Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [availability]

Availability is the property of ensuring that an asset can be used when it is needed. In other words, availability protects against the threat of denial of service. It is one of the three key security properties of an asset, along with confidentiality and integrity.

Filter by
Sorted by
Tagged with
0
votes
2answers
78 views

Can importing an .ics file be dangerous?

Can there theoretically be any possible malicious code hidden in .ics files, which would steal your calendar data or something similar? For an example case, we'd be importing the .ics file into Google ...
1
vote
2answers
98 views

Could the use of Cloudflare's free SSL feature result in loss of availability?

When using Cloudflare's free shared SSL feature, the certificate for your website is shared with dozens of others websites via the use of SANs (Subject Alternate Names). Of course some of these ...
1
vote
3answers
302 views

Schneier is telling me to write my bank security password and keep it in my wallet? Is that right?

Bruce Schneier Writes Down Passwords. So Can You ... But how should people deal with all of this in the real world, or on line? "Relax," he says emphatically. Surprisingly for a security ...
1
vote
1answer
66 views

Addressing availability element of CIA triad using technical controls

When looking at the availability element of the CIA triad, most definitions mention that availability is addressed through ensuring system up-time by using controls such as disaster recovery, business ...
1
vote
0answers
51 views

Security model for availability of information

I have read about different security models that ensure the confidentiality and integrity of information such as the Chinese wall (confidentiality), Biba (integrity) and Clark-Wilson (integrity). ...
1
vote
1answer
427 views

Why touching a message with this text freezes the phone?

There is a certain text that, if appears on a text message and that message is touched by the user, causes the phone to freeze. The text is formed by many alternating right to left and left to right ...
2
votes
1answer
1k views

Nmap scan for Operational Technology devices

I want to scan a range of network with nmap to discover hosts but I know that depending on the scan, it can affect the integrity of OT (Operational Technology) devices, industrial devices like PLCs (...
4
votes
1answer
110 views

Security requirement disk quotas

When reading about security measures for operating systems I found the recommendation that disk quotas should be used. I thought that is just a general IT requirement to ensure everybody got the same ...
4
votes
1answer
2k views

Authentication as CIA triad

As we all know, information security principles are stated as CIA triad, i.e., confidentiality, integrity, and availability. I wonder why authentication is not a part of CIA triad as being an ...
1
vote
1answer
155 views

Security aspect vs Security goal

What is the difference between a security goal and a security aspect ? I know about the three network security goals Confidentiality, Integrity and Availability. But I do not know much about security ...
3
votes
2answers
2k views

Does HTTPS provide availability?

The paper On the Security of the TLS Protocol suggests HTTPS provides availability, but I couldn't find the explanation. Is it provided because HTTP supports load balancers etc.? Or is it something ...
1
vote
2answers
168 views

How to prevent corruption from ruining synced backups

I thought I was being clever keeping my password database stored on dropbox. This is because it's synced to the cloud and multiple computers. But when one got corrupted, I lost everything. (Ok I ...
26
votes
5answers
3k views

Is unauthorised deletion an integrity or availability issue?

During a web application test I have discovered a parameter tampering issue that allows a user to delete comments left by other users. They can't modify the content of other users' comments, and they ...
0
votes
1answer
43 views

What patterns or practices exist to protect users from site admins deleting the user's information?

Here's my situation: Say you run a service online that stores information that users of the service would want to keep for a long time. This information could be notes, files, etc. but it is ...
22
votes
3answers
3k views

New denial-of-service vulnerability in TLS protocol, based on shooting down other users' sessions?

I think I have a new denial-of-service attack on TLS, and I'd like you to check whether this is a real vulnerability. I recently learned about the proper way to drop an authenticated client session (...
3
votes
2answers
418 views

iOS Unicode Notification Bug

Evidently, someone has discovered a Unicode bug in iOS, where if an app receives a specific Unicode sequence (infinitely-repeating Unicode code point), the OS will kill the Springboard as it allocates ...
1
vote
1answer
144 views

Can all of Facebook's data be wiped out? [closed]

Is there a possibility that Facebook's entire data could ever be wiped out by a team of malicious individuals or even a government? Remotely or physically. If so, how do you think they would go about ...
0
votes
1answer
75 views

Security Engineering Potential Threat?

I've been working on some security engineering problems and there is no solution provided so if someone can clarify, would be great. From the point of view of security engineering, which is not a ...
13
votes
1answer
6k views

Who is the creator of the CIA triad?

The Information Security goals - Confidentiality, Integrity and Availability (CIA) - are often referenced to as the CIA triad. As I am writing my master thesis, I am wondering to which resource I ...
0
votes
3answers
935 views

Security goals vs ITU-T security services

I am doing a course on cryptography, and there I learned that the major security goals are Confidentiality Integrity Availability Also I Learned that ITU-T provides 5 different security services ...
7
votes
4answers
2k views

Safest way for multiple users post to a single social networking account

Suppose I have a team or organization managing a single twitter account and a single facebook page. Different users need to be able to post content to the same account. How can I minimize the risk of ...
6
votes
4answers
470 views

How do you guarantee that you don't lose a keyfile?

I am toying with the idea of adding keyfiles to various things that I encrypt. However what's been keeping me from adopting them is guaranteeing that I don't lose the keyfile while still keeping ...
22
votes
10answers
15k views

In Healthcare IT, is a “break glass” mode to bypass access controls commonly required?

I've seen referenced in literature the need to have a "break glass" mode in Healthcare IT applications. In this mode, the access controls in an application can be bypassed for an emergency when it is ...
14
votes
5answers
3k views

Is there a digital “safety deposit box” equivalent?

Digital safety deposit boxes: do they exist? if yes, are (any|they) trustworthy? There are many bricks and mortar financial institutions where one can rent a locked box in a locked room and be ...
13
votes
3answers
3k views

How does Diaspora work?

I hear all this hype about Diaspora being decentralized, but the only information I can find on their official website and the Wikipedia article is that several people can run Diaspora servers. The ...