Details on how data is being kept in memory/on disks, most frequently being applied to databases, media banks and backup-recovery solutions.
Questions tagged [storage]
239 questions
1
vote
0 answers
How can I safely store a password during a user session
I am writing an Java application that is using OAuth to authentificate against a server API. The server is offering the OAuth secrets for users to copy from its website.
Because each request needs the secrets I wanted to store them in a password…
![](../../users/profiles/105154.webp)
Simoon
- 11
- 2
1
vote
2 answers
Rembering password on client (not database)
I am trying to implement the capability for my program (C++) to remember a user/password combination, so the user does not need to type it in again.
Is there a secure way for my program to store this? Preferably cross platform as well.
![](../../users/profiles/90142.webp)
Catprog
- 13
- 5
0
votes
2 answers
Saving passwords in database
I have recently been studying a lot on writing secure code and choosing secure methods for saving passwords to a database. I'm wondering if it's secure to use ready made libraries or APIs to do this for me. How can I verify the integrity of those…
![](../../users/profiles/81289.webp)
Al007
- 109
- 2
0
votes
0 answers
Is the SanDisk ULLtraDIMM secure after power-down?
I found an interesting product last night called the SanDisk ULLtradDimm SSD (product page), which essentially claims drastic performance gains by plugging an SSD into a standard DDR3 memory channel.
As one of the features of this product is data…
![](../../users/profiles/79780.webp)
Miles Grimes
- 101
0
votes
1 answer
Can I keep large encrypted files in my mailbox on mail provider server?
Is there any restriction or policy of large e-mail providers (such as GMail, Yahoo, Hotmail and similar) for keeping/storing large encrypted files by the users within their disk quota in 3rd party mailbox for privacy purposes?
![](../../users/profiles/11825.webp)
kenorb
- 799
- 4
- 8
- 27
0
votes
2 answers
Store a file on a harddisk without root having access to it
Is there a way to store a file on a disk as a user so that even the root user has no access to it?
I tried EncFS but that is no solution because the root user can switch to every user, so he/she can read the encrypted files too.
How can I store a…
![](../../users/profiles/13212.webp)
rubo77
- 2,350
- 10
- 26
- 48
0
votes
2 answers
securely storing password in a file
I am working on making a log file for a small application. If an error occurs in the application then I have to send a mail to a person. I've figured out the code to send a mail to a person, but I don't want to hard code the password as a string.…
![](../../users/profiles/49986.webp)
Raki
- 1
0
votes
3 answers
Best way to store passwords for a LAN tool?
I am making an app in Python for linux as a front end to the router (to automate some tasks).
But I need to log in to the router before I can do any operations on it and since it uses a http-auth I need to send it the clear text password and hence…
![](../../users/profiles/25497.webp)
Grim Reaper
- 518
- 1
- 4
- 14
0
votes
3 answers
How to store user credentials like Mint.com
If you have a website that need to store user's credentials for other sites, how do you store those credentials securely? An example is Mint.com where you give them your username/password for your bank accounts. Based on this quora answer, Mint.com…
![](../../users/profiles/27670.webp)
kefeizhou
- 101
- 1
0
votes
3 answers
Storing passwords and other data for coworkers
At the moment we are encrypting our server passwords and other important data internal via PGP. Every coworker has got his/her own private key/pass combination set up on their workstation. The problem is now, when a new coworker comes into play, we…
![](../../users/profiles/32383.webp)
peipst9lker
- 101
- 1
0
votes
2 answers
Is my domain registrar storing my password in cleartext?
I called my domain registrar (unnamed here but not difficult to find out and a major provider) about a year ago to have them change some DNS settings. While on the phone, the customer service rep had me speak my password (letter by letter) to prove…
![](../../users/profiles/20392.webp)
michaelrbock
- 105
- 8
0
votes
0 answers
What's the most secure mounting method for external storage in Nextcloud when not using encryption on rest for performance reasons?
My threats are: MitM basically, eavesdroppers
I have a Nextcloud instance and I was thinking of mounting sshfs locally and selecting local as the external storage type and then putting the data there, but is it the most secure option?
Nextcloud…
![](../../users/profiles/204820.webp)
Sir Muffington
- 1,447
- 2
- 9
- 22
0
votes
1 answer
NAS newbie: how to ensure that network storage is encrypted at rest (and ideally in transit and in use) for Windows, Linux, Mac
I'm looking to buy an ~8TB NAS* for my home office (I guess it's called a "private cloud").
I want to connect to it from Windows, Linux, Mac, Android, and iOS.
How can I ensure that the network storage is encrypted at rest (and ideally in transit…
![](../../users/profiles/34766.webp)
Ryan
- 315
- 4
- 13
0
votes
0 answers
Suspicious SSD corruption exactly at LUKS encryption header
I am helping with an interesting data recovery issue. The laptop was running Debian 11 Linux with LUKS full disk encryption on a Samsung 970 Evo Plus 2TB SSD for quite many months. Suddenly the LUKS password input on boot stopped working.
I…
0
votes
0 answers
Is storing a username in session storage a security risk?
Goal
I have a page which verifies the user's email address, that has access to their user id. From this page they're redirected to the login page. I want their username to be filled in already. In other words, passing the username (or email) from…
![](../../users/profiles/279066.webp)
Mike V.
- 1
- 1