Tag Info

New answers tagged

2

It is possible to infer the usage of a VPN from patterns in the communication. If you are using a tunnelling technology like IPsec, L2TP, or PPTP, your packets are incapsulated inside other packets, so the useful part of the packet might be smaller than in a classic network. MTU and MSS are two important pieces of data about the sizes of the incapsulated ...


1

How is that possible ? Well: Firefox and Chrome implement WebRTC that allows requests to STUN servers be made that will return the information you see on sites such as ip-api.com. Also the ISPs uses for sure Deep Packet Inspection (DPI) techniques to inspect traffic so that is why your OpenVPN is detect. How to avoid such situations ? Many solutions are ...


0

Can somebody explain to me how this is possible... The IP ranges are registered for the company, so a quick Whois can reveal this information. Also a reverse DNS query might reveal the company's URL too. ...and how can I stop this information leak? You could use a another proxy server or TOR to hide that information


24

First of all, you should make sure that you don't use that password, or a derivative, anywhere that you care about. This is most important if you use the same username or email address, but still something that you should do for completely unrelated accounts. If a password is crackable, it may have been incorporated into wordlists already. And even if not, ...


2

Search-engines - is there any way to globally remove the page/pages appearing on searches? Depending on the search engines on which your data appears, the only way to get rid of your old information is to contact them directly. For example this is where and how to contact Google Search Engine to remove your old images, cached pages and so on. ...


5

Once something is posted in internet it is virtually impossible to remove it completely, even if the original link is removed there are just too many spiders storing content, one example is the wayback machine. Even facebook admits to not always deleting content (check "What happens to content that I delete from Facebook?") even when you mark it as deleted ...


0

Data security policy should be introduced conceptually to the employee before they sign the contract, and explained and/or provided to them in detail before they sit down at their desk for the first time.


3

First, when the employee starts. Not in order for them to learn a lot, but to get the impression that you are taking security seriously, so they don't do anything stupid. Then a week or two later, when the employee has some clue about the job they are doing, and can actually appreciate the security training. Then a while later when they are firmly and ...


1

'Stay aware and alert' is the mantra for information security. As for your question, the awareness should be part of the induction program for new employees. Basic security etiquettes like Not flashing ID cards No scribbling of sensitive information. Governing policies like web access restrictions etc. These are basic policies that need to be put forth ...


36

The question could also be asked: "how long should an employee have access to data before they are trained in how to use and protect that data?" For most organizations, the answer is "0 minutes". You wouldn't place an employee in front of machinery without training them, and you shouldn't place employees in front of a computer without training either. Each ...


16

Do it as part of new employee orientation and follow up with more training at regular intervals. Security policy is part of our new employee orientation. We also require a short online "securing the human" training to be completed once every other year. Introduction of this regular training has had noticable positive results.



Top 50 recent answers are included