Questions tagged [data-security]

Data Security means protecting a database from destructive forces and the unwanted actions of unauthorized user. Data security also protects data from corruption. Data security is the main priority for organizations of every size and genre.

99 questions
2
votes
2 answers

GDPR compliance for a web app (Vue.js, Django, Heroku)

I have build a web application using Django, Vue.js and deployed it on Heroku. It is a web application made for a big charity where you can win prizes by donating to the charity. The following information is…
user745587
  • 125
  • 1
  • 12
2
votes
2 answers

TrackJS and GDPR and SPA

I'm using TrackJS in SPA, i have logic related to GDPR, so I can NOT send any data before consent given. I found onError config option which help with this. But i still have external request to https://usage.trackjs.com/usage.gif. I can disable this…
Alexandr Vysotsky
  • 1,081
  • 13
  • 16
2
votes
2 answers

GDPR compliance verification for my website

We have a WordPress website that sells and ships products all over the world including European countries. We have modified UK-Cookie-Consent plugin to our needs. We currently display the following warning at the top of the page where clicking on…
user424370
  • 89
  • 1
  • 13
2
votes
1 answer

system privilege issue

I have the user for example HR which has been granted very powerful system privilege "GRANT ANY PRIVILEGE"...This user used this privilege and granted some privileges to other users...Now I want to revoke "GRANT ANY PRIVILEGE" from HR and also…
kupa
  • 1,861
  • 5
  • 25
  • 41
2
votes
1 answer

Amazon RDS Security - Is there any alternative to Encryption at Rest?

When using a Cloud DB Provider like the Amazon RDS service, the service is responsible for various things like patching / updates / backup etc, does that mean that Amazon employees have access to the data within the DB itself? If so, is there any…
Jagmag
  • 10,283
  • 1
  • 34
  • 58
1
vote
1 answer

MDM Wiping Data when device lost scenario

How does the 'wipeout data' command/payload executes on a lost device and powered off. I know the 'Security Info' command when fired on a powered off or locked device, the status comes as 'Notnow' and the command is queued up. The queued command is…
Manmay
  • 539
  • 2
  • 12
  • 28
1
vote
2 answers

securing sensitive user data, healthcare SaaS

I'm developing a SaaS in healthcare. Users are trusting my SaaS with their very private medical information. I expect my platform (LAMP based) to be breached sooner or later and I'm looking for ways to minimize data leakage. Currently I have - user…
John D
  • 19
  • 1
1
vote
1 answer

Filtered data without using RLS

In Power BI, have two tables: one for UsersData and one for CountryData. The Username and Country columns can be identified in the UsersData table and the Country and CityName columns are in the CountryData table. The CountryData and UsersData…
1
vote
1 answer

Warning before overwriting existing data in VBA

I have the below code that creates a pop-up when new data is pasted into the specified range (A15 : E33). What I would like is when the user attempts to paste data into the range the pop up shows up and if the user selects no the data isn't pasted,…
RBRN1231
  • 67
  • 5
1
vote
0 answers

When is perturbation used for data privacy/security?

I know that data perturbation is now preferred in data privacy/security since it hurts truthfulness, but it is also used in some areas. Does anybody know where it is used? I couldn't find a research or article about it. Below link is a good resource…
1
vote
1 answer

Can firestore data be examined at client by app users?

I am making a react-native App with Firebase backend. User profile info is stored in Firestore unencypted under "Users" collection, like so: Users : { : { // this is a document uid : , name : "Sundar Pichai", dob :…
kernelman
  • 992
  • 1
  • 13
  • 28
1
vote
0 answers

How can I share R shiny App internally without data breach?

I have developed a shiny App by installing R and R studio within local sever of my company and now I want to share app with my team. Our data is sensitive and I don't want my code and data go out of our server. I don't want to deploy in…
1
vote
1 answer

Synapse / Data Factory: Do Self Hosted Integration Runtimes expose data locally

We need to ensure that the VM hosting the Self Hosted Integration Runtime (SHIR) can be supported without risking exposure of the data being processed by the SHIR - which may be sensitive in nature. What information related to data sources is cached…
1
vote
1 answer

How to prevent users to download data in GCP (all possible ways)

I have a GCP project that I can allow users to do anything they want: they can enable new components, they can upload data into BigQuery/Cloud Storage, etc. The only thing they can't do is to create VMs. But I don't want to allow them to download…
1
vote
0 answers

Security of files containing a uuidv4 in the public URL on Google Cloud Storage

I am working on a project where I need to store files from users on a google cloud storage bucket. These files are private by default but should be readable by others, if my backend allows access to specific elements in my database, in which the…
Kevin Kreps
  • 560
  • 6
  • 18