The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

2
votes
1answer
27 views

Can you trace someone through picture header information?

I learned that jpg, png, bmp and most image files contain headers and plain text in them. I decided to open a jpg file in Notepad and saw a bunch of information and I was wondering if there was a way ...
12
votes
6answers
892 views

Find matching phone numbers without actually knowing them

We have a mobile app that, given two users, needs to let them see what common contacts they have based on their phone numbers. How can we do this in a cryptographically secure way and respecting the ...
3
votes
1answer
40 views

Can canvas fingerprinting be prevented?

How can canvas fingerprinting be prevented in web browsers? The site Panopticlick said I had a hash of WebGL fingerprint of 5 bits of entropy. I installed CanvasBlocker addon and tested again and it ...
-1
votes
6answers
2k views

How to prevent illegal file transfer or copying of video files from a PC?

I have developed a windows desktop application using VB.NET. My applications main purpose is to play videos. I have some videos which has copyrights on them, that are not suppose to be distributed or ...
3
votes
0answers
83 views

Work wants to create an admin account on my system that I don't have access to? [on hold]

This is on a Windows 10 system, and they want to create an administrator account that only my manager will have the password to. This is apparently to enforce some new "security policies" that haven't ...
-1
votes
0answers
65 views

What other actions can I take to remove malware from an compromised device and how do I do them? [on hold]

My device has been infected with a RAT (Remote Access Trojan) or whatever the phone equivalent is. Here is my device info: Model: Samsung Galaxy Note 5 (CDMA) (SM-N920V) Service Provider: Verizon ...
0
votes
2answers
60 views

Can they tell which individual computer was torrenting on shared internet connection?

I live in a shared house where multiple people use the same wi-fi (actually, there’s two: the normal frequency and 5GHz one). The internet is included in the rent. The other day I received a complaint ...
7
votes
1answer
77 views

How can meta data be used to identify users through chained VPNs?

Online privacy is a big issue for many people nowadays. Using VPNs is the usual suggestion as a means to stay anonymous. More often than not, somebody comes up with the point "just chain multiple VPNs ...
3
votes
0answers
61 views

What can be derived from someone else's Google Analytics id?

A web page, which I'd expect to respect users' privacy, contains Google Analytics tracker. I consider it to be a wrong thing; before raising this to the site owner, I'd like to do minimal "research". ...
-2
votes
1answer
64 views

Can government query company, such as Google, to get list of accounts associated with some information, such as IP address or phone number? [closed]

UPD: My naive thought was that government requests should explicitly point account for which they requesting information. And that a broad requests like getting list of accounts logged during some ...
-3
votes
2answers
116 views

Why does privacy matter? [closed]

I've yet to find a comprehensive and compelling list of reasons for why people should care about their privacy, why bother defending it from the likes of Google, Microsoft, Facebook and the like. I ...
3
votes
1answer
95 views

Google DNS query pointing at ISP instead of Google

I am not sure if this is actually an issue or not or if I am just being too paranoid, but I noticed this upon arriving home to Alaska recently (location is important as you'll see shortly). In short, ...
3
votes
1answer
79 views

Is DNS leak really an issue?

I'm reading about DNS leak and what threat it can pose to VPN users, for instance, this question. But generally, there's tons of similar topics on the internet. But what are people afraid of? I just ...
0
votes
1answer
34 views

Does posting my computer name publicly make my system vulnerable?

I am wondering if it is paranoia and/or privacy overkill to block out one's computer name when posting terminal output in public forums? I don't know enough about networking to know if it's possible ...
4
votes
0answers
127 views

Using your full name as your work email address? [closed]

Standard practice in the workplace appears to be using your full name as your email address. This presents some privacy concerns to me. Even though we all grew up being told it's advisable to use a ...
5
votes
2answers
169 views

Best practices: Use of a single private key as a person, or multiple to identify self across domains?

Similar to the question here, I'd like to apply the same question to a person. For example, I have implanted a chip in my hand that holds an encrypted private key that serves as my personal unique ...
0
votes
1answer
45 views

What prevents ISPs from tracking chain of proxies' (or Tor relays') IP addresses?

I searched all over the internet for the answer for my simple question, but couldn't find anything useful. I already know that police have to access PCs used as proxies or Tor relay nodes to read ...
94
votes
14answers
27k views

How can mom monitor my internet history from a distance?

This might sound like a funny question from a twelve-year-old. The less funny part is that I am 21 and currently studying at university (I don't live at University, although I am 15 minutes away. I do ...
0
votes
1answer
41 views

Is bypassing my VPN and seeking my IP address hacking? [closed]

I used VPN service to hide my location. Program noticed that another program included inside the mediawiki I was editing is trying to bypass it and read my IP address. Is that allowed or is it ...
0
votes
0answers
28 views

What is attribute-based authentication?

I found the following definition here : From a privacy perspective a better solution would be the use of attribute-based authentication (Goyal et al. 2006) which allows access of online ...
4
votes
2answers
65 views

Signature that can only be verified by author and recipient - without pre-shared key

Desiderata: Alice wants to send a message to Bob for him to keep and to be able to refer to, such that Bob can be certain that the message came from Alice and was not tampered with. Alice also ...
1
vote
2answers
28 views

Random autofill [closed]

I was trying to pay for something just now, and when I put my name in the chrome autofill came up and I clicked it. The address that showed up was wrong though but corresponded to the postcode of one ...
1
vote
0answers
20 views

Information and Settings Collected from a PC Connected to a Web Server

1- What are the information and settings collected from my pc when I connect to a website server? 2- When I connect through a VPN, Could the website server detect a mismatch between my new location ...
4
votes
0answers
33 views

.com domain registered offshore [migrated]

I want to register a .com domain, without risking it being seized by America. Articles such as these worry me: http://www.wired.com/2012/03/feds-seize-foreign-sites/ ...
3
votes
1answer
128 views

Does the use of JavaScript make ProtonMail insecure?

I like the look of ProtonMail. However, what has stopped me from signing up is that JavaScript seems to be used at various points in the site, and for someone to read your email they must click on a ...
2
votes
2answers
152 views

How to test my anonymity?

let's assume that I've used proxies and anonymizing tools as much as I want. How to be sure that I'm totally anonymous? I'm not talking only about IP spoofing and identity hiding, but other and ...
0
votes
3answers
64 views

If I'm the owner of VPN network, what can my ISP see?

I'm planning to build small VPN network, so that me and my customers can connect and use it. But from my understanding, if I use my own VPN network, still my ISP can see the traffic, am I right? Here ...
1
vote
0answers
14 views

Steps before updating privacy policy [closed]

What are the steps to be taken before changing/updating the privacy policy of an app or a service? Such as informing the user etc. Are there any strict rules to be followed?
2
votes
1answer
30 views

How to list all the permissions requested by an extension?

To install an extension, the browser (Chromium Web browser) give us an alert "can read all data on your computer and the websites you visit" , Sometimes we need to install an extension at least to ...
7
votes
7answers
679 views

Does Windows 10 leak information about your IP address?

There are various reports of Windows 10 automatically sending out data when the user opens the start menu. Can that information or other information that Windows 10 automatically sends out to the ...
-4
votes
1answer
98 views

Can email be traced if sent from a phone with no sim card [closed]

I am using an old phone for web surfing only. If i sent an anonymous email (nothing illegal, just a flirty thing) can that email be traced back to the phone through my wifi?
0
votes
1answer
31 views

PGP/GPG: Do I need more encrypton subkeys?

As far as I know after reading several tutorials, it's reasonable to create one subkey for signing per each device I use, especially one that can be stolen, like laptop. However, having multiple ...
10
votes
4answers
1k views

Personal Information shows up in Google Search from a mailing list

Years ago, when I was young and fool, I sent personal information on a mailing list. Now, if someone type my first name and last name, this content shows up. I do not want this content to show up. ...
1
vote
1answer
88 views

How to send sensitive data through an email?

Many times I have been in situation where I needed to send something sensitive, like my personal data, medical report, or something else over the email. In my country governmental institutions do not ...
24
votes
3answers
3k views

Listening to phone calls as user profiling for marketing [closed]

I had a landline phone call about xyz with an xyz-expert (also on landline) for about an hour, for the first time. After couple of days I started getting suggested links on websites as an ad exactly ...
0
votes
1answer
35 views

What are the requirements of becoming a WHOIS Proxy or Privacy service (not a registrar)?

This question was put on hold as off-topic at Webmasters, so I'm hoping it's ok to ask here. I've read up on the (outrageous) costs of becoming, maintaining and operating a registrar, but I cannot ...
3
votes
1answer
65 views

Company's right to insist on personal info [closed]

I have a maintenance contract with Scottish Hydro for my boiler. Whenever I call them, or they call me, about a repair or service, they demand my name, DOB and address (even when I provide them with ...
1
vote
2answers
121 views

What to do when a connection to a government website for submitting personally identifiable data is not encrypted?

I need to apply for a new passport, but my government's official website for submitting applications containing personally identifiable data does not use HTTPS — http://passport.gov.in/nri/Online.do ...
2
votes
3answers
73 views

Should it considered a risk if an organization's server OS and version information is leaked? [duplicate]

I am assuming that it should be considered a risk because there may be several security issues of various OSes known to hackers. If a hacker gets access into the victim's network, the extra knowledge ...
1
vote
1answer
29 views

How to properly use PGP for e-mail encryption/signature (key generation, key rollover, etc.) [duplicate]

To improve my privacy, I would like to use PGP to encrypt/sign my e-mails. How should I proceed to use PGP in a secure fashion? I am trying to think about how to do it properly. From what I found, ...
1
vote
5answers
77 views

Using an e-mail service anonymously [closed]

What are the options, to use an e-mail service anonymously without exposing yourself (your private info, name etc.) ?
1
vote
0answers
13 views

Multiple email addresses connected to same PGP identity [duplicate]

I am setting up PGP (using GPGTools GPG Suite for OS X) and I use multiple email addresses daily. It appears I have several choices on how to do this, and I am wondering what is most secure/most ...
0
votes
0answers
14 views

Has Anyone Published the Typical Netstat Profile for TAILS Linux?

Using TAILS, and with concerns typical of anyone security conscious enough to be drawn to it in the first place, I was wondering if boum.org or anywhere else has put the typical netstat profile for ...
2
votes
4answers
65 views

Is knowing someone's card expiration date a means of finding info about them?

Card as in debit or credit cards. I heard that even showing someone your debit/CC can be considered an exploit not because of the number or name, but because of the date of expiration. He said that ...
0
votes
0answers
28 views

using home wifi for telegram messaging app [duplicate]

If I use telegram messaging app on my phone using my home wifi, can other members of my family see my texts or my files on their devices?
1
vote
0answers
39 views

working from home, can they monitor my other computers [closed]

I work from home on my own desktop. The company I work for has me use a keyfob and six digit number to synchronize with their servers. they can monitor me and warned me they do monitor as well as the ...
1
vote
2answers
142 views

Whatsapp decryption by government agencies

I would like to know why government agencies need the help of WhatsApp for decryption. As can be seen in this article. They asked for WhatsApp help to decrypt the messages. They did more complicated ...
1
vote
3answers
91 views

Can a rogue DNS server see my passwords?

Recently I've been testing a couple DNS servers to see which one performs the fastest because I need a really fast connection. On to my point, if I were to use a malicious DNS, could they see my ...
-4
votes
3answers
104 views

Is there a way to secure a Linux machine in a way that no one else (but me) can access its contents? [closed]

And I mean, even if someone tries rooting with a Live CD, even if one takes the HDD away and plug it in somewhere else, etc... I want to be able to give a client a machine with a service running, but ...
4
votes
1answer
69 views

Detect PC Boot from Live CD

is it possible to detect a boot-up via live CD (eg. Ubuntu, Debian, Tails ...) that happened in the past? If yes, where can this information be obtained? I suspect my PC has been booted through a ...