Questions tagged [windows]
Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].
2,267 questions
Score of 1
1 answer
111 views
How should I design secure local storage for a master key when Windows Hello is only a partial trust factor?
I am designing a desktop application that needs to protect very sensitive user data. In my case, the most important secret is a master key used to encrypt and decrypt data related to a seed phrase. I ...
- reputation score 11
Score of 1
0 answers
96 views
There are 4 very big and weird files in my Windows folder in Chinese letters that I don't know what they are. What should I do? [closed]
I have those files at least 1 year now, 3 of them have reached 5GB and stayed at that, and the 4th one has already reached 19.3GB and keeps growing. Is this a virus? What should I do to remove them?
- reputation score 11
Score of 0
1 answer
126 views
Risk of linking with a DLL with known vulnerabilities which is never used?
Scenario: I have a Windows application, which links to 2 DLLs. One DLL references the other, which has known security vulnerabilities.
If the first DLL ends up not calling any of the APIs of the 2nd ...
- reputation score 173
Score of 4
2 answers
1347 views
Does the yellowkey exploit work against bitlocker with PIN only, no TPM
Exploit:
https://hetmehta.com/posts/breaking-greenplasma-yellowkey/
It seems to me that the exploit targets the trusted OS which was already decrypted via the TPM. As a result Bitlocker with PIN only ...
- reputation score 177
Score of 9
2 answers
2589 views
If someone has physical access to my laptop with bitlocker with TPM, can they access the data?
I am talking about two solutions:
A. BitLocker with a strong password. That's my current setup. I feel no one can access my data, even if they steal my laptop. They are blocked at step 1 when they ...
- reputation score 191
Score of 0
0 answers
81 views
Strategy for analyzing a remote password checker that only works on its original host (CTF challenge)
I’m working on a reverse-engineering challenge from CTF and I’m trying to figure out the most effective analysis strategy rather than a direct solution.
The challenge provides access to a remote ...
- reputation score 1
Score of 0
0 answers
60 views
How to store arbitrary data in TPM? [duplicate]
This is only for understanding the TPM architecture and usage.
Let's assume that I have arbitrary data that needs to be protected by Windows TPM and later use the stored data. Which of these ...
- reputation score 101
Score of 1
0 answers
105 views
How can I restrict IFEO vulnerability?
I have an application, myapplication.exe. Through IFEO registry I can attach a debugger, which can be a malicious piece of software for a attacker.
Only someone having access to Windows registry can ...
- reputation score 111
Score of 0
0 answers
95 views
Does chocolatey provide cryptographic authentication and integrity validation?
Does the chocolatey package manager cryptographically validate its payload's authentication and integrity for all packages after downloading them and before installing them?
I usually trust my OS ...
- reputation score 1319
Score of 0
1 answer
108 views
Does cygwin provide cryptographic authentication and integrity validation?
Does the cygwin package manager cryptographically validate its payload's authentication and integrity for all packages after downloading them and before installing them?
Fortunately, it's possible to ...
- reputation score 1319
Score of 0
0 answers
241 views
In Windows 11 why a simple 32-bit console binary run from shell goes without problems while patching just a byte, triggers UAC/new-shell for it?
I came to ask this doubt here, because, it ended being more an operating system's security heuristics/cryptological question than a pure reverse-engineering one.
Question is about UAC and its ...
- reputation score 163
Score of 1
0 answers
81 views
Tiered AD model: How to grant temporary admin on a workstation without violating Tier-0 hygiene?
My apologies if I ask a basic question,
My Question: So when we design AD environments, we create Tiering models, for example, let's say Tier-0 ( Domain admins ), Tier-1 ( Workstation users )
So now, ...
- reputation score 11
Score of 0
1 answer
99 views
M2M communication from a trusted app with an untrusted user
This is the scenario I'm facing:
Windows 10 LTS / Windows 11 clients
user with autologon and "unknown" password (the password is autorotated and stored somewhere)
user has limited rights (...
- reputation score 111
Score of 0
0 answers
60 views
A Biometric Solution to Windows Local Login on Multiple Machines
I have 400ish machines across the US that are serviced by a handful of technicians, that all share a single common local account with Admin access for maintenance work. Obviously that means they all ...
- reputation score 101
Score of 0
2 answers
984 views
Google Chrome on a Windows computer says web.core.windows.net is a phishing site
A colleague with a Windows computer was visiting a Google Drive page with no links and was redirected to an advertising website (something like lamars.net) and then to a domain http://jsaoiewmsdnfk....
- reputation score 123
