IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [storage]

Details on how data is being kept in memory/on disks, most frequently being applied to databases, media banks and backup-recovery solutions.

239 questions
1
vote
0 answers

How can I safely store a password during a user session

I am writing an Java application that is using OAuth to authentificate against a server API. The server is offering the OAuth secrets for users to copy from its website. Because each request needs the secrets I wanted to store them in a password…
Simoon
  • 11
  • 2
1
vote
2 answers

Rembering password on client (not database)

I am trying to implement the capability for my program (C++) to remember a user/password combination, so the user does not need to type it in again. Is there a secure way for my program to store this? Preferably cross platform as well.
Catprog
  • 13
  • 5
0
votes
2 answers

Saving passwords in database

I have recently been studying a lot on writing secure code and choosing secure methods for saving passwords to a database. I'm wondering if it's secure to use ready made libraries or APIs to do this for me. How can I verify the integrity of those…
Al007
  • 109
  • 2
0
votes
0 answers

Is the SanDisk ULLtraDIMM secure after power-down?

I found an interesting product last night called the SanDisk ULLtradDimm SSD (product page), which essentially claims drastic performance gains by plugging an SSD into a standard DDR3 memory channel. As one of the features of this product is data…
Miles Grimes
  • 101
0
votes
1 answer

Can I keep large encrypted files in my mailbox on mail provider server?

Is there any restriction or policy of large e-mail providers (such as GMail, Yahoo, Hotmail and similar) for keeping/storing large encrypted files by the users within their disk quota in 3rd party mailbox for privacy purposes?
kenorb
  • 799
  • 4
  • 8
  • 27
0
votes
2 answers

Store a file on a harddisk without root having access to it

Is there a way to store a file on a disk as a user so that even the root user has no access to it? I tried EncFS but that is no solution because the root user can switch to every user, so he/she can read the encrypted files too. How can I store a…
rubo77
  • 2,350
  • 10
  • 26
  • 48
0
votes
2 answers

securely storing password in a file

I am working on making a log file for a small application. If an error occurs in the application then I have to send a mail to a person. I've figured out the code to send a mail to a person, but I don't want to hard code the password as a string.…
Raki
  • 1
0
votes
3 answers

Best way to store passwords for a LAN tool?

I am making an app in Python for linux as a front end to the router (to automate some tasks). But I need to log in to the router before I can do any operations on it and since it uses a http-auth I need to send it the clear text password and hence…
Grim Reaper
  • 518
  • 1
  • 4
  • 14
0
votes
3 answers

How to store user credentials like Mint.com

If you have a website that need to store user's credentials for other sites, how do you store those credentials securely? An example is Mint.com where you give them your username/password for your bank accounts. Based on this quora answer, Mint.com…
kefeizhou
  • 101
  • 1
0
votes
3 answers

Storing passwords and other data for coworkers

At the moment we are encrypting our server passwords and other important data internal via PGP. Every coworker has got his/her own private key/pass combination set up on their workstation. The problem is now, when a new coworker comes into play, we…
peipst9lker
  • 101
  • 1
0
votes
2 answers

Is my domain registrar storing my password in cleartext?

I called my domain registrar (unnamed here but not difficult to find out and a major provider) about a year ago to have them change some DNS settings. While on the phone, the customer service rep had me speak my password (letter by letter) to prove…
michaelrbock
  • 105
  • 8
0
votes
0 answers

What's the most secure mounting method for external storage in Nextcloud when not using encryption on rest for performance reasons?

My threats are: MitM basically, eavesdroppers I have a Nextcloud instance and I was thinking of mounting sshfs locally and selecting local as the external storage type and then putting the data there, but is it the most secure option? Nextcloud…
Sir Muffington
  • 1,447
  • 2
  • 9
  • 22
0
votes
1 answer

NAS newbie: how to ensure that network storage is encrypted at rest (and ideally in transit and in use) for Windows, Linux, Mac

I'm looking to buy an ~8TB NAS* for my home office (I guess it's called a "private cloud"). I want to connect to it from Windows, Linux, Mac, Android, and iOS. How can I ensure that the network storage is encrypted at rest (and ideally in transit…
Ryan
  • 315
  • 4
  • 13
0
votes
0 answers

Suspicious SSD corruption exactly at LUKS encryption header

I am helping with an interesting data recovery issue. The laptop was running Debian 11 Linux with LUKS full disk encryption on a Samsung 970 Evo Plus 2TB SSD for quite many months. Suddenly the LUKS password input on boot stopped working. I…
stackrunner
  • 1
0
votes
0 answers

Is storing a username in session storage a security risk?

Goal I have a page which verifies the user's email address, that has access to their user id. From this page they're redirected to the login page. I want their username to be filled in already. In other words, passing the username (or email) from…
Mike V.
  • 1
  • 1
1 2 3
…
15 16