Data-leakage is the uncontrolled, unauthorized transmission of classified information from a data centre or computer system to the outside. Such leakage can be accomplished by physical removal of data storage devices (diskettes, tapes, listings, printouts and photographs of screen copies or ...
2
votes
1answer
148 views
Data remanence on mobile devices
The methods in which data should be deleted is strictly enforced by the DoD as well as others security sensitive organizations. However, there are complications with deleting data on an SSD.
Given ...
2
votes
1answer
709 views
How to secure MySQL based web session data table?
I have the following MySQL session schema:
CREATE TABLE `SessionData` (
`id` varchar(50) COLLATE utf8_unicode_ci NOT NULL,
`data` text COLLATE utf8_unicode_ci,
`date` datetime DEFAULT NULL,
...
2
votes
2answers
235 views
How to prevent private data being disclosed outside of Organization
I'm not looking to secure my internal network
Our company keeps sensitive customer information. How can I prevent this information spreading outside of the company ?
How do big companies prevent to ...
2
votes
2answers
226 views
Google Account Compromised - Possible Investigation?
This morning, I've not been able to login to my Google Account.
Google says, my account has been compromised and I had to walk through account credentials recovery and verify (SMS to verify phone ...
2
votes
2answers
281 views
Keeping valuable algorithms secret
Given a securities trading algorithm that is very effective and thereby very valuable, how do you keep it secret and protect it from theft or copying? What techniques or architecture is the best?
The ...
2
votes
2answers
65 views
Information disclosure by identifiers
I'm doing a small research and I observed quite a lot of sites that reveal some private information in the ID-s that they assign. As an example I would like to point out e-commerce sites that issue ...
2
votes
3answers
202 views
Where do organizations store their sensitive documents? How do they protect them?
Where do organizations store their sensitive documents?
How do they protect them?
What are the pros and cons for each method? (If there are multiple common ones)
EDIT: I am more referring to ...
2
votes
4answers
313 views
Code, Data and Passwd encrypted? sqlplus $USER/$PASSWORD@$ORACLE_REMOTE_SID
Lots of our *NIX scripts use "sqlplus $USER/$PASSWORD@$ORACLE_REMOTE_SID"
I know that not good to have clear text password in scripts (there is no alternative at the moment). But question
is the ...
2
votes
2answers
1k views
How to block all access to Akami deploy servers and Apple push servers?
I no longer blindly trust the numerous connections that occur at night and during the day that always go to "content" and "push" servers like:
a23-33-37-54.deploy.akamaitechnologies.com
...
1
vote
2answers
166 views
Why are we told to hide local info in pictures we post to the Internet
When I post a picture to an Internet forum or Stack Exchange site I am told to hide and destroy names, domain names, user names, server names and computer names.
We know that user names are ...
1
vote
2answers
63 views
VCS to manipulate returned trees to prevent leaks? [closed]
I am wondering if there is any system that would change source code trees in subtle from version control systems in ways that are hard to discover (i.e. whitespaces at the ends of lines, perhaps even ...
1
vote
3answers
219 views
Monitoring and filtering of arbitrary outgoing data
I would like to be able to not just centrally monitor but also filter any organizational data moving out our edge routers, regardless of the sender application and regardless of the protocol/port used ...
1
vote
2answers
157 views
How do private photos get stolen
I'm not referring to any of the below:
Spiteful partner sharing private photos of other after editing oneself out.
Someone stealing photos from a professional photographer/artist without permission.
...
1
vote
1answer
266 views
What encryption is possible for ReadyBoost?
ReadyBoost is a technology to assist getting Windows Vista or 7 to load faster on memory-constrained PC's.
Since a USB stick can be easily removed, what security options are available for this ...
1
vote
1answer
72 views
Ways to make it more difficult for data to be lifted from a website?
Assume for a moment that I run a public-facing website that hosts pictures and names of people in a "billboard" fashion (i.e. you do not have to register to view the information) and that my site ...
1
vote
1answer
126 views
Firewall Considerations with PGP Universal
The PGP Universal server is a fairly complex piece of work that provides several different services. When constructing firewall rules I am trying to determine what implications there are for opening ...
1
vote
0answers
67 views
Is there a way to detect and extract steganographically hidden data from a picture? [duplicate]
Possible Duplicate:
Detecting Steganography in images
Is there a way to detect and extract hidden data from picture which altered by steganography?
For example, If someone tried to spill ...
1
vote
0answers
179 views
What hardware tools are useful to detect cyber crimes? [closed]
As the title says, I would ask about some tools or sensors that are available to be used to detect cyber crimes, specially I am looking for sensors that can be used to read and recover data from ...
0
votes
1answer
75 views
How to use clipboard manager software more securely?
I want to minimize the risks using a clipboard manager or clipboard history software. I want to use it because it really eases my work so not using it is not a good option.
These programs usually ...
0
votes
1answer
238 views
Data Retention Laws for ISPs in North America
I was reading an article on TorrentFreak where Private Internet Access claims the United States "is one of the only countries without a mandatory data retention law." According to the linked article ...
0
votes
0answers
40 views
Where can I obtain publicly available data about security attacks in Asia and Pacific? [closed]
I am trying to run an analysis of trends of security attacks with respect to world events (i.e. oil price hike induces an increased amount of attacks on oil companies).
The scope of my project is ...
0
votes
1answer
103 views
How far beyond using Shred should I go when deleting files? [duplicate]
Possible Duplicate:
How can I reliably erase all information on a hard drive?
I'm looking to securely erase my files. Is shred the best option besides ditching the hardware? To what lengths ...
-1
votes
1answer
84 views
Bringing in an intern
When bringing in an intern to help you in the IT world and with access to servers and client information, what kind of forms should be signed, especially when they work remotely?
-2
votes
2answers
256 views
How does WikiLeaks(Julian Assange) get the US Embassy cables? [closed]
How does this guy get these cables? Are those cables routed through a single node, where this guy got it? If so, How it is possible? I mean, how that single point came under the control of Julian ...
