Skip to main content
89 votes

Are 7-Zip password-protected split archives safe against hackers when they are password-protected a couple of times?

First of all, that multi-encryption scheme is ridiculous. The algorithm used by 7-Zip is AES-256 which is considered secure. But if someone would find a flaw in it which would make it breakable, then ...
Philipp's user avatar
  • 49.4k
82 votes

Storing passwords in access-restricted Google spreadsheets?

A threat to beware of is updates to google drive/google docs. For example they add a feature to auto-cache frequently-used files and all of a sudden it's all on the phone in plaintext. In fact it ...
Chris H's user avatar
  • 4,425
53 votes

Storing passwords in access-restricted Google spreadsheets?

When thinking about security, you must be able to say: what threat you want to address what attacker you want to be protected from and then review the possible weaknesses. A restricted access file ...
Serge Ballesta's user avatar
51 votes

Is it safe to publish the hash of my passwords?

MD5 and SHA256 were both designed to be as fast as possible. Their purpose was to compute a hash for relatively big data volumes, e.g. for files. That's why they are very fast, which makes brute-...
mentallurg's user avatar
  • 12.4k
46 votes
Accepted

Is it safe to publish the hash of my passwords?

There are a couple problems with this approach. First of all, you're using two plain cryptographic hash functions to hash your data. By themselves, cryptographic hash functions are designed to be ...
bk2204's user avatar
  • 9,444
42 votes
Accepted

Are cloud storage services a good strategy to protect against ransomware attacks?

I'm not sure about Google Drive, but Dropbox provides a way to recover previous file versions, a feature that wouldn't be impacted by the ransomware, since it relies on a file copies on the Dropbox ...
Jakub's user avatar
  • 820
38 votes

Are 7-Zip password-protected split archives safe against hackers when they are password-protected a couple of times?

This is over engineering on a scale I've never seen. This is a BAD THING ™ because it increases the complexity of your solution without adding any security benefit. The encryption mechanism is either ...
A. Hersean's user avatar
  • 10.6k
28 votes

Are 7-Zip password-protected split archives safe against hackers when they are password-protected a couple of times?

First off, breathe. Encryption efforts often fails if you forget to breathe. Something about going unconscious causes us to have a hard time encrypting things! Second, it sounds like you are in ...
Cort Ammon's user avatar
  • 9,236
25 votes

Storing passwords in access-restricted Google spreadsheets?

The document is on his personal Google drive protected by Google, as for the external attacks. So the location is more secure than e.g. his PC. The access to document needs google login, which ...
CristianTM's user avatar
  • 2,580
21 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

Simple, cheap and relatively scalable solution (Although I'm aware it has nothing with online storage to do) I have two USB drives that I rotate regularly (you can add a reminder in your calendar if ...
Thibault D.'s user avatar
18 votes

Is it safe to publish the hash of my passwords?

There are all excellent answers. I will try to address immediate questions. How unsafe would be to publish the hash of my passwords? Very unsafe. Irrespective of the algo used, please never share ...
inquisitive's user avatar
15 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

At the time of writing, Dropbox would be a good way to mitigate ransomware attacks because a 30 day version history of file changes is kept on their servers (even on the free tier). This, depending ...
SilverlightFox's user avatar
15 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

What would you recommend as backup strategy to avoid Ransomware? Read Only Storage The simplest solution covers 90% of the average person's data preservation needs: store your old data in a read-only ...
user1717828's user avatar
  • 2,392
14 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

It's kind of scary that only one answer here mentions the verification of the backups so I felt the urge to add this answer: Whatever you chose as a backup strategy: Your backups are worth absolutely ...
Noir's user avatar
  • 2,573
14 votes

Keep encrypted files in sync on a cloud service, without having to upload an entire encrypted volume each time

this would mean, obviously, re-uploading the single volume every time even the smallest file in it changes; It is clear that this rules out, for different reasons, VeraCrypt or EFS. That's not true. ...
techraf's user avatar
  • 9,149
12 votes

Storing passwords in access-restricted Google spreadsheets?

This isn't as bad a practice as you would think. I'm gonna tackle this in a real world sense and leave out some of the more technical things. First, when I measure security I usually try to go "...
coteyr's user avatar
  • 1,556
10 votes
Accepted

Are services who offer to pay you a rent for your unused hard disk space a scam, and how do they work?

Can this be for real? You have already done the math: $200 would buy 4TB of storage space, and half that sum again will connect it to the Internet with an (almost) unlimited bandwidth for one month. ...
LSerni's user avatar
  • 22.8k
9 votes

Storing passwords in access-restricted Google spreadsheets?

Can you suggest an alternative as easy as typing a URL everytime he needs to recall a password? You could greatly increase the security of this by adding one slight tweak: Instead of using a Google ...
TTT's user avatar
  • 9,212
8 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

No. Consumer grade cloud backup is not an effective solution. In fact no single solution will protect your data, you must mix it up a bit. To give you a good answer I would have to know about your ...
Enis P. Aginić's user avatar
8 votes
Accepted

What happens if a Dropbox folder is encrypted by WannaCrypt / WannaCry?

If your local files get encrypted and synced they will also be encrypted in your online folders. Luckily Dropbox supports file versioning (https://www.dropbox.com/help/security/recover-older-versions) ...
Ori's user avatar
  • 2,767
7 votes

Is it safe to publish the hash of my passwords?

Back in the day when airbags were an expensive option on expensive cars, I used to ride with a colleague who had a BMW-635 with an airbag. He believed he didn't need to wear his seatbelt because the ...
Louis Thompson's user avatar
6 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

I use a stack of external USB-3 hard drives, "A", "B", "C", etc that I rotate in sequence, and run an automatic nightly backup. (my computer runs 24/7 so at night it runs tasks like full backups, deep ...
Peter N's user avatar
  • 61
6 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

Keep it simple. While cloud-sync solutions may provide protection against ransomware through file versioning, choosing individual solution requires research(1) (2) and I think it's a task not worth ...
techraf's user avatar
  • 9,149
5 votes

Is internal or external hosting more secure?

In a generic sense neither internal nor external hosting are inherently more or less secure on their own. Ultimately it's just a different set of trade-offs. In both situations the amount of security ...
Trey Blalock's user avatar
  • 14.2k
5 votes

Storing KeePass database in cloud. How safe?

I would suggest a solution that involves the following: KeePass Database file stored on local computer with Full Disk encryption (e.g. Veracrypt) KeePass Key File stored on an external USB disk Cloud ...
user172957's user avatar
5 votes
Accepted

If I backup my files to "The Cloud", will they be kept there forever?

"The cloud" is marketing-speak for "other people's servers", so I will use that term instead. When you move your data to other people's servers, you need to be aware that they have direct access to ...
Philipp's user avatar
  • 49.4k
5 votes
Accepted

Is it OK to pass credentials to the client to allow it to upload files to Amazon S3?

The preferred way to go is to generate a presigned POST request (your backend server asks for it with your own admin credentials). Then from client-side you upload using this pre-signed POST. It's ...
Qortex's user avatar
  • 341
4 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

No solution involving "backup to cloud" code that runs SOLELY* on your "work" PC is safe. *updated thanks to comments Sooner or later the ransom-ware authors will start hijacking cloud-storage ...
John McNamara's user avatar
4 votes

Are cloud storage services a good strategy to protect against ransomware attacks?

Crashplan, a paid cloud storage provider, has a dedicated article on how its online cloud storage solution can help you recover from some ransomware attacks. Their services could be a suited ...
mucaho's user avatar
  • 378
4 votes

Are services who offer to pay you a rent for your unused hard disk space a scam, and how do they work?

storj.io are a company delivering a peer - to -peer cloud solution like you're speaking of. They look pretty credible and have been around since April 2014 - they don't appear to have rates for their ...
WhataTiberius's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible