Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

2
votes
1answer
1k views

How can I enable encryption for SQLite3 in PHP5.3? [closed]

The php manual for SQLite3::open has this information: public bool SQLite3::open ( string $filename [, int $flags = SQLITE3_OPEN_READWRITE | SQLITE3_OPEN_CREATE [, string $encryption_key ...
3
votes
2answers
2k views

Is it ok to use self-signed certificates for smtp transport?

By "by ok to use" I mean: are MTA agents receiving emails from my server going to reject my email if not, are they going to make other kind of bad treatment for my emails (marking as spam, unsafe ...
1
vote
1answer
92 views

Bitlocker whole disk encryption on second (non-boot) drive

I'm working on a project where I need to encrypt only the data drive on a machine and I don't want there to be any user interaction at the console on boot. These systems will be running at remote ...
1
vote
1answer
76 views

Password change reminder Ubuntu

I have an encrypted hard drive on my Linux box. When it was ready for me to change my password because of the 60 day expiration I ran into a problem. I changed the password and once I shutdown my ...
2
votes
1answer
291 views

What is the location of the SQL Server Fallback Certificate?

We are required to use encryption with SQL Server, so we have enabled ForceEncryption. According to the documentation, if a certificate is not provided, SQL Server will generate its own internal ...
2
votes
1answer
98 views

Sharing ENV variables between multiple linux servers

I need to be able to share ENV variables between multiple linux servers. These variables are used by my application. I'd like to keep these variables in sync between all servers. Application ...
6
votes
1answer
3k views

Configured MySQL for SSL , but SSL is still DISABLED..!

I configured SSL for MySQL using the following script. #!/bin/bash # mkdir -p /root/abc/ssl_certs cd /root/abc/ssl_certs # echo "--> 1. Create CA cert, private key" openssl genrsa 2048 > ...
1
vote
1answer
452 views

Traffic in a AWS virtual private cloud

On Amazon AWS, should I encrypt sensitive traffic between instances in a virtual private cloud? More specifically, is the traffic between the instances in such a VPC private as in a virtual network, ...
1
vote
0answers
512 views

How to change IIS Express Virtual Directory password encryption provider?

In Visual Studio 2012 I'm working on an ASP.NET MVC application which requires a Virtual Directory under the main application directory called "Shared". This happens to point to a UNC path, so I need ...
1
vote
3answers
1k views

Why is it considered bad practice to only protect one page with SSL instead of whole website

I know that protecting all pages with SSL will slow down the website and add overhead to the server resources. I also see many other websites only protecting their login and registration page, which ...
1
vote
2answers
896 views

Encrypt Windows Backup

Is there a way to encrypt my backups using Windows Backup in Server 2008 R2 without using a paid for 3rd party application? I've searched high and low but have been unable to find anything. Thanks ...
2
votes
1answer
586 views

Pure FTPd and MySQL, working with sha512

I'm currently developing an application for shared hosting, using a complete MySQL backend for the machine. I've set up all my services, and they're quite operational, however I've a little problem ...
4
votes
1answer
318 views

GPG Encryption: Am I using the right keys?

I have a process to encrypt a bank file using OpenPGP (via BouncyCastle) and SFTP the file to the bank for financial processing. They sent me a public key file, which I examined the key using the ...
0
votes
2answers
61 views

Mac Encryption and Reporting

We have a requirement at my company to support Macs. The machines need to be encrypted and have some sort of way to check in with a management system to verify the encryption status. This can be ...
0
votes
1answer
339 views

Move encrypted debian system on luks+lvm with dropbear from single SSD to SSD-RAID1

We have a debian linux server which has a single 120GB SSD and 2x2TB HDDs as RAID 1. We now have to move to another server which has 2x240GB SSD and a single 2TB HDD. The aim is to move the current ...
2
votes
2answers
945 views

Variable size encrypted container [closed]

Is there an application similar to TrueCrypt, but the one that can make variable size containers opposed to fixed-size or only-growing-to-certain-amount containers which can be made by TrueCrypt? I ...
1
vote
1answer
41 views

Protecting SQL from Profiling

We have some sensitive IPR in some Stored Procedures. We encrypt the stored procedures. However, at the point they are created, they are plain text. Is there anyway we can prevent SQL Server Profiler ...
-6
votes
2answers
119 views

Authentication of both client and server in subscription based model [closed]

My current business model takes a loss upfront on hardware in the hopes that the service will be paid for continuously. When service is not paid for the instructions are sent to the client hardware to ...
4
votes
3answers
365 views

How secure is traffic between domain members?

I was just thinking about security in AD domain environment. I have a question: how secure is communication between domains by default (without implementing IPSec etc.) For example if I download a ...
0
votes
1answer
349 views

Does my password is sent encrypted when I am mounting windows share on linux using CIFS?

Does my password is sent encrypted when I am mounting windows share on linux using CIFS? For mounting I'm using: mount -t cifs -o username=myuser //myhost/share /mnt/winmount
0
votes
1answer
240 views

Logging remote commands sent during SSH session, so the log would be unencrypted

I connect to server A (running OpenSSH server in Linux OS) using Putty: localhost% putty.exe A How to cause the SSH server to log the commands sent from localhost in unencrypted manner. Thanks
3
votes
2answers
212 views

Using our own certificate authority for business email encryption

I've read the available similar questions on serverfault but I haven't quite found a definite answer to the security aspect of it - hence here's my question: I'm administrator of an office working ...
1
vote
1answer
67 views

CentOS Password Change

I am looking for changing my centos password by using passwd with encryption. echo "Password1" | passwd --stdin username But if I'm using with above method, user will see what my password is. Does ...
1
vote
3answers
3k views

What are the steps to TDE encrypt a SQL Server 2008 database?

We have been trying the steps here: http://msdn.microsoft.com/en-us/library/cc278098.aspx but keep getting this error: Msg 15151, Level 16, State 1, Line 1 Cannot find the certificate 'tdeCert', ...
-3
votes
2answers
124 views

Permissions and access security for a shared folder on a server

I need to set permissions to a folder for two people. I am not an administrator on the server but I have access to grant and remove permissions to folders. Not even the Server Admin should have ...
19
votes
8answers
24k views

What impact does full hard drive encryption have on performance?

We have HP notebooks here at work, and it is policy to have HP's hard drive encryption turned on to protect client databases and IP in the case of loss/theft. I was wondering if there was any ...
0
votes
1answer
57 views

Login to openvpn web GUI after change IP

My provider just changed my IP address. How can I login to my web GUI with my new IP address? Thanks in advance.
2
votes
2answers
464 views

How does Arista EOS and Cisco IOS encrypt tacacs+ encyption keys?

We're using tacacs for AAA on our network devices, and I'm interested/curious in how our devices are encrypting the passwords device side. Following the Arista EOS manual, page 139, I'm running: ...
-1
votes
1answer
1k views

How can I speed up my Duplicity backup?

I need to perform onsite backups of hundreds of gigabytes from a few Xen VMs to some storage available on a dedicated server in the same network, with a Gigabit connection. The data is mostly MySQL ...
2
votes
2answers
7k views

Whats a good way to encrypt a mysql database, and is it worth it?

I know I can encrypt particular fields of a database, but I'm interested in encrypting every field of the database. I want to make sure no one who gains access to a mysql shell but who does not have ...
3
votes
1answer
764 views

Automounting encrypted filesystem (using random key), residing in regular file under CentOS 6.*

Task: in CentOS 6.x system, set up and mount automatically encrypted filesystem, residing within a regular file, using one-time (random) key. /etc/crypttab in CentOS 6.* doesn't allow using plain ...
0
votes
1answer
184 views

dmcrypt container on nfs

I'm setting up an encrypted file storage on a remote server and I want to be able to use it transparently on my system. I want to be able to de-/encrypt them locally so that the server hosting the ...
2
votes
1answer
657 views

List of SSL Cipher Support by Browser

Not really sure if this is the appropriate SE to post this to, but here it is: Is there some online reference for what SSL ciphers are supported by the various browsers? Basically, I'm interested in ...
1
vote
1answer
163 views

Remotely unlock Hardware disk encryption

I am setting up a remote server at a collocation for a client and their primary request is that the data be encrypted beyond the boot partition. The main system will be in a dm-crypt LUKS container on ...
0
votes
1answer
2k views

Associate SSL certificate for SQL Server which does not use the FQDN

We would like to connect securely to SQL 2008 R2 over the internet for reporting purposes. Speed is not a huge concern for these smaller data sets, and users are going to be using simple reporting ...
-2
votes
1answer
93 views

Ho to encrypt part of config data file?

I work in small company. When i am going on holiday i had to take root access to my junior. That junior could give access to another man. Unfortunately I can't control this proccess. I would like that ...
11
votes
2answers
1k views

Encryption over gigabit carrier ethernet

I would like to encrypt traffic between two data centres. Communication between the sites is provided as a standard provider bridge (s-vlan/802.1ad), so that our local vlan tags (c-vlan/802.1q) are ...
14
votes
2answers
796 views

Why do my two ssh public keys have the same beginning?

I was updating the authorized_keys file on my server with the public key for the new laptop I got and I was surprised to discover that the two public keys began the same: # key 1 ssh-rsa ...
1
vote
1answer
265 views

File content is being modified sent over ftp

I am using openssl to encrypt my backups before send it to an ftp server where I store them. At first, when I tried to decrypt the files I was getting this error: openssl rsautl -decrypt -inkey ...
2
votes
4answers
320 views

Easyest way to setup encrypted volume

What is the easyest way to set encrypted volume under linux? Basically, what I want is to have fixed size file in my home folder. When I mount it and type password, it should appear as regular ...
4
votes
2answers
3k views

How secure/private is full disk encryption on a VPS? [duplicate]

Security principles say that if someone else has physical access to a machine, then there is no security/privacy. I'm wondering about some examples of this in the case where I want to have a hosted ...
-2
votes
2answers
409 views

How does The Pirate Bay mask itself from its VPS providers? [closed]

From https://torrentfreak.com/pirate-bay-moves-to-the-cloud-becomes-raid-proof-121017/ The hosting providers have no idea that they’re hosting The Pirate Bay, and even in the event they found out ...
2
votes
1answer
350 views

Encrypting peer-to-peer application with iptables and stunnel

I'm running legacy applications in which I do not have access to the source code. These components talk to each other using plaintext on a particular port. I would like to be able to secure the ...
3
votes
1answer
125 views

IPSEC AES key length in kernel 3.9.3

I have a working ipsec-tools configuration which uses aes-ctr encryption with 224-bit key (192bit for key+32bit for nonce). Everything works well on 3.2.0 kernel. Here's what man setkey says about ...
1
vote
1answer
206 views

Truecrypt Boot Volume - Keyfiles?

I am actively using keyfiles for non-boot partitions and files (containers?), but I am wanting to bring this into the full system with a boot partition containing my OS (Windows or Linux). However, I ...
7
votes
3answers
4k views

Is it possible to hardware accelerate LUKS encryption?

My Linux server spends a lot of time computing LUKS encryption. Is there any way to hardware accelerate it (with a PCI express card for example)?
-3
votes
1answer
41 views

The search for low traffic backup software [closed]

I'm an IT manager and i'm looking for an backup software that will stand some requirements: Minimum traffic between the server and the client. Encrypted the data while it transfer it. Automated. ...
1
vote
4answers
4k views

How to direct Apache Basic authentication over SSL?

Our intranet use mod_ldap to authenticate users to our internal Active Directory server as follows: <Location /***/> AuthType Basic AuthName "***" AuthBasicProvider ldap ...
1
vote
2answers
205 views

Cisco IOS Setting up a password/secret

I'm figuring out the basics to CISCO Ios commands and I am struggling to find out the answer to the following question: What would provide a better protection when you set up a password to allow ...
2
votes
2answers
1k views

Xerox scan to email and Exchange

We have two Xerox devices, a 7120 and a 7556 that we are trying to get to scan-to-email through our exchange 2010 server. Currently they are able to do so to local recipients by not authenticating. ...