Questions tagged [documents]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
4 votes
1 answer
122 views

Need help collating resources for an information/cyber security audit document for an MSP

I am currently serving out an internship with a small MSP (4 employees, 50-100 clients with between a couple and 100 employees). My main project is to work on a information/cyber security audit ...
user avatar
0 votes
1 answer
97 views

Can a structured (text) document be effectively encrypted

My situation: I want to encrypt an HTML document. My question is, if the following is known, is that going to weaken encryption? It is a text-based document It starts with <DOCTYPE HTML> or a ...
user avatar
37 votes
2 answers
12k views

Should I present forged documents in a Penetration Test/Red team engagement?

A previous question of mine lead to this discussion which mentioned the subject of Document forgery. I've seen many people (in videos) forge IDs and employee badges for such engagements so that seems ...
user avatar
1 vote
2 answers
287 views

Can a document be digitally signed multiple times, successively by different users?

The question is, if a document that is collaboratively edited, one user per time, could be digitally signed by every editor before it is passed to the next editor. And if yes, could the final receiver ...
user avatar
1 vote
2 answers
129 views

How to sign a text in a way, so it can not be altered or split in parts unacknowledged

Given, I want to create a document (text-only for the sake of this question) and give it to someone I do not trust. I am not allowed to publish it myself. It's probably not going to be published (...
user avatar
  • 3,512
1 vote
1 answer
193 views

Is it possible to verify that a signature was made prior to the content of the document it is found on?

In What to do after I signed a blank sheet of paper given to me by my manager?, a distressed individual (B) has signed a blank piece of paper and given it to an adversary (A). A has openly stated to ...
user avatar
  • 3,076
3 votes
1 answer
138 views

Hundreds of old MS Office files increased by about 10kb

We have most of our documents backed up and syncing in MS Sharepoint. That has worked very well for us. However, I just noticed an old folder I created on the C: drive at the time of setting all this ...
user avatar
  • 133
1 vote
1 answer
65 views

How to determine and compare risk in methods for document exchange

Lets say you are talking to a representative of a bank or government institution on the phone, and the representative requests that you send some documents, e.g. document A, B, and C. You ask if you ...
user avatar
  • 113
1 vote
1 answer
102 views

How is it secure to open documents with embedded/linked fonts and images

There were some kernel exploits and CVEs (for example ms11-087 and CVE-2017-8682) about fonts. And there were some malware campaigns like duqu which used zerodays in fonts embedded into docx files. I ...
user avatar
  • 882
3 votes
1 answer
95 views

How should we store and share information about our security protocols and plans?

I'm assuming that it's a good idea to document your security protocols, response plans, and attack surfaces. Of course, if you simply stick all of that information on GitHub (minus your secret of ...
user avatar
  • 1,755
1 vote
1 answer
269 views

Is an RC4 encryption enough for my personal documents?

In the last few weeks I wrote several proposals to the government, to my professor, etc. I want to make a copy of this filled proposals and save them. Instead of scanning it with my printer, making ...
user avatar
  • 111
6 votes
3 answers
2k views

Which is a safe way to transfer a copy of a sensitive document?

A reputable and clearly identified institution asked me, for legitimate reasons, to e-mail a scan of the passport. However, I regard the passport as a sensitive document and am pretty reluctant to use ...
user avatar
1 vote
4 answers
1k views

How to prevent documents from being stolen via Linux live CD

I have a PC with Windows installed on it (like most people), and I can retrieve data from it using a Linux Live CD if need be. However, it dawns on me that anybody could simply steal any information/...
user avatar
2 votes
1 answer
1k views

Self signed signature in PDF

I am asking for a very simple "dumbed-down" answer for a newbie. Using Adobe Acrobat I can create a self-signed certificate and sign a document as anybody. I can use anyone's name and anyone's ...
user avatar
  • 23
0 votes
1 answer
170 views

Best way to secure documents? [closed]

I'm currently tasked with securing our documents stored in our NAS. Basically, the minimum requirements that is needed are; 1) Watermarking Ability(Any file viewed/downloaded or printed will have the ...
user avatar
3 votes
2 answers
300 views

How to prevent manipulation of a chain of document? Specifically: medical records

This is hypothetical problem, so remarks about whether it is feasible in practice are are off topic. I have been designing a documentation system for medical records where the patient owns his/her ...
user avatar
  • 449
1 vote
0 answers
105 views

Adding a permission layer on RSA keys?

Scenario: Imagine I want to create an app where users can share encrypted documents with other users, but have certain permissions with regards to what kind of permissions the user they are sharing ...
user avatar
  • 111
4 votes
1 answer
158 views

Does a dead person's SSN, etc need to be protected?

My parents died 10 years ago. I was the executor. The final return, etc was filed, no problems. I still have all their tax and financial records, which I'd like to get rid of. I believe I've ...
user avatar
  • 279
2 votes
1 answer
682 views

Looking at encrypted open office documents

So I'm both an aspiring writer and programmer, and when I write I prefer to password protect the documents so that people can't just look at them in their uncompleted (and highly personal/passionate) ...
user avatar
2 votes
1 answer
6k views

Can opening a Word document reveal user's IP address?

I've heard that opening a document in Microsoft Word can reveal the user's IP address (something to do with verifying certificates). What does happen here? Are there any other ways (apart from the ...
user avatar
2 votes
3 answers
302 views

Securely transferring files back and forth between company and clients

I just was wondering what is considered a common practice in the security community for securely sending files back forth between company and client. For example, at the company I work for, we receive ...
user avatar
  • 223
3 votes
1 answer
2k views

Digitally signing a document with your public/private keypair without certificates?

I have generated a private/public key pair using gpg. Can I use this key pair to digitally sign a PDF without a digital certificate, but to still have the signature integrated into the PDF, instead ...
user avatar
  • 161
5 votes
3 answers
456 views

Are document signature services violating any rule by exposing PII over clear email?

A company sent me a document to sign via CudaSign, I did. As soon as I completed the transaction, I got a PDF over email with the document attached. The document includes my SSN. I assume, the ...
user avatar
  • 151
30 votes
5 answers
14k views

Can FBI or government agencies get hold of my Google Docs files just by confiscating my laptop? [closed]

Assume the following: I am doing all my work, including the one with sensitive information on Google Docs. No documents are stored on local hard drive. I am not using the Google Drive App, just doing ...
user avatar
  • 905
1 vote
2 answers
194 views

Is Wiki software a good idea for Disaster Recovery Plans?

I am tasked with the initial draft of an IT disaster recovery plan for my organization. My predecessor never started one so now I am the lucky fellow to tackle this project. My experience in working ...
user avatar
3 votes
1 answer
4k views

How to remove yellow tracking dots from a document?

Assume I have a document which I supspect to have yellow tracking dots. How can I remove them while keeping the actual information on the document? Is making a b&w copy enough? Is the copy machine ...
user avatar
  • 174
0 votes
2 answers
406 views

how does mdm (mobile device management ) work in byod environment to control the camera?

what i want to know is how mdm (mobile device management ) works in byod environment to control the camera from clicking pictures of a printed document?is there a way other than to shut off the ...
user avatar
5 votes
5 answers
32k views

Should I shred documents with only name and address details?

I routinely shred documents with any personal information on them to protect myself and others against identity theft. I have no doubts that shredding any documents with ID numbers, account details ...
user avatar
  • 17.3k
0 votes
2 answers
374 views

Suspicious 2 page, no image Word Docx has 1.7 MB

Can a word document contain virus or harm you in any way? Someone sent me a word docx that has only 2 pages, no image but it's 1.7 MB big. If I use save as to save it with a different name but still ...
user avatar
  • 153
1 vote
1 answer
780 views

Serial key in pdf document

I'm writting a ebook and I'm gonna to sell it soon. I'd sell it at Google Play Store, but here in Brazil they don't accept PayPal as payment (and many brazilian don't have a credit card), so I think ...
user avatar
  • 113
2 votes
0 answers
188 views

digitally signing a document [closed]

I've been asked to implement digital signatures for documents at work. I really need to read up more on the matter but several searches didn't make an obvious approach stand out. Main features I ...
user avatar
  • 121
2 votes
0 answers
71 views

Specification Document

I have been asked to research on a certain database then write down a specification document which covers Authentication, Authorization and Encryption. Has anyone ever come across such a documentation?...
user avatar
  • 21
0 votes
2 answers
3k views

Monitoring file copy on external devices

Transferred a personal folder from an external HDD to a USB using my work PC. Just used a simple cut paste method between the two drives, never writing anything to the internal HDD. However, come ...
user avatar
2 votes
2 answers
408 views

What options are available for implementing DLP? [closed]

What options are available for implementing DLP within an organisation and what are the pros and cons of each?
user avatar
  • 323
0 votes
1 answer
173 views

Which BCP/DRP sections are solely related to the software vendor?

In a software project, a software vendor is responsible to deliver a piece of software. Everything else, including the infrastructure setup, database and application server installation/configuration/...
user avatar
  • 1,514
2 votes
1 answer
587 views

Functional Specification for Common Criteria EAL 1 evaluation

I want to write a functional specification for CC EAL1 evaluation, There is an example in CC part 3 document but it is not enough complete, Are there any template or sample of a functional ...
user avatar
8 votes
1 answer
559 views

CERT FOE Fuzzing Framework documentation

So I read another post here about fuzzing local standalone applications. I have understood how to exploit basic buffer overflow vulnerabilities in standalone applications and am now looking on how to ...
user avatar
15 votes
3 answers
2k views

Would publishing a network diagram make the network less secure?

I have found some social networking sites that focus on sharing architecture (network maps and diagrams) and configuration. Does sharing this type of information decrease the security of my network? ...
user avatar
2 votes
1 answer
216 views

Forefront Identity Management Server Hardening

Is there a good document for hardening FIM? I've tried CIS and NIST, but I couldn't find anything. If there is no such document, what would I have to look out for in the configuration?
user avatar
2 votes
5 answers
260 views

Documentation Platforms for Information Security Team

I am looking for ideas on documentation platforms focused specifically for information security and response teams. Is there anything that has worked well? What are some of the unique advantages of ...
user avatar
  • 979
54 votes
11 answers
77k views

How to safely view a malicious PDF?

I have a PDF with important information that may contain malware. What would be the best way to view it?
user avatar