peterh
  • Member for 8 years, 1 month
  • Last seen this week
Is laptop "secure sleep" mode theoretically possible?
Accepted answer
37 votes

Yes. It could be easily achievable, although it would require kernel support do this properly. In the suspend-to-RAM case, the key should be deleted from the RAM, and in the suspend-to-disk case, ...

View answer
Putty store cleartext credentials in the Windows Registry; isn't that a very insecure approach?
20 votes

In the context of ssh, "credentials" can have two meanings. Cleartext password It is true, that registering cleartext password as cleartext, i.e. without any encryption or so, is at least a bad ...

View answer
Distance between two passwords
13 votes

There is no good way. What you say, is practically the measurement of the password distance in our mind. It is clearly impossible to have a direct method to do that. Second thing, what you want to ...

View answer
Legal purposes and advantages for Dark Web
Accepted answer
11 votes

The dark web is not a well-defined thing. Often already the torrent protocol is listed there. Dark web is not for the evil things, and not for the illegal things, it is for the anonymous things. ...

View answer
How to securely, physically destroy a hard drive at home?
7 votes

First, write it over on the sector-level with random data. You can do this multiple times. After that, you can take it apart with a screwdriver. In your place I would use simple sandpaper to destroy ...

View answer
What is the entropy of a password made with pwgen?
6 votes

An exact answer would require a deeper analyzis of the pwgen source code, or a more exact measurement. But I think we can use a strong compressor to approximate the entropy. The command pwgen 1048576|...

View answer
Is exploit-free software possible?
6 votes

Yes, if the security of the system is mathematically proven. It is not a new idea, the Trusted Computer System Evaluation Criteria, in short "Orange Book" originates from 1985. In them, the highest ...

View answer
How is HTTPS/SSL able to hide destination website that one is connecting to?
5 votes

SSL/TLS doesn't hide the source and the destination IP addresses. It is impossible (at least, with a purely ssl/tls solution), because the src/dst addresses must be valid to a working tcp connection. ...

View answer
If malware does not run in a VM why not make everything a VM?
4 votes

Because malware runs in a VM. It can not infect the host machine or other VMs. Putting everything in VMs is still a viable way to improve security, and it is being done.

View answer
Is it possible to escalate privileges and escaping from a Docker container?
4 votes

With normal means, no. Docker was intentionally designed on this security concept. It uses the namespace functionality of the kernel to separate the processes running in a container from the on host ...

View answer
Does Skype encrypt IP destination?
4 votes

Since some years, all of the Skype communication happens through their servers and not directly. There is no IP to hide (encrypt) because your Skype client doesn't know the IP of your pals.

View answer
Is it completely safe to publish an ssh public key?
4 votes

Yes, but... If your security relies on the privateness of the public key, you are doing something sub-optimal. This is not what the asymmetric encryption is designed for. All of the previous answers ...

View answer
Sending passwords to someone remotely
4 votes

The main problem about this is that we are sending passwords normally to simple users, who have problems to open a gpg-signed mail. What the problem real worsened by that our job/wage/project depends ...

View answer
My Usage of Snapchat via a VPN
3 votes

Today practically all of the information sent on the Internet is encrypted. There are only a few exceptions. This encryption is typically unbreakable by an ISP (you see warnings in browser windows, ...

View answer
Router tries to manipulate HTTPS connections?
Accepted answer
3 votes

While it is the typical case of https eavesdropping, most likely there is no malicious intent in the background. For example, the router can provide some web filtering or other defense for you with ...

View answer
Sniff plaintext password written in /tmp directory
Accepted answer
3 votes

A possible attacker can also use the inotify mechanism of the linux kernel to track the filesystem events in the /tmp directory. If a new file is created, create also a hard link to this file. It ...

View answer
Is Bluetooth a secure protocol?
Accepted answer
3 votes

First I would citate @TeunVink 's pretty comment. I don't have anything to give it to... There's a difference between the bluetooth protocol and its implementations. You get patches on the ...

View answer
How can I handle open ports?
3 votes

The biggest risk for you is that your company network security detected your portscan. It is a security attack and their countermeasures probably don't consider your wish to remain in your job ...

View answer
Strange apache log line
Accepted answer
3 votes

As in the first line is it visible, he tried to use the Shellshock security hole of the bash shell. His idea was probably the following: the Shellschock works by evironment variables, i.e. in some ...

View answer
If a Windows laptop with an encrypted hard disk is stolen, can the contents be accessed by a professional hacker?
3 votes

It depends on the encoding software. If it used BitLocker, it is possible to crack only the BitLocker password, which is not hopeless with a dictionary attack. To crack the Bitlocker key is normally ...

View answer
Is there any hope of getting my pictures back after an iPhone factory reset some day in the future?
2 votes

There is some chance that quantum computing will be able to crack these keys. I would bet it will be at least 2-3 decades from now. Note, you still have no chance to access the raw, block-level data ...

View answer
How to perform taint analysis on Java source code?
Accepted answer
2 votes

You need a Java parser. Most exactly, a static Java code analyzer. There is a lot from them, for example SonarQube. It has already a lot of builtin rules, but also you can implement your own ones. ...

View answer
Why was the NX bit unable to stop WannaCry?
Accepted answer
2 votes

WannaCry first triggered secondary SMB transactions, and then used bugs (uninitialized packet buffers) of srv2.dll to invoke buffer overruns. NetApi32.dll is capable to bypass NX on some OS versions ...

View answer
Would this be an accurate proverb towards IT security?
2 votes

It is right, but note: you have to differentiate between the practical and the theoretical possibilities. If your attackers need $10^500$ clock cycles to decrypt your data, then the possibility of a ...

View answer
Can VPN traffic be easily identified? / China - VPN
2 votes

As far I know, the Chinese authorities reduce the network speed for encrypted connections, but most of them work. Your neighbor probably knows very well the risks. If he is not associated with ...

View answer
Creating botnet C&C server. What architecture should I use? IRC? HTTP?
2 votes

There are many reason for both of them. The main differences: irc is a two-way tunnel. Thus, message sending or contact requests initiated by you and your bots would be much easier in both direction, ...

View answer
How do I stop my IP from being resolved through my Skype?
2 votes

Skype can communicate directly, by peer-to-peer, or ip-to-ip communication, or it can communicate through a central server side of the Skype infrastructure. In the second case, your peers won't see ...

View answer
Securing a secondary login page for inputting a multi-factor auth token
2 votes

You should have session cookies. Most web frameworks have useful support for that. But from a security viewpoint, there is an important issue. Using session cookies (to differentiate the browsers ...

View answer
Using Google Search results to determine password strength
2 votes

Warning: there are serious security problems sending passwords out of your direct network, especially to google. Do it only if somehow it is not a problem for you! (F.e. you are working in an isolated ...

View answer
Zeroing empty sectors on various Linux filesystems
2 votes

There are various tools for the task. It depends on what are think exactly. If you want to securely delete an already existing file, then the zerofree and sfill tools are for you (as you can read on @...

View answer