BT Digital Vault security concerns

Hello all,
I have copyrighted video in my Digital Vault but I'm concerned about piracy. I have done some tests and it seems that any prior contacts are able to copy the video link and then stream it directly from the vault, even after they have been removed as contacts and the folder is set to private. This seems like a serious security breach to me.
Is there anyway around this issue? I want to make use of BT Digital Vault but it seems to be very unsecure.
Gae

Hi Gae,
I can understand your concern.
I'll have a look into this for you and let you know whats going on.
Thx
Craig
BTCare Community Mod
If we have asked you to email us with your details, please make sure you are logged in to the forum, otherwise you will not be able to see our ‘Contact Us’ link within our profiles.
We are sorry but we are unable to deal with service/account queries via the private message(PM) function so please don't PM your account info, we need to deal with this via our email account :-)”
td-p/30">Ratings star on the left-hand side of the post.
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

Similar Messages

BT Digital Vault Autobackup

I have tried to install this software but it seams to be incompatible with Windows 8, any ideas?

Be warned - BT Cloud does NOT have the backup ability that BT Digital Vault has.
If you want a secure place to backup your files online, I suggest you look for a different solution.

Help upgrade to Digital Vault Plus

I have recently left bt broadband and had an email notifying me that my digital vault would be cancelled unless i upgrade to digital vault plus. I have tried to do this but when I go to upgrade and enter my payment details it says it is undergoing maintenance. This has been going on for 5 days now and my deadline is tomorrow or my account is cancelled and I will lose all my photo's as they are from an old pc.
Please help.

Hi Billie123,
Welcome to the forum and thanks for posting. I am sorry for the problems that you have run into. Can you please get your details off to me and I will be able to help sort this out?
Please drop me an email via the 'Contact Us' link in my profile. (click on my name and you will find the link under the "about me" section). Include your BT account details, your Digital Vault username and the link to this thread.
Cheers
Sean
BTCare Community Manager
If we have asked you to email us with your details, please make sure you are logged in to the forum, otherwise you will not be able to see our ‘Contact Us’ link within our profiles.
We are sorry that we are unable to deal with service/account queries via the private message(PM) function so please don't PM your account info, we need to deal with this via our email account :-)

Digital Vault / Auto Backup - How to upload a dire...

Hi there,
Can you use auto backup to backup a directory structure that is not held within one of the options under 'we suggest'?
I want to backup a directory that has 2 layers of sub directories that is on another drive on my computer, I tried going via 'you pick' with everything unticked on 'we suggest' but, although I could navigate to my other drives, I could only select files and not directories which is no use to me as it would take far, far to much time to select all the files in each sub directory (over a decades worth of family photos)
I do not want to move it over to my documents or pictures folder as I want to keep it all on a seperate hard drive.
I cannot see a way to upload directories using the digital vault web uploader either otherwise I would do it manually.
Thank you for any assistance :-)
Solved!
Go to Solution.

Yes you can, I do it.
Forget "we suggest" and use your own selection.
Navigate to the parent folder, and simply tick the box. Everything in the parent and subdirectories will be backed up.
If you only want certain subdirectiories, then you click the "+" option, and the directory treee will be displayed.
You can then select whichever subdirectories you want.
You can backup from any "fixed" drive, but not network drives.
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Safari password auto fill security concern

Just discovered what I consider to be a big security concern with iCloud Keychain. If you go into Settings, then Safari and your iCloud Keychain is under stored passwords and auto fill, the passwords are stored in plain text with no asterisk or anything. This means that all someone needs is your 4digit unlock code and they are then able to view all your stored passwords in Safari. They should at least require your iCloud Keychain password to view these, or just asterisk them out. If someone saw you enter your four digit unlock code, and then put your phone down, they could get this information without you even knowing it. This is not safe.

The purpose of that section is so that you can see your passwords, there wouldn't be much point in replacing them with asterisks. They are password protected, just don't give others your password.

Digital Vault: can you use Filechute with digital ...

I'm hoping to use Filechute (a Mac OS program) with my BT Digital Vault allowance. (I have Filechute working fine with Dropbox.)
Filechute can be configured with either an FTP or a WebDAV enabled server
The set up needs:
1 Host Name
2 my username and password - I have these ok!
3 upload URL
4 download URL
Has someone got the settings, or can you suggest what they may be?
Many thanks

Have a look at http://www.ecamm.com/mac/callrecorder/

Security concern when selling broken 3G

I have an old iphone 3g that was submerged in water. I tried the "bag of rice" trick, but that didn't work so I bought a new 4S. My questions is: what are the security concerns of seeling the 3g on craigslist? I can't turn the phone on to reset it to factory settings. Is there anything I can do? Thanks for any input.

Oh you would be surprised lol. Check ebay and you'll see broken 3G's going around the $50 range. They're only good for spare parts i would think.

Windows Server 2008 R2 RRAS NAT Security Concerns

Recently we are deploying Windows Server 2008 R2 as the NAT gateway of our private network. During the testing, we found that the RRAS was doing its job as the NAT gateway,
however it seemed that hosts in the private network were allowed to access any listening port opened on the server side (2008 R2). In the normal scenario, the server side will have the process "wininit.exe" running and listening on the TCP port 49152.
We confirmed that all hosts in the private network were be able to connect to TCP port 49152 opened on the server (connecting by using the NAT's public IP), which introduced lots of security concerns and made us nervous. Since the server is acting as a NAT,
IP packets sent by hosts in the private network will be translated and forwarded as if it is generated by the NAT server itself. Thus, the windows firewall will not block the connection at all while dealing with "local" traffic, which actually is
the traffic from the host in the private network.
What we need is a mechanism that can block the hosts in the private network to access the TCP/UDP ports opened on the NAT server side. Since the NAT server has it IP on
the public network assigned dynamically (DHCP), static IP filtering on the private NIC does not fit our needs (Or probably we may use some hidden but advanced filter settings?). Which policy or setting should be used in our case?

Hi Daniel,
I am aware of what you are suggesting. Actually I have active the windows firewall to protect the server.
Suppose I have a network configuration as follows:
Private Network: 192.168.149.0 / 255.255.255.0 (Private NIC on server side IP:192.168.149.1)
--------------Windows 2008 R2 RRAS NAT--------------------
Public Network: 10.1.0.0 / 255.255.255.0 (Public NIC on server side IP:10.1.0.100 )
The problem is that while the windows firewall is effectively protecting my server by filtering inbound traffic from the public network, the windows firewall will not filter the traffic from
192.168.149.0 /255.255.255.0 to 10.1.0.100 (NAT's public IP)
The reason is that the TCP/UDP connection from the private network (192.168.149.0 / 255.255.255.0) to any other networks will be NATed. Suppose TCP connection from
192.168.149.23:50000 -> 10.1.0.100:1023
It will be translated by NAT and becomes
192.168.149.23:50000 <-NAT-> 10.1.0.100:60100 -> 10.1.0.100:1023
From the windows firewall's point of view, the connection is essentially a 'local' TCP connection and should be allowed regardless of any inbound filtering rules. So vulnerability is introduced. After some research, we are almost sure that the windows firewall
does not filter local traffic. Also, we are not able to guarantee any firewalls on the client side to be installed, since the nature of a NAT server is to provide such network access ability to clients and should not require the client side to change its configuration.
I do think it is a common security concern in lots of enterprise networks where Windows Servers are deployed as NAT servers. Would you mind help us address this issue and give us some advice about best-practices related?
Thank you

Fiori security concern

Hi All
We are now receiving security concerns from customer about FIORI.
1.Information Leakage:
     for instance , when we clicked an item , then it failed, and we got the error message which might cause information leakage.
     Is it possible that the backend could provide some general information with no sensitive information involved.
2.remember password option:
     after entering the password and username, the browser will prompt if you want to remember the password. there is security concern to remember password in browser. Is it possible to disable this pop-up window, that is , is it possible to Set auto complete off in every form that is getting submitted.
Thanks
Message was edited by: Michael Appleby

Hi Torren,
i don't want to be a smartass, but do you really think it's a good idea to post an image, where you can see a productive URL of a customer? When we talk about security, we should start to hide or obfuscate such information, which are absolutely not necessary to investigate an issue. I think the customer itself doesn't want to see this information in a forum, which is available for everyone in the internet. Besides: Never post a real User of a productive System in a forum!!! I couldn't believe, that your Test-User "TEST*****" is actual a real one. A hacker has now perfect premises to start an attack on this system!
Because i myself am a customer of SAP, i have the expectations, that SAP always works confidential with my data.
Sry, if i can't answer your questions, but this topic is very important for me!
Regards
Michael

Security concern about grid control agent

I am planning for grid control rollout. Our system administrator is concerned about
security of grid control agent. For example, I do not know the Oracle password,
I sudo to Oracle after login as myself.
What are the options do I have ? I have told my system admin that
other companies use "oracle" - the database sysdba/software owner as agent owner.
But my system admin think this is a big security risk since he has to tell me the
oracle password

In more explicit terms, what is the security concern you have?
Specifically, I do not see what you mean by the sentence:
when I install grid control agent as "oracle", I provide "oracle "password in order
to run job on our unix server.By "oracle" are you referring to the Oracle Software owner account, by which the Database and/or EM software was installed?
Please explain how the job is related to installation of management agent. If you are talking about running jobs after installation, when agent is configured and running, where and how exaclty are you required to enter "oracle" password?

Flash security concerns, 16.0.0.296 is installed - but 16.0.0.287 is actual?

Windows 7 -> Adobe - Flash Player: 16.0.0.296 is the installed version, but the list below (Platform, Browser, Player version) shows 16.0.0.287 as actual .... Should we "downgrade" ?
Due the latest security concerns with flash, I had to rethink the whole story - maybe better just uninstall flash?
rgds,
Chris

Hi Chris,
Version 16.0.0.296 is the latest release available. However, it's only being pushed out through our silent auto update and enterprise distribution channels. We're hard at work making sure this is also available on https://get.adobe.com/flashplayer but that's going to take another day or two to complete. Once it's out everywhere, we'll update our release notes and associated pages with the proper version number.
Thanks,
Chris

Digital vault

Twice in the last week I have tried to activate my free digital vault, both times it has got to the create a vault page and then says its unavailable due to maintainance.
Has anyone else had this problem or know whats happening.
How can I activate it?
Geoff

geoff51 wrote:
Twice in the last week I have tried to activate my free digital vault, both times it has got to the create a vault page and then says its unavailable due to maintainance.
Has anyone else had this problem or know whats happening.
How can I activate it?
Its a common problem. See http://community.bt.com/t5/forums/searchpage/tab/message?q=digital+vault
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Cancelling BT Digital Vault

I know Digital Fault goes at the end of the month but I haven't been able to find out from BT as to whether the payments will stop being taken or whether I should cancel the Direct Debit? Rang several times and filled out forms (the customer service reps that rang back couldn't help either) but not been able to get an answer. Have already got BT Infinity but was told when ordering this the Sales Team couldn't help cancel Digital Vault? Does anyone know what I should do next or shall I just wait and see what happens? Many thanks

@ AngryHobbit
I suggest you contact the forum mods they should be able to get this problem sorted for you this is a link to them http://bt.custhelp.com/app/contact_email/c/4951
They normally reply by email or phone directly to you within 3 working days they will take personal ownership of your problem until resolved and will keep you informed of progress
They are a UK based BT specialist team who have a good record at getting problems solved
This is a customer to customer self help forum the only BT presence here are the forum moderators
If you want to say thanks for a helpful answer,please click on the Ratings star on the left-hand side If the reply answers your question then please mark as ’Mark as Accepted Solution’

Inter-AS L2VPN security concern

hi all,
i want to know what is the security concern when we have Inter-AS L2VPN between two Service Provider as the attached configuration (just one service provider side configuration for the ASBR & PE the other Service Provider is the same pointing to our service provider), and how we can mitigate the risk and what is the most secure option, we need to know the advantage and disadvantage.

Hi Ahmad
Looking at your configuration it seems the setup is as below
CE1_ISP1---------xconnect---PE_ISP1-----ISP1MPLSBB----ASBR_ISP1-----IP_Link---ASBR_ISP2-----ISP2MPLSBB----PE_ISP2------xconnect---CE2_ISP1
Is that correct ?
In my personal opinion from Security Point of View already only the required loopbacks are being allowed which is good to do. And I believe the SNMP Traps and Remote Access to your ASBR would be a protected and limited access.
Apart from these there might be some other standard security features which others can suggest to be taken care of but the above two should be surely taken care of as I think.
Hope this helps you.
Regards
Varma

BB Browser Cipher RC4 128 bit Security Concerns

When you check Browserspy from your BlackBerry browser via this link:
http://browserspy.dk/
Then select "Security" from the list
Then select "SSL Encryption Check"
For my Z30 I get RC4 128 bit (see picture.)
I also get the same results using this test:
https://www.fortify.net/
There are security concerns for RC4 128 bit to the extent Microsoft has recommended not using it. See these two links:
http://en.wikipedia.org/wiki/RC4
http://technet.microsoft.com/en-us/library/cc179125.aspx
I do not have any device connecting to the web using RC4 128 bit.
Is there a way to change the cipher strength or order for the BlackBerry browser?
(Just as a side note - because BlackBerry uses WebKit for the browser (Apple uses WebKit) a lot of the browser tester sites pick it up as Safari. I woder if browser testing to determine market share doesn't flag some of Blackberry as Apple due to this "confusion.")
Solved!
Go to Solution.

foryour information, here is what I get for my desktop browsers :
AES128 for Mozilla Firefox 36.0
AES128 for Google Chromium 42.0
AES256 for MS Internet Explorer 11
and also...
AES128 for Mozilla Firefox 35.0.1 APK on my Passport
The search box on top-right of this page is your true friend, and the public Knowledge Base too:

BT Digital Vault security concerns

Similar Messages

Maybe you are looking for