Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [documents]

The tag has no usage guidance.

1
vote
1answer
124 views

Is it possible to verify that a signature was made prior to the content of the document it is found on?

In What to do after I signed a blank sheet of paper given to me by my manager?, a distressed individual (B) has signed a blank piece of paper and given it to an adversary (A). A has openly stated to ...
2
votes
1answer
83 views

Hundreds of old MS Office files increased by about 10kb

We have most of our documents backed up and syncing in MS Sharepoint. That has worked very well for us. However, I just noticed an old folder I created on the C: drive at the time of setting all this ...
1
vote
1answer
27 views

How to determine and compare risk in methods for document exchange

Lets say you are talking to a representative of a bank or government institution on the phone, and the representative requests that you send some documents, e.g. document A, B, and C. You ask if you ...
1
vote
1answer
50 views

How is it secure to open documents with embedded/linked fonts and images

There were some kernel exploits and CVEs (for example ms11-087 and CVE-2017-8682) about fonts. And there were some malware campaigns like duqu which used zerodays in fonts embedded into docx files. I ...
3
votes
1answer
60 views

How should we store and share information about our security protocols and plans?

I'm assuming that it's a good idea to document your security protocols, response plans, and attack surfaces. Of course, if you simply stick all of that information on GitHub (minus your secret of ...
1
vote
1answer
91 views

Is an RC4 encrytion enough for my personal documents?

In the last few weeks I wrote several proposals to the government, to my professor, etc. I want to make a copy of this filled proposals and save them. Instead of scanning it with my printer, making ...
6
votes
3answers
768 views

Which is a safe way to transfer a copy of a sensitive document?

A reputable and clearly identified institution asked me, for legitimate reasons, to e-mail a scan of the passport. However, I regard the passport as a sensitive document and am pretty reluctant to use ...
1
vote
4answers
432 views

How to prevent documents from being stolen via Linux live CD

I have a PC with Windows installed on it (like most people), and I can retrieve data from it using a Linux Live CD if need be. However, it dawns on me that anybody could simply steal any information/...
1
vote
1answer
431 views

Self signed signature in PDF

I am asking for a very simple "dumbed-down" answer for a newbie. Using Adobe Acrobat I can create a self-signed certificate and sign a document as anybody. I can use anyone's name and anyone's ...
0
votes
1answer
121 views

Best way to secure documents? [closed]

I'm currently tasked with securing our documents stored in our NAS. Basically, the minimum requirements that is needed are; 1) Watermarking Ability(Any file viewed/downloaded or printed will have the ...
3
votes
2answers
172 views

How to prevent manipulation of a chain of document? Specifically: medical records

This is hypothetical problem, so remarks about whether it is feasible in practice are are off topic. I have been designing a documentation system for medical records where the patient owns his/her ...
0
votes
0answers
76 views

File authenticity verification for long-term (decades)

See discussion of similar question here. In digital preservation with horizon of decades context, the file and its cryptographic message digest are preserved as it, immutable, by decadades. No one ...
1
vote
0answers
61 views

Adding a permission layer on RSA keys?

Scenario: Imagine I want to create an app where users can share encrypted documents with other users, but have certain permissions with regards to what kind of permissions the user they are sharing ...
4
votes
1answer
106 views

Does a dead person's SSN, etc need to be protected?

My parents died 10 years ago. I was the executor. The final return, etc was filed, no problems. I still have all their tax and financial records, which I'd like to get rid of. I believe I've ...
2
votes
1answer
330 views

Looking at encrypted open office documents

So I'm both an aspiring writer and programmer, and when I write I prefer to password protect the documents so that people can't just look at them in their uncompleted (and highly personal/passionate) ...
3
votes
1answer
2k views

Can opening a Word document reveal user's IP address?

I've heard that opening a document in Microsoft Word can reveal the user's IP address (something to do with verifying certificates). What does happen here? Are there any other ways (apart from the ...
2
votes
3answers
232 views

Securely transferring files back and forth between company and clients

I just was wondering what is considered a common practice in the security community for securely sending files back forth between company and client. For example, at the company I work for, we receive ...
2
votes
1answer
1k views

Digitally signing a document with your public/private keypair without certificates?

I have generated a private/public key pair using gpg. Can I use this key pair to digitally sign a PDF without a digital certificate, but to still have the signature integrated into the PDF, instead ...
5
votes
3answers
316 views

Are document signature services violating any rule by exposing PII over clear email?

A company sent me a document to sign via CudaSign, I did. As soon as I completed the transaction, I got a PDF over email with the document attached. The document includes my SSN. I assume, the ...
29
votes
5answers
10k views

Can FBI or government agencies get hold of my Google Docs files just by confiscating my laptop? [closed]

Assume the following: I am doing all my work, including the one with sensitive information on Google Docs. No documents are stored on local hard drive. I am not using the Google Drive App, just doing ...
1
vote
2answers
142 views

Is Wiki software a good idea for Disaster Recovery Plans?

I am tasked with the initial draft of an IT disaster recovery plan for my organization. My predecessor never started one so now I am the lucky fellow to tackle this project. My experience in working ...
3
votes
1answer
2k views

How to remove yellow tracking dots from a document?

Assume I have a document which I supspect to have yellow tracking dots. How can I remove them while keeping the actual information on the document? Is making a b&w copy enough? Is the copy machine ...
0
votes
2answers
270 views

how does mdm (mobile device management ) work in byod environment to control the camera?

what i want to know is how mdm (mobile device management ) works in byod environment to control the camera from clicking pictures of a printed document?is there a way other than to shut off the ...
4
votes
5answers
18k views

Should I shred documents with only name and address details?

I routinely shred documents with any personal information on them to protect myself and others against identity theft. I have no doubts that shredding any documents with ID numbers, account details ...
0
votes
2answers
300 views

Suspicious 2 page, no image Word Docx has 1.7 MB

Can a word document contain virus or harm you in any way? Someone sent me a word docx that has only 2 pages, no image but it's 1.7 MB big. If I use save as to save it with a different name but still ...
1
vote
1answer
479 views

Serial key in pdf document

I'm writting a ebook and I'm gonna to sell it soon. I'd sell it at Google Play Store, but here in Brazil they don't accept PayPal as payment (and many brazilian don't have a credit card), so I think ...
2
votes
0answers
130 views

digitally signing a document [closed]

I've been asked to implement digital signatures for documents at work. I really need to read up more on the matter but several searches didn't make an obvious approach stand out. Main features I ...
2
votes
0answers
31 views

Specification Document

I have been asked to research on a certain database then write down a specification document which covers Authentication, Authorization and Encryption. Has anyone ever come across such a documentation?...
0
votes
2answers
3k views

Monitoring file copy on external devices

Transferred a personal folder from an external HDD to a USB using my work PC. Just used a simple cut paste method between the two drives, never writing anything to the internal HDD. However, come ...
2
votes
2answers
334 views

What options are available for implementing DLP? [closed]

What options are available for implementing DLP within an organisation and what are the pros and cons of each?
0
votes
1answer
132 views

Which BCP/DRP sections are solely related to the software vendor?

In a software project, a software vendor is responsible to deliver a piece of software. Everything else, including the infrastructure setup, database and application server installation/configuration/...
2
votes
1answer
434 views

Functional Specification for Common Criteria EAL 1 evaluation

I want to write a functional specification for CC EAL1 evaluation, There is an example in CC part 3 document but it is not enough complete, Are there any template or sample of a functional ...
8
votes
1answer
498 views

CERT FOE Fuzzing Framework documentation

So I read another post here about fuzzing local standalone applications. I have understood how to exploit basic buffer overflow vulnerabilities in standalone applications and am now looking on how to ...
12
votes
3answers
1k views

Would publishing a network diagram make the network less secure?

I have found some social networking sites that focus on sharing architecture (network maps and diagrams) and configuration. Does sharing this type of information decrease the security of my network? ...
2
votes
1answer
175 views

Forefront Identity Management Server Hardening

Is there a good document for hardening FIM? I've tried CIS and NIST, but I couldn't find anything. If there is no such document, what would I have to look out for in the configuration?
2
votes
5answers
211 views

Documentation Platforms for Information Security Team

I am looking for ideas on documentation platforms focused specifically for information security and response teams. Is there anything that has worked well? What are some of the unique advantages of ...
36
votes
12answers
36k views

How to safely view a malicious PDF?

I have a PDF with important information that may contain malware. What would be the best way to view it?