Questions tagged [documents]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
14 views

Is Digital Signature really necessary for an open system considered by FDA's 21 CFR Part 11?

21 CFR Part 11's Subpart B for Electronic Records has a section on 'Controls for Open Systems" stating that: Persons who use open systems to create, modify, maintain, or transmit electronic ...
BambiBundle's user avatar
2 votes
1 answer
98 views

How to feasibly digital sign high volume documents with CA issued digital certificate?

My organisation, say Acme, is building an e-signature platform where global businesses sign up and use the platform to send out e-signature requests. And when signers in a particular e-sign request ...
BambiBundle's user avatar
1 vote
3 answers
1k views

Sharing internal security policies with potential customers?

We have a set of ISMS documents like master security policy, supplier relations etc. classified as INTERNAL according to data classification policy. Now a potential customers infosec department is ...
crackmigg's user avatar
  • 115
4 votes
1 answer
152 views

Need help collating resources for an information/cyber security audit document for an MSP

I am currently serving out an internship with a small MSP (4 employees, 50-100 clients with between a couple and 100 employees). My main project is to work on a information/cyber security audit ...
Vehicular IT's user avatar
0 votes
1 answer
129 views

Can a structured (text) document be effectively encrypted

My situation: I want to encrypt an HTML document. My question is, if the following is known, is that going to weaken encryption? It is a text-based document It starts with <DOCTYPE HTML> or a ...
ControlAltDel's user avatar
36 votes
2 answers
12k views

Should I present forged documents in a Penetration Test/Red team engagement?

A previous question of mine lead to this discussion which mentioned the subject of Document forgery. I've seen many people (in videos) forge IDs and employee badges for such engagements so that seems ...
ChocolateOverflow's user avatar
1 vote
2 answers
355 views

Can a document be digitally signed multiple times, successively by different users?

The question is, if a document that is collaboratively edited, one user per time, could be digitally signed by every editor before it is passed to the next editor. And if yes, could the final receiver ...
user avatar
1 vote
2 answers
156 views

How to sign a text in a way, so it can not be altered or split in parts unacknowledged

Given, I want to create a document (text-only for the sake of this question) and give it to someone I do not trust. I am not allowed to publish it myself. It's probably not going to be published (...
Marcel's user avatar
  • 4,086
1 vote
1 answer
231 views

Is it possible to verify that a signature was made prior to the content of the document it is found on?

In What to do after I signed a blank sheet of paper given to me by my manager?, a distressed individual (B) has signed a blank piece of paper and given it to an adversary (A). A has openly stated to ...
Fiksdal's user avatar
  • 3,117
3 votes
1 answer
159 views

Hundreds of old MS Office files increased by about 10kb

We have most of our documents backed up and syncing in MS Sharepoint. That has worked very well for us. However, I just noticed an old folder I created on the C: drive at the time of setting all this ...
kr37's user avatar
  • 133
1 vote
1 answer
86 views

How to determine and compare risk in methods for document exchange

Lets say you are talking to a representative of a bank or government institution on the phone, and the representative requests that you send some documents, e.g. document A, B, and C. You ask if you ...
Arnfinn's user avatar
  • 113
1 vote
1 answer
139 views

How is it secure to open documents with embedded/linked fonts and images

There were some kernel exploits and CVEs (for example ms11-087 and CVE-2017-8682) about fonts. And there were some malware campaigns like duqu which used zerodays in fonts embedded into docx files. I ...
KOLANICH's user avatar
  • 910
3 votes
1 answer
111 views

How should we store and share information about our security protocols and plans?

I'm assuming that it's a good idea to document your security protocols, response plans, and attack surfaces. Of course, if you simply stick all of that information on GitHub (minus your secret of ...
Wayne Werner's user avatar
  • 1,795
1 vote
1 answer
356 views

Is an RC4 encryption enough for my personal documents?

In the last few weeks I wrote several proposals to the government, to my professor, etc. I want to make a copy of this filled proposals and save them. Instead of scanning it with my printer, making ...
adama's user avatar
  • 111
6 votes
3 answers
3k views

Which is a safe way to transfer a copy of a sensitive document?

A reputable and clearly identified institution asked me, for legitimate reasons, to e-mail a scan of the passport. However, I regard the passport as a sensitive document and am pretty reluctant to use ...
XavierStuvw's user avatar
1 vote
4 answers
1k views

How to prevent documents from being stolen via Linux live CD

I have a PC with Windows installed on it (like most people), and I can retrieve data from it using a Linux Live CD if need be. However, it dawns on me that anybody could simply steal any information/...
user54600's user avatar
2 votes
1 answer
2k views

Self signed signature in PDF

I am asking for a very simple "dumbed-down" answer for a newbie. Using Adobe Acrobat I can create a self-signed certificate and sign a document as anybody. I can use anyone's name and anyone's ...
Mike's user avatar
  • 23
0 votes
1 answer
193 views

Best way to secure documents? [closed]

I'm currently tasked with securing our documents stored in our NAS. Basically, the minimum requirements that is needed are; 1) Watermarking Ability(Any file viewed/downloaded or printed will have the ...
Roflnator's user avatar
3 votes
2 answers
332 views

How to prevent manipulation of a chain of document? Specifically: medical records

This is hypothetical problem, so remarks about whether it is feasible in practice are are off topic. I have been designing a documentation system for medical records where the patient owns his/her ...
d-b's user avatar
  • 499
1 vote
0 answers
125 views

Adding a permission layer on RSA keys?

Scenario: Imagine I want to create an app where users can share encrypted documents with other users, but have certain permissions with regards to what kind of permissions the user they are sharing ...
thanos's user avatar
  • 111
4 votes
1 answer
247 views

Does a dead person's SSN, etc need to be protected?

My parents died 10 years ago. I was the executor. The final return, etc was filed, no problems. I still have all their tax and financial records, which I'd like to get rid of. I believe I've ...
George's user avatar
  • 279
2 votes
1 answer
765 views

Looking at encrypted open office documents

So I'm both an aspiring writer and programmer, and when I write I prefer to password protect the documents so that people can't just look at them in their uncompleted (and highly personal/passionate) ...
thinksinbinary's user avatar
2 votes
1 answer
7k views

Can opening a Word document reveal user's IP address?

I've heard that opening a document in Microsoft Word can reveal the user's IP address (something to do with verifying certificates). What does happen here? Are there any other ways (apart from the ...
Samuel Shifterovich's user avatar
2 votes
3 answers
327 views

Securely transferring files back and forth between company and clients

I just was wondering what is considered a common practice in the security community for securely sending files back forth between company and client. For example, at the company I work for, we receive ...
cjones's user avatar
  • 223
3 votes
1 answer
3k views

Digitally signing a document with your public/private keypair without certificates?

I have generated a private/public key pair using gpg. Can I use this key pair to digitally sign a PDF without a digital certificate, but to still have the signature integrated into the PDF, instead ...
stanny's user avatar
  • 161
5 votes
3 answers
528 views

Are document signature services violating any rule by exposing PII over clear email?

A company sent me a document to sign via CudaSign, I did. As soon as I completed the transaction, I got a PDF over email with the document attached. The document includes my SSN. I assume, the ...
csmba's user avatar
  • 151
30 votes
5 answers
15k views

Can FBI or government agencies get hold of my Google Docs files just by confiscating my laptop? [closed]

Assume the following: I am doing all my work, including the one with sensitive information on Google Docs. No documents are stored on local hard drive. I am not using the Google Drive App, just doing ...
Graviton's user avatar
  • 925
1 vote
2 answers
214 views

Is Wiki software a good idea for Disaster Recovery Plans?

I am tasked with the initial draft of an IT disaster recovery plan for my organization. My predecessor never started one so now I am the lucky fellow to tackle this project. My experience in working ...
I2thesecond's user avatar
3 votes
1 answer
5k views

How to remove yellow tracking dots from a document?

Assume I have a document which I supspect to have yellow tracking dots. How can I remove them while keeping the actual information on the document? Is making a b&w copy enough? Is the copy machine ...
aggsol's user avatar
  • 174
0 votes
2 answers
482 views

how does mdm (mobile device management ) work in byod environment to control the camera?

what i want to know is how mdm (mobile device management ) works in byod environment to control the camera from clicking pictures of a printed document?is there a way other than to shut off the ...
Anuja Tewari's user avatar
6 votes
5 answers
34k views

Should I shred documents with only name and address details?

I routinely shred documents with any personal information on them to protect myself and others against identity theft. I have no doubts that shredding any documents with ID numbers, account details ...
GdD's user avatar
  • 17.4k
0 votes
2 answers
415 views

Suspicious 2 page, no image Word Docx has 1.7 MB

Can a word document contain virus or harm you in any way? Someone sent me a word docx that has only 2 pages, no image but it's 1.7 MB big. If I use save as to save it with a different name but still ...
spauny's user avatar
  • 153
1 vote
1 answer
818 views

Serial key in pdf document

I'm writting a ebook and I'm gonna to sell it soon. I'd sell it at Google Play Store, but here in Brazil they don't accept PayPal as payment (and many brazilian don't have a credit card), so I think ...
mvfs314's user avatar
  • 113
2 votes
0 answers
206 views

digitally signing a document [closed]

I've been asked to implement digital signatures for documents at work. I really need to read up more on the matter but several searches didn't make an obvious approach stand out. Main features I ...
captcha's user avatar
  • 121
2 votes
0 answers
85 views

Specification Document

I have been asked to research on a certain database then write down a specification document which covers Authentication, Authorization and Encryption. Has anyone ever come across such a documentation?...
Mardwan's user avatar
  • 21
0 votes
2 answers
4k views

Monitoring file copy on external devices

Transferred a personal folder from an external HDD to a USB using my work PC. Just used a simple cut paste method between the two drives, never writing anything to the internal HDD. However, come ...
user avatar
2 votes
2 answers
435 views

What options are available for implementing DLP? [closed]

What options are available for implementing DLP within an organisation and what are the pros and cons of each?
Kiwy's user avatar
  • 323
0 votes
1 answer
187 views

Which BCP/DRP sections are solely related to the software vendor?

In a software project, a software vendor is responsible to deliver a piece of software. Everything else, including the infrastructure setup, database and application server installation/configuration/...
Sadeq Dousti's user avatar
  • 1,514
2 votes
1 answer
631 views

Functional Specification for Common Criteria EAL 1 evaluation

I want to write a functional specification for CC EAL1 evaluation, There is an example in CC part 3 document but it is not enough complete, Are there any template or sample of a functional ...
mehdi yami's user avatar
8 votes
1 answer
574 views

CERT FOE Fuzzing Framework documentation

So I read another post here about fuzzing local standalone applications. I have understood how to exploit basic buffer overflow vulnerabilities in standalone applications and am now looking on how to ...
user2405966's user avatar
15 votes
3 answers
2k views

Would publishing a network diagram make the network less secure?

I have found some social networking sites that focus on sharing architecture (network maps and diagrams) and configuration. Does sharing this type of information decrease the security of my network? ...
saber tabatabaee yazdi's user avatar
2 votes
1 answer
236 views

Forefront Identity Management Server Hardening

Is there a good document for hardening FIM? I've tried CIS and NIST, but I couldn't find anything. If there is no such document, what would I have to look out for in the configuration?
user857990's user avatar
2 votes
5 answers
278 views

Documentation Platforms for Information Security Team

I am looking for ideas on documentation platforms focused specifically for information security and response teams. Is there anything that has worked well? What are some of the unique advantages of ...
John's user avatar
  • 1,049
62 votes
11 answers
106k views

How to safely view a malicious PDF?

I have a PDF with important information that may contain malware. What would be the best way to view it?
user avatar