Questions tagged [recovery]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
20
votes
3answers
209k views

Where to find Google Authenticator backup codes?

I'm slightly confused about obtaining Google Authenticator backup codes. I can find my Google Account backup codes at: https://myaccount.google.com/signinoptions/two-step-verification But have no ...
19
votes
4answers
3k views

How secure are password managers with account recovery?

The major commercial password manager companies claim to have a "zero knowledge" system. This means the master password of the user is the only way to decrypt the data and it's is not stored anywhere. ...
16
votes
6answers
48k views

Is it possible to recover a lost passphrase for a private key file?

We have a set of public and private keys and certificates on the server. The problem is that while public encryption works fine, the passphrase for the .key file got lost. So, when trying to execute ...
13
votes
2answers
3k views

is LastPass SMS Recovery a security risk?

According to the LastPass FAQ, employees of LastPass cannot see nor decrypt the stored passwords. LastPass encrypts your Vault before it goes to the server using 256-bit AES encryption. Since the ...
12
votes
9answers
373 views

How to choose a password that I have to remember for a long time but do not use a lot

I have a scenario where I have to remember a password / keyphrase, which I will not be able to recover if I forget it, for a long time (probably more than 10 years). The problem is because this ...
8
votes
1answer
1k views

Cases where DBAN has won

Are there any real life cases where software such as DBAN (to securely erase disks) has beaten government/law enforcement agencies? I found this online which lists each time encryption has beaten ...
7
votes
3answers
3k views

Recovery email for email services

The famous Mat Honan hack got me thinking about e-mail password recovery, and how any link in the chain can break all the links preceding it. In Mat's example, that link happened to be the last link, ...
7
votes
4answers
788 views

Decentralised password recovery

Are there good/established techniques for password/key recovery in situations without a centralised service? (Anything goes, but I'd prefer solutions that distribute the recovery information across ...
6
votes
1answer
4k views

Do viruses infect recovery partitions? [duplicate]

In the "Good ol' Days", Windows came on a CD, and when one got a virus, one had original, write only medium to clean up one's computer completely. Nowadays, most computers have a "recovery partition"...
5
votes
2answers
8k views

GPG/GnuPG secret key passphrase recovery and/or .gnupg/private-keys-v1.d/ file format

Bad news: I forgot a GnuPG secret key passphrase. Good news: I do know the words it is constructed of. So, I can easily use john or similar to recover (too many combinations to do it manually, ...
5
votes
2answers
2k views

Does Google account's “recovery phone” have any benefit if I never forget my password?

Google lets you add a recovery phone number to your account because: Your recovery phone is used to reach you in case we detect unusual activity in your account or you accidentally get locked out. ...
5
votes
0answers
3k views

What type of data can be recovered from the swap file / page file and thumbs file

This question follows on from a previously posted question on recovery of data from a wiped disk. I have been informed that no files have been found on the computer on the hard disk or in the deleted ...
4
votes
5answers
751 views

Incident response and recovery from a security breach with unknown attack vector

Security breaches, hacks, “cyber” attacks or server compromises happen quite frequently, unfortunately, such as Quora in December 2018, Facebook in September 2018, Equifax in September 2017, Exactis ...
3
votes
1answer
109 views

How can a server recover from its secret key stolen?

Suppose a server use digital signature to prove the files it sends to users. If someone steals the secret key in the server, what should it do?
3
votes
3answers
547 views

Password manager and account recovery

I'd like to start using a password manager, but I'm not sure how to handle account recovery. I'm not a criminal or a secret agent, so if I lose my master password (or my second authentication factor, ...
3
votes
1answer
161 views

What is the purpose of having 10 MFA Recovery Codes?

When you enable MFA for many popular services they provide you with 10 recovery codes that will allow you to temporarily disable or update your MFA settings with their service in the event that your ...
3
votes
2answers
141 views

Signing the Recovery Partition

Do any computer manufacturers sign (DSA, or just publishing a hash) their recovery partitions so that I can be sure that these bits are authentic? I'd like to buy a second-hand computer and reduce ...
3
votes
3answers
863 views

TrueCrypt Data Recovery

I deleted a 2GB directory and sub-directories/data files from a TrueCrypt container mounted as a Drive Letter. The directory and sub-directories/data files was larger than the recycle bin so it was ...
2
votes
3answers
5k views

Do moved files leave a trace on the drive they created on?

I have created a word document on my computer, or any other file like txt, image, PSD etc. Now, I then take that file and move it to an external device, would that file leave a trace on the computer? ...
2
votes
3answers
162 views

Creating a custom restore disk to prevent data mining?

I work in commercial telecoms and one part of our business is the leasing of computer equipment to call centers. If the customer for whatever reason gives us the equipment back (non-payment, out of ...
2
votes
1answer
186 views

No password root accounts of an entire laboratory!

2 days ago some of the university staff asked me about 3 computers here. All the computers are using Ubuntu and have the exact same password on the login screen for the superuser. Let's say StackPa$$...
2
votes
2answers
2k views

Can a full SSD or HDD recover deleted data?

I've always been curious. It may be a stupid question but what if you deleted a file then filled up the SSD or HDD. Could your deleted data be recovered or is it physically impossible? I know Windows ...
2
votes
2answers
434 views

How to securely destroy old cellphone, to avoid personal data recuperation?

While cleaning I've found an old cellphone. This phone does not turn on, and I'm not sure if contains personal data. I would like to throw away this phone, but I'm concerted if this data can be ...
2
votes
1answer
613 views

Secure data by encrypting and rewriting on same file

I'm working on a project to Encrypt files using AES encryption with a key generated from SHA-256 from a keyword. My idea to claim this was to first : read all bytes from a file second : encrypt ...
2
votes
4answers
8k views

Need a word-list generator from a few words and numbers [closed]

I have an old rar backup and I am trying to recover the password. I remember the words in the password, but I usually add some numbers and cap some characters (don't know which ones though). I have ...
2
votes
1answer
165 views

How to reset a second factor authentication without compromising the authentication process

I am designing a system that uses two-factor authentication. Where the user can only granted access only if the two authentication factors passed the verification. Let us assume that the first ...
2
votes
1answer
545 views

Is there a difference between “Maximum Tolerable Downtime” and “Maximum Allowed Downtime”?

I'm studying for the CCSP exam and one of the BC/DR terms that is referenced in my study material is "Maximum Allowable Downtime". The definition for it is: MAD (Maxium Allowable Downtime) How ...
2
votes
2answers
293 views

Is it possible to browse Windows 7 Previous Versions of an offline hard drive?

Short of buying identical hardware, my sister's computer died and she kept only the hard drive. She moved a file to a USB FD prior to it dying, but she can't find the FD. She knows it was on the ...
2
votes
1answer
838 views

Resetting LUKS password from CLI with the recovery key

I have a dd of a computer which has a LUKS-encrypted partition. I do not have the password but I do have a recovery key which would allow me to change the password through a GUI interface when the ...
2
votes
1answer
2k views

Lost my PGP private key when hard drive wiped. Possible to recover? [closed]

I recently made a big mistake of wiping my C drive that held my pgp key ring. Currently the key ring is the only way I can get access to an account with $300 of bitcoin. I've downloaded some recovery ...
2
votes
2answers
9k views

How to recover a lost zip file password (Extract Zip Spec '2.0')

I want to recover my backup file, but I can't find the password. The password contains 12-20 characters (As!@$123) user@PC:/media/user/MyData$ zipdetails -v backup2.zip 0000000 0000004 50 4B 03 04 ...
2
votes
0answers
402 views

Different email address in the email and the cancellation link in “Security alert for your linked Google Account” [closed]

In order to be able to help my mother, my gmail is listed as a recovery email for her Google account, mother@gmail.com (not her actual address). Today I received a "Security alert for your linked ...
2
votes
1answer
1k views

Recover 7zip password with partial password matching [duplicate]

I encrypted some files using 7z with AES-256 + file name encryption. The compression level was Ultra, method: LZMA. The password I regularly use is 16 digits. Now the file is not opening. I guess one ...
1
vote
2answers
867 views

How can I analyze password recovery tokens?

All websites that support authenticated user interactions have a password recovery feature. Usually they will email the password reset link through which you can easily recover your account by typing ...
1
vote
2answers
434 views

Is it possible to recover wannacry encrypted files through file system recovery?

As I saw wannacry encrypts files and then removes them, I thought it is possible to recover some of the original files by file system recovery using a bootable OS. Is it possible to use a bootable ...
1
vote
2answers
313 views

Distance between main site and Disaster recovery site

i couldn't find any specific requirements for distance between main site and DR at the regulations or best practices only descriptions as “safe distance” can any one provide reference to something ...
1
vote
2answers
157 views

Is Wiki software a good idea for Disaster Recovery Plans?

I am tasked with the initial draft of an IT disaster recovery plan for my organization. My predecessor never started one so now I am the lucky fellow to tackle this project. My experience in working ...
1
vote
0answers
59 views

Is it a good idea to test an Apple Recovery Key for your Apple computer?

Out of the blue my Apple computer would not accept either the password or the recovery key. I ended up having to erase and restore via a backup - great to have backups! But I was very surprised the ...
1
vote
0answers
78 views

Looking for incident response data

Good evening cybersecurity community; I am looking for a nice data set that comprises some cybersecurity incidents and describes how these incidents were solved. Doing such documentation is e.g. ...
1
vote
0answers
78 views

“Rollback process” for different penetration testing in case of something goes wrong? [closed]

In some extent, different kind of vulnerability assessment and penetration testing may impact on target system. I am looking for the solution/rollback process if something goes wrong during test. ...
0
votes
3answers
916 views

Overwriting only Free Space with rubbish data to prevent data recovery?

I am aware of tools which write zeros or other useless data to fill up your harddrive, however so far all of the tools I have come across must fill up the entire harddrrive. My understanding of the ...
0
votes
1answer
169 views

Recovering data on unallocated space from FAT16 USB drive

I'm actually trying to make my hand around forensic and information security as a whole. To do this, I'm trying to make a lot of CTFs. The last one I got to do is puzzling me, 1st because I have no ...
0
votes
1answer
131 views

Whats a good backup policy for application with 0 hours RPO?

In my company, we have business critical applications with 0-hour RTO (Recovery Time Objective) and RPO (Recovery Point Objective) requirement. Usual strategy to ensure the RPO objective is to have ...
0
votes
2answers
230 views

Find the person behind an email address using its recovery email in Gmail

Note: This is based on a true story! The Story: Alice and Bob are good friends and each one knows the personal email address of the other person and they contact with each other using it. Let's ...
0
votes
2answers
219 views

Can a 'fingerprint' file be used to track a stolen device?

A recent laptop theft, as well as concern that the data upon it might be deliberately accessed (on a drive with encryption or not), head lead me to think about how one might retroactively seek to ...
0
votes
1answer
105 views

How to decrypt password manager vault without the password manager client? [closed]

I've started looking into password managers these days and have come to trust the general concept. They provide convenience and very good general security if used right. However there is one point ...
0
votes
1answer
615 views

Recover corrupted password protected Zip

Good evening. I have a password protected zip archive (Zip 2.0 CryptoZip) with a .txt file with sensitive info inside. The problem is that I can't extract it. 7Zip:"Data error : Wrong password?" ...
0
votes
1answer
53 views

double-new attack? replace contact method twice so that the “new” and “old” one are both attacker-controlled

With some services, if an attacker changes the value of a user's contact information (email address, for example), when the user tries to recover their account, they can use either the new or the old ...
0
votes
2answers
405 views

Account Recovery: Displaying username without verification

I'm not a security guy, so bear with me. As discussed in other topics, usernames in and of themselves are valid forms of verification, and there's nothing particularly sensitive or secure about ...
0
votes
1answer
82 views

Security of damaged U2F key? [duplicate]

U2F key is praised for its security features. But I am afraid of using something so secure that when it is damaged I couldn't access my own accounts. So I searched what is recovery scenario and for ...