Questions tagged [cloud-storage]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
0answers
52 views

Are iCloud Tabs for Safari end to end encrypted?

I see that iCloud bookmarks are not covered under end-to-end-encryption on the iCloud security overview, but no mention is made of iCloud Tabs, which seems even more important. Are Tabs stored merely ...
0
votes
0answers
57 views

Is it still not advisable to use recent versions of EncFS >1.7 to encrypt Dropbox?

I'd like to use EncFS to encrypt files synced with Dropbox. Unfortunately, its Wikipedia page https://en.wikipedia.org/wiki/EncFS mentions security concerns from an audit of version 1.7: EncFS is ...
-1
votes
1answer
98 views

Can wifi admin view video downloaded from personal Outlook cloud onto personal laptop?

Can company wifi admin view a video I downloaded to a personal computer from my outside microsoft outlook account accessed through Chrome? I have a personal university Microsoft account https, which I ...
2
votes
1answer
77 views

Is a good idea to have security logs stored in the cloud?

I was discussing with my friend the topic of the importance of log analytics/correlation and real-time response for an organization. Then, he mentioned that some people consider sending logs (...
0
votes
5answers
321 views

Is my Google Drive still secure if Chrome was heavily compromised?

I use an Apple eMac desktop computer. I formerly used Safari as my main browser. I migrated to Chrome as it is integrated with Google products. I use Google Drive very extensively as my main ...
0
votes
0answers
24 views

Security implications of keeping the Dropbox folder on an unencrypted drive

It looks like Dropbox no longer supports putting it's folder on a drive encrypted with ecryptfs on Ubuntu. Since I'd only be using it to store encrypted files that are useless without the encryption ...
3
votes
2answers
99 views

How does the optional “e-mail password reset” at sync.com work?

Sync.com proudly advertise that the company can't access your data but they do provide an optional email-based password reset. Most cloud storage providers differ from Sync because they can access, ...
2
votes
1answer
64 views

What attack vectors does AWS SSE-S3 help mitigate?

Reading into the various SSE options on S3, I'm can't understand the following: What exactly does the SSE-S3 (fully-managed, transparent at-rest encryption) protect you against? I can only think of ...
1
vote
1answer
340 views

Encryption for cloud storage

Background / Requirements using a Windows machine hard drives are already (veracrypt) encrypted volumes not relying on any cloud service provider to trust them with their encryption file by file ...
1
vote
1answer
69 views

Does the file encryption of Microsoft Office guarantee integrity?

I stumbled upon Microsoft Office's feature of file encryption. For storing sensitive data in the cloud, e.g. DropBox, this sounds like a nice feature. Reading that the encryption is AES-128 in CBC ...
4
votes
2answers
159 views

Is it safe to upload a read-only encrypted volume to a cloud folder?

I know keeping an active encrypted volume (like a VeraCrypt drive or a simple zip folder encrypted with AES256) on Dropbox/OneDrive/Gdrive/etc. is risky; data can be corrupted and the pattern of ...
1
vote
1answer
50 views

NAS with a public IP and multiple file sharing services – security concerns

I've ‘inherited’ (it's now my responsibility to take care of it) a WD My Cloud EX2 with a public IP and since it's exposed to the internet, I want to make sure that the data and other machines on the ...
0
votes
1answer
52 views

How can documents held in cloud storage be safeguarded against malware?

The place where I work stores company documents in the cloud. I just want to know whether malware can still access and conduct their malicious activity against these cloud-based documents ? Staff ...
2
votes
2answers
165 views

Encryption before backing up to the Cloud

I have collected a lot of data (approx 3TB) in photos and videos over the years, I've been upgrading to newer and bigger hard disks and luckily they've not failed on me. I've realized that my access ...
0
votes
1answer
94 views

Security of in-house data storage vs. cloud storage

What factors should be considered in comparing corporate in-house data storage on internet-connected systems vs. 3rd party cloud storage solutions? Are the latter worthy of consideration where budget ...
1
vote
1answer
72 views

How to prevent a client-side encrypted app from being abused as general storage?

The design of the application is simple: User Input > Serialize as JSON > Client-side Encrypt > Upload to server The object being stored is structured like this: type: <type1|type2|type3> ...
0
votes
2answers
108 views

Program or method to create an encrypted bulk file container [closed]

I have several hundred gigs of data that I store on a NAS for my own usage. The NAS storage solution manages local encryption, however I am looking into cloud backup solutions for disaster recovery. ...
2
votes
0answers
290 views

HIPAA compliant chat app with 3rd party provider without signing a BAA?

Short: If the data (PHI) I send to a third party is already encrypted, do I still need to sign a Business Associate Agreement (BAA) with them to stay HIPAA compliant? Long: To be specific, I was ...
1
vote
0answers
40 views

Is this protection for customer data both secure and fast enough?

A small electrical installation company has a big list of customers. The list contains personal information like names, phone numbers, addresses, info (like what product/installation) and some small ...
2
votes
1answer
5k views

How can I delete Telegram messages from their server? [closed]

Since I heard that Telegram stores all the chats including messages, pictures, audio & video material on their servers (cloud) I would like to know how can I delete all of my chats from my phone ...
0
votes
2answers
176 views

Is it good to split file into chunks to be more secure in the cloud?

I have an encrypted file. I want to keep it in the cloud, but it contains my private data. I think it would be be more secure if i split it into four parts and upload each part to a different cloud ...
3
votes
2answers
516 views

Encryption using multiple Yubikeys, any of which can unlock

I was hoping to use my Yubikey for file encryption, but also wanted to have a backup Yubikey work to unlock the file. From a conceptual point of view, I know it is possible since, even as is, I ...
0
votes
0answers
32 views

Verify that any online service is secure [duplicate]

I personally don't trust cloud storage, I understand the convenience, but it's not enough for me. Is there any way other than the company saying so, to verify that the storage of my files is indeed ...
0
votes
1answer
76 views

A term for a policy that forbids employees storing intellectualy property (e.g. Source Code) on hosted third parties services

To be honest, I was not sure if this belongs to this board or Law Stack Exchange. I am searching for a specific term that describes a policy that a company does not allow itself to share its ...
1
vote
0answers
31 views

Content security on the cloud/ hosted web [closed]

I have purchased space (web hosting) with a provider. I would like to manage (edit, add, delete etc.) my content entirely on the cloud content (without download/upload). This will be done by a couple ...
1
vote
3answers
165 views

Securing a Ubuntu web server on cloud for a web application

I am about to publish a python web application. The server is an Ubuntu remote machine hosted by 1&1. For now I start remotly the python server app with a console command. Concerning the ...
0
votes
1answer
97 views

Way to secure store personal data

This is not for business or corporations, but for personal situations. I rely on gsuite, google drive, google docs, etc.. not that too much 'heavily', but I use it to send most of my business emails, ...
1
vote
2answers
381 views

ownCloud on an encrypted partition on the server

I would like to implement a private cloud-storage on a Linux VPS. For example, I can use ownCloud. I can do the root login on the VPS by ssh. My question is if I can securely encrypt the /var/www ...
0
votes
1answer
89 views

Is e-mailed cryptic download link considered secure?

An online storage platform allows sharing files with anyone who does not have an account there by sending an https link leading to direct download of the file. The link is e-mailed to invited users. ...
3
votes
0answers
40 views

What security guarantees do Google Cloud Platform customer supplied disk encryption keys provide over Google provided keys?

Google Cloud Platform allows for customer supplied disk encryption keys as an option to using Google supplied disk encryption keys. However, to use customer supplied keys, you must send the key (...
3
votes
1answer
133 views

Does Adobe Acrobat Reader DC upload opened PDF files?

I'm wondering if Adobe Reader DC uploads all the PDF files it opens to the Adobe Cloud, even if you have not signed up for the cloud. I am not a fan of Adobe and generally do not install Adobe ...
1
vote
0answers
95 views

Encrypt and backup files directly to cloud storage? (No locally saved copies) [closed]

So far I know of the following services: Tresorit (paid cloud storage service) SpiderOak (paid cloud storage service) Arq (paid software, works with a number of cloud services) ...are there any ...
0
votes
2answers
617 views

VeraCrypt + WinRAR

My situation: I create containter in VeraCrypt encrypted by AES-Twofish-Serpent with Whirpool. I put my data in here and then I split the container using WinRAR into smaller pieces without compression ...
-2
votes
1answer
86 views

Cloud security risk assessment

I would like to know if there is any risk of using unlimited Google Drive bought from ebay if we consider the following. I know that the person who sold me that (administrator of the domain) can see ...
0
votes
1answer
555 views

How can I store user contacts (address book) with zero knowledge?

I want to provide a user with remote contact list (address book) that they can access and update from arbitrary clients on multiple devices. But I want to have zero knowledge of those contacts. ...
1
vote
2answers
114 views

What happens if your email file on local drive get's encrypted and it then syncs to the cloud? [closed]

Does email syncing using MS Exchange exchange work in a similar way to Dropbox such that a change made on the local drive automatically syncs with the cloud version of that file? Or is it one way only ...
6
votes
1answer
2k views

What happens if a Dropbox folder is encrypted by WannaCrypt / WannaCry?

Does one's Dropbox "data in the cloud" also get encrypted?
0
votes
1answer
108 views

Proof of data possesion in cloud storage where you cant do calculation to the object stored in the server

I was looking into some papers regarding proof of data possession like this or thisin cloud storage where you can ask for the proof of the data stored in the cloud storage by giving some kind of ...
2
votes
2answers
303 views

How to properly store, encrypt and backup passwords for home and office use

I am in close proximity to the moment, where I will need to migrate from my old ssd and data hdd to new ones (wear and age), so I'm rethinking my environment. Please, give me suggestions about what ...
1
vote
1answer
247 views

Secure file storage in cloud as backup

At start I'll admit I'm a total newbie when it goes for stuff I want to achieve, but I'm willing to learn, so sorry in advance for writing total nonsense. Stuff I want to achieve: I want to store my ...
15
votes
8answers
12k views

Are 7-Zip password-protected split archives safe against hackers when they are password-protected a couple of times?

Imagine I wish to upload my sensitive personal information (photos, document scans, list of passwords, email backups, credit card information, etc.) on Google Drive (or any other cloud service). I ...
0
votes
1answer
110 views

Is it safer and more secure to buy your own online storage from a hosting service or use major cloud services? [duplicate]

If I want to have a safe, private backup of my most confidential files online, what is the best way to go? Best as in, most secure, offering the highest level of privacy (i.e. being sure my data won't ...
1
vote
0answers
45 views

Encrypt content on Azure without using KeyVault? [duplicate]

Need to store some content in Azure Blob Storage, and want to encrypt prior to storing it on Azure Blob (we don't want to rely on Azure storage encryption on-rest). The issue is we do not want to ...
5
votes
2answers
893 views

WD My Cloud Vulnerabilities - What is at risk?

Recently there were around 70 vulnerabilities found within Western Digital's "My Cloud" devices. I am curious to know more about the scope of these vulnerabilities. All of the vulnerabilities have ...
4
votes
2answers
364 views

Is it OK to pass credentials to the client to allow it to upload files to Amazon S3?

Our mobile app will be uploading images to AWS S3. The question is whether to do one of the following options: Upload the image to our APIs server, then our APIs server uploads the image to S3 Pros: ...
16
votes
8answers
13k views

Keep encrypted files in sync on a cloud service, without having to upload an entire encrypted volume each time

Situation: User has several folders worth of GBs which they want to keep in sync on a cloud service (for example Mega or Dropbox) in an encrypted form; User does not want to sync a single encrypted ...
1
vote
2answers
2k views

Will encrypted files on a volume still be encrypted when uploaded to a cloud service?

If I encrypt some files in a folder using EFS, and then I upload such files to a cloud service, will they be encrypted on the cloud? While the logical answer seems to be yes, I think in reality the ...
3
votes
1answer
88 views

Can I store government ID numbers according to the PCI DSS?

I am developing a service, a part of which stores the credit card data of it's users. According to the Israeli credit card companies' requirements my users need to present their government ID number ...
1
vote
1answer
209 views

How Secure to is to forward CCTV stream to device's cloud

In my home CCTV, the video stream is forwarded to the Device's own cloud environment and we need to hook up our mobile views via that. I hope all the other device's streams are also forwarded in to ...
2
votes
1answer
904 views

EncFS vs EFS advantages for Dropbox-seamless encryption

I am considering a solution for securing my private data in Dropbox. In spite of OneDrive, MEGA and AmazonCloud are also being considered but now I put my focus on Dropbox as the most feature-rich of ...