Skip to main content
226 votes
Accepted

What stops Google from saving all the information on my computer through Google Chrome?

What processes and systems are in place so that Google is not able to copy the data on my computer? None. Google Chrome usually runs with the permissions of your user account. The application can ...
Arminius's user avatar
  • 44.9k
98 votes
Accepted

Reason to not use chmod -R 777 on internal server for project source code?

However, after putting some thought into it I can't come up with a reason why shared executable code on an internal server shouldn't have 777 permissions. Because you're not only trusting every ...
gowenfawr's user avatar
  • 72.9k
86 votes

What stops Google from saving all the information on my computer through Google Chrome?

A piece of unsandboxed software running on a PC/Mac has (generally) the same privileges as the user running it and therefore can access any data that can be accessed by the user. You are trusting ...
Rory McCune's user avatar
  • 62.4k
40 votes

What stops Google from saving all the information on my computer through Google Chrome?

If you are running a Linux distribution with SELinux, it is possible to have an additional layer of security. SELinux is an OS-level technology which allows tight restrictions on what processes — like ...
mattdm's user avatar
  • 2,711
29 votes
Accepted

Does a single fopen introduce TOCTOU vulnerability?

A call to fopen is not in itself a TOCTOU vulnerability. By definition, TOCTOU involves two operations: a “check” and a “use”. A common example of TOCTOU vulnerability is checking access permissions ...
Gilles 'SO- stop being evil''s user avatar
25 votes

Reason to not use chmod -R 777 on internal server for project source code?

I'm gonna second @gowenfawr and say that breeding better chimpanzees is a goal unto itself here. (now I will extrapolate wildly about your corporate culture) At my software development company, we've ...
Mike Ounsworth's user avatar
23 votes

What stops Google from saving all the information on my computer through Google Chrome?

Lawyers. You have a contract with Google stating what they will do / you allow them to do. This is called the Google Chrome Terms of Service . And obviously, you have carefully read it before ...
Ángel's user avatar
  • 18.9k
19 votes

What stops Google from saving all the information on my computer through Google Chrome?

What processes and systems are in place so that Google is not able to copy the data on my computer? There's not anything in place that makes it so they can't but there's something in place that makes ...
Wayne Werner's user avatar
  • 1,835
15 votes

Claim that Skype is an unconfined application able to access all one's own personal files and system resources

It’s like this comic: Generally, any program that runs under your account can access any resources that your account can access. Can Skype really scan anything I have in my home directory ...
Scott - Слава Україні's user avatar
8 votes
Accepted

Could ransomware be stalled while encrypting?

Your suggestion is interesting; unfortunately a generic solution is not possible as there is no combination of bits that would cause an encryption algorithm to "stall". Encryption is just math, after ...
John Deters's user avatar
  • 34.3k
7 votes

A file that doesn't allow copy/paste or print

Nope, and it can't exist in the general case, because you don't control the client device. This is essentially the problem that DRM solutions try to solve for video and audio content, and text or ...
Matthew's user avatar
  • 27.4k
7 votes

Reason to not use chmod -R 777 on internal server for project source code?

Unless the program requires write permissions, I am confused as to why your coworker used chmod -R 777 /opt/path/to/shared/folder when chmod -R 775 /opt/path/to/shared/folder would still allow read ...
safesploit's user avatar
  • 1,867
5 votes
Accepted

How to detect if files were saved or copied from an external hard drive/USB?

Reading the file is copying it into active memory. Once the file is in active memory, you can't control what happens next. There are special platforms which perform DRM (Digital Rights Management)...
mgjk's user avatar
  • 7,525
4 votes
Accepted

How to eliminate data leaks when accessing encrypted data?

Does method 2 address data leak vulnerabilities present when accessing files via method 1? Not at all. It just ensures that the already-protected VeraCrypt container will be saved to an encrypted ...
techraf's user avatar
  • 9,139
4 votes
Accepted

How did stuxnet hid it's files after the infection?

Answer is also simple - inject into Explorer and hook the following functions: FindFirstFileW FindNextFileW FindFirstFileExW NtQueryDirectoryFile ZwQueryDirectoryFile . Symantec has a bit more in ...
Jonathan Allon's user avatar
4 votes
Accepted

Do AppArmor/SELinux provide any security for workstation?

I did. You need a plan, and you need to master the tools. You need to be able to compromise where you can and where you have to compromise. You need to work to make it reality. Access control is part ...
dac.override's user avatar
4 votes

How to technically introduce my boss to computer file security?

... but I lack the technical arguments why ... With such a position it is likely hard to convince your boss. And your boss is even probably right when arguing that what you want is weakening the ...
Steffen Ullrich's user avatar
3 votes

Could ransomware be stalled while encrypting?

You could create a watchdog that creates a fake file, C:/A, and looks for changes in it. As soon as a change is detected, shut down the computer immediately. That's most likely the safest.
Hame James's user avatar
3 votes

Security in unofficial telegram apps(that use Telegram API)

Developers of any application can get hold of the data that passes through the application if they can find a way to transfer the information without you objecting. This has been demonstrated time ...
Julian Knight's user avatar
3 votes

Can email services upload files from your computer without your permission/knowledge?

Depends what you mean by "email service", since as a general rule you're using some client to access an email service, and clients have different capabilities and restrictions. For example, mobile ...
CBHacking's user avatar
  • 49.2k
3 votes
Accepted

Is there such a thing as application-specific encryption?

There are several ways to do this but basically you are describing something of a digital rights management problem. There are some open-source DRM programs like OpenIPMP which may help but there ...
Trey Blalock's user avatar
  • 14.2k
3 votes
Accepted

How secure is it to store passwords in a non-accessible file?

Depends on what passwords you're talking. Using Wordpress as an example, wp-config.php contains the DB Username and Password. It's generally accepted good practice to move the file to a non web-...
keithRozario's user avatar
  • 3,711
3 votes

How to give someone access to a file, on a website, securely without relying on a single password?

The canonical answer would be — using cryptographic tokens. In some countries or organisations, such tokens or ID cards may already have been issued and widely available. But given the context, you ...
dig's user avatar
  • 355
3 votes

What stops Google from saving all the information on my computer through Google Chrome?

Arminius's answer of "None" is the most correct answer... I just wanted to add an answer which was too large for a comment: What processes and systems are in place so that Google is not able to ...
Josh's user avatar
  • 1,096
3 votes

What stops Google from saving all the information on my computer through Google Chrome?

There are several answers to this, including an accepted answer, but none to my judgement captures the appropriate nuance. The nuance involves the distinction between "policy" and "mechanism." This ...
Jonah Benton's user avatar
  • 3,527
3 votes

What can a site visitor do with a 777 file on my web server?

Servers are not written in a way to automatically modify a file just with a simple POST or PATCH method, a security feature, to be sure, so 777's biggest threat is that it does expose read-access to ...
phyrfox's user avatar
  • 5,724
3 votes

How to technically introduce my boss to computer file security?

The security of the files -- while in storage -- is as good as the physical security of the building. The files are still vulnerable when your boss edits them, though. The physical location can be the ...
Polygnome's user avatar
  • 131
2 votes

How can I prevent someone from carrying out a file from a machine

It's a wicked problem that you will probably not be able to solve with the budget you have within the time you will be working for a single company. Consider that portable cameras known as '...
dig's user avatar
  • 355
2 votes

Can UNIX Domain Sockets be locked by user ID?

Yes, you can do this, but it may not be the best design since, on some systems, such as HP-UX, the permissions of the socket file are ignored. While the permissions of the parent directory will ...
Kevin's user avatar
  • 936

Only top scored, non community-wiki answers of a minimum length are eligible