Skip to main content
200 votes
Accepted

Company claims hardwire connections are a security issue

Warning: Conjecture, because none of us know their actual setup. It is very likely that the organization has their own network, which is hard-wired, as well as a guest network, which is wireless-only....
gowenfawr's user avatar
  • 72.9k
198 votes
Accepted

Is it theoretically possible to deploy backdoors on ports higher than 65535?

No, the port number field in a TCP header is technically limited to 2 bytes. (giving you 2^16=65536 possible ports) If you alter the protocol by reserving more bits for higher ports, you're violating ...
Arminius's user avatar
  • 44.9k
192 votes

How can mom monitor my internet history from a distance?

Be careful about assuming too much. You say that you know "surefire" that your university is spying on you, but your only evidence is that your mom is computer illiterate and you're "sure some of them ...
Jason's user avatar
  • 1,897
174 votes
Accepted

Can my employer see what I do on the internet when I am connected to the company network?

Yes. Always assume yes. Even if you are not sure, always assume yes. Even if you are sure, they might have a contract with the ISP, a rogue admin who installed a packetlogger, a video camera that ...
Konerak's user avatar
  • 3,928
168 votes
Accepted

How is no password more secure than username+password?

They have configured the laptops to spin up a VPN connection and only speak to "home base" after they go on the network. That means that if there is a local "captive portal" that requires you to ...
gowenfawr's user avatar
  • 72.9k
145 votes
Accepted

What is this kind of low-intensity, non-hacking attack on a web service?

This sounds like the behaviour of an uptime service. These connect from multiple locations at a regular interval, and are designed to alert the server owner in the event of problems. In this case, it ...
Matthew's user avatar
  • 27.4k
117 votes
Accepted

Is it possible to "fake" being connected to a router?

Well, obviously it's not "foolproof". Depending on your capabilities, there are plenty of ways to cheat. Your professor has a point in that your standard wireless network card won't simply support a ...
Arminius's user avatar
  • 44.9k
100 votes

Is pinging a website essentially the same as visiting the website through a browser?

They are not the same at all. A ping request is an ICMP packet which just by default sends null data to check if the host is up (You can change around the parameters being sent (read more here).) ...
Bubble Hacker's user avatar
87 votes
Accepted

How can mom monitor my internet history from a distance?

This sounds like it would mostly likely be some kind of Internet monitoring software (a.k.a legal spyware) installed on your computer when you set it up. Some ISPs provide this kind of service either ...
Rory McCune's user avatar
  • 62.4k
87 votes

How can mom monitor my internet history from a distance?

One possibility that I came across by accident: Google (and possibly other search engines), keep track of what you search for, if you are logged in. Anyone with (access to) your login name and ...
AMADANON Inc.'s user avatar
82 votes
Accepted

Does the local network need to be hacked first for IoT devices to be accessible?

The devices are designed to be accessible from outside the home. To offer this service to their owners, they make themselves accessible through the homeowner's router/firewall. The way they do this is ...
John Deters's user avatar
  • 34.3k
82 votes
Accepted

Can you hide a server's existence on the internet?

You can set your server to normally drop all incoming packets and only open a port after it gets/sees a set of packets that specify a specific sequence of ports (this is called port knocking). I use ...
JShade01's user avatar
  • 896
73 votes

Why is external access to a server via SSH considered insecure?

SSH is not typically considered insecure in and of itself but it is an administrative protocol and some organizations require two or more layers of control to get access to an administrative console. ...
Trey Blalock's user avatar
  • 14.2k
73 votes
Accepted

How can we secure communication of an unchangeable app (Zoom)?

You cannot magically secure applications like Zoom without changing the application and the infrastructure it relies on. The missing end-to-end encryption you want to have fixed is due to the basic ...
Steffen Ullrich's user avatar
73 votes

What is the use case for using TLS on an internal network?

See the note in the bottom center of this classic slide: This is from a leaked NSA slide deck. Tapping internal traffic is not rocket science, the only real requirement is that someone is targeting ...
Luc's user avatar
  • 33k
72 votes
Accepted

Can I change my public IP address to a specific one?

You can send out a packet with whatever IP address you like. Then, one of the routers along the way might decide the packet makes no sense (it is a "martian packet") and discard it. Consider ...
LSerni's user avatar
  • 22.9k
70 votes

Unknown suspects hijacking our WiFi. Caught their MAC addresses

Physically finding them is not easy. If you are really willing to catch them, buy a couple ESP8266 modules (search eBay for them), research this project a little, drop a couple modules around and you ...
ThoriumBR's user avatar
  • 54.5k
70 votes
Accepted

How fast can hackers change their IP address?

Botnet If someone has access to a botnet, even a small one, they could change the IP that their actions are coming from several times per minute or flood their actions from a million IPs in any given ...
schroeder's user avatar
  • 131k
67 votes
Accepted

Landlord will be watching my data traffic, as mentioned in the lease agreement

FINAL (hopefully) UPDATE: Well after all the very interesting and valuable discussion, it seems to me as though initial thoughts were correct. From the updated question, I would say that the ...
Julian Knight's user avatar
65 votes

Is a 'dumbphone' mobile more secure for basic phone calls than a smartphone?

Has the security of the basic phone call changed much, in the last 10 years ? So, do smartphones utilise anything new [purely in] the initiation and connection of just the phone call itself ? Yes. ...
Hacktiker's user avatar
  • 934
61 votes

Does your ISP know what type of phone/computer you're using?

Depends on the device and if you have taken any steps to hide it. Most devices by default put a lot of identifying information in the User-Agent header on outgoing HTTP/S requests. For HTTP requests ...
Hector's user avatar
  • 11k
61 votes
Accepted

Why can't we perform a replay attack on wifi networks?

Because the protocol is built to protect against that. whereas when you wanna login to your wifi you would type in your password and the password would be encrypted then sent to the router which ...
vidarlo's user avatar
  • 16.6k
55 votes

Would it be more secure or not if all computers in the network use the same operating system?

In 2003, Dan Geer from @Stake published a seminal paper on this very topic - CyberInsecurity: The Cost of Monopoly. Surprisingly (given that he was employed by Microsoft at the time) he comes ...
gowenfawr's user avatar
  • 72.9k
54 votes

Is it possible to "fake" being connected to a router?

You don't need to fake being connected to a router. The simplest way to ensure that you're detected as being connected to a router is to be genuinely connected to that router. That doesn't mean you're ...
Gilles 'SO- stop being evil''s user avatar
53 votes

Advantages to killing sessions after 5 minutes?

I'm completely confused, though. What is the security benefit here? Nothing. The most likely scenario is that something in between is timing out the connection after 5 minutes to conserve resources....
Steve Sether's user avatar
  • 21.6k
52 votes

My WiFi network is replaced by another network. Am I being hacked?

It is unlikely a hacker stealing internet access will have the sophistication (or need) to make the wireless network change between different names. It is more likely that someone/some device nearby ...
billc.cn's user avatar
  • 3,946
52 votes

Can my employer see what I do on the internet when I am connected to the company network?

Is it your device? There are two ways you can be monitored - either what you do on your computer is being logged on your computer, or the internet traffic it generates is being logged somewhere else ...
Anders's user avatar
  • 65.6k
49 votes

Why is WPA Enterprise more secure than WPA2?

All earlier answers are missing a very important step and its implication and are misunderstanding EAP. WPA2-PSK (aka WPA2 Personal) basically does the same thing as WPA2-Enterprise from the clients ...
Terrence de Kat's user avatar
49 votes
Accepted

What is the use case for using TLS on an internal network?

The only use case i can think of is if you have untrusted users on the network... This, but the problem is that you have untrusted users who you don't even know are users on the devices on network. ...
R.. GitHub STOP HELPING ICE's user avatar
46 votes

Landlord will be watching my data traffic, as mentioned in the lease agreement

I don't want to write about the technical details because I think the options have been clearly defined by the other posts. But I'd like to contribute some thoughts on the legal stuff. Disclaimer: I'm ...
Ariser's user avatar
  • 591

Only top scored, non community-wiki answers of a minimum length are eligible