it in. You better use an automated entrance of the ...
1
vote
About Wikipedia section about Malware for AutoHotKey
I'm pretty sure AHK is not malware!
There is no claim (by the article or elsewhere) that AutoHotKey is Malware. I'm not sure who or what makes any indication that is the case. If anyone had doubts, ...
- 3,042
1
vote
Wireshark decrypt and save wireless packets from command line
Is there any solution? It would even help if I could somehow generate a psk from ssid and password and save that as a text file, but there does not even seem to be a clean way to do that.
If you know ...
- 363
1
vote
How to tell if human is using website or automated script?
To detect, sites owner can deploy a lot of mechanisms like: Timing of requests, Content of the requests (the values of the field), User Agent string...etc.
To protect, CAPTCHA (stands for: Completely ...
- 323
Only top scored, non community-wiki answers of a minimum length are eligible