Data-leakage is the uncontrolled, unauthorized transmission of classified information from a data centre or computer system to the outside. Such leakage can be accomplished by physical removal of data storage devices (diskettes, tapes, listings, printouts and photographs of screen copies or ...

learn more… | top users | synonyms

1
vote
1answer
237 views

What's this type of leak detection method called?

Suppose I want to figure out which of a group of people is distributing my content without authorization. So I create several different versions of the same content, each with a unique watermark ...
1
vote
2answers
113 views

Is there an example of a web server that does steganographic watermarking?

You could imagine a web app that serves subtly different versions of a page to each user. For example, it might encode the identity of the user in the images it serves. This would be a per-user ...
1
vote
2answers
305 views

How do private photos get stolen

I'm not referring to any of the below: Spiteful partner sharing private photos of other after editing oneself out. Someone stealing photos from a professional photographer/artist without permission. ...
1
vote
3answers
120 views

Is it possible to read files in a mobile phone for carriers through mobile network alone?

Say a smartphone does not have any (internet) data plans activated (no gprs, 3g data etc.). It just connects to the tower for calls. So is it technically possible for the carrier or law enforcement ...
1
vote
2answers
2k views

How to prevent user from recovering my iPhone data?

If I'm about to sell my iPhone 5, is there a way to make sure that the buyer won't be able to recover anything from my data? Both data that has been recently deleted and data that has been deleted ...
1
vote
1answer
76 views

Linux file information leakage

What information is kept in a linux file about the user and/or system that created it? I want to make some files publicly available, posted on another server such as GitHub or FTP, but I'd rather the ...
1
vote
1answer
207 views

How to prevent users from copying their outlook pst file to an external disk or system

We allow 4 gb space per employee in outlook mail exchange, beyond that the user has to create a pst file . That is the policy. We have given admin rights to all employees since there is a lot of ...
1
vote
1answer
160 views

How to secure data in a stolen raid disk?

I quote from this article Forget about hacking – your servers might get stolen: Are data centers as secure as they want you to think? Though security is often a selling-point for many data ...
1
vote
3answers
240 views

Malware stole an executable file on my computer? Seems unlikely

If you don't want to read all of the details, skip to the bottom; I'll make a summary. I created a computer program as a proof of concept (I threw it together in 12 hours, so I wrote it in Visual ...
1
vote
2answers
132 views

Possible to detect an/or shut off CryptoLocker by limiting total network bytes transferred?

Since a virus infected PC has to download (encrypt) reupload the entire file (to a file server), and repeat the process for every network drive, is is possible to detect this unusually high bandwidth ...
1
vote
1answer
677 views

Flawed understanding of SQL Server Transparent Data Encryption (TDE)

We host a database for one of our applications on Microsoft SQL Azure. One of our clients was dissatisfied with the fact that TDE is not supported on SQL Azure (and the database is otherwise not ...
1
vote
2answers
77 views

Firewall Security vs Anti-Virus

Overview of my question I want to create a secure Window's system without the use of an Anti-Virus program. Whilst I know there are many on-demand and live-scanning anti-virus programs readily ...
1
vote
1answer
668 views

What encryption is possible for ReadyBoost?

ReadyBoost is a technology to assist getting Windows Vista or 7 to load faster on memory-constrained PC's. Since a USB stick can be easily removed, what security options are available for this ...
1
vote
1answer
59 views

Data classification and data leak prevention

We have several levels of data classification such as secret, confidential, etc for documents. To prevent leakage of such sensitive information to the outside, I am considering using a DLP solution. ...
1
vote
1answer
58 views

What are analytics APIs accessing when they run, and how do you block or spoof them?

What are analytics APIs accessing when they run, and how do you block or spoof them? Usually all apps from desktop or mobile app stores, MMO clients, Steam and many utilities, and many games and ...
1
vote
1answer
81 views

Ways to make it more difficult for data to be lifted from a website?

Assume for a moment that I run a public-facing website that hosts pictures and names of people in a "billboard" fashion (i.e. you do not have to register to view the information) and that my site ...
1
vote
0answers
66 views

Vetting new IT development staff [closed]

In the realm of software development what would be the best way to vet prospective employees? We handle potentially sensitive information, and a code base which could be potentially lucrative to ...
1
vote
0answers
73 views

Is there a way to detect and extract steganographically hidden data from a picture? [duplicate]

Possible Duplicate: Detecting Steganography in images Is there a way to detect and extract hidden data from picture which altered by steganography? For example, If someone tried to spill ...
1
vote
3answers
73 views

Variable scope and security

This question is directed at the .Net framework, but would hopefully be answered to encompass many languages & frameworks. Let's assume I have a two methods, one which actually decypts data and ...
0
votes
1answer
323 views

Can I rely on encrypted cloud services like Mega? [closed]

The Mega site claims that all submitted files are encrypted upon upload and decrypted upon download, and at no moment have they any knowledge of the decrypted contents. (I assume others sites do it ...
0
votes
1answer
731 views

Ways to protect source code from theft [duplicate]

I just want to know better ways to protect source code from theft on Windows by Removable Devices like CD,Pendrive. Here is what I know: Windows Disk Encryption: Pretty nice to protect from offline ...
0
votes
2answers
40 views

Is it safe to log JavaScript exceptions to the error console?

I know that on the server side it's very bad to display system-level errors instead of logging them to disk, because it could expose potentially sensitive information, but do the same concerns apply ...
0
votes
2answers
125 views

Blocking access to social media on Windows

I would like to block websites like Facebook, YouTube and other social sites as part of my job and would need your advice on how to manage that. There are about 120 PCs in the building. Is something ...
0
votes
1answer
118 views

Data Protection act, who is liable? [closed]

Recently, a large UK shopping chain had the staff payroll database leaked (including bank details, all unencrypted) We've been told that we cannot take legal action and have so far been denied ...
0
votes
2answers
65 views

What is the severity if someone read the ConnectionStrings_Prod.config?

I was doing an pen test in a website and the programmer did a big mistake and I was able to read any file. So I read the web.config and see the password for database was in ...
0
votes
1answer
163 views

HTTP Status Codes - security considerations [duplicate]

I am designing an authorization framework and now I am thinking about the error codes which I should return when someone is trying to access a resource and he doesn't have the required permissions. ...
0
votes
1answer
198 views

How to use clipboard manager software more securely?

I want to minimize the risks using a clipboard manager or clipboard history software. I want to use it because it really eases my work so not using it is not a good option. These programs usually ...
0
votes
2answers
62 views

Web/App vulnerability responsibility [closed]

While auditing a few web apps and websites I uncovered a few serious vulnerabilities which I've since flagged (responsibly, of course). One of the things I noticed was that several development ...
0
votes
1answer
41 views

Securing Diskless Clients from Data Leakage

I am experimenting with securing diskless clients booting both RHEL 6.5 and Windows 7 via PXE (and iPXE in the future) from iSCSI targets. These computers run only on an internal network and are ...
0
votes
2answers
2k views

Trying to get rid of hackers who have access to all my devices [closed]

What is the best way to go about getting rid of hackers that have gained access to all my personal computers, (both old and recently purchased) phones, and even random computers I use to simply get ...
0
votes
3answers
6k views

How do I securely erase USB flash drives?

I would like to know if there is a way to securely erase USB flash drives without a chance to recover data from it once it has been erased. I know, that programms like DBAN can be used to securely ...
0
votes
1answer
102 views

Is a properly configured server secure against unauthorized data access?

Take for example a game. Typically, when you buy or download a game that can be played offline, all of the data required to run the game is shipped with the executable. In order to protect these ...
0
votes
1answer
117 views

Data categorization: tools?

For the purpose of setting in place the appropriate means of securing data, and to secure this process, I'm asking me the questions: What are the tools to associate to a document a categorization ...
0
votes
1answer
491 views

Data Retention Laws for ISPs in North America

I was reading an article on TorrentFreak where Private Internet Access claims the United States "is one of the only countries without a mandatory data retention law." According to the linked article ...
0
votes
2answers
529 views

How does WikiLeaks(Julian Assange) get the US Embassy cables? [closed]

How does this guy get these cables? Are those cables routed through a single node, where this guy got it? If so, How it is possible? I mean, how that single point came under the control of Julian ...
0
votes
1answer
182 views

How far beyond using Shred should I go when deleting files? [duplicate]

Possible Duplicate: How can I reliably erase all information on a hard drive? I'm looking to securely erase my files. Is shred the best option besides ditching the hardware? To what lengths ...
-1
votes
1answer
112 views

Bringing in an intern

When bringing in an intern to help you in the IT world and with access to servers and client information, what kind of forms should be signed, especially when they work remotely?