Questions tagged [synchronization]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3
votes
0answers
41 views

Is it a good idea to store TOTP tokens in a (synchronised) password safe? [duplicate]

Bitwarden (as an example) allows you to store your TOTP tokens in it. That is: you can use the mobile app to scan the QR code that (e.g.) Amazon AWS gives you, and then it'll generate TOTP codes. So ...
1
vote
1answer
73 views

Is there a way to check if Google Drive is scanning folders other than the ones I have synced?

I have a piece of software that monitors C:\Folder1. It keeps it in sync with C:\Folder2. It encrypts everything in C:\Folder2. I want to sync Folder2 to my Google Drive. But this additional ...
1
vote
1answer
94 views

Can my open Firefox Sync session be used to circumvent a Master Password?

In short I'm wondering what's stopping someone with access to my computer account to exploit an open Firefox Sync session to view my synced passwords, even if a Master Password has been set. On this ...
1
vote
0answers
51 views

Securely Synchronize Nodes [closed]

There's an application that is capable of spinning up nodes for HA. All nodes need to be synchronized with a configuration file that contains the credentials of all the admins. The current solution ...
0
votes
1answer
94 views

What client side encryption algorithm/libraries should I use to make syncing easier?

I want to build a webapp and a sister mobile app (using react native) that uses client side encryption. The encryption would be for text entries written on a daily basis that the user could create and ...
2
votes
1answer
106 views

Sharing the UUIDs of my Linux partitions

I currently started using a Debian 9 server for my day-to-day tests. Because most of the time the system ends destroyed in my hands, I was thinking about doing a backup of my fstab and smb.conf on a ...
3
votes
0answers
65 views

Does Apple have access to the cryptographic keys to decrypt Safari Sync Data?

I was reading over iOS's security guide, and it is unclear to me whether Apple can accessed synced Safari data. For example, if Apple received a FISA Order for all information on iCloud on all ...
2
votes
1answer
541 views

Question about ipsec prevent SYN flooding attack

how IPSec prevents SYN flooding attacks Like if A is sending packets to B using IPsec. Suppose B’s TCP ack gets lost, and A’s TCP retransmits the packet since it assumes the packet was lost. Will B’s ...
1
vote
1answer
62 views

How is resynchronization performed for security keys / MFA devices?

When a MFA (time based) device security key drifts out of synchronization there is a procedure to resynchronize it. But there is no input to the device itself. Smartphone apps don't have this ...
0
votes
2answers
624 views

How effective are timestamps as a countermeasure for Replay attacks?

I was reading the Wiki entry for Replay attacks. It mentions that timestamps can be used as a countermeasure against such attacks: Timestamping is another way of preventing a replay attack. ...
4
votes
1answer
247 views

How do I use google drive local folder with auto sync while protecting myself from ransomware?

Background So I have my Google Drive 1TB account. Obviously, I'm using Drive to have a backup for all my precious files. I used to have a local Drive folder with auto sync on my PC. It was very ...
1
vote
1answer
443 views

How to synchronize a nonce between two participants?

I am currently working with a symmetric algorithm which requires a nonce for encryption, and logically for decryption as well. However, I am a bit confused about how I would go and synchronize the ...
1
vote
0answers
95 views

Encrypt and backup files directly to cloud storage? (No locally saved copies) [closed]

So far I know of the following services: Tresorit (paid cloud storage service) SpiderOak (paid cloud storage service) Arq (paid software, works with a number of cloud services) ...are there any ...
16
votes
8answers
13k views

Keep encrypted files in sync on a cloud service, without having to upload an entire encrypted volume each time

Situation: User has several folders worth of GBs which they want to keep in sync on a cloud service (for example Mega or Dropbox) in an encrypted form; User does not want to sync a single encrypted ...
2
votes
1answer
57 views

Is it possible to guarantee a transaction between two peers against interruption exploits?

Let's take an egregious example of this: Alice and Bob want to clone a Pokemon. They set up a trade between their console devices. Alice's device sends a copy of the data to Bob's device, then Bob's ...
7
votes
3answers
98 views

Should I delete locally synced data if the user can't log in?

I'm building a Mac app that syncs the user's documents down from a third-party cloud service. When you set it up, it will sync all your documents down to the local hard disc, at which point you can ...
1
vote
1answer
693 views

How can you spoof a TCP connection to a device that uses the same initial sequence number for each run of a TCP handshake?

So supposing the TCP implementation on a device always uses the same initial sequence number how could you as an off path attacker exploit this to spoof a connection to this device? So in order to do ...
2
votes
1answer
323 views

SYN Flood from fixed spoof IP but receive only one packet

I'm generating a network flood with a lot of packets coming from one fixed IP+port pair (in this example, 1.2.3.4:2003). Why do I only see one SYN_RECV'd packet in netstat on the victim machine?
76
votes
13answers
28k views

Should I allow browsers to remember my passwords and synchronize them?

I wonder, how wise is it to allow Chrome and Firefox to a) remember the passwords b) synchronize them? My gut tells me that if it's not man in the middle who can intercept them, but Google and Mozilla ...
12
votes
3answers
3k views

1Password for team how secure it is?

I would like to ask you opinion about how secure is the 1Passowrd for Teams. For someone who doesn't know how 1Password - Personal use - works here a summary: You create a master password (hard to ...
3
votes
1answer
671 views

When using Dropbox to sync Keepass db, is it ok to open it in synced folder?

I'm going to be storing a Keepass 2 database file (.kdbx) in a local folder that's synced by Dropbox. Is it safe to use Keepass to open the database directly considering everything in the folder is ...
3
votes
3answers
3k views

Can Chrome sync be infected?

Can Chrome sync be infected by malware? I cannot imagine how, but a particular unproven example that comes in mind is to change the "preferences", so that a malicious proxy server is added. Another ...