Encryption is transforming information through a cipher to protect it.

learn more… | top users | synonyms

1
vote
0answers
77 views

Expanding raid5 software raid

I have recently bought 4 2TB drives to expand my existing 4*2TB raid5 setup, using mdadm software raid in debian. As a initial step, I have created a raid5 on the four new drives and created an ...
1
vote
1answer
191 views

MariaDB + PAM: Is Remote Auth Secure?

I have a MariaDB instance which is using PAM to auth against Active Directory. Is remote authentication with this service secure? I ran a Wireshark trace during the auth process, and passwords are not ...
-3
votes
2answers
1k views

How can system admins track employees Gmail chat [closed]

I am in a company where i have been warned about using chats. I spoke with one of the admin and he said every chat is being Monitored; ok i agree it can be if we use plain text but what if we use ...
-2
votes
1answer
105 views

On the fly encryption of data ( not your average type) [closed]

I'm looking to build my first nas. And i intend to connect over the internet to it. Because i will have some work documents too on it i want to make it as secure as possible. I have no ...
0
votes
1answer
145 views

Can encfs be compromised if attacker knows a file name on the encrypted file system?

Good morning, I was wondering, if encfs also encrypts the file names (presumably using the same key as that used to encrypt their contents) such that each encrypted filename or directory corresponds ...
1
vote
1answer
158 views

Does enigmail for thunderbird encrypt title of message

From what I've read, encrypting an email with pgp/mime with thunderbird+enigmail will encrypt the entire message including attachments. Does this also include the message subject title? If not, is ...
0
votes
1answer
171 views

Automate HP ProtectTools using MDT

Our company is currently using HP ProtectTools to perform Drive Encryption on our HP laptops. I recently built an MDT 2012 Deployment Share to automate our imaging process and would like to find a way ...
7
votes
3answers
4k views

Encrypted Remote Backups via Rsync?

I run a small modest CentOS server at my house for misc backups, etc. My friend on the other side of town also runs a small modest server at his house for similar purposes. We have been toying with ...
1
vote
1answer
398 views

EFS Remote Encryption

We have been trying to setup EFS across our domain. Unfortunately Reading/Writing file over network share does not work, we get an "Access Denied" error. Another worrying fact is that I managed to ...
4
votes
2answers
775 views

Is it possible to have a 100% secure virtual private server?

I am curious if it is possible to have a VPS that has data on it that is not readable by the hosting provider, but is still usable on the VPS. Obviously there are some things that you could do to ...
0
votes
2answers
1k views

HTTPS Proxy which answers CONNECT with own certificate

I'm configuring a DMZ which has the following Scheme: Internet - Server A - Security Appliance - Server B - Intranet In this DMZ I need a Proxy server for http(s) connections from the Intranet to ...
7
votes
2answers
893 views

Approaches for Linux server disk encryption

What are the approaches available for fully encrypting a disk on a remote server (say, colocated in a datacenter)? On Windows, we can just turn on Bitlocker with a TPM. Then the server can reboot, and ...
0
votes
1answer
212 views

Aside from tools like 7-Zip, AxCrypt, and Kryptel, what is available that has multicore functionality and does AES-256? [closed]

I have a PowerEdge 1950 with 2 x E5405 2.00Ghz CPUs and 4GB of RAM sitting around. It's currently not doing anything at all so it's a perfect fit for this task. I have traditionally used 7-zip's ...
1
vote
1answer
227 views

Configuring encrypted e-mail in Outlook 2010

So we're setting up encrypted e-mail for our client running SBS with Exchange 2010 and Outlook 2010 on about a dozen machines (one running Outlook 2003, we're trying to talk them into upgrading it). ...
2
votes
1answer
515 views

How to decrypt files on a Windows domain, without user account password?

I have a Server 2008 file server, and and while here an employee encrypted several files, and has now since left to seek greener pastures. I want to decrypt the files, so others can access them. Can ...
2
votes
2answers
520 views

PGP decryption fails with error for one file

We store database backups encrypted with PGP Command Line 9.7.0. Files look like 2009.bak.pgp Here's command line used to backup these files: pgp --encrypt F:\2009.bak --recipient admin@company.mail ...
1
vote
1answer
359 views

Linux LTO-4/5 Drive Encryption

For a number of reasons I have been trying to find a way to encrypt my backup tapes. I'm currently running Bacula for my backups and it's support for Drive based encryption is I have to call a script ...
0
votes
1answer
496 views

PPTPd - configuration error?

an 5 01:09:12 vpn pptpd[1832]: GRE: read(fd=6,buffer=611860,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax ...
1
vote
3answers
698 views

Exchange: encrypted mail database?

For an Microsoft Exchange server, is it possible to encrypt the email database such that the sysadmin cannot see the emails? In other words, the admin would be responsible for all aspects of running ...
8
votes
1answer
4k views

How does the ssh-keygen .pub format work with .pem files?

The ssh-keygen command generates .pub files which it describes as "public key files", but they are a totally different format to most "public key files" I've usually seen, which are in PEM format. ...
12
votes
3answers
4k views

How to disable swap files in ESXi?

We are running a few Solaris / Linux VMs on ESXi that contain very sensitive encrypted data that eventually get decrypted as required in memory. Everything is fine, except for the ESXi swap files ...
2
votes
0answers
56 views

How to encrypt disk transparently without destroying data [closed]

On a Linux system, be it Debian, Redhat or any distro, I would like to encrypt the disk on the fly. That is, encrypt the disk transparently to the OS whilst it is running, reboots, shuts down etc. In ...
0
votes
0answers
78 views

Amazon S3 - Storage Class and Server Side Encryption

Ahhh! I am using Amazon S3 for some low price storage to clear down out SAN. I created the bucket and created a root folder. I set the storage class to standard and server side encryption AES. I ...
1
vote
1answer
362 views

Why are these dmsetup commands there?

On this page are there examples of LUKS encryptions. Example below. Why are the dmsetup commands there? What do they do? dd if=/dev/zero of=./volumes/vol_default.vol bs=1M count=1 losetup ...
-3
votes
1answer
57 views

How to view a GPG encrypted file securely? [closed]

When I decrypt / view a gpg file it is: decrypted in the terminal / console and thus gets into history the decryption goes into video memory and into normal memory and into the swap (if not ...
2
votes
1answer
42 views

create log for an encrypted tar

I want to create an encrypted tar but also I want to have a log of what tar has compressed, I'm using the following command: tar -cvvf - --files-from=/root/backup.cfg | openssl des3 -salt -k ...
2
votes
3answers
487 views

Is there a way to make encrypted DNS resolutions? [closed]

Is there a way to make encrypted DNS resolutions, so that a packet sniffer in the same network still can't guess what DNS has been requested? Maybe, just thinking, by tunneling DNS requests through ...
-3
votes
1answer
71 views

Is there a way to prevent users from transfer svn checkout files to another computer or data storage?

I have a SVN server under CentOS 6.0 and I would like to know if is there a way to prevent users from transfer svn checkout files to another computer or data storage? Or just similar a encryption ...
2
votes
2answers
65 views

Application-transparent encryption among cloud-deployed servers

I'm a software engineer and not necessarily an ops guy aside from having done a developer's share of dealing with deployment issues. The individual components of the web app I'm working on will be ...
4
votes
1answer
2k views

Subversion 1.6 + SASL : Only works with plaintext 'userPassword'?

I'm attempting to setup svnserve with SASL support on my Slackware 13.1 server and after some trial and error I'm able to get it to work with the configuration listed below: svnserve.conf [general] ...
0
votes
1answer
377 views

How to setup Samba4 to enable NTFS encryption?

I'm currently giving the sernet.de samba4 (rc1) appliance a shot (running inside vmware player on Windows 7). Providing a share is no problem, but the client still can't choose to encrypt files. What ...
1
vote
3answers
94 views

Sql Server - Error attaching mdf file encrypted via Encrypted File System (EFS)

I am getting an error trying to attach a database whose files were previously encrypted via EFS. The actuall error message is Msg 5120, Level 16, State 101, Line 9 Unable to open the physical file ...
2
votes
2answers
499 views

How to add authentication to ssh dynamic port forwarding?

I am using ssh client as a SOCKS server by running on the remote server this command: ssh -f2qTnND *:1080 some-server-user@localhost There is only one problem here: anyone can connect to the server ...
1
vote
0answers
239 views

Can samba authentication be coupled to file encryption? What about WebDAV?

I'd like my NAS (Buffalo LinkStation Pro running Linux 2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux) to share an encrypted filesystem to the Windows clients as transparently as possible. ...
2
votes
1answer
555 views

How to mount a SAMBA shared folder from linux client machine using encrypted password?

I am trying to setup an auto-mounting network drive. The network drive requires a user/pass. In the man page for "mount.cifs" there are two ways to provide the user/pass. 1-[not recommended] put the ...
1
vote
1answer
54 views

How can I remotely verify that a file is encrypted?

Is there any way to remotely verify that a file is encrypted? I have a very complex problem, but here's a simplified scenario that illustrates the point: I have a server that generates very large ...
1
vote
1answer
298 views

PGP Encryption Proxy for Mail Server [closed]

I have a friend who is located in a part of the world that makes email encryption prudent for them. While I recommended OpenPGP, my friend thinks that it would have too high of a setup requirement for ...
0
votes
1answer
2k views

NAS4Free disk encryption and ZFS error

I have installed a NAS4Free on a VM, and as recommended, I installed it on a 1GB virtual disk, and assigned another disk 500GB to this VM for file storage. I have created the disk, encrypted it, ...
1
vote
2answers
2k views

Disable all but RC4 in apache

Our PCI compliance vendor requires that we disable all but RC4 encryption on our web server. Currently our apache config file looks like this: SSLHonorCipherOrder On SSLCipherSuite ...
-5
votes
1answer
311 views

How difficult would it be for a Hacker to get into a BitLocker To Go drive? [closed]

I have a USB Drive protected with BitLocker To Go. I used a User PIN and printed a Recovery Password. I have since lost the Recovery Password and can't remember the PIN. Is there an efficient way to ...
2
votes
3answers
804 views

decrypting AES files in an apache module?

I have a client with a security policy compliance requirement to encrypt certain files on disk. The obvious way to do this is with Device-mapper and an AES crypto module However the current system ...
1
vote
1answer
83 views

How to securely control access to a backend key server?

I need to securely encrypt data in my database so that if the database is dumped, hackers are unable to decrypt the data. I'm planning on creating a simple key server on a different machine, and ...
0
votes
1answer
94 views

Is it possible to store Hashed data in a different field than userPassword in LDAP

I've been asked to store hashed data in a LDAP server. Putting hashed passwords is easy but I'm not sure if LDAP allows to store data like email hashed or even encrypted. Creating a LDIF file with a ...
8
votes
2answers
2k views

Encrypt git repository on server (safe against theft of physical hardware)

I have a production server (Ubuntu, running 24/7) with a git repository and some client computers each with a working copy of this repository. In the client computers, simply using home folder ...
3
votes
10answers
6k views

Can I compress an encrypted file?

I have an encrypted file (AES Symmetric encryption).For backup purposes and to save disk space, Can I compress (lossless) the file without worrying about messing up the decryption? If so, can you ...
2
votes
2answers
1k views

SQL Server 2012 - Transparent Data Encryption not available in this edition

Let me start by saying that the instance of SQL Server 2012 I am attempting to set up TDE (Transparent Data Encryption) on, is the Enterprise edition. However, when following the MSDN tutorial ...
1
vote
1answer
318 views

How to verify that a physical volume is encrypted? (Ubuntu 10.04 w/ LUKS) [closed]

I am very new to LUKS. During installation, I tried to set up an encrypted physical volume so that everything underneath it would be encrypted. I chose "Use as: physical volume for encryption," the ...
4
votes
3answers
450 views

How can I cache a Subversion password on a server, without storing it in unencrypted form?

My Subversion server only provides access via HTTPS; support for svn+ssh has been dropped because we wanted to avoid creating system users on that machine just for SVN access. Now I'm trying to ...
2
votes
1answer
103 views

Is there a way to make encryption default per contact in Thunderbird?

I administer several computers that have Thunderbird installed. I know Thunderbird has an option to require all email to be encrypted. However, I would like a way to allow unencrypted email ...
1
vote
1answer
99 views

When using Transparent Data Encryption for SQL Server 2012, can you use different encryption keys for each database?

I am new to using TDE for SQL Server and one of the requirements that a client has is that their database be encrypted using a different key that is unique to only their database. I was wondering if ...