New answers tagged

4

One part of your question seems not to have a good answer, so I want to add to this: By formatting a drive, you typically choose to do a "quick format". This does not overwrite the data, but only clears the information where each file is stored. Therefore, it is as easy as starting a program to recover a hard drive that has just been "quick formated". ...


42

Quick-formatting a hard disk simply erases the filesystem's structures and tables and writes new ones in place, giving the illusion of a brand new disk. Old data is simply overwritten as and when needed, but it still remains on the disk. File carving utilities can go through the disk data and recover fragments of files, then stitch them back together without ...


1

If "disk" happens to mean "solid state disk", you are somewhat lucky. You can instantly make retrieval of data (almost) impossible by using the manufacturer's secure erase tool. This process is both very fast and secure due to the way these drives work: They encrypt all data that is written to the drive, no exception made. Doing a "security erase" simply ...


2

DPAPI stores protected data encrypted with the user's DPAPI key, which is in turn encrypted with a derivative (via PBKDF2) of the NTLM password. Furthermore, the DPAPI-related key information is stored in a protected memory region within the security subsystem (LSA), making it particularly difficult to compromise the master keys outside of an administrative ...


1

As mentioned both have security counter parts to them. However POP is slowly losing favor as IMAP is typically deployed with far better security. it's also very dependent on the mail service providers security posture. Some of them don't care if secure communications exist between the end user's device and server and others take it very seriously.


2

No, that is not what they are saying. Both IMAP and POP have a encrypted version of the protocol. It doesn't matter if the volume is encrypted if the hacker can guess your username and password. What they are saying is if you download the message to your computer and delete them from their server a someone who breaks into your account will have nothing to ...


3

If you are supplying the application that stores and retrieves the encrypted files for the user, here are a few ideas you may want to consider... 1) Rather than encrypting data at the cloud storage, consider encrypting the data files prior to storing in the cloud service. You can find numerous options for encryption libraries on GitHub. 2) Store the Keys ...



Top 50 recent answers are included