Collaborate Disseminate
Well this question may not be about computers, but it most definitely is about information security, so I’ll give it a try…
I’ve been repeatedly told in my life that I should always carefully check each piece of paper for … Continue reading If and why should any personal information be destroyed before putting scrap paper into the recycle container?
Many games and websites have an explicit policy that the owner of the account is fully responsible for any and all activity from that account and therefore suspensions will not be shortened or removed even if the activity the… Continue reading How difficult is it to determine whether an account got hacked or why do games allow account recovery while refusing to lift bans for hackers’ deeds? [on hold]
College. In a break between classes I left the classroom to go to WC. I forgot to lock my laptop. When I came back I saw my desktop wallpaper changed to a .jpg with an personal message from one of my peers.
Am I now supposed… Continue reading A colleague has accessed my PC; what now?
AFAIK, the general advice is to encrypt the whole HDD or at least the whole /home partition (and its Windows equivalent), because nowadays computers tend to store lots of personal, sensitive information and it would be a trag… Continue reading Should it remain as a general advice to encrypt the whole HDD?
AFAIK, the general advice is to encrypt the whole HDD or at least the whole /home partition (and its Windows equivalent), because nowadays computers tend to store lots of personal, sensitive information and it would be a trag… Continue reading Should it remain as a general advice to encrypt the whole HDD?
There has been a post on Niebezpiecznik.pl, a popular InfoSec blog, describing an interesting situation.
A company mistakenly granted access to their BitBucket repo to a a random programmer. This programmer subsequently aler… Continue reading Is it urgent to revoke the access to a private repo once a person has been mistakenly granted it and become aware of this?
From man 3 memcmp:
Do not use memcmp() to compare security critical data, such as
cryptographic secrets, because the required CPU time depends on the
number of equal bytes.
Instead, a function that perform… Continue reading Why should memcmp not be used to compare security critical data?