Ljm Dullaart
  • Member for 2 years, 11 months
  • Last seen this week
Buying keycodes online safely/anonymously
1 votes

I'm not going into the, as you call it, sketchiness of the practice. You wish to be anonymous for a specific transaction, and from the vendor (and not necessarily from your own ISP or from a mail ...

View answer
Why avoid shared user accounts?
1 votes

As said by many, accountability, traceability, liability etc are the main reasons. There are a number of extra points to consider: How secret is the information that is accessed? As an extreme case, ...

View answer
Sending password in separate email
0 votes

Eh, yes and no. If you can access a specific e-mail from a user at a specific time, there is no guarantee that you can always access all mails from that user. Access may be temporary (for example if a ...

View answer
How to investigate my wifi router for devices which are disconnected earlier
0 votes

If you have a flat network, an arp -a on the systems on your network (if you have any) might give you the list of the connected devices to that system (if not too long ago and if they were probed). ...

View answer
How bad is it to store credentials in clear text on disk and in memory?
0 votes

As you said "it depends". So there is not a definitive answer that can be used as one-size-fits-all. It is somewhat opinion-based as well, I'm afraid. The real solution is to do a risk ...

View answer
Can a compromized browser know your ISP's IP even if using a VPN?
0 votes

The rant at Google's Chrome is uncalled for and quite irrelevant here. You cannot rely on systems that are compromised. There are many questions on this site that ask whether the use of a compromised ...

View answer
Noob question on security of localhost
Accepted answer
0 votes

Localhost is the name that each computer (most computers) has on its loopback interface. You should see this interface as an interface that is attached only to your local system. By definition, the ...

View answer
How can wrong time synchronization be exploited?
0 votes

If your time is wrong, this can lead to a system no longer being accessible. So the "otherwise working correctly" is limited. Many security protocols (ok, TLS not so much, except for CRLs) ...

View answer
Is there any such thing as an independent code vetting project which works for free to vet open source projects?
0 votes

The basic question that you have is whether you can trust a specific piece of software. Your example of independent verification is just an example that increases your trust. There are other ways of ...

View answer
On what basis to create Data Keys
0 votes

We cannot know the answers. It depends completely on your use case, of which you have explained very little. Some considerations: How many data key do you need to create? As many as you have ...

View answer
Save encrypted data in server . With no way for server to read actual data
Accepted answer
0 votes

The usual way is to use a two-level key. You encrypt the data with key_data, which should probably be a symmetric key. You keep a separate key-file where key_data is encrypted with the key from the ...

View answer
How Can I Prevent Hackers From Spoofing TCP messages onto my server?
0 votes

Your idea to suspect that you cannot just trust the client is correct. But you can never solve this issue on the network or the client. You must solve it on the server side. You assume that they ...

View answer
Security of downloaded softwares
0 votes

The way to find out if you have a virus is to use an antivirus. Basically, in the question you ruled-out the only real workable solution. A second idea would be to make a reference system that you ...

View answer
I want to buy a used docking station for my laptop. Has there ever been a case of a docking station being a security concern?
0 votes

As always: do a risk analysis. What is the likelihood that that a docking station contains a keylogger? According to @multithr3at3d: it is almost zero. There are easier ways of distributing keyloggers ...

View answer
Is there any encryption mechanism where i can ensure that the decryption can only happen within my data center?
0 votes

All decryption is only possible if you have the key (or sufficient computing power and time). If you want to be sure that the key never leaves the infrastructure, buy a Hardware Security Module (HSM) (...

View answer
Checking system integrity after clicking scam email link on Linux
0 votes

Most of the standard security in Linux distributions prevent the worse incidents. I assume your mother does not browse as root. And if your distro has the latest patches applied, most of the time, you'...

View answer
Do you need to update a router that is set in bridge mode?
0 votes

There are a number of reasons to update anyway. I assume, that behind the router/modem in bridge mode, you have some sort of security measure protecting yourself (like a firewall). First are the ...

View answer
How can I calculate the entropy reduction in my system I'm going to introduce?
0 votes

So basically, this is a form of plain-text attack against your algorithm. The question is how easy it is to guess your integer. If I know "foobar" and the new password, then I can create a set of ...

View answer
How to trace the remains of deleted files?
0 votes

At a high level, the answer is, that we know something about the files or directory structure. If we know something, that means that we can look for it on a disk, even if it is not in the current ...

View answer
I lost my private key
0 votes

Basically, if you lost your private key, it is over. Unless you used some really short key length, (say 256 bit), a crypto-attack will take too long.

View answer
sudo whitelist just program perl
0 votes

First of all: do not run the webserver under a user-ID that you use interactively. That is a very bad practice. Especially, if your interactive sessions use sudo-s. Normally, sudo uses per-tty ...

View answer
How to Prevent Access to Local Machine's Data
0 votes

If you want a 100% guarantee that no-one accesses the files on your Macbook, then I'm sorry. The only way to get real certainty is a stand-alone machine specially for this purpose. As you seem to have ...

View answer
Carve out all scattered pieces of a file from data
0 votes

That is of course filesystem dependent. What you normally do in forensics is make a copy of the whole disk (with dd) and operate on that copy only. Next is to try to undelete a file. You will always ...

View answer
Can wireshark capture the exact payload and end point of API used by my Mobile APP?
0 votes

Is wireshark capable to capture the network requests like this and is the url visible? Assuming that Wireshark captures somewhere where the packet goes by, yes. Also is it possible for ...

View answer
Capturing traffic on WiFi Network using Wireshark
0 votes

Not really. Use airodump-ng for that. airodump-ng will provide PCAP-files that can be examined with Wireshark. [edit] some explanation, because of downvote and comment: Theoretically, you could put ...

View answer
How should security user training be provided when implementing a company BYOD strategy?
0 votes

I once saw a joke about a bug that could not be fixed before shipping. It said: "We'll fix it in the manual". And when it wasn't in the manual: "We'll provide training." So you are now at the end of ...

View answer
Homebrew and NOPASSWD sudo
-2 votes

So, either you find a mechanism to find all the executables that you want to be able to run as root, or allow your user to run everything as root: user ALL=(ALL) NOPASSWD: ALL Run this from cron and ...

View answer
1 2
3