Collaborate Disseminate
I am learning information security and I have a question I need help with.
Which of the following should internal auditors be attentive to when
reviewing personal data consent and opt-in/opt-out management process?
A. Whether customers ar… Continue reading Personal data consent [closed]
Is it a vulnerability if someone with control over your account can mess with files that your account is allowed to access anyway? Continue reading Password-stealing “vulnerability” reported in KeePass – bug or feature?
HIBP and my password manager both claim that a password that I am using has been seen in a data leak.
Neither of them provide information about which data leak exactly my password was seen in.
The password is complex and not reused, and I … Continue reading How to find out which data breach my password was in?
Let’s suppose we have two containers running on a linux box and one has untrusted user data that the other needs to process. What is the most secure way to transfer this data? Is it better to write the data to a shared volume, or send it o… Continue reading What is the most secure way to transfer untrusted data between containers?
One of my close relatives recently passed away. They had a large digital footprint, and their data was leaked and distributed on the internet. Unfortunately, the websites who store that information keep giving glib responses to requests fo… Continue reading Would an attacker want the PII (personal information) of a deceased natural person?
Never make your users cry/By how you use an API Continue reading Public URL scanning tools – when security leads to insecurity
I am taking a course on information science and security at university and I am researching the best ways to secure production data in other non-production environments.
The assumption is that non-production environments are less secure an… Continue reading New concepts to use production data in non-prod environments in secured way
I have been working with an application that stores sensitive personal data from a number of users. I accidentally came across something that could most likely be exploited.
For obvious reasons, I will not be sharing what kind of exploit i… Continue reading Is it legal to exploit without consent for white hat purposes?
I have to run private operations in a VM which runs on the enemy’s host (don’t ask why).
I’m wondering to what extend (if possible at all) I can have a configuration such that the host cannot read inside the VM while the VM is running.
Thi… Continue reading can host read inside the VM? [duplicate]
Can we create a true random generator whose entropy source is the loss of electrical signals that a binary architecture cannot detect?
If we have a system that let’s say could do this, could we be able to encrypt data in a way that makes p… Continue reading Is there any encryption method that uses TRNGs?