Encryption is transforming information through a cipher to protect it.

learn more… | top users | synonyms

1
vote
1answer
315 views

Traffic in a AWS virtual private cloud

On Amazon AWS, should I encrypt sensitive traffic between instances in a virtual private cloud? More specifically, is the traffic between the instances in such a VPC private as in a virtual network, ...
1
vote
2answers
4k views

Ubuntu 13.10 - How to disable LVM and cryptsetup? cryptsetup: evms_activate is not available

I am trying to remove whole drive encryption from my Ubuntu installation. I've run Ubuntu from Live CD, mounted crypt partition and copied it to another partition /dev/sda3. sudo cryptsetup luksOpen ...
1
vote
2answers
814 views

Bitlocker drive encryption on AWS Windows instance

I'm trying to figure out how best to protect the data of a single Windows Server 2012 instance on AWS and according to "AWS_Securing_Data_at_Rest_with_Encryption.pdf" it says: "Encrypting Amazon ...
1
vote
0answers
407 views

How to change IIS Express Virtual Directory password encryption provider?

In Visual Studio 2012 I'm working on an ASP.NET MVC application which requires a Virtual Directory under the main application directory called "Shared". This happens to point to a UNC path, so I need ...
1
vote
2answers
615 views

Encrypt Windows Backup

Is there a way to encrypt my backups using Windows Backup in Server 2008 R2 without using a paid for 3rd party application? I've searched high and low but have been unable to find anything. Thanks ...
4
votes
1answer
249 views

GPG Encryption: Am I using the right keys?

I have a process to encrypt a bank file using OpenPGP (via BouncyCastle) and SFTP the file to the bank for financial processing. They sent me a public key file, which I examined the key using the ...
2
votes
1answer
235 views

What is the location of the SQL Server Fallback Certificate?

We are required to use encryption with SQL Server, so we have enabled ForceEncryption. According to the documentation, if a certificate is not provided, SQL Server will generate its own internal ...
0
votes
1answer
313 views

Move encrypted debian system on luks+lvm with dropbear from single SSD to SSD-RAID1

We have a debian linux server which has a single 120GB SSD and 2x2TB HDDs as RAID 1. We now have to move to another server which has 2x240GB SSD and a single 2TB HDD. The aim is to move the current ...
1
vote
1answer
39 views

Protecting SQL from Profiling

We have some sensitive IPR in some Stored Procedures. We encrypt the stored procedures. However, at the point they are created, they are plain text. Is there anyway we can prevent SQL Server Profiler ...
4
votes
3answers
278 views

How secure is traffic between domain members?

I was just thinking about security in AD domain environment. I have a question: how secure is communication between domains by default (without implementing IPSec etc.) For example if I download a ...
0
votes
1answer
306 views

Does my password is sent encrypted when I am mounting windows share on linux using CIFS?

Does my password is sent encrypted when I am mounting windows share on linux using CIFS? For mounting I'm using: mount -t cifs -o username=myuser //myhost/share /mnt/winmount
0
votes
1answer
163 views

Logging remote commands sent during SSH session, so the log would be unencrypted

I connect to server A (running OpenSSH server in Linux OS) using Putty: localhost% putty.exe A How to cause the SSH server to log the commands sent from localhost in unencrypted manner. Thanks
3
votes
2answers
176 views

Using our own certificate authority for business email encryption

I've read the available similar questions on serverfault but I haven't quite found a definite answer to the security aspect of it - hence here's my question: I'm administrator of an office working ...
1
vote
1answer
63 views

CentOS Password Change

I am looking for changing my centos password by using passwd with encryption. echo "Password1" | passwd --stdin username But if I'm using with above method, user will see what my password is. Does ...
0
votes
2answers
56 views

Mac Encryption and Reporting

We have a requirement at my company to support Macs. The machines need to be encrypted and have some sort of way to check in with a management system to verify the encryption status. This can be ...
-3
votes
2answers
117 views

Permissions and access security for a shared folder on a server

I need to set permissions to a folder for two people. I am not an administrator on the server but I have access to grant and remove permissions to folders. Not even the Server Admin should have ...
0
votes
1answer
53 views

Login to openvpn web GUI after change IP

My provider just changed my IP address. How can I login to my web GUI with my new IP address? Thanks in advance.
2
votes
2answers
4k views

Whats a good way to encrypt a mysql database, and is it worth it?

I know I can encrypt particular fields of a database, but I'm interested in encrypting every field of the database. I want to make sure no one who gains access to a mysql shell but who does not have ...
-1
votes
1answer
890 views

How can I speed up my Duplicity backup?

I need to perform onsite backups of hundreds of gigabytes from a few Xen VMs to some storage available on a dedicated server in the same network, with a Gigabit connection. The data is mostly MySQL ...
2
votes
2answers
377 views

How does Arista EOS and Cisco IOS encrypt tacacs+ encyption keys?

We're using tacacs for AAA on our network devices, and I'm interested/curious in how our devices are encrypting the passwords device side. Following the Arista EOS manual, page 139, I'm running: ...
3
votes
1answer
678 views

Automounting encrypted filesystem (using random key), residing in regular file under CentOS 6.*

Task: in CentOS 6.x system, set up and mount automatically encrypted filesystem, residing within a regular file, using one-time (random) key. /etc/crypttab in CentOS 6.* doesn't allow using plain ...
0
votes
1answer
155 views

dmcrypt container on nfs

I'm setting up an encrypted file storage on a remote server and I want to be able to use it transparently on my system. I want to be able to de-/encrypt them locally so that the server hosting the ...
1
vote
3answers
1k views

Why is it considered bad practice to only protect one page with SSL instead of whole website

I know that protecting all pages with SSL will slow down the website and add overhead to the server resources. I also see many other websites only protecting their login and registration page, which ...
1
vote
1answer
510 views

List of SSL Cipher Support by Browser

Not really sure if this is the appropriate SE to post this to, but here it is: Is there some online reference for what SSL ciphers are supported by the various browsers? Basically, I'm interested in ...
1
vote
1answer
144 views

Remotely unlock Hardware disk encryption

I am setting up a remote server at a collocation for a client and their primary request is that the data be encrypted beyond the boot partition. The main system will be in a dm-crypt LUKS container on ...
0
votes
1answer
1k views

Associate SSL certificate for SQL Server which does not use the FQDN

We would like to connect securely to SQL 2008 R2 over the internet for reporting purposes. Speed is not a huge concern for these smaller data sets, and users are going to be using simple reporting ...
2
votes
1answer
472 views

Pure FTPd and MySQL, working with sha512

I'm currently developing an application for shared hosting, using a complete MySQL backend for the machine. I've set up all my services, and they're quite operational, however I've a little problem ...
-2
votes
1answer
89 views

Ho to encrypt part of config data file?

I work in small company. When i am going on holiday i had to take root access to my junior. That junior could give access to another man. Unfortunately I can't control this proccess. I would like that ...
13
votes
2answers
656 views

Why do my two ssh public keys have the same beginning?

I was updating the authorized_keys file on my server with the public key for the new laptop I got and I was surprised to discover that the two public keys began the same: # key 1 ssh-rsa ...
1
vote
1answer
240 views

File content is being modified sent over ftp

I am using openssl to encrypt my backups before send it to an ftp server where I store them. At first, when I tried to decrypt the files I was getting this error: openssl rsautl -decrypt -inkey ...
8
votes
3answers
7k views

Is STARTTLS more safe than TLS/SSL?

In Thunderbird (and I assume in many other clients, too) I have the option to choose between "SSL/TLS" and "STARTTLS". As far as I understand it, "STARTTLS" means in simple words "encrypt if both ...
2
votes
2answers
2k views

How secure/private is full disk encryption on a VPS? [duplicate]

Security principles say that if someone else has physical access to a machine, then there is no security/privacy. I'm wondering about some examples of this in the case where I want to have a hosted ...
-1
votes
1answer
582 views

MACSec encryption over PBN?

This came up in a more generic link layer encryption question: Commodity switches with MACSec hardware offers wirespeed AES-GCM encryption at a fraction of the cost typically associated with layer 2 ...
11
votes
2answers
910 views

Encryption over gigabit carrier ethernet

I would like to encrypt traffic between two data centres. Communication between the sites is provided as a standard provider bridge (s-vlan/802.1ad), so that our local vlan tags (c-vlan/802.1q) are ...
-2
votes
2answers
377 views

How does The Pirate Bay mask itself from its VPS providers? [closed]

From https://torrentfreak.com/pirate-bay-moves-to-the-cloud-becomes-raid-proof-121017/ The hosting providers have no idea that they’re hosting The Pirate Bay, and even in the event they found out ...
2
votes
1answer
298 views

Encrypting peer-to-peer application with iptables and stunnel

I'm running legacy applications in which I do not have access to the source code. These components talk to each other using plaintext on a particular port. I would like to be able to secure the ...
1
vote
1answer
189 views

Truecrypt Boot Volume - Keyfiles?

I am actively using keyfiles for non-boot partitions and files (containers?), but I am wanting to bring this into the full system with a boot partition containing my OS (Windows or Linux). However, I ...
-3
votes
1answer
41 views

The search for low traffic backup software [closed]

I'm an IT manager and i'm looking for an backup software that will stand some requirements: Minimum traffic between the server and the client. Encrypted the data while it transfer it. Automated. ...
1
vote
2answers
170 views

Cisco IOS Setting up a password/secret

I'm figuring out the basics to CISCO Ios commands and I am struggling to find out the answer to the following question: What would provide a better protection when you set up a password to allow ...
-6
votes
2answers
117 views

Authentication of both client and server in subscription based model [closed]

My current business model takes a loss upfront on hardware in the hopes that the service will be paid for continuously. When service is not paid for the instructions are sent to the client hardware to ...
5
votes
1answer
172 views

Determine if LUKS/dmcrypt key is present

I am writing a Chef LWRP to add a key to a LUKS container and I'm having difficulty coming up with a way to determine whether or not my key already exists. cryptsetup luksAddKey will happily add the ...
1
vote
2answers
181 views

Office 365 E3 with Exchange Hosted Encryption (EHE)

I have a client who wants to move to Office 365. They are currently running on a trial of Office 365 E3 plan. My staff are now also using Office 365 E3 via the internal use licenses provided as part ...
-1
votes
2answers
723 views

Installing linux on a McAfee Endpoint Encryption encrypted hard disk [closed]

Work have issued us all laptops - which is great but it has Windows 7 installed on it with McAfee hard disk encryption for security/insurance reasons. I use Ubuntu on my workstation although the IT ...
1
vote
0answers
142 views

udev rule for disconnection and hibernate/suspend

I have an external hard drive which contains different GPT partitions. One of them is a LVM partition. This partition is contained in a LVM volume group (called "volga"), which in turns splits into ...
1
vote
1answer
85 views

Bitlocker whole disk encryption on second (non-boot) drive

I'm working on a project where I need to encrypt only the data drive on a machine and I don't want there to be any user interaction at the console on boot. These systems will be running at remote ...
1
vote
2answers
311 views

Secure a VMWare Image without Manual Password Entry

I stand before the following task: A VMWare "template" (based on SLES11) with custom software, that is to be distributed to some clients. They will receive a client specific copy of the template and ...
1
vote
0answers
85 views

Expanding raid5 software raid

I have recently bought 4 2TB drives to expand my existing 4*2TB raid5 setup, using mdadm software raid in debian. As a initial step, I have created a raid5 on the four new drives and created an ...
-3
votes
2answers
2k views

How can system admins track employees Gmail chat [closed]

I am in a company where i have been warned about using chats. I spoke with one of the admin and he said every chat is being Monitored; ok i agree it can be if we use plain text but what if we use ...
-2
votes
1answer
122 views

On the fly encryption of data ( not your average type) [closed]

I'm looking to build my first nas. And i intend to connect over the internet to it. Because i will have some work documents too on it i want to make it as secure as possible. I have no ...
31
votes
7answers
18k views

What is a good solution to encrypt some files in unix?

I am looking for a utility to encrypt certain directories in Linux. I am not looking for any full disk encryption services, but simply to encrypt a few directories for the purposes of storing files in ...