5

It looks like they add a rule to the firewall to deny outgoing connections. Since it is a stateful firewall, any new traffic is a new "connection". Existing traffic streams are unaffected since it is not a new "connection", but a part of the existing stream. VPNs are a constant connection and traffic is tunnelled through that. Example ...


4

Domain names are registered to your user account on the registrar website. So the only way to get permanent access to a given registered domain is to either: take ownership of the user account (stealing credentials) transferring the domain to another account Now that second part is usually locked when you create your domain, and you need to take active ...


3

To protect your own communication with the internet against sniffing by other on the same local network you can use a VPN, i.e. the typical VPN for private use which starts the VPN connection at the local system and has the VPN exit somewhere on the internet, outside of the reach of the other users of the same router and of your ISP. Protecting yourself ...


2

Does the additional proxy server for internet access provide more security than it (potentially) costs in effort ? If the proxy is just a dumb proxy then there is no additional protection. But usually the company proxy is actually a system which analyzes the traffic for malware or data leakage, blocks potentially malicious sites and might even do HTTPS ...


2

how secure is my setup? 0-day exploits notwithstanding you're secure as long as your users/passwords combinations are secure as well and you install Windows updates immediately after they are released and reboot afterwards. Provided that my computer has some sensitive data in it. People generally oppose having CIFS ports wide open to the Internet, however ...


1

There's at least two security concepts here that you're concerned about: vulnerability and availability. First, vulnerability. Anything that is network-connected is theoretically network-exploitable. So adding another device to your network does increase your risk. A NAT firewall at your home network's boundary would prevent incoming connections. But there ...


1

The technical answer is yes, as long as nobody just steals the USB flash drive. You can mitigate that with full-disk encryption, but I don't think people breaking into your house are going to be looking for your SSN anyway - they're much more interested in taking the most expensive objects they can carry out by hand and easily fence. One issue with storing ...


1

Too many missing pieces of information so instead of peppering you with questions I'll go with a Straw Man then take it apart. Assuming a baseline configuration of a secure HTTPS to the server you are uploading to, then no, the school admin would see only encrypted traffic to the server. If it's not HTTPs (or otherwise secure connected) then the school ...


1

In what cases they will know that I see their stories? For example, can they know (from my google account) that it is me? Assuming with 'they', you mean your friends, it is highly unlikely they will know it was you unless they would know your IP address and use some sort of analytics to see who visited and from where. It used to be possible for websites to ...


1

If the router has an explicite feature to create a guest network then it is likely separated from the normal network - but you still might be liable to what the guests do since they still share the internet access for you. If the router does not have an explicit guest network but instead something else you use as guest network than it is unknown how good the ...


1

An encrypted VPN out of country is the classic approach. Set up correctly, all the ISP will see is that there is an encrypted tunnel to the VPN. Common VPN errors include: Failing to make sure that all of the DNS traffic moves through the VPN Failing to make sure the connection drops completely with no auto reconnect in the event the VPN is disrupted. ...


1

How does this shutdown system work? Based on your description it seems it does this on a stateful firewall by preventing new connections. VPN connections are already established connections, and everything goes inside the tunnel. That's why they continue to work. How can I connect to the internet even after it closes all connections? Buy an own Internet ...


1

1. TLS, as it is used most often, has server-only authentication but does not have client authentication. For web applications that have client authentication (e.g. gmail), client authentication is done by the application independently of TLS, by, for example, sending the password from the client to the server inside the TLS tunnel. But the password can be ...


1

TLS only protects the communication between client and server against sniffing and modification. This means that it does not make an server side application magically secure against attacks from a malicious clients. It also does not make any existing authentication methods stronger, i.e. weak password will still be weak passwords and they are as easy to ...


Only top voted, non community-wiki answers of a minimum length are eligible