Tag Info

New answers tagged

1

http://lmgtfy.com/?q=+On+the+fly+encryption+for+unencrypted+cloud+services%3F ;-) If you use such a service, you lose all of their web based services. So they effectively become purely a storage layer. Not a terrible idea, but removes much of the value from platforms like Dropbox with their countless integrations and so on. There are many such services, ...


2

Port 443 is the default port for HTTPS communication using SSL/TLS. As such, if you can reject and/or redirect traffic on port 80 (the default unsecured HTTP port) and reject all other ports, and if you can trust your web server OS's TCP/IP and TLS implementations, this scheme is as safe as any publicly-accessible computer communications endpoint can be ...


0

If you are utilizing a cloud service where you cannot control where data is stored, there may be potential legal risks. For example, in some cases US data stored on EU servers may be deemed subject to EU data directive privacy controls and data stored in the US may not meet EU requirements or have sufficient safe harbor. Other odd cases come up in ...


2

Basically, a man-in-the-middle attack could occur. If someone were to listen in on your users when they submit their username and password, that person would be able to retrieve their login credentials. Any decent network password sniffer could easily pull this off.


2

It's always possible that any files on an infected machine are infected themselves, but I'd say that image files are a less common target for malware. One approach would be to upload them to a cloud service and then make sure that you scan them with an A-V solution when you re-download them. Whether it's worth the risk to you will depend on how much you ...


0

Just remember the fact that 'end to end' encryption doesn't necessary mean that every single link needs to be encrypted. E.g. Payment request is encrypted in client browser using app-3 public key. Corresponding private key resides in a HSM. Client Browser (encrypted payload) -> reverse proxy -> web -> app1 -> app2 -> app3 Payload is decrypted in app3 ...


0

There are a few aspects to this. You have articulated the first, which is to ensure your documents are not tampered with. Well the social aspect of it is really simple. Work with people you can trust. If you cannot trust the administrators with your data. Then there is no point in entrusting them with anything else.


3

If you are a user of a system and other people have administrative access then, realistically there is little, if anything, that you can do to stop them gaining access to the information you process on that machine. They are likely to have the power to install software on the machine, so could (theoretically) install key loggers or other types of software ...


0

Im jumping on the "not possible" bandwagon here, Since we are not aware of the backup policy of said cloud provider (nor are we aware of their level of employee access) it can be quite possible that a copy of your VM's drive is floating around somewhere. In addition to this I have had a few different hosting providers where I have required tech support, ...


1

No, absolutely not. A virtual machine lacks the necessary knowledge and control over the underlying storage infrastructure to ensure secure deletion of data. For any number of reasons, writes may be redirected to new blocks and thus leaving the old data intact on physical storage. This is a typical behavior for SSD devices due to wear leveling, for ...


0

Disclaimer: I have never tried using spider oak so I'm only by going what they claim they do, what they told you they do and what the end result looks like. Given that they claim to be storing your data encrypted and never being able to access it, I would assume the only thing they ever have access to is really the encrypted version of your data. This would ...


0

Well, they can encrypt the new password by the old password or by some key exchanged between the machines prior the password change. This is the way they could do that. However, I don't have the source code and don't surely know that.



Top 50 recent answers are included