Ohio University is open; a transformer failure has temporarily closed the West Union Street Office Center.

OIT Tech Support can still be reached by calling 3-1222. More Information
 
OIT Tech 32px
How to fix "Unrecognized course" Blackboard error in Campus Pack tools
Securing the cyber generation gap
Site licensing for Adobe, Microsoft and Smartsheet
May 2015 Blackboard upgrade completed
Top 30 targets for hackers: Are you on the list?
Blackboard upgrade: SafeAssign and Calendar improvements
How to fix iOS WiFi issues: Forget and re-add the OHIO network
Blackboard upgrade: Student Preview mode
Down time for Blackboard upgrade to be shorter than expected
Recordings of CIO candidate open forums
deco-circuit-banner

Invisibly visible documents: Can hackers see what you deleted?

Monday, June 16, 2014
Meg Omecene  

Before and after images of uncovering a Sharpie-blacked password.

Did you know that anyone with image editing software can look at a scanned document with marked-out security information, use a tool to erase the blacking and look at your information? To send such a document, you must properly redact sensitive information.

When Sharpies aren't so sharp

You may think that if you can’t physically see sensitive information, no one else can. However, just because you cannot see it does not mean that it is not present.  For example, covering sensitive information with permanent marker is easily defeated through scanning the page and using Photoshop to remove the black ink.

Digital Don'ts

Likewise, do not place a white box over information in Microsoft Word. All the recipient needs to do is drag the white box to reveal that information.

Even exporting the document into a pdf with blacked-out information is risky. People who are familiar with the Acrobat format will be able to find the blacked-out material.

Safe ways to send

The best approach is not to share documents that contain sensitive information in the first place.

If sending a document is unavoidable, you have two options, both of which include printing and scanning: You can create a new document and use dummy information or you can cover information with a black box. In either case, the next step is to print the document out, scan the printout and use that scanned image to transfer the information. You must send only the scanned version.

Keep these tips in mind as you share documents. Remember: if the information has been in the file, someone can find it.


Related Links