New answers tagged

0 votes

ESTABLISHED TCP connections after opening browser in linux

It may be "normal", but it's not okay. At least for Firefox, there is a detailed guide published by Mozilla to disabling all of the huge number of "automatic connections" made for &...
7 votes

ESTABLISHED TCP connections after opening browser in linux

In most systems, this is the new normal. There is vendor documentation on why you might find some of them desirable, as well as how to stop most automatic connections made by Firefox. However, as with ...
  • 248
19 votes

ESTABLISHED TCP connections after opening browser in linux

I'm not going to try and track down the individual connections in that list, but broadly speaking, yeah, it's extremely common for software to automatically make some TCP connections upon starting. ...
  • 42.8k
1 vote

How to protect files in use on a system powered on from physical theft or tampering?

Your first step is to ensure that the system reliably locks when not in use (sleep mode or session lock). The laptop may be powered on, but at that point the only ways to access the data are network ...
  • 22.7k
1 vote

Security and practicality of passing secrets to services running as non-privileged user

I have seen an approach that involves two non-secret segments: one in the code, and a second in the configuration file. Each is typically 32 random bytes base64-encoded. These two parts are combined ...
0 votes

Local Burp Proxy not showing routed packets

In your iptables rules, you redirect all TCP packets from source 10.42.0.62, which probably include those of DNS requests. Although ordinary clients use UDP for DNS requests which should not be having ...
  • 121
0 votes

How can I sandbox a Wine application on Linux?

sandwine is rather young (as of March 2023) and I don't have Excel or Word at hand to test the with sandwine, but it is a Wine sandbox with multiple options for X11 builtin and it may work for you. ...
6 votes
Accepted

User isolation in LAMP

In a production environment, such as a commercial web hosting service, what kind of setup can I expect to find? In small operations (i.e. not separated virtual instances), I've usually seen this done ...
  • 22.7k
0 votes

Preventing low-skill physical access by creating fake desktop environment

I'd do it backwards. I'd have a full system that starts on bootup that can be accessed by anyone but your protected system runs as a virtual machine or subsystem. You can protect, encrypt, and hide ...
  • 126k
1 vote

Preventing low-skill physical access by creating fake desktop environment

The mitigations to physical access are: Physical security User access control (Passwords/smart cards/etc) Hard drive encryption Obfuscation will never replace any of these, no matter how tempting it ...
  • 1,747

Top 50 recent answers are included