Thursday, January 05, 2006

Re: st: Protecting data sets

>You might consider using a file compression application that has the >ability to password protect your files as a first step. You should be >able to decompress and change the password at any time and you would >receive the additional benefit of smaller file sizes for storage. I use >Winzip (http://www.winzip.com), but I'm sure that there are a number of >other applications out there for Windows and other OS's.

Anyone using the encryption in zip files should be aware that they are quite vulnerable to brute force attacks. A five or six character single case key can be broken a matter of seconds. If you use zip files chose passwords that use mixed case letters and special characters, not susceptible to dictionary attacks and are at least ten bytes long.

Do not place any faith in application-specific passwords as well. For instance, Stat/Transfer has no problem reading password-protected SAS files.

Best,

Steve

---------------------------------------------------------------- Steven Dubnoff sdubnoff@circlesys.com Circle Systems We make your data instantly usable. Download Stat/Transfer from http://www.stattransfer.com 1001 Fourth Avenue, #3200 (206) 682-3783 Seattle, WA 98154 Fax (206) 328-4788

* * For searches and help try: * http://www.stata.com/support/faqs/res/findit.html * http://www.stata.com/support/statalist/faq * http://www.ats.ucla.edu/stat/stata/


Tag:


Links to this post:

Create a Link



<< Home

This page is powered by Blogger. Isn't yours?