Questions tagged [documents]
The documents tag has no usage guidance.
42
questions
0
votes
2
answers
90
views
Sharing internal security policies with potential customers?
We have a set of ISMS documents like master security policy, supplier relations etc. classified as INTERNAL according to data classification policy.
Now a potential customers infosec department is ...
- 103
4
votes
1
answer
126
views
Need help collating resources for an information/cyber security audit document for an MSP
I am currently serving out an internship with a small MSP (4 employees, 50-100 clients with between a couple and 100 employees).
My main project is to work on a information/cyber security audit ...
- 41
0
votes
1
answer
101
views
Can a structured (text) document be effectively encrypted
My situation:
I want to encrypt an HTML document. My question is, if the following is known, is that going to weaken encryption?
It is a text-based document
It starts with <DOCTYPE HTML> or a ...
- 125
36
votes
2
answers
12k
views
Should I present forged documents in a Penetration Test/Red team engagement?
A previous question of mine lead to this discussion which mentioned the subject of Document forgery.
I've seen many people (in videos) forge IDs and employee badges for such engagements so that seems ...
- 3,472
1
vote
2
answers
311
views
Can a document be digitally signed multiple times, successively by different users?
The question is, if a document that is collaboratively edited, one user per time, could be digitally signed by every editor before it is passed to the next editor. And if yes, could the final receiver ...
user209758
1
vote
2
answers
134
views
How to sign a text in a way, so it can not be altered or split in parts unacknowledged
Given, I want to create a document (text-only for the sake of this question) and give it to someone I do not trust. I am not allowed to publish it myself. It's probably not going to be published (...
- 3,546
1
vote
1
answer
198
views
Is it possible to verify that a signature was made prior to the content of the document it is found on?
In What to do after I signed a blank sheet of paper given to me by my manager?, a distressed individual (B) has signed a blank piece of paper and given it to an adversary (A).
A has openly stated to ...
- 3,097
3
votes
1
answer
139
views
Hundreds of old MS Office files increased by about 10kb
We have most of our documents backed up and syncing in MS Sharepoint. That has worked very well for us. However, I just noticed an old folder I created on the C: drive at the time of setting all this ...
- 133
1
vote
1
answer
65
views
How to determine and compare risk in methods for document exchange
Lets say you are talking to a representative of a bank or government institution on the phone, and the representative requests that you send some documents, e.g. document A, B, and C. You ask if you ...
- 113
1
vote
1
answer
114
views
How is it secure to open documents with embedded/linked fonts and images
There were some kernel exploits and CVEs (for example ms11-087 and CVE-2017-8682) about fonts. And there were some malware campaigns like duqu which used zerodays in fonts embedded into docx files.
I ...
- 912
3
votes
1
answer
95
views
How should we store and share information about our security protocols and plans?
I'm assuming that it's a good idea to document your security protocols, response plans, and attack surfaces.
Of course, if you simply stick all of that information on GitHub (minus your secret of ...
- 1,755
1
vote
1
answer
308
views
Is an RC4 encryption enough for my personal documents?
In the last few weeks I wrote several proposals to the government, to my professor, etc.
I want to make a copy of this filled proposals and save them.
Instead of scanning it with my printer, making ...
- 111
6
votes
3
answers
2k
views
Which is a safe way to transfer a copy of a sensitive document?
A reputable and clearly identified institution asked me, for legitimate reasons, to e-mail a scan of the passport. However, I regard the passport as a sensitive document and am pretty reluctant to use ...
- 965
1
vote
4
answers
1k
views
How to prevent documents from being stolen via Linux live CD
I have a PC with Windows installed on it (like most people), and I can retrieve data from it using a Linux Live CD if need be. However, it dawns on me that anybody could simply steal any information/...
- 35
2
votes
1
answer
2k
views
Self signed signature in PDF
I am asking for a very simple "dumbed-down" answer for a newbie.
Using Adobe Acrobat I can create a self-signed certificate and sign a document as anybody. I can use anyone's name and anyone's ...
- 23
0
votes
1
answer
171
views
Best way to secure documents? [closed]
I'm currently tasked with securing our documents stored in our NAS.
Basically, the minimum requirements that is needed are;
1) Watermarking Ability(Any file viewed/downloaded or printed will have the ...
3
votes
2
answers
307
views
How to prevent manipulation of a chain of document? Specifically: medical records
This is hypothetical problem, so remarks about whether it is feasible in practice are are off topic.
I have been designing a documentation system for medical records where the patient owns his/her ...
- 489
1
vote
0
answers
108
views
Adding a permission layer on RSA keys?
Scenario: Imagine I want to create an app where users can share encrypted documents with other users, but have certain permissions with regards to what kind of permissions the user they are sharing ...
- 111
4
votes
1
answer
180
views
Does a dead person's SSN, etc need to be protected?
My parents died 10 years ago. I was the executor. The final return, etc was filed, no problems. I still have all their tax and financial records, which I'd like to get rid of. I believe I've ...
- 279
2
votes
1
answer
714
views
Looking at encrypted open office documents
So I'm both an aspiring writer and programmer, and when I write I prefer to password protect the documents so that people can't just look at them in their uncompleted (and highly personal/passionate) ...
- 149
2
votes
1
answer
6k
views
Can opening a Word document reveal user's IP address?
I've heard that opening a document in Microsoft Word can reveal the user's IP address (something to do with verifying certificates).
What does happen here?
Are there any other ways (apart from the ...
2
votes
3
answers
305
views
Securely transferring files back and forth between company and clients
I just was wondering what is considered a common practice in the security community for securely sending files back forth between company and client. For example, at the company I work for, we receive ...
- 223
3
votes
1
answer
2k
views
Digitally signing a document with your public/private keypair without certificates?
I have generated a private/public key pair using gpg.
Can I use this key pair to digitally sign a PDF without a digital certificate, but to still have the signature integrated into the PDF, instead ...
- 161
5
votes
3
answers
476
views
Are document signature services violating any rule by exposing PII over clear email?
A company sent me a document to sign via CudaSign, I did.
As soon as I completed the transaction, I got a PDF over email with the document attached. The document includes my SSN. I assume, the ...
- 151
30
votes
5
answers
15k
views
Can FBI or government agencies get hold of my Google Docs files just by confiscating my laptop? [closed]
Assume the following:
I am doing all my work, including the one with sensitive information on Google Docs. No documents are stored on local hard drive.
I am not using the Google Drive App, just doing ...
- 905
1
vote
2
answers
195
views
Is Wiki software a good idea for Disaster Recovery Plans?
I am tasked with the initial draft of an IT disaster recovery plan for my organization. My predecessor never started one so now I am the lucky fellow to tackle this project.
My experience in working ...
- 11
3
votes
1
answer
5k
views
How to remove yellow tracking dots from a document?
Assume I have a document which I supspect to have yellow tracking dots. How can I remove them while keeping the actual information on the document? Is making a b&w copy enough? Is the copy machine ...
- 174
0
votes
2
answers
438
views
how does mdm (mobile device management ) work in byod environment to control the camera?
what i want to know is how mdm (mobile device management ) works in byod environment to control the camera from clicking pictures of a printed document?is there a way other than to shut off the ...
6
votes
5
answers
33k
views
Should I shred documents with only name and address details?
I routinely shred documents with any personal information on them to protect myself and others against identity theft. I have no doubts that shredding any documents with ID numbers, account details ...
- 17.4k
0
votes
2
answers
378
views
Suspicious 2 page, no image Word Docx has 1.7 MB
Can a word document contain virus or harm you in any way? Someone sent me a word docx that has only 2 pages, no image but it's 1.7 MB big. If I use save as to save it with a different name but still ...
- 153
1
vote
1
answer
797
views
Serial key in pdf document
I'm writting a ebook and I'm gonna to sell it soon.
I'd sell it at Google Play Store, but here in Brazil they don't accept PayPal as payment (and many brazilian don't have a credit card), so I think ...
- 113
2
votes
0
answers
190
views
digitally signing a document [closed]
I've been asked to implement digital signatures for documents at work. I really need to read up more on the matter but several searches didn't make an obvious approach stand out.
Main features I ...
- 121
2
votes
0
answers
71
views
Specification Document
I have been asked to research on a certain database then write down a specification document which covers Authentication, Authorization and Encryption. Has anyone ever come across such a documentation?...
- 21
0
votes
2
answers
3k
views
Monitoring file copy on external devices
Transferred a personal folder from an external HDD to a USB using my
work PC. Just used a simple cut paste method between the two drives,
never writing anything to the internal HDD. However, come ...
user41557
2
votes
2
answers
419
views
What options are available for implementing DLP? [closed]
What options are available for implementing DLP within an organisation and what are the pros and cons of each?
- 323
0
votes
1
answer
174
views
Which BCP/DRP sections are solely related to the software vendor?
In a software project, a software vendor is responsible to deliver a piece of software. Everything else, including the infrastructure setup, database and application server installation/configuration/...
- 1,514
2
votes
1
answer
595
views
Functional Specification for Common Criteria EAL 1 evaluation
I want to write a functional specification for CC EAL1 evaluation, There is an example in CC part 3 document but it is not enough complete, Are there any template or sample of a functional ...
- 23
8
votes
1
answer
560
views
CERT FOE Fuzzing Framework documentation
So I read another post here about fuzzing local standalone applications. I have understood how to exploit basic buffer overflow vulnerabilities in standalone applications and am now looking on how to ...
- 97
15
votes
3
answers
2k
views
Would publishing a network diagram make the network less secure?
I have found some social networking sites that focus on sharing architecture (network maps and diagrams) and configuration.
Does sharing this type of information decrease the security of my network?
...
- 1,048
2
votes
1
answer
218
views
Forefront Identity Management Server Hardening
Is there a good document for hardening FIM? I've tried CIS and NIST, but I couldn't find anything. If there is no such document, what would I have to look out for in the configuration?
- 923
2
votes
5
answers
260
views
Documentation Platforms for Information Security Team
I am looking for ideas on documentation platforms focused specifically for information security and response teams. Is there anything that has worked well? What are some of the unique advantages of ...
- 1,009
59
votes
11
answers
86k
views
How to safely view a malicious PDF?
I have a PDF with important information that may contain malware. What would be the best way to view it?
user11101