38 votes
Accepted

Why is Home --> VPN --> Tor worse than Home --> Tor?

Preface: I consider this question to be a false dichotomy and an inversion of the burden of proof. One of the core tenets of building secure systems is that you minimise the attack surface, and resist ...
Polynomial's user avatar
  • 135k
30 votes
Accepted

Are Playstation 4 communications really harder to monitor?

Many of the news were just sensational news, not actual. There have been reports surfacing after this that security agencies monitor xbox and playstation communications. It came up as a playstation ...
Ladislav Louka's user avatar
15 votes
Accepted

Turn RPi3 Wi-Fi adapter into monitor mode using airmon-ng

You cannot. Not all chipsets/wifi drivers support monitor mode. Broadcom is known for lacking in open source drivers functionality support. It is already public knowledge the RPi 3 current driver ...
Rui F Ribeiro's user avatar
8 votes

How can disabling Diffie-Hellman cipher for packet inspection be secure?

TL,DR: using this product strictly as recommended most likely violates your compliance rules. This is not because of the Diffie-Hellman aspect, but I still wouldn't use it, partly because the DH ...
Gilles 'SO- stop being evil''s user avatar
6 votes

Turn RPi3 Wi-Fi adapter into monitor mode using airmon-ng

The default firmware does not allow monitor mode. The Nexmon project has patches to enable that.
Mr. White's user avatar
  • 161
6 votes
Accepted

DRM - Make sure that a SDK is used by the client legally

It's essentially a legal problem - you want to control what is running on a client's device, which means you'll need the co-operation of the client. For a company providing a web based API (e.g. your ...
Matthew's user avatar
  • 27.3k
6 votes
Accepted

How do you protect against your IT domain admins accessing your data?

What you're asking is not simple. It ranges from very difficult to impossible. Your company has outsourced the highest privilege level in its environment, and now it wants to prevent those highly ...
DoubleD's user avatar
  • 3,942
5 votes
Accepted

Is this a reasonable approach of continous network monitoring?

The approaches you mention are a bit confusing, and I will explain why. In a properly designed infrastructure many of the bulletpoints you listed would be addressed: Hourly host discovery scans - If ...
munkeyoto's user avatar
  • 8,702
5 votes
Accepted

Restrict VPN access to only authorised machines

Different VPN clients have different methods for accomplishing this. some issue device-bounded clients that are generated from a base server, so users only get one, and the client is machine-bound, ...
schroeder's user avatar
  • 129k
4 votes

What to look for in baby monitor?

The problem here is that most people who buy baby monitors plan on using them in their home, and most people don't do top secret stuff in their home - they reserve that for their corporate office or ...
genealogyxie's user avatar
4 votes

Can a Government block a specific app traffic, even with a VPN running?

In theory one could use heuristics to guess the kind of traffic. A typical example is flow analysis where one analysis the size, direction and timing of transferred data because various protocols and ...
Steffen Ullrich's user avatar
4 votes
Accepted

Avoiding Dark Web monitoring detection

Obtaining Access To begin a dark web is a network (often encrypted) which overlays the Internet but requires specialised software to access it. The Tor client, supplied within the Tor browser bundle, ...
safesploit's user avatar
  • 1,867
4 votes
Accepted

Can the GlobalProtect VPN of my company track websites when Disabled?

When you say "disabled" I will assume you mean "disconnected" from the VPN. I will also assume this is a company asset and not a personal asset. You can't be completely sure based on the information ...
deletehead's user avatar
4 votes

What kind of data can be monitored/intercepted/altered by the VPN service provider?

You asked a couple questions: What kind of data can a VPN server log or monitor? Date, time, which server you connected to (IP and port), the size of the request, the response size, how many ...
ThoriumBR's user avatar
  • 54.1k
4 votes

Are schools able to track the usage of apps on their Chromebooks?

If the Chromebook is issued by the school, you are likely also using a school Google account. Both your account and the laptop are administered and monitored through the Google Workspace (G Suite) ...
schroeder's user avatar
  • 129k
4 votes
Accepted

Can my ISP know that I have more than one Google Drive account?

The fast response is "no", your ISP can not see how many accounts of gdrive you have and which of them you are using. In fact, as far as I know, the majority of the traffic to google ...
camp0's user avatar
  • 2,267
3 votes

What to look for in baby monitor?

Some very specific suggestions: A device that is not accessible via the internet is going to limit the physical range of threats. Wired, RF, or even bluetooth based devices will likely fall into this ...
Jesse K's user avatar
  • 1,068
3 votes

Telnet alert on SIEM

Looks like someone is probably trying to brute force usernames/passwords or other malicious connections to your host. Either way you should never have telnet open because it is very insecure. You ...
infoseclearner1's user avatar
3 votes

Are Playstation 4 communications really harder to monitor?

As the article does not go into detail, I am left to suspicion. I suppose Sony does not use strong crypto; else, it would not be 'hard' but 'very hard' to get plain text. (cf. Apple ./. FBI) There ...
Tobi Nary's user avatar
  • 14.4k
3 votes

Can a Government block a specific app traffic, even with a VPN running?

If the VPN connection is properly setup such that all data goes through it is not possible to block specific apps since there is no way to know what data is sent through the VPN connection. Without ...
Zeta Two's user avatar
  • 446
3 votes
Accepted

How to analyse packets sent by controller in Wireshark?

I want to mimic a replay attack on controller PR402. I connected my computer with this controller via TCP/IP <-> Serial Bridge and I would like to analyse packets sent between computer and ...
gowenfawr's user avatar
  • 72.9k
3 votes
Accepted

Where would I place a sniffer to capture data in a home network with the following topology?

First case: Your sky router has a mirroring port / You can dedicate a port to mirroring. Should be very simple to tap the traffic, check your router specs/doc. Second case: you want to do it by ...
Baptiste's user avatar
  • 1,673
3 votes

How should we mitigate threats that are keep coming to our security monitoring system?

Threat intelligence has a common issue today which is a large volume of data generated & coming to the consuming enterprise IT set up & threat intelligence feed bundle has three different ...
Telaprolu Aishwarya's user avatar
3 votes
Accepted

How should we mitigate threats that are keep coming to our security monitoring system?

Aha! So you got the cart but forgot the horse!!!! Classic mistake -- your org seems to be in trouble, but you're not alone! Everyone else is like you, so good for asking the question. The answer, of ...
atdre's user avatar
  • 19.1k
3 votes

Where do live threat maps get their threat-data from?

... serving accurate information ... I doubt that these information are accurate. There is some truth in it based on what vendors see from honeypots, from installations at customers and from public ...
Steffen Ullrich's user avatar
3 votes
Accepted

Is accessing /proc/ inside docker container a security breach?

What you're able to see from the process running in the Docker container is a filtered view of the hosts /proc filesystem. It's somewhat less than what any process running on the host could see. on ...
Rory McCune's user avatar
  • 62.3k
3 votes

Are schools able to track the usage of apps on their Chromebooks?

9.9/10 they can. Many schools also have Remote Desktop programs which allow them to watch your screen and I’ve heard of some of my own schoolmates getting in potential trouble because of that. But, ...
LoganS's user avatar
  • 31
2 votes
Accepted

Sniff network packets that don't talk to my computer?

Yes. You are looking for promiscuous mode or monitor mode. https://security.stackexchange.com/a/37000/28585
d1str0's user avatar
  • 2,348

Only top scored, non community-wiki answers of a minimum length are eligible