New answers tagged

3

The traditional term for this sort of device is WORM drive, where WORM stands for "Write Once, Read Many." A number of tape-like devices are still available and in use today. More modern equivalents are DVD-R, CD-R, and specially protected Flash drives. There are also vendors who have created magnetic (e.g., traditional disk drive) technologies which are ...


0

Use a DVD or CD. First use a marker to write something Unique on the DVD disc. Handwrtiting is the security step here. Then you could use a CLI tool to automatically burn to the disc. One could also use Multi-session disc burning.


1

If you use 4 or 8 bytes of integers to store your passwords, you are making the brute-forcers' jobs a lot easier. Because, if i understand your situation correctly, an attacker would just need to come up with an string so that its converted value(converted to check with the values in DB) matchs the stored password value. Considering the computing power in ...


3

This is security through obscurity, and in violation of kerchoffs's principle. if they don't know the algorithm they wouldn't be able to crack it? Maybe. And maybe analyzing the entries leads to the revelation of the algorithm. And once an attacker does get the algorithm - via analysis, by getting access to your server, because you posted it here - ...


1

The ChaCha20 algorithm is simple enough that if you're curious about how it works you could just write your own implementation (but don't use it in production!). RFC 7539 is a simple reference that also comes with examples so you can easily check for correctness as you go along. But the way it works is that you XOR the message with a keystream that is ...


1

PCI-DSS rules generally require that any PAN stored be encrypted in such a way that it requires not one, but two authenticators to decrypt. In practice, this would normally mean that even if you intend that the end-user is the only one with an encrypted copy, this would be insufficient from a regulatory standpoint. "Who" has a copy is irrelevant, in this ...



Top 50 recent answers are included