Data-leakage is the uncontrolled, unauthorized transmission of classified information from a data centre or computer system to the outside. Such leakage can be accomplished by physical removal of data storage devices (diskettes, tapes, listings, printouts and photographs of screen copies or ...
1
vote
2answers
64 views
VCS to manipulate returned trees to prevent leaks? [closed]
I am wondering if there is any system that would change source code trees in subtle from version control systems in ways that are hard to discover (i.e. whitespaces at the ends of lines, perhaps even ...
6
votes
3answers
384 views
How are large tech sites such as LivingSocial, Zappos, LinkedIn and Evernote hacked?
How are large tech sites such as LivingSocial, Zappos, LinkedIn and Evernote hacked? (i.e. how is their entire dataset of users obtained?)
LivingSocial - 50 Million Users Exposed
Zappos - 24 Million ...
14
votes
8answers
607 views
Should the requirement of admin privileges be extended?
Seeing this comic from xkcd.com made me thinking:
Is extending the requirement of admin privileges to things such as connecting to the internet, running the web browser, reading browser and other ...
3
votes
4answers
374 views
Is it ok to cut some digits from the front-face of a credit/debit card?
I'm a European expat living in Asia. I usually hide my credit card at my apartment. However, I'm a bit scared about losing it when I carry it (wallet robbed or lost).
That's why I already scrubbed ...
15
votes
4answers
865 views
What is the easiest way to search massive, leaked databases for persons and personal information?
This may seem like a rather nefarious question, however, my motivations are quite the opposite-- I want to know how at risk I might be!
A while ago a very MASSIVE database was leaked that contained ...
1
vote
2answers
161 views
How do private photos get stolen
I'm not referring to any of the below:
Spiteful partner sharing private photos of other after editing oneself out.
Someone stealing photos from a professional photographer/artist without permission.
...
0
votes
0answers
40 views
Where can I obtain publicly available data about security attacks in Asia and Pacific? [closed]
I am trying to run an analysis of trends of security attacks with respect to world events (i.e. oil price hike induces an increased amount of attacks on oil companies).
The scope of my project is ...
8
votes
5answers
248 views
How would you detect whether customer data has been leaked?
I'm a very security conscious (bordering paranoia) freelance web developer and I place a lot of emphasis on security with my clients, alas I've found this doesn't seem to be the case for the average ...
1
vote
2answers
167 views
Why are we told to hide local info in pictures we post to the Internet
When I post a picture to an Internet forum or Stack Exchange site I am told to hide and destroy names, domain names, user names, server names and computer names.
We know that user names are ...
-1
votes
1answer
84 views
Bringing in an intern
When bringing in an intern to help you in the IT world and with access to servers and client information, what kind of forms should be signed, especially when they work remotely?
6
votes
1answer
290 views
Encrypting sensitive data in software and storing/decrypting it on a server
I have searched IT Security and Google for something similar to this, but wasn't able to find anything remotely related to what I'm doing.
I'm developing software which has 2 parts - a C# program run ...
2
votes
1answer
149 views
Data remanence on mobile devices
The methods in which data should be deleted is strictly enforced by the DoD as well as others security sensitive organizations. However, there are complications with deleting data on an SSD.
Given ...
7
votes
5answers
317 views
Swap file may contain sensitive data
Is it possible that the swap file will contain chunks of data by a file you have accessed, and could this be detected during a forensics analysis?
How could you prevent this situation ?
Is using ...
0
votes
1answer
76 views
How to use clipboard manager software more securely?
I want to minimize the risks using a clipboard manager or clipboard history software. I want to use it because it really eases my work so not using it is not a good option.
These programs usually ...
8
votes
2answers
321 views
Is Data Remanence a Myth? [duplicate]
Possible Duplicate:
Why is writing zeros (or random data) over a hard drive multiple times better than just doing it once?
Multiple overwrites have often been discussed as a secure way of ...
4
votes
2answers
384 views
How to secure usb data storage of Android phones?
I just found out that if I connect my phone to a laptop with a cable, the password becomes completely USELESS. So how can I protect the data in my phone from a usb cable?
It's actually very easy to ...
3
votes
1answer
69 views
Possible to redact information in the clipboard, or to auto-redact when it hits a webpage?
Sometimes when I paste information to a website I realize after I post the information that I inadvertently included an IP address, username, email address, or other information I'd like to consider ...
2
votes
4answers
327 views
Code, Data and Passwd encrypted? sqlplus $USER/$PASSWORD@$ORACLE_REMOTE_SID
Lots of our *NIX scripts use "sqlplus $USER/$PASSWORD@$ORACLE_REMOTE_SID"
I know that not good to have clear text password in scripts (there is no alternative at the moment). But question
is the ...
2
votes
6answers
235 views
How do I prevent data from leaving my network?
I have a network of about 10 computers and I want to prevent sensitive data and source code leaks. To achieve that, I would like to block all file uploading / attaching.
What are the options ...
2
votes
2answers
65 views
Information disclosure by identifiers
I'm doing a small research and I observed quite a lot of sites that reveal some private information in the ID-s that they assign. As an example I would like to point out e-commerce sites that issue ...
2
votes
2answers
193 views
HTTPS Sensitive Information and Caching
I have a website where I need to share a sensitive key with the user. Of course, I'm using HTTPS on the page. The key is put into the HTML server-side in ASP.NET. My concern is, if the user's computer ...
2
votes
2answers
1k views
How to block all access to Akami deploy servers and Apple push servers?
I no longer blindly trust the numerous connections that occur at night and during the day that always go to "content" and "push" servers like:
a23-33-37-54.deploy.akamaitechnologies.com
...
2
votes
4answers
220 views
How to restrict flash drives in Local Area Network
It is prohibited to use USB drives at our office, due to security reasons. But some people still use them to steal information. It is now a great risk factor at our office.
Now we need to ensure any ...
0
votes
1answer
103 views
How far beyond using Shred should I go when deleting files? [duplicate]
Possible Duplicate:
How can I reliably erase all information on a hard drive?
I'm looking to securely erase my files. Is shred the best option besides ditching the hardware? To what lengths ...
0
votes
1answer
240 views
Data Retention Laws for ISPs in North America
I was reading an article on TorrentFreak where Private Internet Access claims the United States "is one of the only countries without a mandatory data retention law." According to the linked article ...
2
votes
1answer
726 views
How to secure MySQL based web session data table?
I have the following MySQL session schema:
CREATE TABLE `SessionData` (
`id` varchar(50) COLLATE utf8_unicode_ci NOT NULL,
`data` text COLLATE utf8_unicode_ci,
`date` datetime DEFAULT NULL,
...
2
votes
2answers
243 views
How to prevent private data being disclosed outside of Organization
I'm not looking to secure my internal network
Our company keeps sensitive customer information. How can I prevent this information spreading outside of the company ?
How do big companies prevent to ...
5
votes
3answers
402 views
How to destroy old credit card?
What is the best (in terms of security) way to destroy old (but still working) credit card?
2
votes
3answers
203 views
Where do organizations store their sensitive documents? How do they protect them?
Where do organizations store their sensitive documents?
How do they protect them?
What are the pros and cons for each method? (If there are multiple common ones)
EDIT: I am more referring to ...
1
vote
1answer
72 views
Ways to make it more difficult for data to be lifted from a website?
Assume for a moment that I run a public-facing website that hosts pictures and names of people in a "billboard" fashion (i.e. you do not have to register to view the information) and that my site ...
1
vote
1answer
268 views
What encryption is possible for ReadyBoost?
ReadyBoost is a technology to assist getting Windows Vista or 7 to load faster on memory-constrained PC's.
Since a USB stick can be easily removed, what security options are available for this ...
2
votes
2answers
236 views
Google Account Compromised - Possible Investigation?
This morning, I've not been able to login to my Google Account.
Google says, my account has been compromised and I had to walk through account credentials recovery and verify (SMS to verify phone ...
3
votes
1answer
219 views
What constitutes a Virtual Private Database?
I recently came across this term "Virtual Private Database" and I'm wondering what criteria need to be satisfied to allow use of the term.
I first saw the term in an HP/Fortify doc:
A virtual ...
2
votes
2answers
286 views
Keeping valuable algorithms secret
Given a securities trading algorithm that is very effective and thereby very valuable, how do you keep it secret and protect it from theft or copying? What techniques or architecture is the best?
The ...
1
vote
3answers
222 views
Monitoring and filtering of arbitrary outgoing data
I would like to be able to not just centrally monitor but also filter any organizational data moving out our edge routers, regardless of the sender application and regardless of the protocol/port used ...
9
votes
4answers
534 views
Source code security
We have about 20 developers working in a heterogeneous environment, mostly using company laptops or desktops. We run Windows 7 on desktops/laptops and a mixture of Linux distros (Ubuntu/CentOS).
...
6
votes
3answers
567 views
Have hardware trojans been seen in the wild?
Military and intelligence organizations have spent a lot of resources guarding against the possibility of hardware trojans, unauthorized modifications to hardware circuits that leak information or ...
1
vote
0answers
67 views
Is there a way to detect and extract steganographically hidden data from a picture? [duplicate]
Possible Duplicate:
Detecting Steganography in images
Is there a way to detect and extract hidden data from picture which altered by steganography?
For example, If someone tried to spill ...
1
vote
1answer
126 views
Firewall Considerations with PGP Universal
The PGP Universal server is a fairly complex piece of work that provides several different services. When constructing firewall rules I am trying to determine what implications there are for opening ...
4
votes
1answer
160 views
What particular devices and processes are available to destroy hard drives, per DoD 5220.22-M?
DoD 5220.22-M specifies the following methods for destruction of hard drives with classified data:
Disintegrate
Incinerate
Pulverize
Shred
Melt
I've seen shredders of the type that might be used ...
35
votes
5answers
5k views
How do you destroy an old hard drive?
How do you destroy an old hard drive? To be clear, unlike questions Secure hard drive disposal: How to erase confidential information and How can I reliably erase all information on a hard drive? I do ...
3
votes
3answers
1k views
Is running an erase tool after an OS install sufficient to ensure no data from the old install is recoverable?
How secure do you consider this process?
A drive has data from a previous OS installation.
A new OS installation is made on the drive, and Heidi Eraser is run on free space.
What are the chances ...
6
votes
2answers
299 views
With Google's new Privacy Policies going into effect soon, how can I better protect myself using their services?
From what I can tell, the gist of the new Privacy Policy from Google is that they're making a blanket policy to allow using your data between all their services, however they see fit. So now one ...
2
votes
4answers
1k views
If a hacker were to compromise a GMail database
Assuming the systems that store the Gmail database is compromised what is preventing them from reading everyone's emails by looking at the data in the database?
I assume nothing, and in order for ...
11
votes
5answers
2k views
Could mint.com be more secure, and if so, how?
After reading a bit about mint.com on the money stack exchange, I wanted to give it a try. But frankly, it scares me a little bit.
The site has a bunch of links explaining how they're so secure. I ...
5
votes
3answers
1k views
Recover the prior contents of RAM from a turned-off PC?
I've heard that if your PC is turned off, then an attacker can recover the RAM from the last session. I find this hard to believe. How could it be done?
4
votes
2answers
169 views
In the case of the Gawker data breach, would strong passwords be ok?
In the Gawker data breach, was just the database stolen and that gave free access to all user data? Or did the hackers still need to read the MD5's of the usernames and passwords to gain access to the ...
18
votes
4answers
4k views
Why is writing zeros (or random data) over a hard drive multiple times better than just doing it once?
Lots of different programs, such as Darik's Boot and Nuke, let you write over a hard drive multiple times under the guise of it being more secure than just doing it once. Why?
6
votes
3answers
25 views
Active measures against lost or stolen PDAs in healthcare?
Many physicians, nurses, and technical staff like to carry PDAs to be kept abreast of patient conditions. Various companies want caretakers to view ECGs on their iPads.
Due to the incredibly private ...
26
votes
7answers
5k views
Are powerline ethernet adapters inherently secure?
I have 2 Zyxel PLA407 powerline adapters. Router is downstairs connected to one adapter, other adapter is upstairs about 30 feet away connected to a desktop. I have a house, not an apartment or ...
