Tag Info

Hot answers tagged

15

It depends on whether you are talking about the concepts, the terminology, or the acronym. Concepts of confidentiality, integrity and availability of information have been used by war generals for quite some time; for instance, one can see Julius Caesar operating along these lines during the Gallic Wars and he was certainly not the first to grasp the ...


10

There are three meanings for "safety" here: safe against eavesdroppers (confidentiality); safe against malicious alterations and/or theft (integrity & availability); safe against accidental alteration and/or loss (integrity & availability, also). Amazon S3 is a service which strives at providing safety types 2 and 3, but not 1. However, their ...


8

This page should clear things up: https://github.com/diaspora/diaspora/wiki/Prettygooddiaspora Short summary of the page: Diaspora is still a work in progress and they are not really sure how to proceed. What they would like to have is PGP-encrypted messages everywhere, but run into implementation problems and put that aside for now. What they now use is ...


7

This may sound very non-technical, but the simple way to do this is: Start as per @ThomasPornin's answer - use strong encryption on your data for confidentiality, and use a very long passphrase (sufficent to rule out brute forcing in any reasonable timeframe) store the encrypted data in various locations for availability (personally I wouldn't want to ...


7

As a physician, even though I can think of situations where having immediate, unrestricted access to clinical information can be critical, I can't think of an "emergency break glass" feature as an absolute requirement for an electronic healthcare information system. The security risks of having unrestricted access are too high, and besides, think of the ...


6

Personally, I always think of a "break glass" setup when considering the use of data in an emergency setting. Take an emergency room for example: in my mind, all ER doctors should be able to pull all records from the ER terminals. You handle issues by means of exception logging. If a patient's record is accessed without a check-in, then you can investigate ...


4

Most banks provide safety deposit boxes, and my bank gave me one for free. Their smallest box isn't quite big enough for a normal 5.25" hard drive but its large enough to fit a few hundred GB in USB sticks or maybe a laptop drive. I make a copy of all of my key files as well as other important information and store it in this box in an encrypted archive. ...


4

Rent a safety deposit box at your bank. Deposit one or two copies of the keyfile on different media such as optical and USB (redundancy in case of media-specific bit rot). Alternatively (or in addition), take the keyfile data, base64 encode it with a simple check per line (sum mod 7 or similar check digit) and print it out on a piece of paper. It doesn't ...


4

In this case, I wouldn't try to roll my own solution per platform, since there are tools designed specifically to manage team access to social media accounts. HootSuite, for instance, has a number of team management features. All you have to do at that point is manage access to HootSuite, not Twitter and FaceBook and anywhere else you might have accounts. ...


3

I would recommend having a single user entitled to do the actual posting, and serving as proxy for all others. This allows him to avoid collisions (two of the posters posting the same thing almost simultaneously). To prepare for the untimely demise of that specific user, a backup of passwords is kept in a safe place (preferably, in a safe). A secret which ...


2

All models are, by definition, simplistic in some way; they are models. That's their job. At some point, someone coined the triad "confidentiality, integrity, authenticity" (I don't know who, but it is old). This is a mental framework: every information security concept can be forced into one of these three categories, sometimes with the help of the ...


2

The real goal of Information Security is to protect information assets from harm. The CIA triad breaks this down into preventing harm to three attributes of an asset. It's a useful model, because people often focus too much on confidentiality at the expense of integrity and availability. It's not the only mental model. The Parkerian Hexad, for example, ...


2

how to proceed about posting to FB? Adding to other answers i would like to say that even with facebook pages you have some additional options like having a content creator or a moderator for your page. These people can post on behalf of the page or they can act as moderators They do not have permission to manage admin roles. They can not remove ...


1

First, you should understand that fb or twitter or any other social networking site is NOT made with the concept of RBAC. All the features you have mentioned in your question cross-ponds to the RBAC features (e.g privileges to edit/add,read only etc). There are workarounds (e.g twitterdock) which you mentioned yourself,but i know many social PR firms have ...


1

What about something like this? Alice stores the data in (device) with a strong encryption, say RSA with keylength of 4096 bits. Once a (period, say 1 month), she logs into her (device). Alice (put issue here), so she doesn't log in for (period). The (device) releases the key. Yet there's a problem because you need to store the key somewhere, but ...


1

You could encrypt the file in several layers, each using a different key. Then give those keys to a number of trusted people, some who have an interest in the data, some who are neutral, such as the lawyer who deals with the will. Each person involved would also have a copy of the file once it was fully encrypted, so the odds of all of them losing the file ...



Only top voted, non community-wiki answers of a minimum length are eligible