The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

4
votes
2answers
75 views

What are the privacy and security risks associated with Intel's Management Engine and AMD's Platform Security Processor?

And also as an everyday user who mostly just surfs the web, are these risks a huge concern for me? Edit: Also on the similar note, are there any substantial evidences of Intel or AMD purposely ...
2
votes
1answer
61 views

What does “probability space is over coin flips of algorithm M” mean?

In the book The Algorithmic Foundations of Differential Privacy by Cynthia Dwork, Aaron Roth on page 16 (actually page 20 in the pdf viewer) it says at the very bottom of the page: Definition 2.2 (...
3
votes
2answers
69 views

How to secure communications between a web front-end and the web server when/where the HTTPS protocol is compromised?

A country in the Central Asia has issued a law enforcing all the ISPs to decrypt the transit HTTPS traffic and encrypt it with a special certificate issued by the government. Every client is to ...
0
votes
4answers
94 views

Can duct tape prevent hackers from watching me?

Since hackers can hack into my mobile phone/computer and use its camera to watch over me, Q1: Can I know if my mobile phone/computer camera has been hacked? Q2: If I was hacked, does putting duct ...
5
votes
1answer
121 views

What should I store in the case that a user posts a threatening post?

I am building a social-media type website. I am going to have the users create a profile with their name, email and phone number. When a post is created I plan to have a spot in the database that ...
1
vote
2answers
57 views

What policies and agreements regarding information security are a must have for every self respecting company?

I assume that it's a good idea to supply the users of a system (or employees) with policies and agreements regarding information security. What kind of documents should be considered? For example (...
1
vote
1answer
59 views

Microsoft support asking me for my phone IMEI?

I just contacted Microsoft support on my Lumia phone via the preinstalled "Contact Support" app, about an issue of the language of comments on apps in the Store being in the wrong language (different ...
0
votes
1answer
62 views

How should I handle a spam account I don't control from sending spam emails with my username?

A family member contacted me yesterday saying their email has been hacked and that some other family members received spam emails from their account. For this example, lets say the hacked family ...
-5
votes
1answer
41 views

Software intrusion via sweeping firmware updates? [closed]

I have a lot of different hardware ranging from smart phones and smart TVs to Unix servers and everything in-between. Within the last few weeks everything I own has needed an update or upgrade. ...
2
votes
0answers
58 views

Is it possible to overwrite a phone through physical means?

I am currently doing some research into the Apple vs FBI controversy. During my research, I found a Edward Snowden comment that claimed that the government can actually override a phone's data, ...
2
votes
1answer
90 views

Does Skype use audio watermarking?

Today on CNN they conducted an interview with a career criminal, who spoke by Skype on condition of anonymity. It occurred to me that, if Skype uses digital watermarking to embed identifying ...
2
votes
3answers
133 views

How can VPN providers end violating accounts when “they don't log any data”?

VPN providers can end accounts which violate their terms of use. If you look at https://nordvpn.com/terms-of-service/ for example, you see that they will terminate accounts violating their ToS. The ...
4
votes
2answers
63 views

How are SSDs different from HDDs from the privacy point of view? [duplicate]

How are SSDs different from HDDs from the privacy point of view? Is it easier or harder to recover traces of deleted and/or wiped (overwritten) files from an SSD than from a HDD?
-2
votes
1answer
93 views

Can my employer see my activity over their WiFi if I'm using the Tumblr app? [duplicate]

I have a great relationship with my employer and I don't think anyone is spying on me and I don't care if they read my email. But if I'm logged into their WiFi and I'm using the Tumblr app on my ...
134
votes
21answers
21k views

Hardening Linux desktop machine against people from my household

I am looking to make a clean install of a Debian system on my home desktop. To clarify, I am switching from Windows and wish to use it as my day-to-day home OS - I'm not going to be running any ...
2
votes
1answer
76 views

What is vulnerable in this comprehensive browser setup to avoid fingerprinting/tracking?

What is vulnerable in this browser setup to avoid fingerprinting/tracking for general browsing that is still easy to use? The setup is as follows: Firefox on my personal machine with several ...
3
votes
2answers
38 views

Does rotating proxy provide better privacy?

We have anonymous rotating proxy service like ProxyMesh. ProxyMesh provides 14 rotating IP address proxy servers, each with 10 IP addresses rotating twice per day, giving you a total of 280 IP ...
3
votes
2answers
114 views

Is storing an encrypted zip file to an insecure cloud service an admissible way of securing privacy?

Consider the following scenario: I use a cloud service that is not considered secure (meaning no encryption whatsoever) i.e. Dropbox, OneDrive, Google Drive etc. In my account I have a .zip or .7z ...
56
votes
7answers
6k views

Closed source binary blobs in chipsets - privacy threat?

I wanted to buy a Librem Purism 13 because I care about my privacy and generally wanted a laptop to test Linux on. However, I was advised against it because it uses Intel i5 processors which contain ...
4
votes
1answer
50 views

Do Social Network Mobile Apps Track Your Browsing?

Facebook are known to track you even after you have logged out of your Facebook account. With mobile apps being given permission to access so much information on the devices, is it possible for ...
2
votes
1answer
50 views

OpenVPN Client Id appearing in emails

I use OpenVPN to connect to a server. I just found that in a series of emails I sent and received to and from the same person the following line appeared after every message I sent: [cid:{a long ...
64
votes
1answer
5k views

Tell browser my site has no scripts

I have created a Tor hidden service site which has absolutely no JavaScript or other types of client side scripts. The page is HTML, CSS, images, and some JSP for handling user input. I encourage ...
1
vote
1answer
123 views

Firefox security certificate issues: FUD or truth?

I was doing a little reading over at gHacks, and came across this comment attributed to Joey Spinosa regarding certificates in Firefox: These certificates are installed automatically by the ...
1
vote
3answers
120 views

Can my employer see the actual video chat if I use Facebook messenger on work WiFi?

I used my personal iPad over work WiFi (Verizon jetpack) to have a video chat with a friend over Facebook messenger. Can my employer actually see the video or just that I used messenger?
0
votes
2answers
98 views

Are VPN tunnels really completely private? [duplicate]

I've been considering a VPN tunnel, specifically PIA. These types of companies make bold claims of complete anonymity and privacy, with no one in the world (ISP's, governments, school or corporate ...
1
vote
0answers
35 views

What information about a user can wireless carriers access?

What is the maximum amount of imformatiom about a user and the user's phone that can be obtained by a wireless carrier on a GSM network? Here is a list of the things I know, but are there more? IMEI,...
2
votes
0answers
24 views

Are deleted offline calendar events in Android actually deleted?

When an Android app deletes a calendar event in a local (offline / non-synced) calendar, does Android's Calendar Storage (com.android.providers.calendar) actually delete the event or does it just flag ...
3
votes
1answer
44 views

Why is data quality important for privacy?

"Outdated personal data" is number 8 on the OWASP Top 10 Privacy Risks, and also the OECD Privacy Principles mention that data should be kept up to date: Personal data should be relevant to the ...
4
votes
1answer
101 views

Hidden service security SSH

Pretend I have a Tor hidden service. For ultimate security I would firewall the internet entirely, except for Tor, to try to reduce IP address leakage and other security risks. My problem is how ...
3
votes
0answers
79 views

Security of the shared secret key for a smart meter (Linky) [closed]

Reading the specs of a new electricity smart meter (called Linky in France), I was surprised about the chosen encryption method (128 bits symmetric key AES), based on a single secret key (called CCC ...
6
votes
2answers
124 views

What information is collected because of signing into Windows 10 with a Microsoft account?

The question is specifically as stated - "because of signing into Windows 10 with a Microsoft account". Not including what is collected even when using a local account. And not including what is ...
-1
votes
1answer
119 views

Can VPN provider see my data?

I have a 2 questions: If I use a VPN and I go to any websites via HTTP - does VPN provider will be able to see the traffic? Those. logins, passwords, all the texts that pass through the channel (in ...
1
vote
2answers
135 views

Will the ISP know what sites I visit if I use a VPN? [duplicate]

If I use a VPN, and visit any site on HTTPS, will the ISP know what sites I have visited? Because IP-addresses of websites are not encrypted? And if the answer is yes, are there any ways to solve ...
2
votes
1answer
49 views

Can my iPhone photos be viewed by the person I got it from?

I got my phone from a friend, and I wanted to know if anything can be viewed by him. Can he see my photos (and other stuff of course) when he knows the IMEI (and maybe other things) of the phone?
6
votes
1answer
130 views

How did my browsing choices reach an Alibaba seller?

Events, spaced about evenly over 2 months: Repeatedly ordered small amounts of webbing on a rather reputable Polish site (Allegro.pl, much like ebay). Got targeted ads in Skype for webbing on ...
0
votes
1answer
37 views

On Mozilla's Add-ons site (AMO) what is happening with external links?

On Mozilla's Add-ons site (known as AMO), all external links are directed through: https://outgoing.mozilla.org/v1/[UUID]/[destination URL] As a random example, see the link in the Description ...
0
votes
1answer
57 views

Is there a point to Dnscrypt when using VPN?

If a computer is already connected to the internet through VPN, is there point in encrypting DNS queries? From DNScrypt: DNSCrypt is a protocol that authenticates communications between a DNS ...
2
votes
2answers
125 views

Can you trace someone through picture header information?

I learned that jpg, png, bmp and most image files contain headers and plain text in them. I decided to open a jpg file in Notepad and saw a bunch of information and I was wondering if there was a way ...
35
votes
8answers
4k views

Find matching phone numbers without actually knowing them

We have a mobile app that, given two users, needs to let them see what common contacts they have based on their phone numbers. How can we do this in a cryptographically secure way and respecting the ...
4
votes
1answer
113 views

Can canvas fingerprinting be prevented?

How can canvas fingerprinting be prevented in web browsers? The site Panopticlick said I had a hash of WebGL fingerprint of 5 bits of entropy. I installed CanvasBlocker addon and tested again and it ...
-1
votes
6answers
2k views

How to prevent illegal file transfer or copying of video files from a PC? [closed]

I have developed a windows desktop application using VB.NET. My applications main purpose is to play videos. I have some videos which has copyrights on them, that are not suppose to be distributed or ...
3
votes
0answers
93 views

Work wants to create an admin account on my system that I don't have access to? [closed]

This is on a Windows 10 system, and they want to create an administrator account that only my manager will have the password to. This is apparently to enforce some new "security policies" that haven't ...
0
votes
2answers
87 views

Can they tell which individual computer was torrenting on shared internet connection?

I live in a shared house where multiple people use the same wi-fi (actually, there’s two: the normal frequency and 5GHz one). The internet is included in the rent. The other day I received a complaint ...
9
votes
1answer
606 views

How can meta data be used to identify users through chained VPNs?

Online privacy is a big issue for many people nowadays. Using VPNs is the usual suggestion as a means to stay anonymous. More often than not, somebody comes up with the point "just chain multiple VPNs ...
3
votes
0answers
70 views

What can be derived from someone else's Google Analytics id?

A web page, which I'd expect to respect users' privacy, contains Google Analytics tracker. I consider it to be a wrong thing; before raising this to the site owner, I'd like to do minimal "research". ...
-2
votes
1answer
67 views

Can government query company, such as Google, to get list of accounts associated with some information, such as IP address or phone number? [closed]

UPD: My naive thought was that government requests should explicitly point account for which they requesting information. And that a broad requests like getting list of accounts logged during some ...
-3
votes
2answers
153 views

Why does privacy matter? [closed]

I've yet to find a comprehensive and compelling list of reasons for why people should care about their privacy, why bother defending it from the likes of Google, Microsoft, Facebook and the like. I ...
3
votes
1answer
117 views

Google DNS query pointing at ISP instead of Google

I am not sure if this is actually an issue or not or if I am just being too paranoid, but I noticed this upon arriving home to Alaska recently (location is important as you'll see shortly). In short, ...
3
votes
1answer
105 views

Is DNS leak really an issue?

I'm reading about DNS leak and what threat it can pose to VPN users, for instance, this question. But generally, there's tons of similar topics on the internet. But what are people afraid of? I just ...
0
votes
1answer
42 views

Does posting my computer name publicly make my system vulnerable?

I am wondering if it is paranoia and/or privacy overkill to block out one's computer name when posting terminal output in public forums? I don't know enough about networking to know if it's possible ...