Questions tagged [documents]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
37
votes
2answers
12k views

Should I present forged documents in a Penetration Test/Red team engagement?

A previous question of mine lead to this discussion which mentioned the subject of Document forgery. I've seen many people (in videos) forge IDs and employee badges for such engagements so that seems ...
1
vote
2answers
118 views

Can a document be digitally signed multiple times, successively by different users?

The question is, if a document that is collaboratively edited, one user per time, could be digitally signed by every editor before it is passed to the next editor. And if yes, could the final receiver ...
1
vote
2answers
80 views

How to sign a text in a way, so it can not be altered or split in parts unacknowledged

Given, I want to create a document (text-only for the sake of this question) and give it to someone I do not trust. I am not allowed to publish it myself. It's probably not going to be published (...
1
vote
1answer
138 views

Is it possible to verify that a signature was made prior to the content of the document it is found on?

In What to do after I signed a blank sheet of paper given to me by my manager?, a distressed individual (B) has signed a blank piece of paper and given it to an adversary (A). A has openly stated to ...
2
votes
1answer
92 views

Hundreds of old MS Office files increased by about 10kb

We have most of our documents backed up and syncing in MS Sharepoint. That has worked very well for us. However, I just noticed an old folder I created on the C: drive at the time of setting all this ...
1
vote
1answer
28 views

How to determine and compare risk in methods for document exchange

Lets say you are talking to a representative of a bank or government institution on the phone, and the representative requests that you send some documents, e.g. document A, B, and C. You ask if you ...
1
vote
1answer
57 views

How is it secure to open documents with embedded/linked fonts and images

There were some kernel exploits and CVEs (for example ms11-087 and CVE-2017-8682) about fonts. And there were some malware campaigns like duqu which used zerodays in fonts embedded into docx files. I ...
3
votes
1answer
60 views

How should we store and share information about our security protocols and plans?

I'm assuming that it's a good idea to document your security protocols, response plans, and attack surfaces. Of course, if you simply stick all of that information on GitHub (minus your secret of ...
1
vote
1answer
152 views

Is an RC4 encryption enough for my personal documents?

In the last few weeks I wrote several proposals to the government, to my professor, etc. I want to make a copy of this filled proposals and save them. Instead of scanning it with my printer, making ...
6
votes
3answers
944 views

Which is a safe way to transfer a copy of a sensitive document?

A reputable and clearly identified institution asked me, for legitimate reasons, to e-mail a scan of the passport. However, I regard the passport as a sensitive document and am pretty reluctant to use ...
1
vote
4answers
647 views

How to prevent documents from being stolen via Linux live CD

I have a PC with Windows installed on it (like most people), and I can retrieve data from it using a Linux Live CD if need be. However, it dawns on me that anybody could simply steal any information/...
1
vote
1answer
744 views

Self signed signature in PDF

I am asking for a very simple "dumbed-down" answer for a newbie. Using Adobe Acrobat I can create a self-signed certificate and sign a document as anybody. I can use anyone's name and anyone's ...
0
votes
1answer
125 views

Best way to secure documents? [closed]

I'm currently tasked with securing our documents stored in our NAS. Basically, the minimum requirements that is needed are; 1) Watermarking Ability(Any file viewed/downloaded or printed will have the ...
3
votes
2answers
240 views

How to prevent manipulation of a chain of document? Specifically: medical records

This is hypothetical problem, so remarks about whether it is feasible in practice are are off topic. I have been designing a documentation system for medical records where the patient owns his/her ...
1
vote
0answers
61 views

Adding a permission layer on RSA keys?

Scenario: Imagine I want to create an app where users can share encrypted documents with other users, but have certain permissions with regards to what kind of permissions the user they are sharing ...
4
votes
1answer
107 views

Does a dead person's SSN, etc need to be protected?

My parents died 10 years ago. I was the executor. The final return, etc was filed, no problems. I still have all their tax and financial records, which I'd like to get rid of. I believe I've ...
2
votes
1answer
436 views

Looking at encrypted open office documents

So I'm both an aspiring writer and programmer, and when I write I prefer to password protect the documents so that people can't just look at them in their uncompleted (and highly personal/passionate) ...
2
votes
1answer
3k views

Can opening a Word document reveal user's IP address?

I've heard that opening a document in Microsoft Word can reveal the user's IP address (something to do with verifying certificates). What does happen here? Are there any other ways (apart from the ...
2
votes
3answers
238 views

Securely transferring files back and forth between company and clients

I just was wondering what is considered a common practice in the security community for securely sending files back forth between company and client. For example, at the company I work for, we receive ...
3
votes
1answer
1k views

Digitally signing a document with your public/private keypair without certificates?

I have generated a private/public key pair using gpg. Can I use this key pair to digitally sign a PDF without a digital certificate, but to still have the signature integrated into the PDF, instead ...
5
votes
3answers
372 views

Are document signature services violating any rule by exposing PII over clear email?

A company sent me a document to sign via CudaSign, I did. As soon as I completed the transaction, I got a PDF over email with the document attached. The document includes my SSN. I assume, the ...
29
votes
5answers
11k views

Can FBI or government agencies get hold of my Google Docs files just by confiscating my laptop? [closed]

Assume the following: I am doing all my work, including the one with sensitive information on Google Docs. No documents are stored on local hard drive. I am not using the Google Drive App, just doing ...
1
vote
2answers
151 views

Is Wiki software a good idea for Disaster Recovery Plans?

I am tasked with the initial draft of an IT disaster recovery plan for my organization. My predecessor never started one so now I am the lucky fellow to tackle this project. My experience in working ...
3
votes
1answer
2k views

How to remove yellow tracking dots from a document?

Assume I have a document which I supspect to have yellow tracking dots. How can I remove them while keeping the actual information on the document? Is making a b&w copy enough? Is the copy machine ...
0
votes
2answers
286 views

how does mdm (mobile device management ) work in byod environment to control the camera?

what i want to know is how mdm (mobile device management ) works in byod environment to control the camera from clicking pictures of a printed document?is there a way other than to shut off the ...
5
votes
5answers
23k views

Should I shred documents with only name and address details?

I routinely shred documents with any personal information on them to protect myself and others against identity theft. I have no doubts that shredding any documents with ID numbers, account details ...
0
votes
2answers
316 views

Suspicious 2 page, no image Word Docx has 1.7 MB

Can a word document contain virus or harm you in any way? Someone sent me a word docx that has only 2 pages, no image but it's 1.7 MB big. If I use save as to save it with a different name but still ...
1
vote
1answer
564 views

Serial key in pdf document

I'm writting a ebook and I'm gonna to sell it soon. I'd sell it at Google Play Store, but here in Brazil they don't accept PayPal as payment (and many brazilian don't have a credit card), so I think ...
2
votes
0answers
133 views

digitally signing a document [closed]

I've been asked to implement digital signatures for documents at work. I really need to read up more on the matter but several searches didn't make an obvious approach stand out. Main features I ...
2
votes
0answers
33 views

Specification Document

I have been asked to research on a certain database then write down a specification document which covers Authentication, Authorization and Encryption. Has anyone ever come across such a documentation?...
0
votes
2answers
3k views

Monitoring file copy on external devices

Transferred a personal folder from an external HDD to a USB using my work PC. Just used a simple cut paste method between the two drives, never writing anything to the internal HDD. However, come ...
2
votes
2answers
341 views

What options are available for implementing DLP? [closed]

What options are available for implementing DLP within an organisation and what are the pros and cons of each?
0
votes
1answer
136 views

Which BCP/DRP sections are solely related to the software vendor?

In a software project, a software vendor is responsible to deliver a piece of software. Everything else, including the infrastructure setup, database and application server installation/configuration/...
2
votes
1answer
476 views

Functional Specification for Common Criteria EAL 1 evaluation

I want to write a functional specification for CC EAL1 evaluation, There is an example in CC part 3 document but it is not enough complete, Are there any template or sample of a functional ...
8
votes
1answer
512 views

CERT FOE Fuzzing Framework documentation

So I read another post here about fuzzing local standalone applications. I have understood how to exploit basic buffer overflow vulnerabilities in standalone applications and am now looking on how to ...
13
votes
3answers
1k views

Would publishing a network diagram make the network less secure?

I have found some social networking sites that focus on sharing architecture (network maps and diagrams) and configuration. Does sharing this type of information decrease the security of my network? ...
2
votes
1answer
177 views

Forefront Identity Management Server Hardening

Is there a good document for hardening FIM? I've tried CIS and NIST, but I couldn't find anything. If there is no such document, what would I have to look out for in the configuration?
2
votes
5answers
221 views

Documentation Platforms for Information Security Team

I am looking for ideas on documentation platforms focused specifically for information security and response teams. Is there anything that has worked well? What are some of the unique advantages of ...
39
votes
11answers
47k views

How to safely view a malicious PDF?

I have a PDF with important information that may contain malware. What would be the best way to view it?