New answers tagged

4

You cannot open a remote file with GPG through FTP. Instead you would need to download the file to the local system and open it there. Because of this the decryption will be done only locally (and will be independent from that way the file arrived on the local system) and thus password for the file will thus stay local too.


0

The more information third parties have about a consumer the more accurately they can profile what causes a consumer to make decisions. Simply knowing what app's are on a mobile device can reveal a lot of demographic information about the user (think dating apps, news apps, religious apps, type of games purchased, etc). Likewise the type of hardware you are ...


1

All processes running as your user can read the contents of your clipboard and modify the contents. The KDE clipboard, called Klipper when I last used KDE, also stores previous clipboard history. It stores it by default in a text file. This means that the contents can be recovered from your hard drive by a forensics examiner or malware. You can disable this ...


1

It may be dangerous. If your program manipulates confidential data that doesn't end up in the report, then the memory addresses may reveal information about the confidential data. Exploiting this data is likely to be difficult; the attacker would have to have a good working knowledge of what the program does, and they'd only obtain partial information, ...


0

First, what would you lose by hashing those values? I suspect the code isn't particularly performance critical and the speed impact would be relatively minor. If there isn't a big downside it is probably worth doing. As to what the security impact may be - many operating systems use address space layout randomisation (ASLR) to help mitigate against certain ...


2

Purely from a programming point of view, instead of using an objects memory address to link these two pieces of data, you really should be generating an index number and using that to refer between the structure and your annotation. I can't see any reason why it would be dangerous though to include the addresses in the report, since as soon as your program ...


1

I can personally reccomend this software; http://www.fileshredder.org/ It is free and it works great, it also has various options for number of times a bit is to be overwritten (it does include templates for several acknowledged standards from DoD etc.) It works on HDD's and USB's a like and, best of all, is free. It is Windows only though, I can not see ...


0

Encrypt a large picture of noise such that the file size occupies most of the drive. Do the same for a medium sized picture and then a small picture. Copy the large picture to the drive and if you have any room left over copy the smaller pictures to it. Avoid copying the same file to the drive more than once. Repeat the process with new pictures of noise. ...


0

What would be ideal would be for gmail to scan your mail and when placing it in your inbox encrypt it with your public PGP key. That way, they get to accomplish their goals per their agreement and the user has the assurance that their e-mail is encrypted and safe on disk when it is at rest. The added benefit is the user gets the benefit of security and ...


3

PCI DSS v3 section 6.5 calls out the need to protect sensitive data even if it is in memory, to help thwart memory scraping attacks. So if you expect to need PCI compliance, yes, you should protect sensitive data even if it's in memory. I don't know what technology you are using, but even non-persistent data can stick around for a while. For example, ...



Top 50 recent answers are included