The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all
1
vote
2answers
47 views
PDF files on webserver file system
We create PDF files as relevant to a customer's e-mail communication. These PDF's contain some personal information, specific to the client.
The client is emailed a link to the PDF. The link to the ...
2
votes
3answers
227 views
How can I send and receive untraceable emails? [duplicate]
I have been receiving threatening emails from someone, and I don't want them to know my location for my safety's sake, but I need to send them a "Cease and Desist" notice. This person has great ...
-6
votes
1answer
61 views
may DNS companies track visitors by traffic analysis? [closed]
Internet is based on name servers, we always type stackexchange.com in address bar to access this website no stackexchange's IP address. as ICANN is managing every DNS records for every website where ...
-8
votes
0answers
74 views
New work phone that belonged to someone else [closed]
I got a phone at work that belonged to someone else. I still get calls intended to for him, but is it possible that I am seeing his WhatsApp messages (I get messages and I don't recognize the sender) ...
-5
votes
1answer
90 views
attacks on airlines [closed]
a hacker who has been harassing me and others always seems to know when we book flights (all international). one of these people the hacker has stalked worked in a high level IT security job. for this ...
2
votes
3answers
118 views
Company computer use from home - how much can they see on the desktop?
I have a company supplied computer that I use from home. I log into VPN (cisco AnyConnect) when i need to access company email or internal company sites.
In the past the company has been able to ...
4
votes
1answer
122 views
How can browser select suggestions for my private searches?
I use a VPN service that provides a pool of IP addresses, I clean history/cookies/etc - all the browsing data before a session.
Regardless, when I type in the search of one particular search engine, ...
14
votes
2answers
680 views
Can robots.txt for your face be made effective?
As Google Glass slowly starts shipping, I've recently came across an article on stopthecyborgs.org that mirrors my anxieties that Google Glass currently does not feature a robots.txt for my face. It ...
10
votes
2answers
256 views
Ingress collects a lot of data - what impact could this have on my privacy or security?
The Augmented Reality game from Google, Ingress, has players travel to specific GPS locations to destroy and rebuild virtual targets, link locations, and team up with other players in order to carry ...
-3
votes
1answer
75 views
Automated scanning of personal email [closed]
I am a current user of gmail, and have recently become interested in the privacy policies of the large webmail providers like gmail, yahoo, hotmail etc. I understand that it is commonplace for them to ...
7
votes
2answers
129 views
Privacy violation even when queries with too few results are rejected
I was reading a Computing security book1 and saw a question regarding database security and privacy. I can't quite figure out the answer, so I thought I will ask here.
One approach to ensure ...
70
votes
7answers
4k views
How can I protect my internet-connected devices from discovery by Shodan?
There's been a lot of buzz around this recent CNN article about Shodan, a search engine that can find and allow access to unsecured internet-connected devices.
Shodan runs 24/7 and collects ...
1
vote
0answers
53 views
OTR and/or SecureIM library for C# .NET [closed]
I'm looking for implementations (or even wrappers) for OTR or SecureIM encrypted chat protocols usable from C#.
Currently I found none, and considering porting Java OTR library and/or wrapping ...
0
votes
2answers
60 views
Do keyservers keep logs of who adds whom to their keyrings?
Maybe it depends on the keyserver. Does that pose privacy issues?
0
votes
3answers
45 views
Is connection to keyserver encrypted?
When you retrieve someone's information from a keyserver to add him to your pgp keyring, that is made through unencrypted keyservers, unless the user uploaded it to https://keyserver.pgp.com/. Even ...
1
vote
2answers
55 views
Is time zone information saved in files?
Do files written and timestamped in a certain timezone simply keep the -0000 time in their modification and creation timestamps and adjust the time displayed according to the user's timezone? Or do ...
1
vote
1answer
40 views
Time zone settings and leakage of location
When you set up your clock in Linux systems and select a timezone:
How easily can sites access this information? Can they do it through Javascript? Can they do it if Javascript is blocked?
Where ...
1
vote
2answers
65 views
What kind of privacy leakage do stuff printed to stdout pose?
1- When a program outputs to stdout, is that normally logged anywhere else?
2- When is it an issue to make a command verbose in printing to stdout instead of working quietly or redirecting to a file?
...
-4
votes
3answers
162 views
Cellphone where I don't have to worry about location tracking [duplicate]
I'd like to use a cellphone, but I don't want to have my location tracked. Richard Stallman told once that there was a cellphone without GPS. If I can find a phone without a GPS, would that ensure I ...
1
vote
1answer
132 views
What is the “about:blank” context for browser security and privacy?
This blog is describing a way to hide the referer header in various situations. Specifically he is referring to things that run in the about:blank context.
What is the about:blank context?
How does ...
2
votes
1answer
79 views
Secure Development Environment for University dealing with private data
We are a development team within a state public university. Much of our development deals with working with private student and employee data. Some applications push data from internal databases out ...
1
vote
2answers
161 views
How do private photos get stolen
I'm not referring to any of the below:
Spiteful partner sharing private photos of other after editing oneself out.
Someone stealing photos from a professional photographer/artist without permission.
...
-1
votes
1answer
2k views
What data is Facebook's “People You May Know” based on? [closed]
There has been a lot of speculation that some "People You May Know" lists are generated by IP addresses and shared computers, some people have logged into a computer to see that the person who logged ...
-2
votes
1answer
70 views
Pedometer with strong privacy (no data in cloud, local analysis software, no iOS) [closed]
I wish to do 10,000 steps a day. Now searching for an accurate pedometer. I don't wish a cloud solution, data must be local and a nice analysis software.
What do you recommend me? I am using a Mac.
1
vote
2answers
250 views
Is there an anti-proxy detection available?
Sites like Wikipedia and Google (among others) don't let you sign up through a proxy or TOR (at least with Google, you have to provide SMS verification if you sign up through proxy.) Somehow they ...
4
votes
1answer
164 views
Is it safe to abandon a free webmail account that has been in use for a significant amount of time?
I have a free webmail account that I have been using for around ten years now. Over the past two years I have almost phased out using this address.
I have concerns around accounts that I may have ...
-1
votes
1answer
123 views
Is it still possible to sign up for a Google account without SMS verification? (March, 2013) [closed]
Non of these two methods worked: http://googlesystem.blogspot.com/2012/01/new-google-accounts-require-gmail-and.html
-3
votes
1answer
75 views
OTR encrypted chatroom or IM [closed]
I need a secure, encrypted environment for conducting text based interviews online. It's for academic research purposes where data protection is paramount so there cant be any data stored on 3rd ...
7
votes
1answer
218 views
Device fingerprinting & Mass Computer Surveillance
Device fingerprinting is one of the biggest privacy problems as explained because people think cleaning cookies, using proxy servers or blocking domains can protect them (when blacklisted trackers ...
3
votes
4answers
126 views
Anonymized Votes
Background
Looking to create an anonymous voting system. The system must track whether or not a user voted on an item (public information), but only that user is ever allowed to know whether they ...
1
vote
2answers
167 views
Why are we told to hide local info in pictures we post to the Internet
When I post a picture to an Internet forum or Stack Exchange site I am told to hide and destroy names, domain names, user names, server names and computer names.
We know that user names are ...
1
vote
1answer
267 views
How can I ensure privacy when outsourcing authentication to an IdP (Identity Provider)
I need to outsource authentication to an IdP (Identity Provider) but I don't want that IdP to know of the calling site. The two major issues are the callback URL and the referer header.
Is there any ...
41
votes
1answer
5k views
What is the difference between https://google.com and https://encrypted.google.com?
Is it there any difference between the encrypted Google search (at https://encrypted.google.com) and the ordinary HTTPS Google search (at https://google.com)?
In terms of security what were the ...
2
votes
2answers
180 views
What certification would be considered equivalent to the U.S.-EU Safe Harbor Framework?
The Safe Harbor website says the following:
The European Commission’s Directive on Data Protection went into effect in October of 1998, and would prohibit the transfer of personal data to ...
2
votes
1answer
36 views
A good privacy policy or pursue encryption for private community?
I am planning to create a private web site where people of a very specific target group would keep private stuff.
I am between two major roads for this.
Road 1
-Build a trusting and personal ...
-2
votes
3answers
118 views
Basic Algebra and How it Applies to Information Security? [closed]
I'm an undergraduate student at Kaplan University and one of my projects in my Algebra class is to be able to identify two concepts that we've learned thus far and how they might apply towards my ...
5
votes
5answers
761 views
Is a TOR router really safer than a proxy?
If I use a tor router to browse the regular internet that it has to leave the TOR network through an exit node. Apparently the exit node has all the information from the original user it came from on ...
2
votes
1answer
136 views
How can I protect my domain names without exposing too much personal information?
I guess more specifically I want to know how to ensure I retain ownership by having sufficient contact information in the Administrative, Technical and Billing contact fields, but without exposing too ...
1
vote
1answer
79 views
Compromised server with psyBNC - what are our next steps?
One of our VPS servers has an install of psybnc on it. The install has been present for quite some time, and has now been brought to our attention. We have backups, but they also have psybnc on them. ...
1
vote
1answer
118 views
Google Chrome stores recent items I've opened in my computer?
Is it normal or legal for chrome to have a list of recent items I've opened in my computer?
I have an old version of chrome installed in my PC. Then recently, I downloaded a newer version. But before ...
1
vote
2answers
181 views
When connecting to internet through VPN what precautions should be taken?
I've read this similar question and it has some very good information. Can a site that has personal information about you be accessed by another site to determine who you are/where you are? For ...
5
votes
1answer
239 views
Could TOR nodes collect IPs and filter them to unmask .onion url IP addresses?
I feel that I generally understand TOR onion routing. From what I understand, the node knows the IP it is receiving data from and the IP it is sending data to. So surely a node can collect the IP ...
15
votes
3answers
718 views
How can I protect against email tracking services?
Recently a free service came out for email tracking, bananatag.
It's able to track the fact that the email was read in gmail without any notice or strange inclusions in the email body. In this case ...
23
votes
6answers
1k views
Is there a difference between GET and POST for web application security?
I have 2 choices in sending data between 2 web applications.
I encode the data in Base64 and append to the URL and retrieve these parameters at my destination application and decode the parameters.
...
4
votes
6answers
6k views
If someone hacks my wi-fi connnection, what can they see and how?
I have two questions on wifi security:
If someone knows my wifi password (be it WEP or WPA) what can they
see on my screen? Do they just see URLs I visit, or can they see
everything in my ...
24
votes
4answers
805 views
How do I deal with companies that call and ask for personal information?
Several times I get a phone call from a company- my bank, utility companies etc. Many times they are just cold calling me, but once or twice they were calling for legitimate reasons (ie, something to ...
4
votes
4answers
344 views
Received a Kindle from a stranger, what are the risks?
While getting a coffee today, a man walked up to me and offered me a kindle. he said he no longer wanted it and that he was looking to give it away. An avid reader, I accepted. It has no accounts on ...
0
votes
3answers
114 views
What day-to-day activities can compromise a person's information security [closed]
Recently a car was stopped next to me at the traffic lights. The driver had his phone connected to the car's bluetooth and the conversation could be heard by me crystal clear in the next car - the ...
1
vote
1answer
120 views
Can p2p use be traced by targeting a known individual rather than an offending IP Address?
My understanding of most filesharing lawsuits initiated by copyright holders is as follows:
The monitoring agency will connect to a torrent swarm and collect
the ip addresses of people downloading ...
0
votes
3answers
101 views
how Cookie tracking threat works?
as explained here and lots of other cases , what is this tracking story ? browser vendors say we have same origin policy and for example google.com can only read cookies saved by google.com or read ...
