Re: secure data export

2011-06-26 Thread Elazar Leibovich
On Sun, Jun 26, 2011 at 10:24 AM, Oleg Goldshmidt wrote: > > It's a tough problem. It is a lot more difficult than AV since you > want to prevent essentially arbitrary data from leaking, not just data > that may damage another machine. I don't think preventing data leak is a problem here, or gen

Re: secure data export

2011-06-26 Thread Oleg Goldshmidt
On Sun, Jun 26, 2011 at 9:44 AM, Nadav Har'El wrote: > A trivial (though > perhaps suboptimal) way to do this is for that machine to export the document > to PDF; Presumably this conversion will lose all invisible information, I suppose a sophisticated attacker may, in principle, devise a way to

Re: secure data export

2011-06-26 Thread Oleg Goldshmidt
On Sat, Jun 25, 2011 at 9:58 PM, Orna Agmon Ben-Yehuda wrote: > The OCR idea is indeed nice. However, it is only good for small amounts of > data, or where the accuracy is not so important (English texts). It is not > so good for Hebrew or data (numbers), not to mention binary data. Come to thin

Re: secure data export

2011-06-25 Thread Nadav Har'El
On Sun, Jun 26, 2011, Orna Agmon Ben-Yehuda wrote about "Re: secure data export": > I am currently thinking about text, but If the text contains lots of > numbers, then I cannot trust the person to recognize the errors by reading > the file. Oleg - I did not consider steganogr

Re: secure data export

2011-06-25 Thread Orna Agmon Ben-Yehuda
On Sat, Jun 25, 2011 at 11:33 PM, Oleg Goldshmidt wrote: > Orna Agmon Ben-Yehuda writes: > > > The OCR idea is indeed nice. However, it is only good for small > > amounts of data, or where the accuracy is not so important (English > > texts). It is not so good for Hebrew or data (numbers), not to

Re: secure data export

2011-06-25 Thread Oleg Goldshmidt
Orna Agmon Ben-Yehuda writes: > The OCR idea is indeed nice. However, it is only good for small > amounts of data, or where the accuracy is not so important (English > texts). It is not so good for Hebrew or data (numbers), not to > mention binary data. I thought you said the data you wanted to

Re: secure data export

2011-06-25 Thread Moish
On 25/06/2011 21:06, Shachar Shemesh wrote: On 25/06/11 21:58, Orna Agmon Ben-Yehuda wrote: I am trying to prevent a specific action of various possible (imaginary?) malware, which attempt to export data as hitchhikers on data which is exported anyhow. I do not assume the malware is trying to a

Re: secure data export

2011-06-25 Thread Shachar Shemesh
On 25/06/11 21:58, Orna Agmon Ben-Yehuda wrote: I am trying to prevent a specific action of various possible (imaginary?) malware, which attempt to export data as hitchhikers on data which is exported anyhow. I do not assume the malware is trying to add itself to the CD, in addition to the da

Re: secure data export

2011-06-25 Thread Orna Agmon Ben-Yehuda
On Sat, Jun 25, 2011 at 9:28 PM, Oleg Goldshmidt wrote: > > The point of the additional file is to leave little room for anything > else. > > Regarding the FAT place: Assuming the CD ends up on an infected machine, > or > > falls into the wrong hands ( example: you want to make your client an > o

Re: secure data export

2011-06-25 Thread Oleg Goldshmidt
> The point of the additional file is to leave little room for anything else. > Regarding the FAT place: Assuming the CD ends up on an infected machine, or > falls into the wrong hands ( example: you want to make your client an offer > on a CD, but you do not wish to give the client info about othe

Re: secure data export

2011-06-25 Thread Orna Agmon Ben-Yehuda
On Fri, Jun 24, 2011 at 4:54 AM, Shachar Shemesh wrote: > ** > On 24/06/11 00:35, Orna Agmon Ben-Yehuda wrote: > > Hello all security experts, > > Hiya, > > > I would like to export data from a machine on a business's internal > network on a safe media, such that only the files I want exported a

Re: secure data export

2011-06-24 Thread Moish
On 23/06/2011 23:35, Orna Agmon Ben-Yehuda wrote: Hello all security experts, I would like to export data from a machine on a business's internal network on a safe media, such that only the files I want exported are on the media. Specifically, I consider the possibility that the machine may alr

Re: secure data export

2011-06-23 Thread Elazar Leibovich
2011/6/24 Orna Agmon Ben-Yehuda > Hello all security experts, > I'm not a security expert, however you raised my curiosity. > > I would like to export data from a machine on a business's internal network > on a safe media, such that only the files I want exported are on the media. > [snip] Th

Re: secure data export

2011-06-23 Thread is123
On Fri, 24 Jun 2011 00:35:16 +0300 Orna Agmon Ben-Yehuda wrote: > Hello all security experts, > > I would like to export data from a machine on a business's internal > network on a safe media, such that only the files I want exported are on > the media. Specifically, I consider the possibility t

Re: secure data export

2011-06-23 Thread Shachar Shemesh
On 24/06/11 00:35, Orna Agmon Ben-Yehuda wrote: Hello all security experts, Hiya, I would like to export data from a machine on a business's internal network on a safe media, such that only the files I want exported are on the media. Specifically, I consider the possibility that the machine

Re: secure data export

2011-06-23 Thread Oleg Goldshmidt
Hi Orna, First, I'd like to make sure I understand the question. I normally do it by rephrasing... You have some human-readable, non-obfuscated plain text files you wish to write to a CD and take the CD outside of some secure location. You have 2 concerns: 1) Something else may be written onto t