Questions tagged [international]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
25 views

What strategies can I use to negotiate security terms in vendor contracts for vendors in high geopolitical risk countries?

Please assume the following in responding: Data being passed to vendor is subject to data protection laws in the USA such as GLBA Data itself resides within the United States Switching vendors will ...
user avatar
  • 1,736
0 votes
1 answer
99 views

How plausible are cyber attack attributions between states? [duplicate]

When an attack on IT systems of a state is discovered, often another state is publicly blamed for it within a few days. I wonder whether these attributions are plausible from a technical point of view....
user avatar
  • 101
1 vote
0 answers
75 views

Making custom wordlists for languages besides English

I'm testing a site whose audience doesn't usually have English as their main language. When it comes to non-English, I consider there to be 3 groups The target language's alphabet is a subset of the ...
user avatar
2 votes
3 answers
15k views

Will my company’s VPN work internationally, and will it alert them or display as a security threat?

I work remotely and have to go to Europe for a few weeks in order to deal with a family emergency. I don’t want to explain the situation to my company and I know it won’t affect my work productivity. ...
user avatar
3 votes
3 answers
513 views

Making transactions only, or almost only, by QR codes

I have a OnePlus 6 smartphone and I recently opened a bank account in a bank which seems to me very innovative in the context going payment card (debit/credit) free (using only application and/or cash)...
user avatar
2 votes
1 answer
289 views

Protecting myself in Ukraine

I am a United States citizen planning a week-long trip to Ukraine. A friend advised me that Internet security is less-than-great there. What steps should I take to protect myself if I use public or ...
user avatar
0 votes
2 answers
254 views

Concern about potential of VPN access being restricted in Italy

Background: I work a remote employee in the US for a US based company. I log into our company's intranet via VPN to work every day. I also connect to multiple client networks via VPN (as well as using ...
user avatar
  • 111
3 votes
2 answers
312 views

Is Apple’s latest encryption considered to be munitions grade?

According to U.S. Export and Import laws, any device that has a minimum level of encryption is considered as falling under munitions type laws. Does Apple’s latest OS contain that level? And if it ...
user avatar
1 vote
0 answers
81 views

Let users sign in with eIDs - do I need government authorisation? (scope: all nation-states) [closed]

I've decided to launch a crypto-basic income system. Crypto UBIs are pretty popular now. For me, it seems like an open nation-state ID should exist by now (2015). However, Mike Hearn, Bitcoin core-...
user avatar
  • 19
7 votes
2 answers
299 views

What are the compliance requirements or standards for a non-US firm hosting personal data in the US?

I work for a head hunting company with offices in Canada and Asia. We migrated our custom built CRM system from our own servers hosted in Japan to an Amazon hosting service meaning that all our data ...
user avatar
6 votes
2 answers
453 views

Why is HTTPS seemingly so infrequently used internationally (Asia)?

I've recently had the privilege of doing some traveling internationally, and I noticed that (particularly in Asia) HTTPS is very infrequently used, even on government and educational websites where ...
user avatar
  • 161
2 votes
2 answers
169 views

Corporate Domain-Joined PC Used in China [closed]

What would be the disadvantages of allowing a user to travel to China (business trip) using a domain-joined corporate Windows PC as opposed to a non-domain-joined PC?
user avatar
44 votes
5 answers
11k views

Is blocking a country's access to a website a good measure to avoid hackers from that country?

I am located in Venezuela right now, and for the whole weekend have been unable to access grubhub.com and seamless.com. Finally, I tried using the Tor Browser and got access. The same thing happened ...
user avatar
3 votes
1 answer
689 views

Will PGP signed email be blocked in China?

I generally sign all of my outgoing email with PGP. I don't usually encrypt it because most people I send mail to don't have a public key. Anyway, if I send an unencrypted message with a PGP signature ...
user avatar
  • 1,309
-1 votes
1 answer
262 views

Wiretapping requests to VPN providers [closed]

What are valid issuers of wiretapping requests aimed at VPN providers except the court of the provider's country? Is it possible that country in which jurisdiction VPN provider does not act will ...
user avatar
10 votes
2 answers
2k views

Why do so many cracking attempts originate from China?

I recently put a Linux server online and it didn't take long until I had the first attempts to brute-force the SSH login. It's not that I am worried about that - I trust the security of my server. But ...
user avatar
  • 48.8k
0 votes
1 answer
129 views

What are the security features of the proposed "secure email" from Brazil? [closed]

Brazil has announced that they will create a secure email alternative in light of NSA spy programs. The company Correios will be implementing the contract over the next year or so. What are the ...
user avatar
7 votes
3 answers
797 views

What can a web application developer do to protect user information from powerful adversaries like the NSA or China

Some well funded intelligence services with potentially untrustworthy employees intercept and store encrypted data for years, in hopes of cracking it with future technology. What can I do to make this ...
user avatar
  • 195
-3 votes
1 answer
203 views

Why should I use the VPN? [closed]

Does a Virtual Private Network (VPN) provide an encrypted connection from outside networks or from ISPs to the internal network?
user avatar
-1 votes
2 answers
927 views

Precautions to be made while using Internet chat to prevent being hacked? [closed]

I have read many websites which state that, "We can hack into computers while chatting on the internet." What are the best precautions to be taken while chatting to prevent unauthorized access? I ...
user avatar
17 votes
4 answers
15k views

Best way to report a foreigner attacker's ip to authorities?

I have been under attack last week and I was able to trace down the attacker and get his IP address. The attacker was located in Germany but I live out of Europe? From your experience what is the ...
user avatar
  • 521
12 votes
5 answers
9k views

password complexity policy for non "English" passwords

In an internationalized application, what is the best practice for a policy on complexity of passwords? I am not having luck searching for the answer. Wikipedia lists these items for password policy:...
user avatar
3 votes
4 answers
360 views

What actions should be taken by site according to Data Protection legislations?

Many countries have data protection legislation: Data Protection Directive in EU Data Protection Act 1998 in UK privacy laws in USA Web application may have registration form where fields for name, ...
user avatar
6 votes
5 answers
9k views

Encryption laws in India -- is it allowed to use ssh and VPN?

I have a very similar question to the one asked here (regarding Iran). However, I would like to use ssh and vpn while being in India. I found already this survey of cryptographic laws but I don't ...
user avatar
  • 63
1 vote
1 answer
959 views

What regulations *require* multi-factor authentication?

What industries require multi-factor authentication? Please include the following information: Country Industry Regulation name Additional information as you see relevant. Some additional ...
user avatar
10 votes
3 answers
2k views

Encryption-Laws in Iran

According to this article Iran has criminalized the usage of encryption and VPNs. According to this blog post it is still possible to use SSH tunnels in Iran. For me SSH is encryption and thus ...
user avatar
  • 248
3 votes
1 answer
610 views

What lawful interception standards are used outside Europe?

In Europe European Telecommunications Standards Institute (ETSI) define the standard requirements to handle a lawful interception. It's define all from the terminology and definition to the ...
user avatar
  • 1,066
11 votes
3 answers
3k views

White list or black list sanitation for international input?

There seem to be so many ways to create nefarious input that white-listing what input is good usually feels like the safer, simpler option. For instance, one can fairly easily craft a white list ...
user avatar
  • 213
8 votes
3 answers
10k views

What is the equivalent European organization of NIST, especially in the Security Computer Division?

What is the European counterpart organization to USA's NIST? I want to check the European best practices and guidelines on computer security. Does anyone know if this organization exists, and if ...
user avatar
  • 1,066
6 votes
2 answers
327 views

What risk do International Domain Names (IDN) pose?

I understand that IDN's are basically a GUI display change for domains that have a prefix of "xn--". What should I advise companies do in regards to these domains? For example, should companies ...
user avatar
3 votes
2 answers
247 views

What International laws should one in the InfoSec industry we be aware of?

What InfoSec regulations should one be aware of when dealing with 'live' cross-border communications, or the offline transport of information?
user avatar