Tag Info

Hot answers tagged

15

It depends on whether you are talking about the concepts, the terminology, or the acronym. Concepts of confidentiality, integrity and availability of information have been used by war generals for quite some time; for instance, one can see Julius Caesar operating along these lines during the Gallic Wars and he was certainly not the first to grasp the ...


10

There are three meanings for "safety" here: safe against eavesdroppers (confidentiality); safe against malicious alterations and/or theft (integrity & availability); safe against accidental alteration and/or loss (integrity & availability, also). Amazon S3 is a service which strives at providing safety types 2 and 3, but not 1. However, their ...


8

As a physician, even though I can think of situations where having immediate, unrestricted access to clinical information can be critical, I can't think of an "emergency break glass" feature as an absolute requirement for an electronic healthcare information system. The security risks of having unrestricted access are too high, and besides, think of the ...


8

This page should clear things up: https://github.com/diaspora/diaspora/wiki/Prettygooddiaspora Short summary of the page: Diaspora is still a work in progress and they are not really sure how to proceed. What they would like to have is PGP-encrypted messages everywhere, but run into implementation problems and put that aside for now. What they now use is ...


7

This may sound very non-technical, but the simple way to do this is: Start as per @ThomasPornin's answer - use strong encryption on your data for confidentiality, and use a very long passphrase (sufficent to rule out brute forcing in any reasonable timeframe) store the encrypted data in various locations for availability (personally I wouldn't want to ...


6

I think your requirements conflict - plausible deniability is not something which you will get from keyfile backups. But for the backup/availability, follow standard backup and availability practices - mirror to secure location, secure backup, test backups regularly...


6

Personally, I always think of a "break glass" setup when considering the use of data in an emergency setting. Take an emergency room for example: in my mind, all ER doctors should be able to pull all records from the ER terminals. You handle issues by means of exception logging. If a patient's record is accessed without a check-in, then you can investigate ...


4

In this case, I wouldn't try to roll my own solution per platform, since there are tools designed specifically to manage team access to social media accounts. HootSuite, for instance, has a number of team management features. All you have to do at that point is manage access to HootSuite, not Twitter and FaceBook and anywhere else you might have accounts. ...


4

Most banks provide safety deposit boxes, and my bank gave me one for free. Their smallest box isn't quite big enough for a normal 5.25" hard drive but its large enough to fit a few hundred GB in USB sticks or maybe a laptop drive. I make a copy of all of my key files as well as other important information and store it in this box in an encrypted archive. ...


4

Rent a safety deposit box at your bank. Deposit one or two copies of the keyfile on different media such as optical and USB (redundancy in case of media-specific bit rot). Alternatively (or in addition), take the keyfile data, base64 encode it with a simple check per line (sum mod 7 or similar check digit) and print it out on a piece of paper. It doesn't ...


3

Steganographically encode the keyfile into pictures you take. Explains why you have multiple copies, as you can explain that you don't want to lose them. Make sure no copies exist without the keyfile encoded, as the difference in the pictures can be used to crack the steganography.


3

I would recommend having a single user entitled to do the actual posting, and serving as proxy for all others. This allows him to avoid collisions (two of the posters posting the same thing almost simultaneously). To prepare for the untimely demise of that specific user, a backup of passwords is kept in a safe place (preferably, in a safe). A secret which ...


2

All models are, by definition, simplistic in some way; they are models. That's their job. At some point, someone coined the triad "confidentiality, integrity, authenticity" (I don't know who, but it is old). This is a mental framework: every information security concept can be forced into one of these three categories, sometimes with the help of the ...


2

The real goal of Information Security is to protect information assets from harm. The CIA triad breaks this down into preventing harm to three attributes of an asset. It's a useful model, because people often focus too much on confidentiality at the expense of integrity and availability. It's not the only mental model. The Parkerian Hexad, for example, ...


2

how to proceed about posting to FB? Adding to other answers i would like to say that even with facebook pages you have some additional options like having a content creator or a moderator for your page. These people can post on behalf of the page or they can act as moderators They do not have permission to manage admin roles. They can not remove ...


2

Some automatic blood bank audit and release systems have a 'break glass' feature where the fridge can be accessed without having to follow the normal process, which might be; input request, scan patient record identifier, bidirectional interface with lab system looks up blood type and the blood unit is scanned on removal from the fridge... It's very useful ...


1

This mechanism is now made mandatory by law in France (lookup PGSSI-S, in French). I don't know about other states, but you should check the relevant legislation.


1

First, you should understand that fb or twitter or any other social networking site is NOT made with the concept of RBAC. All the features you have mentioned in your question cross-ponds to the RBAC features (e.g privileges to edit/add,read only etc). There are workarounds (e.g twitterdock) which you mentioned yourself,but i know many social PR firms have ...


1

What about something like this? Alice stores the data in (device) with a strong encryption, say RSA with keylength of 4096 bits. Once a (period, say 1 month), she logs into her (device). Alice (put issue here), so she doesn't log in for (period). The (device) releases the key. Yet there's a problem because you need to store the key somewhere, but ...


1

You could encrypt the file in several layers, each using a different key. Then give those keys to a number of trusted people, some who have an interest in the data, some who are neutral, such as the lawyer who deals with the will. Each person involved would also have a copy of the file once it was fully encrypted, so the odds of all of them losing the file ...


1

The Diaspora pods require ImageMagick to be installed on the host, in order to process images uploaded by users. This itself should reveal how insecure Diaspora is. What's to stop me from running a pod and accessing all the images that come through my server?



Only top voted, non community-wiki answers of a minimum length are eligible