IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [file-access]

143 questions
0
votes
0 answers

Possible pitfalls with filesharing using local account instead of domain account

I've recently eradicated Active Directory from my network. However, I'm having trouble verifying there is no issue with sharing files using a local account instead of a domain account. I have exactly one server I was unable to convert to using…
NRA
  • 1
0
votes
3 answers

If email is an insecure medium, why are usernames and passwords sent via email (albeit in separate ones)?

At work we are using a secure file transfer utility that, after setting it up, sends you and the participants you want to share those files with, two emails. One email contains the randomised username, another one the password. I understand that…
Alex Ixeras
  • 195
  • 2
  • 10
0
votes
3 answers

How to technically introduce my boss to computer file security?

My boss truly believes that keeping files on paper and locked in his drawer is the safest place ever. He is the type of guy that processes a file in Word/Excel, prints it, delete the file and store the physical paper in his drawer. Also, he deletes…
RA828
  • 493
  • 4
  • 7
0
votes
0 answers

OpenSSH artifacts, remote system access?

After stumbling upon some unknown folders in my unused OneDrive (posted question), I did some digging arround and found some interesting logs. Apparently, OpenSSH had been used for remote access on my machine. A description of the attack can be here…
user851
  • 101
  • 1
0
votes
1 answer

Unknown folders in OneDrive

Today I opened OneDrive by accident, since I do not use it. To my surprise, inside there were unknown folders, in foreign (to me) languages. Namely, "document" and "photo" folders in Korean and a shortcut in French with the meaning of…
user851
  • 101
  • 1
0
votes
1 answer

Credentials using AWS IAM

I have a server, which should provide temporary credentials to the client. The credentials will be transmitted using HTTPS. The client should be able to upload S3 files, as well as download them. The concern I have is the following: I have multiple…
IluTov
  • 123
  • 1
  • 5
0
votes
0 answers

How to encrypt user files securely on the server with PHP

Description: I want to create an upload center for small files (word/excel/zip documents etc) with PHP. I want to protect files uploaded by user as much as possible, so if server is breached, attacker cannot read/open these files. I just want to…
J. Doe
  • 61
  • 4
0
votes
2 answers

Encrypted folder with different access rights for different users

With the GDPR (General Data Protection Regulation of EU) comes the necessity for many companies to store certain personal data (CVs, certificates, passport copies, etc.) centrally and encrypted. The data is available e.g. as Word or PDF files, in…
gebrerv
  • 1
0
votes
2 answers

Preferred access mode for a directory with PHP scripts and the PHP script itself

The people I work with have the tendency to set the access mode in numerical notation to 777 every time they face access right problems. The mess is caused by using many users. The creator of files (user: john), The php interpreter (user:…
Julian
  • 101
  • 2
0
votes
1 answer

How to prevent a specific program from reading my files?

My issue is more towards blocking a specific application/program (In this case, the Epic Games Launcher) from accessing my files. I know the best answer is just to remove that software. The reason that isn't an option is because the Unreal Engine in…
Noah Persons
  • 1
0
votes
0 answers

How to protect certain macOS user directory from unauthorized access?

I have several directories on my Mac, two most popular examples are: ~/.aws ~/.ssh They can be read by any script file or third-party app in system. I do not see a way to protect them in macOS (and in Linux). Mechanisms to protect such…
Croll
  • 163
  • 9
0
votes
3 answers

How to protect company sensitive data from being deleted by a user when data is on their computer?

There more than 300 computers and more than 400 users are available. We face two incidents recently when critical users(who has critical data) leave from company.We have deleted their data when they return their laptop or desktop PC. To help protect…
Infra
  • 650
  • 1
  • 6
  • 19
0
votes
1 answer

Permission to a user in a subfolder inside a folder to which he does not have access

I have a Windows Server 2012 and I need to configure the privileges to a group called DP_Preven. This is the scenario: I have a folder called X where only a few groups have access, inside that folder there is another one called Y. I want group…
U. Busto
  • 101
  • 3
0
votes
2 answers

How to give someone access to a file, on a website, securely without relying on a single password?

I have created an online donation form for a Public Library. The form collects names, phone numbers, emails, addresses (a lot of personal info). The form is submitted to a PHP script that saves the information to CSV file and forwards the user to a…
JBis
  • 640
  • 5
  • 17
0
votes
1 answer

Best way to secure documents?

I'm currently tasked with securing our documents stored in our NAS. Basically, the minimum requirements that is needed are; 1) Watermarking Ability(Any file viewed/downloaded or printed will have the user's name, IP and Time/Date watermarked on the…
Roflnator
  • 1
  • 3
1 2 3
…
9
10