Collaborate Disseminate
It seems to me that there’s some sort of “race condition” when you install a new Linux OS (this applies to every OS, but I’ll restrict this question to Linux only). When you download the OS for a fresh installation, the image is usually ou… Continue reading Update fresh installation of Linux OS
How can I make sure in the terminal that my Ubuntu updates are from the real source?
I am asking because I know that one download was fake. It was rkhunter. The update was malware. Done from Bangkok. I think it was DNS hijacking.
The first point, that it updates with new release. So if somebody discovered new payload for popular frameworks, it will be in burp only with new release. Does Burp app load payloads from Internet sources?
P.S. Except plugins =)
Continue reading How does Burp update XSS/vulnerability scanning rules/payloads?
After fixing a pile of critical security flaws as part of last week’s Patch Tuesday, Adobe has raised two more needing urgent attention. Continue reading Adobe fixes critical flaws in Media Encoder and After Effects
Is there any evidence or research into the likelihood, as well as damage, via vulnerabilities in previous versions compared to following iterations of software?
For example, with every software version, there is the likelihood of new sec… Continue reading Upgrading Software Version: risk of an unknown vs known vulnerabilities
I can read on many pages that when you update your BIOS/UEFI, you need to suspend BitLocker (for information, mine is configured to ask for a password at startup, no TPM in my machine).
But none of these pages tell on which devices you ha… Continue reading BIOS/UEFI update and BitLocker suspension [migrated]
All over the news today (2020-01-14) is the story that the NSA and Microsoft have reported a critical security vulnerability in Windows 10.
But I haven’t been able to find clear instructions about how to ensure that Windows Update has wor… Continue reading How to ensure Windows 10 is safe from critical security hole reported by NSA on 2020-01-14?
How to explain to traditional people why they should upgrade their old Windows XP device? <- The interesting point made in the highest upvoted answer to this Q is that a fully patched OS is largely insignificant for the se… Continue reading Why is a fully-patched OS less important than AV?
I have a few servers that have the following stack:
ubuntu server / nginx / django / django extensions
Is there any tool that can run in the background and check the versions of evey element in each stack? (eg check… Continue reading How can I make sure that my web servers are patched 24/7? [on hold]
This is an issue I’m recurringly facing: older people from my family (or people who my family members know) can be surprisingly reluctant to apply most basic security measures when they’re using their PCs. The particular issu… Continue reading How to explain to traditional people why they should upgrade their old Windows XP device?