Data-leakage is the uncontrolled, unauthorized transmission of classified information from a data centre or computer system to the outside. Such leakage can be accomplished by physical removal of data storage devices (diskettes, tapes, listings, printouts and photographs of screen copies or ...
1
vote
2answers
63 views
VCS to manipulate returned trees to prevent leaks? [closed]
I am wondering if there is any system that would change source code trees in subtle from version control systems in ways that are hard to discover (i.e. whitespaces at the ends of lines, perhaps even ...
6
votes
3answers
364 views
How are large tech sites such as LivingSocial, Zappos, LinkedIn and Evernote hacked?
How are large tech sites such as LivingSocial, Zappos, LinkedIn and Evernote hacked? (i.e. how is their entire dataset of users obtained?)
LivingSocial - 50 Million Users Exposed
Zappos - 24 Million ...
14
votes
8answers
604 views
Should the requirement of admin privileges be extended?
Seeing this comic from xkcd.com made me thinking:
Is extending the requirement of admin privileges to things such as connecting to the internet, running the web browser, reading browser and other ...
15
votes
4answers
860 views
What is the easiest way to search massive, leaked databases for persons and personal information?
This may seem like a rather nefarious question, however, my motivations are quite the opposite-- I want to know how at risk I might be!
A while ago a very MASSIVE database was leaked that contained ...
3
votes
4answers
373 views
Is it ok to cut some digits from the front-face of a credit/debit card?
I'm a European expat living in Asia. I usually hide my credit card at my apartment. However, I'm a bit scared about losing it when I carry it (wallet robbed or lost).
That's why I already scrubbed ...
1
vote
2answers
159 views
How do private photos get stolen
I'm not referring to any of the below:
Spiteful partner sharing private photos of other after editing oneself out.
Someone stealing photos from a professional photographer/artist without permission.
...
8
votes
5answers
247 views
How would you detect whether customer data has been leaked?
I'm a very security conscious (bordering paranoia) freelance web developer and I place a lot of emphasis on security with my clients, alas I've found this doesn't seem to be the case for the average ...
0
votes
0answers
40 views
Where can I obtain publicly available data about security attacks in Asia and Pacific? [closed]
I am trying to run an analysis of trends of security attacks with respect to world events (i.e. oil price hike induces an increased amount of attacks on oil companies).
The scope of my project is ...
1
vote
2answers
166 views
Why are we told to hide local info in pictures we post to the Internet
When I post a picture to an Internet forum or Stack Exchange site I am told to hide and destroy names, domain names, user names, server names and computer names.
We know that user names are ...
-1
votes
1answer
84 views
Bringing in an intern
When bringing in an intern to help you in the IT world and with access to servers and client information, what kind of forms should be signed, especially when they work remotely?
6
votes
1answer
283 views
Encrypting sensitive data in software and storing/decrypting it on a server
I have searched IT Security and Google for something similar to this, but wasn't able to find anything remotely related to what I'm doing.
I'm developing software which has 2 parts - a C# program run ...
26
votes
7answers
5k views
Are powerline ethernet adapters inherently secure?
I have 2 Zyxel PLA407 powerline adapters. Router is downstairs connected to one adapter, other adapter is upstairs about 30 feet away connected to a desktop. I have a house, not an apartment or ...
8
votes
1answer
313 views
How can I secure my log files?
I have a cool tool that displays my syslog and kernellog on my mac's desktop. This has me concerned about what is written in them - I'm staring to feel like they are creating a hole in my privacy. I ...
7
votes
5answers
315 views
Swap file may contain sensitive data
Is it possible that the swap file will contain chunks of data by a file you have accessed, and could this be detected during a forensics analysis?
How could you prevent this situation ?
Is using ...
2
votes
1answer
149 views
Data remanence on mobile devices
The methods in which data should be deleted is strictly enforced by the DoD as well as others security sensitive organizations. However, there are complications with deleting data on an SSD.
Given ...
4
votes
2answers
377 views
How to secure usb data storage of Android phones?
I just found out that if I connect my phone to a laptop with a cable, the password becomes completely USELESS. So how can I protect the data in my phone from a usb cable?
It's actually very easy to ...
1
vote
3answers
219 views
Monitoring and filtering of arbitrary outgoing data
I would like to be able to not just centrally monitor but also filter any organizational data moving out our edge routers, regardless of the sender application and regardless of the protocol/port used ...
0
votes
1answer
75 views
How to use clipboard manager software more securely?
I want to minimize the risks using a clipboard manager or clipboard history software. I want to use it because it really eases my work so not using it is not a good option.
These programs usually ...
8
votes
2answers
319 views
Is Data Remanence a Myth? [duplicate]
Possible Duplicate:
Why is writing zeros (or random data) over a hard drive multiple times better than just doing it once?
Multiple overwrites have often been discussed as a secure way of ...
3
votes
1answer
68 views
Possible to redact information in the clipboard, or to auto-redact when it hits a webpage?
Sometimes when I paste information to a website I realize after I post the information that I inadvertently included an IP address, username, email address, or other information I'd like to consider ...
17
votes
6answers
3k views
How can I reliably erase all information on a hard drive?
As storage technologies change over time, using different encodings and remappings to deal with sector errors, the best way to permanently erase/wipe/shred data changes also.
Methods for flash drives ...
2
votes
4answers
316 views
Code, Data and Passwd encrypted? sqlplus $USER/$PASSWORD@$ORACLE_REMOTE_SID
Lots of our *NIX scripts use "sqlplus $USER/$PASSWORD@$ORACLE_REMOTE_SID"
I know that not good to have clear text password in scripts (there is no alternative at the moment). But question
is the ...
35
votes
5answers
5k views
How do you destroy an old hard drive?
How do you destroy an old hard drive? To be clear, unlike questions Secure hard drive disposal: How to erase confidential information and How can I reliably erase all information on a hard drive? I do ...
12
votes
2answers
702 views
The Creation of Secure Software Development Environments
[Edit] I did complete an analysis and framework of concepts
that were included into my thesis for extensions to existing frameworks. All of the information in this thread was useful. The direct ...
2
votes
4answers
219 views
How to restrict flash drives in Local Area Network
It is prohibited to use USB drives at our office, due to security reasons. But some people still use them to steal information. It is now a great risk factor at our office.
Now we need to ensure any ...
2
votes
6answers
235 views
How do I prevent data from leaving my network?
I have a network of about 10 computers and I want to prevent sensitive data and source code leaks. To achieve that, I would like to block all file uploading / attaching.
What are the options ...
2
votes
2answers
65 views
Information disclosure by identifiers
I'm doing a small research and I observed quite a lot of sites that reveal some private information in the ID-s that they assign. As an example I would like to point out e-commerce sites that issue ...
2
votes
2answers
191 views
HTTPS Sensitive Information and Caching
I have a website where I need to share a sensitive key with the user. Of course, I'm using HTTPS on the page. The key is put into the HTML server-side in ASP.NET. My concern is, if the user's computer ...
2
votes
2answers
1k views
How to block all access to Akami deploy servers and Apple push servers?
I no longer blindly trust the numerous connections that occur at night and during the day that always go to "content" and "push" servers like:
a23-33-37-54.deploy.akamaitechnologies.com
...
3
votes
2answers
184 views
Concerns of data being on the cloud
Would you prefer a private cloud for your data or a public one?
Who takes care of financial liability in case of any breach?
Do companies still keep the most critical within their data centers, ...
4
votes
4answers
371 views
What do you do to protect data on a Macbook in the event of theft/loss of the device?
What setup do you recommend to protect data on a MacBook in the event of theft/loss of the device?
I'm specifically interested in Macs here, rather than laptops generally, and in concrete ...
0
votes
1answer
103 views
How far beyond using Shred should I go when deleting files? [duplicate]
Possible Duplicate:
How can I reliably erase all information on a hard drive?
I'm looking to securely erase my files. Is shred the best option besides ditching the hardware? To what lengths ...
12
votes
5answers
328 views
What is the risk of giving USB drives as promotional items by a healthcare provider
There have been a couple of instances where malware infected USB drives have been given away unknowingly as promotional items at conferences, e.g., IBM in 2010.
Besides this, if a healthcare company ...
0
votes
1answer
238 views
Data Retention Laws for ISPs in North America
I was reading an article on TorrentFreak where Private Internet Access claims the United States "is one of the only countries without a mandatory data retention law." According to the linked article ...
1
vote
1answer
267 views
What encryption is possible for ReadyBoost?
ReadyBoost is a technology to assist getting Windows Vista or 7 to load faster on memory-constrained PC's.
Since a USB stick can be easily removed, what security options are available for this ...
2
votes
1answer
719 views
How to secure MySQL based web session data table?
I have the following MySQL session schema:
CREATE TABLE `SessionData` (
`id` varchar(50) COLLATE utf8_unicode_ci NOT NULL,
`data` text COLLATE utf8_unicode_ci,
`date` datetime DEFAULT NULL,
...
2
votes
2answers
240 views
How to prevent private data being disclosed outside of Organization
I'm not looking to secure my internal network
Our company keeps sensitive customer information. How can I prevent this information spreading outside of the company ?
How do big companies prevent to ...
5
votes
3answers
400 views
How to destroy old credit card?
What is the best (in terms of security) way to destroy old (but still working) credit card?
2
votes
4answers
1k views
If a hacker were to compromise a GMail database
Assuming the systems that store the Gmail database is compromised what is preventing them from reading everyone's emails by looking at the data in the database?
I assume nothing, and in order for ...
6
votes
3answers
565 views
Have hardware trojans been seen in the wild?
Military and intelligence organizations have spent a lot of resources guarding against the possibility of hardware trojans, unauthorized modifications to hardware circuits that leak information or ...
2
votes
3answers
202 views
Where do organizations store their sensitive documents? How do they protect them?
Where do organizations store their sensitive documents?
How do they protect them?
What are the pros and cons for each method? (If there are multiple common ones)
EDIT: I am more referring to ...
1
vote
1answer
72 views
Ways to make it more difficult for data to be lifted from a website?
Assume for a moment that I run a public-facing website that hosts pictures and names of people in a "billboard" fashion (i.e. you do not have to register to view the information) and that my site ...
3
votes
1answer
217 views
What constitutes a Virtual Private Database?
I recently came across this term "Virtual Private Database" and I'm wondering what criteria need to be satisfied to allow use of the term.
I first saw the term in an HP/Fortify doc:
A virtual ...
11
votes
5answers
2k views
Could mint.com be more secure, and if so, how?
After reading a bit about mint.com on the money stack exchange, I wanted to give it a try. But frankly, it scares me a little bit.
The site has a bunch of links explaining how they're so secure. I ...
2
votes
2answers
231 views
Google Account Compromised - Possible Investigation?
This morning, I've not been able to login to my Google Account.
Google says, my account has been compromised and I had to walk through account credentials recovery and verify (SMS to verify phone ...
2
votes
2answers
282 views
Keeping valuable algorithms secret
Given a securities trading algorithm that is very effective and thereby very valuable, how do you keep it secret and protect it from theft or copying? What techniques or architecture is the best?
The ...
6
votes
3answers
25 views
Active measures against lost or stolen PDAs in healthcare?
Many physicians, nurses, and technical staff like to carry PDAs to be kept abreast of patient conditions. Various companies want caretakers to view ECGs on their iPads.
Due to the incredibly private ...
13
votes
2answers
1k views
Hiding user account names from unauthenticated RDP sessions
This is for a Windows 7 Ultimate system, which is not a member of a domain.
When I log into the system locally, I am required to either manually enter my user ID or authenticate with biometrics. The ...
8
votes
4answers
533 views
Source code security
We have about 20 developers working in a heterogeneous environment, mostly using company laptops or desktops. We run Windows 7 on desktops/laptops and a mixture of Linux distros (Ubuntu/CentOS).
...
1
vote
0answers
67 views
Is there a way to detect and extract steganographically hidden data from a picture? [duplicate]
Possible Duplicate:
Detecting Steganography in images
Is there a way to detect and extract hidden data from picture which altered by steganography?
For example, If someone tried to spill ...
