Collaborate Disseminate
I’ve worked on places where the admins have disabled desktop personalization on Windows for settings like:
changing desktop background and lock screen images
local themes – no high contrast for example
fonts
What are the risks of these s… Continue reading What are the risks of desktop personalization on Windows?
Recently I got into an exchange with someone on social media about the security of Linux versus OSX and Windows. I stated that it is possible (and probable) that someone could code a low level back door ( or whatever pesky malware they des… Continue reading Can you create a fake (malicious) Ubuntu iso
Starting point:
I want to transfer sensitive company data over the Internet to my Windows 10 computer at home. We assume that this works with the help of a software-based VPN (e.g. using IPsec).
Problem:
VPN software is installed on the co… Continue reading Virtualization of the operating system to protect the transfer of sensitive data via VPN [closed]
When I ask someone about Linux, people always say it’s really safe and this OS doesn’t collect your data and these are not spy operating systems.
When I ask them "how?" they say, "because it’s open source."
In wiki, ope… Continue reading Is Linux really not spying on us?
I want to get into vulnerability research and I have been learning reverse engineering and binary exploitation for a couple of months now. I want to know if knowledge of systems programming is essential for this field.
Continue reading Systems Programming for Vulnerability research
If the OS is responsible for ensuring that one process cannot access another process memory space, and the point of process isolation is to keep processes separate from one another, then how can a malicious process perform actions on anoth… Continue reading Process Injection and Process Isolation by OS
My goal is to be protected against key disclosure laws and possible extortion. I know dm-crypt can be used to perform full disk encryption for GNU/Linux distros. However, it is not enough. I want to be able to hide an operating system in a… Continue reading How to encrypt and hide a GNU/Linux operating system and create a decoy system?
Usually, for all types of authentications, we trust the registration process and assume there is no attack is happening Like in the case of FIDO2 registration. However, as the registration process is built within the browser and can be com… Continue reading Does moving webAuthn API from browser to OS improves security of registration process?
A lot of security and privacy-preserving protocol/infra codes are implemented in the browsers. These security protocols can simply be compromised by extensions.
Why we do not move the security protocols to OS and let the browser communica… Continue reading Browser vs OS security [closed]
I’m interested in using GNU/Linux for different reasons. Partly for freedom, privacy, and security. But also to force myself to learn Linux. One issue I’ve found is that desktop Linux seems to have fairly poor security by default which is … Continue reading How should GNU/Linux noobs harden their dekstop OS?