218

Satellite is not safe. Neither is cell data, wifi, or cable Internet. None of it is safe at the layer that you are talking. And that's not the layer that needs to be safe. It's the data that goes over satellite (or wifi, cell, or cable modems) that needs to be secured. That's why we have HTTPS, that little green lock on your browser (it's gone now on most ...


136

Deep Packet Inspection, also known as complete packet inspection, simply means they are analyzing all of your traffic as opposed to just grabbing connection information such as what IP's you are connecting to, what port number, what protocol and possibly a few other details about the network connection. This is normally discussed in contrast to the ...


113

Tor is used to circumvent censorship! No, not directly. Tor is about anonymity, not about availability. Tor alone does not help its users access blocked content. Tor helps by making it hard to link clients with site visits, so that people can publish or read content without being identified. It's used to avoid being caught in relation to banned content, not ...


110

In order to block Tor, all that has to be done is have the current list of Tor nodes which can be found at the following link: http://torstatus.blutmagie.de/ip_list_all.php/Tor_ip_list_ALL.csv and then block them bi-directionally via the Routers or Firewalls. That said there will be numerous ways around such efforts, people can still use VPNs to connect ...


102

If there is not an internet connection to your device then a hacker is not going to be able to communicate with that device. (Edit: As some have pointed out...this is assuming an attacker is attempting over the internet from a remote location) With that said, eventually you will have to connect to the internet again if you want to use the internet and if ...


90

First, it might be best to fully understand the client (your boss's) needs. It's possible he or she only needs access to one small subset of the data on this server from anywhere and not necessarily all of it. Where possible, instead of saying no in this situation come back with a few options. VPN so people travelling, can access the data wherever they ...


75

Let me summarise what you are seeing: someone navigates to a typo-squat site (goggle.com) the browser is then flooded with numerous pop-ups, warning windows, etc. eventually, the anti-virus starts to detect malware the machine crashes It is difficult to think that there are young technology professionals now for whom that sequence is new and strange. For ...


68

Why is this so bad? Because there are tons of bots just scanning the web for open ports and trying to log in, once a scanner bot finds an open SSH port it may be queued for another bot (or botnet) to try to brute force the password. One of the risks here is that eventually, they may succeed in figuring out the password and take control of the server. I ...


65

Any software you install on your system can compromise the system and thus affect security and privacy. This can be done either willingly or because of bugs in the software. And this is doubly true for software which runs with elevated privileges, like Antivirus usually do. And while Antivirus might like to protect you they often have critical bugs which ...


62

Trey Blalock's answer describes percisely what deep packet inspection (DPI) is. But I'd like to add three things to hopefully answer your specific questions: There is a technique of DPI that does decrypt your data, called SSL interception, although it is more common in enterprise situations and only possible if the ISP (or any other interceptor) has the ...


49

Fairly easy to be honest, all you need is to do is listen for Probe Requests. There is a nice blog explaining how to go about setting up a computer with BT5 to listen for them here. With a networking card that supports "Monitor mode", you are able to pick up so called "Probe requests". Once the networking card is set up to be in monitor mode you can use ...


41

First things first, change your password and make sure the new password is secure (10+ characters, a number somewhere other than the last character, a capital somewhere other than the first character, not an iteration on your past password, etc). This is good to do periodically anyway. GMail has tools for seeking suspicious account activity. Specifically, ...


40

As stated by Trey, DPI can see the entire content of your network traffic. All of it. If it is plain text, then they see everything that you do. To add on to Miao's answer: Things DPI can see, even when you use HTTPS: DNS information, e.g. https://catvideos.com/tigers - they will see https://catvideos.com IP address connectivity. So, even you you ...


39

I would like to specifically address the question on why security of the underlying mode of communication is not as important as the encryption of the message. You are communicating with your bank to request a transfer from one account to another. You might write a letter something like this, using an official form you picked up from the bank. Dear Bank ...


38

Tor will be actually quite hard to block because of tor bridges: Bridge relays (or "bridges" for short) are Tor relays that aren't listed in the main Tor directory. Since there is no complete public list of them, even if your ISP is filtering connections to all the known Tor relays, they probably won't be able to block all the bridges. To ban Tor ...


36

As pointed out by begueradj, any government agencies can access your cloud-stored files through a subpoena to Google. But your question was what they can do when they have your laptop alone and nothing else. This is not an unlikely scenario. It is the situation you have, for example, when you get arrested by law enforcement and they do not have sufficient ...


33

A few years ago (2003), there was this worm called "Blaster" (or MSBlast, Lovesan etc. - read more on https://en.wikipedia.org/wiki/Blaster_(computer_worm)). It spread by using a vulnerability in an RPC service, running on Windows XP and 2000. At the time where it was "worst", you could get infected within minutes, if you didn't have a firewall set up. I ...


33

Only the TLS endpoints1 can read the the full URL because HTTPS provides end-to-end encryption. HTTPS wraps the full HTTP protocol, including the request line, request/response body and all the headers. The request URL is just one part of HTTP that gets encrypted together with all the other components. If any party was able to read the URL, they would ...


32

This would reduce your risk by minimizing the time the attack surface is vulnerable to attack so yes technically it is a helpful security control. It falls into the category of Layer 1 access control in the OSI model. This said you are also losing data created by attackers at night which could be useful for trending attackers activity. It might still be ...


29

They're sort of correct. Let me explain. In Dropbox, there are two ways to share files. Sharing a link to a file from any folder will generate a link in the following form: https://www.dropbox.com/s/randomkey/filename Anyone can access the file you posted with that link. However, each time a file is shared like that, a new random key is generated and ...


27

The main risk is that the initial connection can be intercepted by a Man-In-The-Middle, so an attacker can retrieve the password. The first time a user connects to an SSH server, something similar to the following is displayed: $ ssh scanme.nmap.org The authenticity of host 'scanme.nmap.org (45.33.32.156)' can't be established. ECDSA key fingerprint is ...


24

Are there some reasons that connecting internal systems directly to the internet is a bad thing? You're unnecessarily increasing the attack surface. Here are problems to consider: An attacker who obtains control over this single exposed service can eventually leverage that access to infiltrate other services on the intranet. You might be having a hard ...


20

The chance is N in 153,803,885,110,405,674,678,434,597,293,100,547,399,764,930,461,696 where N is the number of files stored under /file/d with public view permissions set (TY @Mike Ounsworth). So, there's a chance, but it's not a great one. The "garbage string" is a 28-digit name which appears to consist of uppercase letters (26), lowercase letters (26), ...


20

It is not currently possible to hide the type of OS from a website A solution against general fingerprinting and obtaining more specific information about your system is to use Tor Browser with the security slider set to high (in order to disable JavaScript). It is designed with fingerprint resistance in mind, attempting to look identical to all other ...


18

It is not possible to create a digital communication that will self-destruct after a certain amount of time (or upon sender's command). This because of the nature of the message, which once reaches the recipient' machine can be copied at will. This applies to email as well as instant messages. Therefore any service promising you messages that self-...


18

Even if you see a message saying the connection is not trusted does not mean it is not an HTTPS connection. In order to display or not such error messages, browsers try to validate certificates using following criteria: Does the certificate common name match the domain name entered in the URL bar? Is the current date between validity start date and ...


18

... but what is the issue with providing a socket API to allow interacting with existing protocols? This is not a restriction of the language itself but of it's use inside the sandbox within the browser. Just imagine that a script somewhere on the internet gets loaded into the browser and could from inside the browser access every computer reachable by the ...


15

Given how many attacks are aimed at routers, the number of security flaws / backdoors in consumer grade routers, and the fact your router is an always-on gateway to the big bad internet, I'd say powering the router down is easier and a more effective measure than disconnecting your PC from it. You're moving the (debatable) security benefit one step further ...


13

Geo-ip location accuracy varies wildly from country to country and from provider to provider. Some smaller countries have very accurate internal mappings of IP's to postal addresses but this type of data is generally not available to the public. Note: Different Geo-IP address databases may also have different location data for the same IP address so you ...


Only top voted, non community-wiki answers of a minimum length are eligible