The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

0
votes
0answers
22 views

Should universal delete, or “the right to be forgotten”, be an extension to OpenID Connect “signout” or authentication in general?

There are different levels of maturity various OpenID connect implementations may have. One of the optional features is the session management and sign out feature. Now that this has finally ...
20
votes
7answers
2k views

When do honest people need privacy or anonymity? (e.g. they have nothing to hide) [on hold]

I'm having a discussion with someone who thinks they don't need technical measures of privacy or anonymity. Common arguments against needing to care about privacy or anonymity include: Everything ...
4
votes
1answer
48 views

Storing personal information in cookies

I'm trying to do a simple display integration between two websites. One on: domain.com and another on: subdomain.domain.com All I want to do is show a "Hello John, Return to Client Area" ...
8
votes
2answers
420 views

Privacy of my company's guest Wi-Fi [duplicate]

I use my company's guest Wi-Fi along with another maybe 1500 other people across our site. On my breaks I access some random chat servers. Can my company see and hear my conversation?
6
votes
3answers
84 views

Stalking and harassment [on hold]

I believe my ex wife is redirecting my Yahoo and Google accounts and somehow has access to anything I do online. How can I know if my suspicions are true? She is director of I.T. of a large company, ...
2
votes
0answers
222 views

Just how intrusive IS Cortana? [on hold]

According to Microsoft's privacy statement: To enable Cortana to provide personalized experiences and relevant suggestions, Microsoft collects and uses various types of data, such as your device ...
4
votes
3answers
166 views

Using Tor browser on a Windows machine

Suppose a person is running a Windows 7/8 operating system. If she/he uses the TOR web-browser, can Microsoft see what they are browsing? Would that not defeat the point of using TOR in the first ...
3
votes
1answer
65 views

Browsers root CA accepted, countries and checking fingerprints

This is a question derived from several others, and I can not comment on those, so it is not duplicated, please read: In some related questions some users comment that: "They wouldn't ...
-2
votes
2answers
47 views

Is there any way to formally ensure privacy to my clients by technical means?

Imagine you are a software solutions company. One of the solutions you provide are domains, email and forwarding mail to their Gmail accounts. After we have created a domain and several email ...
1
vote
1answer
49 views

Resellers and web admins and email privacy

Maybe I'm missing something, but this is "my problem". If you ask some company to create some domain for you and several e-mail account with that domain and forward that information to your gmail ...
6
votes
2answers
385 views

Why do some companies ask last 4 digits of my SSN or a scan of my ID? What are my risks?

Yesterday I found out that some major service provider (online rentals) that I use now requires proof of my identity if I want to continue and make a booking. I was offered 2 options: 1) Enter last ...
-2
votes
1answer
50 views

Freedom method for anonymity

In a book I am reading, a system called Freedom is mentioned as a means to protect user privacy. Though at some point it mentions that it uses multiple proxies, so even if a node behaves maliciously ...
-1
votes
2answers
47 views

Mobile Phone security - help finding security/privacy review/discussion [closed]

I'm in the market for a new phone, and was wondering which modles/operating systems are the best to protect privacy/security. I don't use social media, so won't have Facebook/Twitter,etc. I am fairly ...
1
vote
2answers
80 views

Is It Good or Bad Practice to Fake User Agent

I'm using a browser on Mobile. I found a program that can fake my User Agent (UA), so I changed to something else. Is this good practice or bad practice in terms of preserving privacy? The way I ...
0
votes
0answers
78 views

How can secure email be used while avoiding government attention?

Presumably all unencrypted email is available to federal agencies including IP addresses, header information, and email content (eg, through SMTP with or without SSL and TLS -- thunderbird has an ...
-5
votes
1answer
114 views

Is Google intercepting my emails? [closed]

I was recently checking my Recent Activity under the "Details" tab inside my Gmail inbox, and I noticed this IP Address, it's not my IP: I proceeded to look up the IP and it's located in Mountain ...
4
votes
0answers
46 views

What are the compliance requirements or standards for a non-US firm hosting personal data in the US?

I work for a head hunting company with offices in Canada and Asia. We migrated our custom built CRM system from our own servers hosted in Japan to an Amazon hosting service meaning that all our data ...
4
votes
1answer
40 views

How accurate the recent activities location provided by Microsoft emails

One of my emails is on hotmail.com provided by Microsoft. Recently, after few suspicious incidents where my computer was hacked and many other accounts, I changed all my passwords including this ...
-2
votes
0answers
25 views

So I have a compter from my company and I want to know. if I am not on windows working page can my employer still see my browsing data? [duplicate]

So I go on incognito and I watch videos and browse websites. so if I do this can my employer see what I am doing? And how can they see. Please give a brief step by step description. By the way I ...
-2
votes
3answers
79 views

Why has there been a complete focus on privacy against the government but not against everybody else? [closed]

Not sure why the concern on privacy has been focused on the government. There has been no mention for people on the ability of their companies, exes, and even the random stalker to snoop their online ...
1
vote
1answer
62 views

Do file hosting services check user data manually by human? [closed]

I wonder if file hosting services like Dropbox, MediaFire, OneDrive, Google Drive, etc. manually check user data for piracy or copyright infringement. Although their terms of service always say that ...
-1
votes
1answer
58 views

Is someone reported a video to the fbi, would the IP address be traced? [closed]

Supposedly, if someone were to report a video to the fbi, if anyone watched that video, would their ip address be traced down?
-1
votes
1answer
36 views

Should a Web Search with Evernote results be a concern?

While using a Chromium based browser (Chromodo) and doing a regular Google search, Evernote is now appearing on the side with "related results in your notes". Does anyone know how they are doing ...
5
votes
3answers
110 views

Can a website detect my local WIFI network I am in?

I have two computers, both of them locate at the same local WIFI network ( ie: connected to the same router). I use VPN on a computer to visit a website, and don't use VPN on another to visit the ...
2
votes
1answer
52 views

Hushmails “Secure Forms” & HIPAA

I just picked up a job for integrating Hushmail's Secure Web Forms into a medical website. The forms will submit patient's (PHI) data to Hushmail's servers, encrypt the data, and then send it to their ...
13
votes
1answer
1k views

Which parts of an HTTPS connection can be revealed? [duplicate]

Say, I use a public WiFi connection to load https://google.com in the browser, and then continue browsing on that site for a few more pages (performing searches in Google). Can anyone else (like ...
5
votes
1answer
77 views

Are images created with commercial software stamped with identifiers that can be traced back to a serial number?

To the best of your knowledge, do images created with Photoshop and/or other commercial software embed any bits of information that can allow someone (governments, security agencies?) to trace the ...
-1
votes
2answers
67 views

Can the payer of my cell bill listen to my calls? [closed]

I am not an IT person so I'd need a simply-worded answer. I'm considering getting a smart phone, and someone else would be paying the bill, someone I don't necessarily trust. I'd like to know: would ...
3
votes
1answer
37 views

What are the security benefits to block all http referer header requests for web browser?

I would like to know also if you lose site functionality. Is this a security benefit that is beneficial than compromising functionality (if compromising at all)? What I mean by this is one a ...
47
votes
6answers
8k views

Why do security experts like Snowden use email services like Lavabit and Hushmail rather than self-hosted email?

Why would anyone like Edward Snowden rely on 3rd party services like Lavabit or Hushmail to host his email? I mean it's very easy to set up a self-hosted email server. What you need: Rent VPS (even ...
1
vote
1answer
122 views

Is it there any effective way to prevent shodan to access my webcams [duplicate]

Recently while browsing using shodan, I came across a search string to explore webcams. Some of the searches I carried out were: webcamxp city:city name webcamxp geo: longitude and latitude ...
3
votes
2answers
115 views

Cryptographic algorithm to anonymise strings in pronounceable fashion?

NB: I originally posted this on SO (link), but then realise Security SE be more suitable, since there's existing questions around Crypto-PAn, which is similar here I have a logfile of database ...
1
vote
1answer
147 views

Can my ISP/MSP read my Whatsapp messages?

I wonder whether the Whatsapp messages are sufficiently encrypted so that the ISP/MSP ( mobile service provider) cannot read what is inside? I will be travelling to some of the most oppressive ...
0
votes
0answers
82 views

How 'private' is my setup?

I'm currently running QubesOS (so essentially a virtualized Fedora operating system), which I use to access an offshore VPS through I2P (using garliccat). I then route all my traffic through the VPS ...
1
vote
0answers
42 views

How to monitor kernel mode driver traffic (ESEA client)

E-Sports Entertainment Association (ESEA) is an alternative method of finding players to match up against in (among others) Counter Strike GO. They are known for having the best anti-cheating measure ...
1
vote
2answers
134 views

Online anonymity for a journalist in a dangerous country [closed]

I am a journalist in a corrupt country. I am concerned that my online usage will allow my antagonists to track me down, and it wouldn't end very good. I am aware that I may use TOR and VPNs, and ...
0
votes
0answers
44 views

Theoretical VPN and Tor Encryption Chain

Okay, so I've been looking around at the benefits of using tor to access you vpn and vice versa. Here's what I've come up with: VPN -> Tor Pros: Hides Tor usages from isp Hides your activities ...
1
vote
0answers
141 views

Minds.com : Can we trust it on privacy terms? [closed]

The Minds.com social networking offers: Open Source encryption algorithms for all communications and data storage. Open Source code for their associated tools (as for now: Android and iOS). How ...
1
vote
1answer
448 views

What happens if an attacker steals my phone's IMEI number?

I have some questions regarding IMEI numbers and data and identity theft. While searching online I have found many conflicting answers regarding this topic and would like some clarification if ...
5
votes
1answer
102 views

How do I protect myself from the aftermath of the OPM hack?

As a federal employee, I, along with some 4 million other Americans had our information compromised in the recent OPM (office of personal management) hack. Former and current addresses, names of ...
0
votes
1answer
73 views

Court order and domain + hosting privacy [closed]

I'm receiving legal threats from a law firm that wants me to remove information from my website that one of their clients are unhappy with. Specifically they threaten me with a court order forcing me ...
0
votes
2answers
141 views

Authenticating Hotmail's certificate and connection security

I've recently received the following error message from hotmail.com (or live.com) after I have logged in using Chrome browser, consistent using different accounts and computers (regardless of 2FA or ...
1
vote
1answer
17 views

What TCP-level commands affect the global configuration of the stack?

I'm looking at TCP, and what options may affect the global configuration so that I can detect a repeat visitor. What TCP commands (for lack of a better word) affect the global TCP stack? Or that or ...
0
votes
1answer
161 views

Defeating Browser Fingerprinting by spoofing the browser user agent and VPN

I don't want any website to identify me and to know what is my geographical location. As far as a website is concerned, I am always a new visitor who never visits it prior. If I leave the website, ...
3
votes
3answers
447 views

Privacy and VPN - does employer's VPN still log activity when I am connected by wifi?

A company I work for wanted to use a VPN client called Junos Pulse to connect to their file server. I am on my personal computer, and connected to my personal wifi. I was not using their VPN for ...
-4
votes
1answer
125 views

I abused my VPN, what are realistic privacy consequences? [closed]

Ok let me give you a small background of my problem. I am using a (very good) VPN service as I am trying to hide the fact that it is me (ip:....,name:....,etc) who is managing a particular website. I ...
2
votes
3answers
222 views

How can two parties compare whether a simple (5 letter) shared word matches, without disclosing their word to each other?

I'm having some trouble with this scenario, some advice would be great. The context is that a group of people have each been give a simple 5 letter word - for example: Alice: ACTOR Bob: JEANS Dan: ...
-1
votes
1answer
178 views

Can other people monitor my internet activity in the same WiFi network? [duplicate]

I have a tablet that I share the same WiFi with two other people/computers. I have installed the CM Security anti virus app, and also a cleaning app. I think that my activities are being monitored by ...
4
votes
1answer
44 views

Practical implications of 2014's android SOP vulnerability

For a project at university I have done research about all kinds of security issues, especially privacy-related ones, that have come up on mobile OS and applications over the last few years. One of ...
-1
votes
1answer
35 views

What is the best formal method to prove the privacy (anonymity) of a security protocol

I am studying about TOR. I require to formally verify that the involved protocols provide anonymity. However, I could not find a suitable formalism of anonymity. If there exist any ...