0
votes
0answers
47 views

Encrypt MySQL column with ssh-key forwarded by ssh-agent

I would like to keep sensitive data such as user's e-mail address in MySQL database in encrypted form. Is it possible to encrypt/decrypt mail column in MySQL using ssh-key forwarded by ssh-agent on ...
1
vote
1answer
141 views

Traffic in a AWS virtual private cloud

On Amazon AWS, should I encrypt sensitive traffic between instances in a virtual private cloud? More specifically, is the traffic between the instances in such a VPC private as in a virtual network, ...
1
vote
1answer
536 views

Bitlocker drive encryption on AWS Windows instance

I'm trying to figure out how best to protect the data of a single Windows Server 2012 instance on AWS and according to "AWS_Securing_Data_at_Rest_with_Encryption.pdf" it says: "Encrypting Amazon ...
1
vote
2answers
179 views

Encrypt Windows Backup

Is there a way to encrypt my backups using Windows Backup in Server 2008 R2 without using a paid for 3rd party application? I've searched high and low but have been unable to find anything. Thanks ...
1
vote
1answer
36 views

Protecting SQL from Profiling

We have some sensitive IPR in some Stored Procedures. We encrypt the stored procedures. However, at the point they are created, they are plain text. Is there anyway we can prevent SQL Server Profiler ...
4
votes
3answers
193 views

How secure is traffic between domain members?

I was just thinking about security in AD domain environment. I have a question: how secure is communication between domains by default (without implementing IPSec etc.) For example if I download a ...
0
votes
2answers
54 views

Mac Encryption and Reporting

We have a requirement at my company to support Macs. The machines need to be encrypted and have some sort of way to check in with a management system to verify the encryption status. This can be ...
-3
votes
2answers
99 views

Permissions and access security for a shared folder on a server

I need to set permissions to a folder for two people. I am not an administrator on the server but I have access to grant and remove permissions to folders. Not even the Server Admin should have ...
0
votes
1answer
47 views

Login to openvpn web GUI after change IP

My provider just changed my IP address. How can I login to my web GUI with my new IP address? Thanks in advance.
2
votes
2answers
260 views

How does Arista EOS and Cisco IOS encrypt tacacs+ encyption keys?

We're using tacacs for AAA on our network devices, and I'm interested/curious in how our devices are encrypting the passwords device side. Following the Arista EOS manual, page 139, I'm running: ...
0
votes
1answer
105 views

dmcrypt container on nfs

I'm setting up an encrypted file storage on a remote server and I want to be able to use it transparently on my system. I want to be able to de-/encrypt them locally so that the server hosting the ...
2
votes
2answers
2k views

How secure/private is full disk encryption on a VPS? [duplicate]

Security principles say that if someone else has physical access to a machine, then there is no security/privacy. I'm wondering about some examples of this in the case where I want to have a hosted ...
1
vote
1answer
157 views

Truecrypt Boot Volume - Keyfiles?

I am actively using keyfiles for non-boot partitions and files (containers?), but I am wanting to bring this into the full system with a boot partition containing my OS (Windows or Linux). However, I ...
1
vote
2answers
254 views

Secure a VMWare Image without Manual Password Entry

I stand before the following task: A VMWare "template" (based on SLES11) with custom software, that is to be distributed to some clients. They will receive a client specific copy of the template and ...
0
votes
1answer
159 views

Can encfs be compromised if attacker knows a file name on the encrypted file system?

Good morning, I was wondering, if encfs also encrypts the file names (presumably using the same key as that used to encrypt their contents) such that each encrypted filename or directory corresponds ...
5
votes
2answers
942 views

Is it possible to have a 100% secure virtual private server?

I am curious if it is possible to have a VPS that has data on it that is not readable by the hosting provider, but is still usable on the VPS. Obviously there are some things that you could do to ...
13
votes
5answers
848 views

Encrypted offsite backups - where to store the encryption key?

In addition to regular onsite backups (kept in a fire resistant safe), we also send tapes offsite once a month, encrypted with AES. So if our site is one day vaporised by an alien heat ray, we should ...
12
votes
3answers
4k views

How to disable swap files in ESXi?

We are running a few Solaris / Linux VMs on ESXi that contain very sensitive encrypted data that eventually get decrypted as required in memory. Everything is fine, except for the ESXi swap files ...
4
votes
1answer
260 views

Active Directory reversible encryption for single sign-on?

Problem: Creating and maintaining hundreds of student accounts The school where I work runs Active Directory on Server 2008. Every year, our students have to sign up for accounts with a third-party ...
-3
votes
1answer
59 views

How to view a GPG encrypted file securely? [closed]

When I decrypt / view a gpg file it is: decrypted in the terminal / console and thus gets into history the decryption goes into video memory and into normal memory and into the swap (if not ...
-3
votes
1answer
72 views

Is there a way to prevent users from transfer svn checkout files to another computer or data storage?

I have a SVN server under CentOS 6.0 and I would like to know if is there a way to prevent users from transfer svn checkout files to another computer or data storage? Or just similar a encryption ...
2
votes
2answers
65 views

Application-transparent encryption among cloud-deployed servers

I'm a software engineer and not necessarily an ops guy aside from having done a developer's share of dealing with deployment issues. The individual components of the web app I'm working on will be ...
1
vote
1answer
54 views

How can I remotely verify that a file is encrypted?

Is there any way to remotely verify that a file is encrypted? I have a very complex problem, but here's a simplified scenario that illustrates the point: I have a server that generates very large ...
1
vote
1answer
84 views

How to securely control access to a backend key server?

I need to securely encrypt data in my database so that if the database is dumped, hackers are unable to decrypt the data. I'm planning on creating a simple key server on a different machine, and ...
1
vote
2answers
550 views

Store password AES encrypted in MySQL after creating a bcrypt hash

I am building an application and storing user passwords in a table in MySQL. I am already using bcrypt but wondering, does it make any senses to AES_ENCRYT() the hashed password before storing into ...
3
votes
1answer
167 views

running arbitrary, encrypted shell commands via http(s)?

I'd like to be able to encode maintenance scripts to run on-demand remotely. edit: Good use-case: webhooks. e.g. trigger CI + staging deployment whenever someone pushes code to github. If I was to ...
3
votes
2answers
165 views

Encrypt content of disk without entering password at boot time

I am running Linux virtual machines on a cloud provider. So effectively, the disk is a VHD file. The machine will have some sensitive information on the disk, such as certificates, passwords... I ...
1
vote
1answer
840 views

What are the options for storing encrypted data on FreeNAS?

I'm looking at implementing a mirrored pair of FreeNAS servers as file repositories. The only question still to be answered is the physical security. I typically encrypt the underlying drives on all ...
5
votes
2answers
2k views

How to detect Dell TPM from inside Windows?

I need to know whether my server has TPM installed. It is located 10000 miles away from me so going there to look at the BIOS is not an option. It is also not anyhow described on the Dell website nor ...
1
vote
5answers
1k views

Encryption between a LAN switch and an end device

What standards/protocols/products exist that support encryption of all data sent between a device (e.g. a workstation) and a LAN switch? Something like WPA for WLAN.
2
votes
1answer
1k views

How to prevent users from copying or printing files?

The head of my company is concerned about data leak. In order to strengthen the protection of sensitive data I have to limit ability to copy and print certain files from the employess notebooks. I ...
0
votes
2answers
848 views

Encrypting an ODBC connection

Situation: We have a SQL Server 2008 R2 database sitting in a data centre We would like to allow analysts to connect to the database and query the data using desktop based tools (e.g. Tableau) via ...
1
vote
1answer
90 views

Does MS SQL 2005 encryption protect data in the case of physical server access?

I am looking into MS SQL 2005 encryption (not 2008, so TDE is out), and I believe I understand the concept of how a column is encrypted. The OS uses the service credentials to encrypt the service ...
1
vote
1answer
104 views

Client certificate based encryption

I have a question about security of a file on a webserver. I have a file on my webserver which is used by my webapplication. It's a bitcoin wallet. Essentially it's a file with a private key in it ...
2
votes
2answers
88 views

ssl communication handshake question

During SSL communication, the server sends its certificate to the client for authentication. Optionally, the client could send its certificate too, for client authentication. My question is, does the ...
0
votes
1answer
87 views

Encrypted file server

What I want is about this: Files are encrypted on the server, apache can decrypt it with certificates the client has to have installed and then send it encrypted to the client via SSL. So the files ...
5
votes
3answers
905 views

At rest encryption with a SAN?

I would like to make sure at-rest encryption is done in one place and correctly. If there's shared storage, that seems like the right place rather than DAS. Mainly I'd like to cover the case of ...
0
votes
2answers
204 views

TrueCrypt to protect Windows server and web application

As an additional layer of security on a windows server (stored on-site) I am considering to use TrueCrypt. However my concern is if my webapp will still work as expected? I dont want anyone to ...
0
votes
2answers
1k views

Setting up PGP FTP

I have a situation where I need to setup a FTP server with PGP encryption. Currently I use FileZilla w/ SSL, but in this case we are required to use PGP. Any recommended products/procedures from ...
4
votes
1answer
146 views

Should I encrypt an SSL Certificate Request before emailing it?

I need to send a client an SSL Certificate Request (from IIS 6.0) They have requested that it ONLY be sent encrypted using an app like Winzip. My question is. Is this actually an issue? My very ...
1
vote
4answers
535 views

Remotely enter encryption key?

This might be a really dumb question but here goes, anyway. I just bought a couple servers. I already installed Ubuntu with encrypted LVM on one and I'm planning on doing the same with the other. ...
-1
votes
5answers
1k views

How to encrypt my web traffic?

I am using a wireless LAN (or sometimes a wired connection) connection for web surfing and any one from my campus can use the network. I simply want to encrypt my all data which is going between my ...
0
votes
2answers
211 views

Mysql remote encryption

I'm using a remote connection to mysql. Both the webserver and the server with mysql on it will use internal ip addresses to connect. 1) Is encrypting necessary? 2) Is their a built in / simple way ...
0
votes
1answer
485 views

Verify iPhone 4 encryption status?

After enabling "require encryption on the device" in ActiveSync policies, how does one verify that the policy has been applied successfuly on an iPhone 4 (or iPhone 3GS) running iOS 4?
1
vote
1answer
326 views

Secured ad-hoc network with DD-WRT

I'm able to create ad-hoc networks using DD-WRT but password doesn't work. Is there a workaround?
0
votes
4answers
548 views

Encrypting shell script

We have a few shell scripts for backup/database dump purpose which have username/password info in them. Is there any way do this other than SHC which appears to be having some issues.
1
vote
0answers
121 views

Can encryption be disabled for the login handshake in SQL Server 2005 or 2008

When a client Application connects to SQL Server the login credentials are sent over the network in a TLS Encrypted Handshake Message. For testing purposes I would like to have the login credentials ...
0
votes
4answers
132 views

Preventing programmer from copying information

Is there a way to block files, coding, etc. from being copied when giving a new programmer ftp access to do research prior to submitting a quote?
0
votes
1answer
192 views

eCryptFS Initialization Issues

I'm having issues with the first mount of eCryptFS. Currently when I attempt to mount it mount -t ecryptfs ~/.Private ~/Private However it's erroring. The error in dmesg is the following: Error ...
16
votes
7answers
4k views

Easiest way to send encrypted email?

To comply with Massachusetts's new personal information protection law, my company needs to (among other things) ensure that anytime personal information is sent via email, it's encrypted. What is the ...