Data-leakage is the uncontrolled, unauthorized transmission of classified information from a data centre or computer system to the outside. Such leakage can be accomplished by physical removal of data storage devices (diskettes, tapes, listings, printouts and photographs of screen copies or ...

learn more… | top users | synonyms

1
vote
1answer
544 views

Data Retention Laws for ISPs in North America

I was reading an article on TorrentFreak where Private Internet Access claims the United States "is one of the only countries without a mandatory data retention law." According to the linked article ...
1
vote
2answers
83 views

Understanding the behaviour of existing eavesdropping techniques

I am studying the behaviour of existing eavesdropping techniques (part of my research). I have a question through the following scenario: Suppose Bob lives in New York and wants to listen (i.e. ...
1
vote
1answer
92 views

Copy-and-pasting plaintext data from encrypted container

Suppose we have sensitive information stored in plaintext within a dm-crypt/VeraCrypt encrypted file and this information is copy-and-pasted by a user into a web browser after decrypting (this could ...
1
vote
1answer
265 views

Data classification and data leak prevention

We have several levels of data classification such as secret, confidential, etc for documents. To prevent leakage of such sensitive information to the outside, I am considering using a DLP solution. ...
1
vote
1answer
109 views

Ways to make it more difficult for data to be lifted from a website?

Assume for a moment that I run a public-facing website that hosts pictures and names of people in a "billboard" fashion (i.e. you do not have to register to view the information) and that my site ...
1
vote
0answers
27 views

What should I do when I find out some company user database I am listed in was leaked?

Today the antispam tool in the company I work for blocked several emails. It has been months since last time, so I took the time to analyze the quarantined messages. Since I almost never give my ...
1
vote
3answers
79 views

Block mobile tethering on android phones from Windows (DLP)

In our small organisation I have tried my best at implementing DLP by : 1. Making sure users access all files from the server 2.Local disks are denied access(forced to work only on network drives) ...
1
vote
0answers
26 views

Are exposed database names on shared server a security hole?

I was working for a client this week, and they use PostgreSQL database for web applications. They have their database on a shared server. When I connected to the database host with pgAdmin, I was ...
1
vote
0answers
88 views

Vetting new IT development staff [closed]

In the realm of software development what would be the best way to vet prospective employees? We handle potentially sensitive information, and a code base which could be potentially lucrative to ...
1
vote
0answers
75 views

Is there a way to detect and extract steganographically hidden data from a picture? [duplicate]

Possible Duplicate: Detecting Steganography in images Is there a way to detect and extract hidden data from picture which altered by steganography? For example, If someone tried to spill ...
1
vote
3answers
89 views

Variable scope and security

This question is directed at the .Net framework, but would hopefully be answered to encompass many languages & frameworks. Let's assume I have a two methods, one which actually decypts data and ...
0
votes
1answer
391 views

Can I rely on encrypted cloud services like Mega? [closed]

The Mega site claims that all submitted files are encrypted upon upload and decrypted upon download, and at no moment have they any knowledge of the decrypted contents. (I assume others sites do it ...
0
votes
1answer
1k views

Ways to protect source code from theft [duplicate]

I just want to know better ways to protect source code from theft on Windows by Removable Devices like CD,Pendrive. Here is what I know: Windows Disk Encryption: Pretty nice to protect from offline ...
0
votes
1answer
87 views

Does non-persistent data ever need to be encrypted?

Does non-persistent data ever need to be encrypted? If I had a project with confidential data stored in non-persistent class variables should I be doing anything to protect this data? I am developing ...
0
votes
1answer
65 views

Does creation of dump data would be considered as vulnerablity?

Problem behind the question : We were a small firm developing a small web application which was similar to fb,gmail,etc [in terms of functionality]. We have a signup form and I was assigned to test ...
0
votes
2answers
119 views

Is it safe to log JavaScript exceptions to the error console?

I know that on the server side it's very bad to display system-level errors instead of logging them to disk, because it could expose potentially sensitive information, but do the same concerns apply ...
0
votes
2answers
84 views

What is the severity if someone read the ConnectionStrings_Prod.config?

I was doing an pen test in a website and the programmer did a big mistake and I was able to read any file. So I read the web.config and see the password for database was in ...
0
votes
2answers
7k views

Trying to get rid of hackers who have access to all my devices [closed]

What is the best way to go about getting rid of hackers that have gained access to all my personal computers, (both old and recently purchased) phones, and even random computers I use to simply get ...
0
votes
1answer
311 views

How to use clipboard manager software more securely?

I want to minimize the risks using a clipboard manager or clipboard history software. I want to use it because it really eases my work so not using it is not a good option. These programs usually ...
0
votes
1answer
78 views

How can I ensure that only the message I sent, and nothing else reaches the receiver?

How do I make sure that the open channel I use to send a message to a specific receiver, is not used by a third party to send unwanted files and compromise the receivers system? Is there a method by ...
0
votes
1answer
171 views

Is there a risk that file shredders and free space wipers steal our confidential data?

I was wondering how secure are the file shredding software and free space wipers? Lets say we are using PC Windows, and software CCleaner (from piriform) or File Shredder (found here) to securely ...
0
votes
1answer
107 views

Can a QR code steal my mobile's data?

For example https://web.wechat.com By scanning the QR code from my mobile, it automatically logs in with my wechat account. Here, can QR web sever or QR devices steal the mobile data?
0
votes
2answers
78 views

Web/App vulnerability responsibility [closed]

While auditing a few web apps and websites I uncovered a few serious vulnerabilities which I've since flagged (responsibly, of course). One of the things I noticed was that several development ...
0
votes
1answer
59 views

Securing Diskless Clients from Data Leakage

I am experimenting with securing diskless clients booting both RHEL 6.5 and Windows 7 via PXE (and iPXE in the future) from iSCSI targets. These computers run only on an internal network and are ...
0
votes
1answer
150 views

Is a properly configured server secure against unauthorized data access?

Take for example a game. Typically, when you buy or download a game that can be played offline, all of the data required to run the game is shipped with the executable. In order to protect these ...
0
votes
1answer
236 views

HTTP Status Codes - security considerations [duplicate]

I am designing an authorization framework and now I am thinking about the error codes which I should return when someone is trying to access a resource and he doesn't have the required permissions. ...
0
votes
1answer
173 views

Data categorization: tools?

For the purpose of setting in place the appropriate means of securing data, and to secure this process, I'm asking me the questions: What are the tools to associate to a document a categorization ...
0
votes
2answers
744 views

How does WikiLeaks(Julian Assange) get the US Embassy cables? [closed]

How does this guy get these cables? Are those cables routed through a single node, where this guy got it? If so, How it is possible? I mean, how that single point came under the control of Julian ...
0
votes
1answer
12 views

Does KDE System Tray Extra Items “Clipboard” have the same security threats as the system clipboard?

Does the clipboard under kUbuntu's KDE System Tray > Extra Items "Clipboard" have the same security threats as the system clipboard? The following articles point out the insecure nature of the ...
0
votes
0answers
72 views

Should I blur the cached snapshot of my app?

I recently ran a security scan on one of my iOS apps that suggested I modify my apps display as it enters the background so that the screenshot stored in the cache does not expose any sensitive data. ...
0
votes
3answers
223 views

Most secure way to isolate computer on network

I handle personal client information. Stuff that shouldn't get lost. Because of this, I have had to be careful not to download or install anything that is in any way uncertain. One data stealing virus ...
0
votes
1answer
175 views

How secure are the passwords stored at Google Passwords? [closed]

It seems Google activated central place for storing app/website passwords which is accessible at https://passwords.google.com/ and all the remembered Chrome passwords are synched there. In what ...
0
votes
0answers
43 views

Restricting Vmware View Copy/Paste functionality

Does anybody know if it's possible to restrict VMware View copy/paste functionality depending on the source of the client? It seems VDIs can have GPOs set to configure copy/paste functionality, but ...
0
votes
1answer
219 views

How far beyond using Shred should I go when deleting files? [duplicate]

Possible Duplicate: How can I reliably erase all information on a hard drive? I'm looking to securely erase my files. Is shred the best option besides ditching the hardware? To what lengths ...
-1
votes
1answer
115 views

Bringing in an intern

When bringing in an intern to help you in the IT world and with access to servers and client information, what kind of forms should be signed, especially when they work remotely?
-1
votes
1answer
31 views

rpm package info leak?

On Linux, rpm -qi <package-name> command would display the package info, which would contain information of build machine - Build Host :<host-name> Does this pose any security risk? Is ...
-1
votes
1answer
312 views

What is one way to verify emails of compromised website if registrations are not validated?

There was recently a massive personal data leak, and the data seems to be from Ashley Madison - a site providing dating services to married men. The site takes any email and does not verify them while ...
-1
votes
1answer
68 views

What are analytics APIs accessing when they run, and how do you block or spoof them?

What are analytics APIs accessing when they run, and how do you block or spoof them? Usually all apps from desktop or mobile app stores, MMO clients, Steam and many utilities, and many games and ...
-2
votes
1answer
82 views

How can startup companies protect their code from any intentional leakage? [duplicate]

So, how can new companies that have just started protect their source code from leaking by their employees? If it is a new company that means that the source code of the product is not so big and ...
-3
votes
1answer
110 views

Data security is not perfectly possible, laws exist but no one uses them. What is missing on international level? [closed]

In my country (Austria) I was a member of the team that made laws for protecting the personal data of every person. In the meantime I realise that we have the laws but nobody claims them in ...
-5
votes
1answer
38 views

Id theft, hacked, remote-control, data theft, phished, mirror sites [closed]

I've been battling my security breach for five years now. I've seen just about everything, as a photographer. All my pics disappeared, (large files), some recovered. Many videos or clips/voice memos ...