Tag Info

New answers tagged

2

SMB traffic should not transit the public internet (without some form of protection). Period. In fact, many ISPs actually block the ports used by SMB/CIFS. Set up a VPN connection to your server first (preferrably OpenVPN or IPsec), and then you can use SMB over your VPN tunnel from wherever you'd like.


0

No, it not seems to be encrypted. See here, here and here for some example.


1

Foreach ($MachineCert In Get-ChildItem Cert:\LocalMachine -Recurse | Where HasPrivateKey) { $MachineCert | Select @{n='Subject'; e={ $MachineCert.Subject }}, @{n='Container'; e={ $MachineCert.PrivateKey.CspKeyContainerInfo.UniqueKeyContainerName }}, @{n='Store'; e={ $MachineCert.PSParentPath }} } Subject ...


0

The add-on Security Settings from Address Book basically does what you described for S/MIME.


1

The scheme that is implemented in at least one commercial DBMS that I know uses two keys, let's call them the master key and the database key. The master key is used to encrypt the database key. The database key, which could be of a higher grade, is used to encrypt and decrypt the backup images. The master key can be safely rotated, because it only ...


5

Use gpg (GnuPG). You'll be able to generate multiple keys and encrypt a file for decryption with any key from chosen list. Also GPG keys are not symmetric — your server only need public keys for encryption. Private keys, used for decryption, might be securely stored somewhere else. You can for example print one private key as QRcode for your director and ...


0

I'm not very familiar with veracrypt but a quick glance at the docs make it look like yet another whole disk/volume encryption tool. Since by design whole-disk encryption is completely transparent to your applications, that class of technology protects against only a small number of threats, mainly unauthorised access to your hardware (theft, loss, access ...


0

The log files (mysql-bin.XXXXXX) are binary log. It can contains all query the database server executed, so it can contain sensitive information. The security concern would be key stored in your bash file for mounting



Top 50 recent answers are included