52
votes
How to deal with monitoring software on a personal PC used for work?
My husband currently uses his personal computer for virtual work.
Stop doing that.
There are some workarounds that you can use such as having a separate encrypted operating system for personal use, ...
- 14.6k
38
votes
Accepted
How to deal with monitoring software on a personal PC used for work?
Whether or not the employer has the right to demand the installation of monitoring software is a legal question, so it's off-topic for an information security community.
As to the technical aspect, I ...
- 17.1k
13
votes
How to deal with monitoring software on a personal PC used for work?
Others have already answered that getting a second PC is the right solution for this.
In addition to what the others have said, this also reduces the risk of malware spreading from one machine to the ...
- 3,788
8
votes
How can disabling Diffie-Hellman cipher for packet inspection be secure?
TL,DR: using this product strictly as recommended most likely violates your compliance rules. This is not because of the Diffie-Hellman aspect, but I still wouldn't use it, partly because the DH ...
6
votes
Turn RPi3 Wi-Fi adapter into monitor mode using airmon-ng
The default firmware does not allow monitor mode.
The Nexmon project has patches to enable that.
- 161
6
votes
Accepted
DRM - Make sure that a SDK is used by the client legally
It's essentially a legal problem - you want to control what is running on a client's device, which means you'll need the co-operation of the client.
For a company providing a web based API (e.g. your ...
- 27.4k
6
votes
Accepted
How do you protect against your IT domain admins accessing your data?
What you're asking is not simple. It ranges from very difficult to impossible.
Your company has outsourced the highest privilege level in its environment, and now it wants to prevent those highly ...
- 3,952
5
votes
Accepted
Restrict VPN access to only authorised machines
Different VPN clients have different methods for accomplishing this.
some issue device-bounded clients that are generated from a base server, so users only get one, and the client is machine-bound, ...
- 132k
4
votes
Can a Government block a specific app traffic, even with a VPN running?
In theory one could use heuristics to guess the kind of traffic. A typical example is flow analysis where one analysis the size, direction and timing of transferred data because various protocols and ...
- 205k
4
votes
Accepted
Avoiding Dark Web monitoring detection
Obtaining Access
To begin a dark web is a network (often encrypted) which overlays the Internet but requires specialised software to access it. The Tor client, supplied within the Tor browser bundle, ...
- 1,877
4
votes
Accepted
Can the GlobalProtect VPN of my company track websites when Disabled?
When you say "disabled" I will assume you mean "disconnected" from the VPN. I will also assume this is a company asset and not a personal asset.
You can't be completely sure based on the information ...
- 712
4
votes
What kind of data can be monitored/intercepted/altered by the VPN service provider?
You asked a couple questions:
What kind of data can a VPN server log or monitor?
Date, time, which server you connected to (IP and port), the size of the request, the response size, how many ...
- 55.1k
4
votes
Are schools able to track the usage of apps on their Chromebooks?
If the Chromebook is issued by the school, you are likely also using a school Google account. Both your account and the laptop are administered and monitored through the Google Workspace (G Suite) ...
- 132k
4
votes
Accepted
Can my ISP know that I have more than one Google Drive account?
The fast response is "no", your ISP can not see how many accounts of gdrive you have and which of them you are using. In fact, as far as I know, the majority of the traffic to google ...
- 2,294
3
votes
Accepted
Where would I place a sniffer to capture data in a home network with the following topology?
First case: Your sky router has a mirroring port / You can dedicate a port to mirroring.
Should be very simple to tap the traffic, check your router specs/doc.
Second case: you want to do it by ...
- 1,713
3
votes
Accepted
How to analyse packets sent by controller in Wireshark?
I want to mimic a replay attack on controller PR402. I connected my
computer with this controller via TCP/IP <-> Serial Bridge and I would
like to analyse packets sent between computer and ...
- 73.1k
3
votes
Can a Government block a specific app traffic, even with a VPN running?
If the VPN connection is properly setup such that all data goes through it is not possible to block specific apps since there is no way to know what data is sent through the VPN connection.
Without ...
- 446
3
votes
How should we mitigate threats that are keep coming to our security monitoring system?
Threat intelligence has a common issue today which is a large volume of data generated & coming to the consuming enterprise IT set up & threat intelligence feed bundle has three different ...
3
votes
Accepted
How should we mitigate threats that are keep coming to our security monitoring system?
Aha! So you got the cart but forgot the horse!!!! Classic mistake -- your org seems to be in trouble, but you're not alone! Everyone else is like you, so good for asking the question.
The answer, of ...
- 19.1k
3
votes
Where do live threat maps get their threat-data from?
... serving accurate information ...
I doubt that these information are accurate. There is some truth in it based on what vendors see from honeypots, from installations at customers and from public ...
- 205k
3
votes
Accepted
Is accessing /proc/ inside docker container a security breach?
What you're able to see from the process running in the Docker container is a filtered view of the hosts /proc filesystem. It's somewhat less than what any process running on the host could see.
on ...
- 62.5k
3
votes
Are schools able to track the usage of apps on their Chromebooks?
9.9/10 they can. Many schools also have Remote Desktop programs which allow them to watch your screen and I’ve heard of some of my own schoolmates getting in potential trouble because of that. But, ...
- 31
2
votes
TLS 1.3 Makes Security Tools Obsolete?
that's my video! Thanks for watching!
I've got a couple answers. First, proxies will still work: you just need to get the client to trust an "enterprise" cert. Second, you're right that the old ...
- 101
2
votes
Passive fingerprinting of HTTPS client
Lee Brotherston spoke at DerbyCon 2015 on Stealthier Attacks and Smarter Defending with TLS Fingerprinting -- slides -- video.
He also released code to go along with the talk -- https://github.com/...
- 19.1k
2
votes
Accepted
What is the most secured UEFI publicly available?
The way you ask this shows you haven't understood the problem to its fullest extent:
I would need full monitoring of every EUFI activity and if possible make it available at the OS level
The UEFI ...
- 6,274
2
votes
Accepted
Enterprise Wireless 5Ghz deauth
Deauth can be tricky. Let's look at some common issues from Aircrack-ng's page on Deauthentication.
You are physically too far away from the client(s)
How close are you? Can you get closer? ...
- 186
2
votes
Accepted
Tool to listen http traffic goes to different ports (Windows)
RawCap
While the standard approach of Wireshark won't work on Windows due to how loopback interface is(n't) implemented in Windows, you should be able to use RawCap to capture the data and then ...
- 8,439
2
votes
Accepted
Who is talking to my laptop? No PCAP or firewall-- in BYOD environment
An easy way to log any incoming (or outgoing) connection attempts is to use IPtables. IPtables has the ability to log arbitrary information to the syslog. An easy way to accomplish this is to set up a ...
- 13.1k
2
votes
Accepted
Does Web proxy also get information of any files uploaded to cloud?
A web proxy is a service that sits between the client and the website and forwards all requests and responses between them. This includes files uploaded to a website.
A proxy with the intent to ...
- 32.9k
2
votes
Accepted
What are the core differences between Airodump-ng, Wireshark, and TCPdump?
Airdump-ng is for capturing 802.11 frames, so you use this tool exclusively for wireless networks.
Wireshark and TCPdump are similar but Wireshark is more complex, also has a GUI. E.g. you can set ...
- 1,008
Only top scored, non community-wiki answers of a minimum length are eligible