user
  • Member for 10 years, 9 months
  • Last seen more than a month ago
How to forget LUKS keys during emergency?
4 votes

There are two ways to approach this, depending on just how inaccessible you want to make the data. If you simply want to require knowledge of the LUKS passphrase to regain access to the data (more or ...

View answer
How to use RSA private key for TripleDES encryption?
4 votes

How to use RSA private key for TripleDES encryption? You don't! RSA and 3DES are two completely different encryption algorithms with completely different properties. For a start, RSA uses a key pair ...

View answer
Can I replace username and password with a long random text in URL?
4 votes

This is an expansion on amccormack's answer. Allow the customer to initiate a login by entering their email address. When they have entered the email address, use that to validate that the user is ...

View answer
How to protect against adversaries snatching booted laptops to defeat full disk encryption?
4 votes

One alternative is to do something like what is described in Locking and Unlocking a Linux Desktop Session with a Yubikey. Basically, you have a specific physical token that the computer is able to ...

View answer
WHOIS Contact Details Abused
Accepted answer
4 votes

people abusing the information within my WHOIS, which if I remember is protected by international laws, or at least should be. I'm pretty sure there's nothing at all to that effect. There are terms ...

View answer
What risks are involved in exposing our home computers over the public internet?
Accepted answer
4 votes

Well, the general recommendation would probably be something along the lines of: Put a firewall in front of your web server. Only allow the traffic you need to allow, and deny (drop or reject is ...

View answer
Does safe removable media exist?
3 votes

I'll go with a bit of an unorthodox suggestion. Don't connect storage media directly to the laptop at all. Treat the laptop as completely untrustworthy, and potentially disposable. Quite simply: ...

View answer
Security concerns issuing wildcard certificates to individual employees
3 votes

I'm going to assume that your developers need locally trusted SSL certificates. As pointed out previously, it might be worth considering if they really do need those in the first place. A wildcard ...

View answer
Setting up a Wordpress blog on another server pointing to a subdomain for security purposes
3 votes

I'm trying to piece together what you are asking, but it seems to me that you want two web servers (not just virtual hosts), serving different content, both pointed to by names under the same second-...

View answer
Preventing tampering of ~/.ssh/authorized_keys
Accepted answer
3 votes

If a server is compromised, an attacker could add his own public key to authorized_keys. How is this prevented? Modification of a user's authorized_keys file by an attacker is prevented by keeping ...

View answer
How to tell if a SSL cert is 128 bit or 256 bit?
3 votes

So is it a 256bit SSL cert? No. Yes. Maybe. The real answer is: It depends on the terminology, as some CAs appear to be notoriously lousy about such details. The certificate contains the public ...

View answer
Does digital signature really ensure data integrity?
3 votes

He can make his own private key derived from public-key of sender. No, he cannot. At least unless the crypto (or implementation thereof) is horrifyingly bad in some way. Public key cryptography as ...

View answer
Is there some hidden worm attached with whatsapp messages that state forward this messgae to 20 people?
2 votes

First thing first, the very link you cite says "hoax" right in the URL. Wiktionary defines the noun hoax thus: Anything deliberately intended to deceive or trick. That should be a pretty big clue ...

View answer
Can a new signature be added to an already signed message?
Accepted answer
2 votes

Bob can create a detached signature, and distribute that along with the message. This can be done with or without leaving the original signature in place in the message that is being signed. With a ...

View answer
Why 2FA is not considered flawless when used to secure an account?
Accepted answer
2 votes

Well, I hate to break this to you, but Google Authenticator plus password isn't really two-factor authentication. Proper 2FA is two separate items out of traditionally the triad "something you have" (...

View answer
How to protect a small company?
2 votes

I don't know exactly what you get from a Zone Alarm account, or exactly which capabilities the Sophos firewalls you've been recommended have, so I'm going to keep this pretty generic. It sounds like ...

View answer
Sharing a PGP Private Key
2 votes

You tagged this question as pgp and mention PGP in the question title, so I am assuming that this is what you are asking about. PGP (PGP, OpenPGP, GnuPG) has supported encrypting a file asymmetrically ...

View answer
Ipod Classic w/ torrented files
2 votes

Should I be worried about plugging it in? (Could malware transfer onto my machine?) You probably don't need to worry, but there's no real harm to being careful either. You don't say which operating ...

View answer
Setting up secure network for home
2 votes

When I sketch out your desired network, there are really two obvious options, which depend on how isolated you want the "mini-server" to be from the laptops. There's the easy way: which has the ...

View answer
How to approach creating a Linux app that requires root privilege?
2 votes

First, I would like to address the question in the title: How to approach creating a Linux app that requires root privilege? Don't require or obtain all-out root privileges unless you absolutely, ...

View answer
Is my understanding of SHA1 correct?
2 votes

First off, yes, SHA1 (as well as every other hash algorithm) is deterministic; in other words, given the same input, it will always yield the same output. (That output may be formatted differently, ...

View answer
What should I do when I am using a public computer without secure access to my password manager?
Accepted answer
2 votes

I'm not familiar with Google's specific offerings in this regard, but I was facing a similar problem of not wanting to risk exposing the full set of passwords in my password manager when looking up a ...

View answer
Are files deleted before encrypting then formatted able to be retrieved?
2 votes

Generally speaking, most but not all of the previously unencrypted data will be recoverable if the encryption and formatting process does not involve overwriting every single byte on the underlying ...

View answer
Server full disk encryption protection from malware
2 votes

I have heard that the full disk encryption helps protect against malware threats, specifically in this case a malware which could programmatically copy the information while it was temporarily saved ...

View answer
dm-crypt over iSCSI
2 votes

The way LUKS works is that it stores a (mostly encrypted) header on the underlying storage device. This header contains, among some other metadata, the actual data encryption key, encrypted under one ...

View answer
Mapping of plaintext and ciphertext in DES
2 votes

As is often the case, the answer is it depends. In ECB mode, a single plaintext and key combination results in exactly one ciphertext output, and a single ciphertext and key combination results in ...

View answer
How to tell what encryption is being used
2 votes

You can use certain properties of the ciphertext to, with a reasonable degree of confidence, rule out certain algorithms. For example, if the ciphertext is an odd number of 8-byte (64-bit) blocks, ...

View answer
Data too large for key size while trying to sign then encrypt
1 votes

You are using openssl primitives to put together an encrypt/sign chain. Doing so is only a tiny step above implementing your own cryptography. Instead of using openssl to sign and encrypt, consider ...

View answer
Using SUID program to avoid having entries in sudoers
1 votes

In summary, you mention two possibilities: adding sudoers entries for apt-get, dpkg, etc. – yes, this sounds dangerous making your application setuid root – yes, this is a problem; even ...

View answer
Is it ok to delete SSH configuration files?
Accepted answer
1 votes

If you don't want a SSH server running on your system at all, the better approach is to remove the package that provides the SSH server software. Doing so will remove it cleanly, though it is possible ...

View answer