Collaborate Disseminate
Assuming I boot up a fully encrypted OS from a portable flash drive and do some tasks in this running OS; then abruptly disconnect this flash drive from my computer and a malicious actor gets their hands on it.
Is there a chance that they … Continue reading Flashdrive data confidentiality when disconnecting flashdrive from machine abruptly
We are looking for a tool to find secrets in a text message. The secrets could be AWS keys, Slack auth tokens, API tokens, etc. The text message are usually typed by the user or they might copy past some configuration files which can conta… Continue reading Tool to find secrets in a text message [closed]
An encrypted ext4 container will always leak the superblock information.
So encrypting an unencrypted metadata file system like ext4 is inherently vulnerable because it instaleaks?
Shouldn’t it then be an absolute requirement to do at le… Continue reading Always leaking ext4 superblock
An encrypted ext4 container will always leak the superblock information.
So encrypting an unencrypted metadata file system like ext4 is inherently vulnerable because it instaleaks?
Shouldn’t it then be an absolute requirement to do at le… Continue reading Always leaking ext4 superblock
A newly joined software engineer in our organization uploaded one of company’s proprietary git repository on his personal Github public account, likely without nefarious intent.
How do I ensure this won’t happen again in future? Apart from… Continue reading Employee uploaded proprietary private repository on his github public account
My webapp takes in email addresses as user names at registration, verifies ownership by sending emails with confirmation links, etc.
I’m now looking for a secure design of a user deletion feature, such that despite the account being delete… Continue reading Design for deleting users accounts, yet knowing when they register again
I just clicked a phishing link and foolishly entered my credit card details. I realized it was phishing before I hit SUBMIT. Is there a chance I exposed my data?
Continue reading Phishing: can input data be saved before I hit the button?
Some sites (for example google.com) can identify my device, not just the browser I use.
I thought browsers keep me safe (except bugs/sec. holes) and don’t allow web sites to access private information. In know that there are technique such… Continue reading How can a web site identify my device and how can I prevent it? [closed]
When classifying data sensitivity I generally run into a few standard categories such as:
Public
Internal
Confidential
Restricted
Which do generally cover the sensitivity levels but don’t make it necessarily easier to categorize the data… Continue reading How to classify data sensitivity including accessibility & numbers
Say I want to keep some files on cloud for portability but I do not trust the encryption (if there is any) provided by cloud service provider (avoid possibility of backdoor to read my files), so I am thinking to use some virtual drive encr… Continue reading Using virtual drive encryption software with cloud storage