Confidentiality is the property of maintaining the secrecy of an asset. In other words, confidentiality means protecting against the threat of disclosure. It is one of the three key security properties of an asset, along with confidentiality and availability.

learn more… | top users | synonyms

1
vote
2answers
56 views

What policies and agreements regarding information security are a must have for every self respecting company?

I assume that it's a good idea to supply the users of a system (or employees) with policies and agreements regarding information security. What kind of documents should be considered? For example (...
-1
votes
0answers
39 views

How do I set up confidentiality on files after download in Microsoft SharePoint

I'm currently working to setup a solution for a SharePoint server. Looking further into the possibilities for confidentiality on files after download I found a dead-end about what is used. My company ...
1
vote
1answer
44 views

What issues exist in generating a signed, paper-based PGP message stored by a hostile organisation?

I have recently been the victim of having my medical record tampered with by the organisation holding it. Under state law I have a legal right to submit information to be included in my medical record,...
0
votes
0answers
14 views

Can confidential data be gotten from a “hibernation file”? [duplicate]

When a computer hibernates, AFAIK a copy of the RAM is saved into a file on disk. Is this a potential security flaw, knowing someone can take the disk and read the RAM freely?
3
votes
2answers
78 views

Internet browsing confidentiality [duplicate]

I wonder how easy or difficult it is to find out who I am, using information security's most advanced techniques. And what can I do that will not affect my browsing experience too much, as a lambda ...
4
votes
2answers
86 views

The history of thumbnails (or just a previous thumbnail) is embedded in an image file?

I was surprised when I cropped an image on Windows Phone, saved it, sent it via e-mail to a PC, and then downloaded it - and the thumbnail in the download folder was the one of original, not cropped ...
0
votes
2answers
51 views

Guarantee one unique identity per node

I'm in the early stages of designing a decentralised systems protocol, based on a blockchain, for a thesis. For the protocol to remain secure, each node in the system must be capable of generating one,...
5
votes
3answers
38k views

Someone keeps using my email address. What to do?

I have had a GMail ever since it was created, so it's an email address that is easy to remember, but also easy for somebody else to get confused with. Since I'm not going to post my email address ...
3
votes
1answer
145 views

Are private pastes on pastebin.com vulnerable? Can you trust pastebin?

I use https://pastebin.com/ to organize some lists. When I select "Paste Exposure: Private" , will it be really private and only accessible via login? I read somewhere in the internet that there are ...
2
votes
2answers
274 views

Best reasonable way to store a secret safely

I'm working on a software that need to store and use secrets. These secrets can be for example: a password to connect to a database a client secret for an OAuth 2.0 client_credentials grant. I ...
2
votes
2answers
95 views

What does it mean to have authentication without confidentiality or authentication without encryption?

I came across these functions m+EeA(H(m)) (for authentication without confidentiality) and m+H(m+k) (for authentication without encryption) and I'm having a bit of a difficult time understanding them. ...
0
votes
2answers
121 views

Does SSL/TLS (https) reveals your IP address? [duplicate]

Because the NSA monitors traffic going through the major nodes of the internet, they can know which IP address does what on your website, even if you are using HTTPS. Is this true or false?
3
votes
2answers
775 views

How to mask SEPA (IBAN and BIC) information correctly?

I'm currently developing a payment system where users can use SEPA-debit to pay for the service. The user has the ability to enter the data once and can then select the same payment method when making ...
10
votes
3answers
762 views

Using encryption inside of SSL connection

We are using SSL to make our connection between clients and backbone servers safer. Does it really make sense if also we use another encryption mechanism to encrypt transmitted data twice? For example,...
4
votes
2answers
218 views

Can TLS provide integrity/authentication without confidentiality

It was a bit surprising that Wikipedia has switched to TLS because we all know it's public information available to anyone, but I suppose that the real purpose for that is to provide authentication/...
3
votes
3answers
178 views

What do browser VPNs actually do?

Firstly, I am not sure if this is the correct forum to be asking this question so I apologise if not. What I would like to know is, what do VPN browser plug-ins (such as zenmate) actually do and how ...
3
votes
2answers
303 views

PHP processing form submission, how can I best protect sensitive information submitted via the form?

I am using PHP 5.6 on Apache 2.4 I have a form that will collect sensitive information about the user that need to be encrypted. My current solution grabs the sensitive information from the POST and ...
1
vote
3answers
271 views

Why would a replay attack be considered a threat to integrity and not confidentiality?

I came across a test where the instructions were to circle all the correct answers. I'm looking for an explanation to the answer for this question: Question: a replay attack is a threat against ...
4
votes
3answers
75 views

What personal information is safe to share publicly? [closed]

What personal information is safe to share publicly (online)? I have a CV online with my email address, mobile number, land line number, ID number and year of birth (not date of birth). I live in ...
0
votes
0answers
87 views

Hashing Identifiers to Create Pseudonyms

I'm wanting to share datasets between two organisations in a pseudonymised way such that they link together via mutual entities (e.g. people) but so that the entities cannot be identified. E.g.: ...
-3
votes
1answer
53 views

What are the implications of differences in confidentiality timeliness?

From a security standpoint, what are the differences that must be addressed between data with a day-long confidentiality timeliness and data with timeliness of a year or more?
1
vote
2answers
117 views

Is unclassified a classification?

The answer many sources provide is "technically, no, unclassified is not a classification", but they often are referring specifically to Unclassified SBU or FOUO. Besides that... any answer that ...
1
vote
2answers
102 views

Confidentiality and integrity

Users permissions and privilege should be considered as a part of confidentiality (specifically access control) or integrity? And I'm also wondering if we can categorize Accountability, Authenticity ...
2
votes
2answers
100 views

Confidentiality and privacy

I understand that the confidentiality aimed at protecting access to the system data, while privacy aimed at protecting access to the person data. Now, could we consider anonymity as a sub-...
1
vote
1answer
369 views

Security characteristics through ISO 25023 standard

Could you please help me to clarify the following: ISO 25023 standard divided security into the following 5 characteristics which are: Confidentiality characteristic (divided into) -----> Access ...
3
votes
1answer
118 views

Secure text document's fingerprint

The purpose is the same as with hashing: given set of confidential documents, I want to process them and store something secure like salted hashes/bcrypt. Later, when new document is given, I want to ...
20
votes
7answers
20k views

Getting rid of a large quantity of paper

Say you were in charge of getting rid of a large quantity of paper - up to 1,000 in a row. It can't be used as scratch paper because it contains confidential information. It also can't be outsourced ...
1
vote
1answer
359 views

Should I trust zxcvbn with my password?

I want to measure current and future password entropy with the zxcvbn formula. Is there any way to test and detect if the input on this website is truly confidential? EDIT: 1. I found an ...
6
votes
1answer
751 views

can multiple encryption of data with multiple keys increase the security?

I mean: does encrypting data multiple times have an effect on diffusion and confusion? Does it increase security, or does it have no effect? Is it useless? Does it make it harder to break the secret, ...
0
votes
1answer
37 views

Any Point To Paper Submission Of Forms Versus Electronic Submission

I know we're not going to like this question because it has some obvious answers, but I am looking for a thorough breakdown, and I could not find another mention of this topic on this site. Paper ...
0
votes
1answer
90 views

Using randomly generated numbers to authenticate with a Relay server

I'm developing a public VoIP relay server, that will help bypass internet firewalls by allowing two clients to connect with it and then it will relay data between the two. Both clients will connect ...
2
votes
1answer
61 views

Digital testament

I have been thinking about a way of storing a "digital testament" without using a physical safe, which is the typical solution I have read. Here is my idea roughly: Generate a strong key pair using ...
4
votes
0answers
649 views

How is it possible for threatmetrix to detect VPN? [duplicate]

Threatmetrix is a fraud prevention SaaS aimed at preventing fraud. Their company website states: ThreatMetrix is also uniquely able to uncover hackers and fraudsters trying to cover their true ...
1
vote
1answer
110 views

Are there different degrees of “confidentiality”? What is the best way for a psychologist to maintain confidentiality of communications with patients?

A non-tech savvy friend of mine is a psychologist. She has many patients who constantly invite her to communicate through all sorts of mediums such as text, email, voicemail, and other mediums. But ...
2
votes
1answer
78 views

How good is confidentiality with physical mail forwarding companies? [closed]

I want to use a mail forwarding company that can receive mail for me and forward it to another address. I found many places that do this, but I am worried that eventually my stalker would find out ...
14
votes
6answers
8k views

Why encrypt data in memory?

I saw that KeePass not only encrypts its password-database-file, it also can encrypt the passwords it holds in memory. This is just an example. I thinking of a new project dealing with sensitve / ...
7
votes
4answers
3k views

Is it possible for a third party to sniff data off the line to an ISP and determine what the user is doing?

Can somebody hack the line between my router and service provider and monitor what I'm doing online and what sites I'm visiting?
1
vote
2answers
327 views

HMAC and non-repudiation

This was a question on an exam: Two persons are using a one way communication channel and the HMAC functionality (concretely HMAC-SHA1). Choose the correct statement below: 1) We can prove who the ...
1
vote
0answers
41 views

AES and message properties

An active attacker changes the ciphertext which was made using the AES cipher algorithm. Which message properties are preserved even though that change was made. Choose one of the below: 1) Integrity ...
-1
votes
3answers
237 views

Overwriting only Free Space with rubbish data to prevent data recovery?

I am aware of tools which write zeros or other useless data to fill up your harddrive, however so far all of the tools I have come across must fill up the entire harddrrive. My understanding of the ...
28
votes
3answers
6k views

Why can a Tor exit node decrypt data, but not the entry node?

Me -> Node A -> Node B -> Node C -> destination The documentation on Tor always states that only the exit node C can see plain text data. How is this possible without me talking to Node C ...
7
votes
2answers
332 views

How do I release a self made program without it being tracked back to me?

For clarification, I am looking for the best way to release this program anonymously, not how to remain anonymous and such in general life (that is a different -already answered- question). I've ...
18
votes
5answers
2k views

Timing Safe String Comparison - Avoiding Length Leak

Let's say that we're building a generic timing-safe comparison function for general purpose use. Making it so that it is safe when both strings are equal length is pretty well known. However, what I'm ...
0
votes
1answer
252 views

Why does integrity exclude confidentiality? [closed]

I'm trying to understand the CIA triad. I read that all three parts of the triangle exclude each other, but I don't understand why you can't have full integrity and full confidentiality? I figure you ...
0
votes
1answer
63 views

Security Engineering Potential Threat?

I've been working on some security engineering problems and there is no solution provided so if someone can clarify, would be great. From the point of view of security engineering, which is not a ...
-5
votes
2answers
3k views

Is TCP more secure than UDP? [closed]

I am referring to confidentiality not integrity. are there any security features that UDP lack compared to TCP? According to this paragraph While TACACS uses UDP port 49, TACACS+ uses TCP port 49 ...
33
votes
6answers
19k views

Does SSL/TLS (https) hide the urls being accessed [duplicate]

Suppose I type this in my browser https://www.mysite.com/getsecret?username=alice&password=mysecret and an attacker is watching all traffic from me to my ISP. What information is protected by ...
-1
votes
1answer
197 views

Is there a benefit to encrypting a file multiple times? [duplicate]

If I had to store a text file with some confidential information on the cloud, would encrypting the file multiple times (say, 3) with different passwords using WinRAR (AES with a 256 bit key) provide ...
-6
votes
1answer
154 views

Is www.cheap-lingerine.com safe to use my credit card on? [closed]

I want to make sure my information is safe. This website is openly china-oriented but says to secure card information with Secure Sockets Layer technology (SSL) on those pages that involve sensitive ...
3
votes
1answer
1k views

iPhone iOS 7 Encryption at Lock Screen

Following this topic, I have a question about how the OS and apps access data while the phone is locked. Particularly in the case of iPhone 5S running iOS 7. When the device is locked, what allows ...