Our Information Security forum is the place for Q&A-style discussions related to viruses, spyware, security, ethical hacking, and more.
1,128 Recommended Topics
Remove Filter
Hi I am talking GDPR and Data Protection Act 2018. Can an organisation in the UK have its sales staff wearing name tags/badges with the employees' full name displayed on them? Thanks
Guardian newspaper columnist [Dawn Foster](https://twitter.com/DawnHFoster) posted images on Twitter this weekend showing how she was able to login to the official Conservative party conference app as Boris Johnson, until recently the UK Foreign Secretary. Not only was there no password required to login to the app, all that was required …
I download some music songs from a website. The website gets the requests from users and then it searches through WWW and lists you hundreds of URL that may have fulfilled your requests. I got what I want, but when I doubled clicks the music files, which are of RM …
Hello friends, I am facing problem related to my email service. I just want to know that How do I recover my RoadRunner email password. If anyone have good knowledge about this. Then please share with me. Thank you
I've been writing about various security risks in the health sector for many years now. Usually my articles cover patient privacy, data protection and health provider network insecurity issues. Occasionally, they spill over into darker territory where the cyber risk morphs into a very real one as far as the …
Hey, Currently, I'm running a startup venture developing mobile applications. Such applications and websites are considered to be amongst the cheapest and perhaps the most effective advertising tools for any business. The electronic systems used in our company operates with all kinds of sensitive and confidential data. The flawed data …
Hello, I am trying to understand prepared statement and what it does. https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet#Defense_Option_1:_Prepared_Statements_.28Parameterized_Queries.29 "Prepared statements ensure that an attacker is not able to change the intent of a query, even if SQL commands are inserted by an attacker. In the safe example below, if an attacker were to enter the …
Hello, One type of SQLIA is UNION Query and I still do not completely understand what is the point. SELECT Name, Address FROM Users WHERE Id=$id by injecting the following- Id value: $id=1 UNION ALL SELECT creditCardNumber,1 FROM CreditCarTable. We will have the following query: - SELECT Name, Address FROM …
How to prevent Illegel/ Logically Incorrect Queries? Illegal/Logically Incorrect Queries 1)Original URL:http://www.arch.polimi.it/eventi/?id_nav=886 2)SQLInjection: http:/`/www.arch.polimi.it/eventi/?id_nav=8864' 3) Error message showed: SELECT name FROM Employee WHERE id =8864' from the message error we can find out name of table and fields: name; Employee; id. By the gained information attacker can arrange more strict …
Hello, I am trying to prevent SQL Injection on Codeigniter. I am reading this link: https://www.roytuts.com/prevent-sql-injection-in-codeigniter/ I do not understand what is the purpose of Escaping Queries, Query Binding and Active Record. Thanks in advance.
Hello, I am planning to do my Thesis on SQLIA and now I am trying to understand something about SQLrand. SQLrand - a system for preventing SQLIA against web servers. The main intuition is that by using a randomized SQL query language, specific to a particular CGI application, it is …
An SSL certificates are used to make your personal information protected, particularly when it comes to online transactions. It’s a mechanism that works between a user’s browser and the website the user is connecting to. In its software, the website has an SSL certificate issued by a trustworthy authority. Web …
Hello, I am in the middle of learning about IT Security. I wonder why sometimes people uses ASCII value for SQL injection attack? Do you know the reason why? Why not using normal ' mark.
I think the community in general will benefit from this discussion. I have an IT horror story I would like to tell everybody about. Additionally I have discovered some solutions to some IT problems, which may have been faced by others in the community. A few years ago I started …
In case you missed it Google has a serious problem with Symantec SSL certificates and is removing their Greenbar status in Chrome as well as rolling out "not trusted" notices for sites using mis-issued certs by Symantec. https://techcrunch.com/2017/03/27/google-is-fighting-with-symantec-over-encrypting-the-internet/ In response to the problems Namecheap is offering free replacement of the …
This is my 1st post on this Forum - Hello My Name is Michael and I'm from Poland :) I have a question about security in Internet. I'm active user of Internet and I have now some anxiety, maybe unjustified, but I have :( I'm logged in webbrowser on my …
Tell me the best antivirus that protect my PC from malware issues and keep secure all the data that i have in my computer.
HELP!! I have a windows server 2012 r2 . I can still use my server until i fell asleep and now woke up, And can't log in to my administrator account. I didn't change password at all, i use the same password and i'd make sure that it is correct. …
Hi. I'm concerned an ex has installed spy software on my computer (and maybe iPhone, but that's for another thread). I've spent days reading about it and I'm not really any closer to figuring out if this is the case, and if so how to uninstall it. Any help would …
Which is the most reliable free antivirus for USB flash drives that resides and runs from the device itself and doesn't need to be installed on the computer?
Hi. Ive actually got a problem in cmd while im trying to repair my computer. (Windows Server 2012 r2) What im trying to do is to reset my password in Admin, since i can't log in on it. What i did is, i insert the bootable usb , then "repair" …
Last year, CryptoLocker ransomware [hit the headlines](http://www.daniweb.com/hardware-and-software/microsoft-windows/viruses-spyware-and-other-nasties/news/470427/cryptolocker-250k-infections-in-100-days-nets-300000-or-does-it) after infecting hundreds of thousands of computers and encrypting the data, and backups of that data to any connected device, with the promise of decryption on payment of a fee. This kind of IT extortion is profitable for the bad guys as it …
Hey guys! it would be great if somebody here could advise me asap. I have an e-commerce website that was running well. . A week ago, the website got hacked and several pointless pages have been added to it. We found it and removed all pages as soon as we …
Following the recent ransomware attacks that leveraged the WannaCrypt0r malware and NSA-developed EternalBlue vulnerability exploit, there was [plenty of advice](https://happygeek.com/?p=812) that backup, backup, backup was the best mitigation. Data backups are, of course, an important part of any business continuity strategy. However, what happens when your backups are also encrypted …
Hi Friends, Upon a recommendation I have installed Advanced System Care 93. It seems to be doing what it claims. I have not yet paid anything to upgrade but wonder if this is just another 'cash cow'? Anyone got any advice on ASC 93 please?
I have a lot of simple VBScript files that were encrypted. I have lost the originals. The code still works within the intended platform, but now I need to do some maintenance. I used a free, vendor-supplied utility that compiled the VBS into a plug-in, but I don't know what …
I've had my hands on what is being described as the 'most secure hard drive ever made' for a while now. Such are the advantages of being a well known reporter on all things security I guess, I get to play ahead of the crowd. As the first journalist to …
`<hat type="tin-foil" mode="on">` What does Google have from serving us with Google Fonts? Typical Google could start sending up custom JavaScript from JavaScript repository. But what about fonts? What does Google get from it? You can't tell me they just have well-doing spree and are sharing to help. Corporations are …
Howdy! AssertNull here. I just created a new account. I'm not engaging in sock-puppetry here and you won't find 100 upvotes and comments about how helpful AssertNull is in answering questions and I won't be answering programming questions under this account if I can help it. The other account is …
Be careful gamers http://arstechnica.com/security/2016/07/fake-pokemon-go-app-on-google-play-infects-phones-with-screenlocker/
With the demise of TruCrypt has any found a good replacement? I have been searching for weeks and have yet to find one that has all the same features.
Help require to clean up my laptop. I am experiencing slow processing with constant pop up whenever I click on an open browser. Pls help me with instructions to clean and get rid of any virus and spyware in my system. Thank you! JK
Why will you not let me unsubscribe from this site and/or delete my account.It should not be so stupid to unsubscribe from this site Do I have to engage a lawer just to get out or something.This is digital kidnapping.UNSUBSCIBE me from Daniweb.Thankyou.
Earlier last year, I bought the Acer Aspire E-16 START with a windows 8 operating system, I was using the lastest Kapersky 2015 which worked perfectly with the OS, Ever since I upgraded to windows 10 OS via the internet , Old files of Kapersky application were not executable, Luckily, …
I was stumbling trough the inter net the other day when I came across a company offering Free (3 systems or less) software to help find your Laptop, Tablet, phone, etc. should it be misplaced or stolen. Not a unique idea I know but they had some interesting features besides …
After reading all the hype about the random ware virus I installed BufferZone Pro 64 bit. Worked o.K the first day but after booting today all my visual styles in windows 7 home premium disappeared ( aero glass etc) to make the opened windows really look poor. After uninstalling, everything …
Hello everybody i would like some worked on the field of **SQL test cases generation based mutation**. In fact i almost wrote the test cases mutation code and i generated mutated test cases. but now i want to validate thus inputs or test the mutation by verifiying the killed and …
My windows explorer keeps closing, I have downlided hijack this and did a scan below is the result, please help on what to do next: Logfile of Trend Micro HijackThis v2.0.5 Scan saved at 2:05:17 PM, on 2/5/2016 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v10.0 (10.00.9200.16537) FIREFOX: 43.0.4 …
Hey everyone. Ok, I just noticed that in my Add or Remove Programs window, theres a program called My Way Search Assistant........ obviously spyware or adware of some kind. I need to uninstall it but......... there is no button in the add or remove programs menu that allows me to …
Hi guys, something a little strange has happened. While I browsed to google.co.uk home page I've seen a message flashing on the top left of the screen, it flashed literally for about half a second and after ctrl+f5 numerous times I managed to get a screenshot and it says "Online …
HI There is many method to bypass Antivirus detection! The Best way is writing your own toolsespecailly using python language. My question is How to protect your self againt PE portable excuteble and how we make Antivirus to detect for example metasploit payloads? I will appriciate for yur help
If there was one computer that was badly infected as this then you'll be horrified! It was about 7PM Australian time and I just got this Lenovo Laptop from this guys house in Queensland. The laptop looked like it belonged to a kid before because it looked like someone loves …
Hey guys, Just a thought. Not that I myself do this: Many people these days still use old versions of Norton, McAfee, and other such antivirus programs. Most of them are from 2002-2006. My question is, do these companies stop supporting their older virus programs at the end of a …
CryptoWall 4.0 the newest ransomware to date is been spread by Angler Exploit Kits. A new drive-by download campaign is to blame for this attack. Heimdal was the first to discover the malware nearly one month ago. It's also more stealthier than previous versions and also a lot stronger. This …
You all should raise your guard! CryptoWall 4.0 has been released and analysed by Nathan Scott: http://www.bleepingcomputer.com/news/security/cryptowall-4-0-released-with-new-features-such-as-encrypted-file-names/
I know we can go to the audit log to check who access the server but I would like to know how to configure my window server 2008 to send an push notification email or SMS immediately if it detect any unauthorised users trying to login or failed login attemps. …
The End.