The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

63
votes
2answers
15k views

Best practices for Tor use, in light of released NSA slides

It has been known in the security community that a tool as versatile as Tor is likely the target of intense interest from intelligence agencies. While the FBI has admitted responsibility for a Tor ...
0
votes
2answers
15 views

Can they tell which individual computer was torrenting on shared internet connection?

I live in a shared house where multiple people use the same wi-fi (actually, there’s two: the normal frequency and 5GHz one). The internet is included in the rent. The other day I received a complaint ...
7
votes
1answer
63 views

How can meta data be used to identify users through chained VPNs?

Online privacy is a big issue for many people nowadays. Using VPNs is the usual suggestion as a means to stay anonymous. More often than not, somebody comes up with the point "just chain multiple VPNs ...
3
votes
0answers
46 views

What can be derived from someone else's Google Analytics id?

A web page, which I'd expect to respect users' privacy, contains Google Analytics tracker. I consider it to be a wrong thing; before raising this to the site owner, I'd like to do minimal "research". ...
-2
votes
1answer
62 views

Can government query company, such as Google, to get list of accounts associated with some information, such as IP address or phone number? [on hold]

UPD: My naive thought was that government requests should explicitly point account for which they requesting information. And that a broad requests like getting list of accounts logged during some ...
5
votes
2answers
149 views
+50

Best practices: Use of a single private key as a person, or multiple to identify self across domains?

Similar to the question here, I'd like to apply the same question to a person. For example, I have implanted a chip in my hand that holds an encrypted private key that serves as my personal unique ...
2
votes
3answers
1k views

Does Skype compromise my system (beyond the scope of calls/chats)?

First of all, please don't shout at me for wanting to use Skype. I know that it's evil and I fully expect all the calls and text chats going through it to be stored permanently in govt data centers, ...
3
votes
1answer
88 views

Google DNS query pointing at ISP instead of Google

I am not sure if this is actually an issue or not or if I am just being too paranoid, but I noticed this upon arriving home to Alaska recently (location is important as you'll see shortly). In short, ...
-5
votes
3answers
11k views

How to hide my ip and browsing history from others on my network? [duplicate]

I need to hide my activity and IP address from those I share this network with. I'm unsure if a VPN will serve my needs, because I'm not concerned about the sites I access tracking me. I'm concerned ...
-3
votes
2answers
114 views

Why does privacy matter? [closed]

I've yet to find a comprehensive and compelling list of reasons for why people should care about their privacy, why bother defending it from the likes of Google, Microsoft, Facebook and the like. I ...
3
votes
1answer
74 views

Is DNS leak really an issue?

I'm reading about DNS leak and what threat it can pose to VPN users, for instance, this question. But generally, there's tons of similar topics on the internet. But what are people afraid of? I just ...
33
votes
8answers
77k views

How can you be caught using Private VPN when there's no logs about who you are?

I know there are 2 services of VPN (free and paid). Normally, free VPNs need money from somewhere and sometimes they can sell your information to any agency that needs it. Now, if we are talking about ...
0
votes
1answer
33 views

Does posting my computer name publicly make my system vulnerable?

I am wondering if it is paranoia and/or privacy overkill to block out one's computer name when posting terminal output in public forums? I don't know enough about networking to know if it's possible ...
94
votes
14answers
27k views

How can mom monitor my internet history from a distance?

This might sound like a funny question from a twelve-year-old. The less funny part is that I am 21 and currently studying at university (I don't live at University, although I am 15 minutes away. I do ...
5
votes
1answer
136 views

What are the compliance requirements or standards for a non-US firm hosting personal data in the US?

I work for a head hunting company with offices in Canada and Asia. We migrated our custom built CRM system from our own servers hosted in Japan to an Amazon hosting service meaning that all our data ...
4
votes
0answers
113 views

Using your full name as your work email address? [on hold]

Standard practice in the workplace appears to be using your full name as your email address. This presents some privacy concerns to me. Even though we all grew up being told it's advisable to use a ...
0
votes
1answer
42 views

What prevents ISPs from tracking chain of proxies' (or Tor relays') IP addresses?

I searched all over the internet for the answer for my simple question, but couldn't find anything useful. I already know that police have to access PCs used as proxies or Tor relay nodes to read ...
3
votes
1answer
121 views

Does the use of JavaScript make ProtonMail insecure?

I like the look of ProtonMail. However, what has stopped me from signing up is that JavaScript seems to be used at various points in the site, and for someone to read your email they must click on a ...
4
votes
2answers
63 views

Signature that can only be verified by author and recipient - without pre-shared key

Desiderata: Alice wants to send a message to Bob for him to keep and to be able to refer to, such that Bob can be certain that the message came from Alice and was not tampered with. Alice also ...
81
votes
7answers
29k views

Is it dangerous to post my MAC address publicly?

When posting questions, it is often quite useful to include debug output. However, it sometimes include the MAC address of my laptop, router, or both. What are the possible dangers of releasing these ...
0
votes
1answer
41 views

Is bypassing my VPN and seeking my IP address hacking? [closed]

I used VPN service to hide my location. Program noticed that another program included inside the mediawiki I was editing is trying to bypass it and read my IP address. Is that allowed or is it ...
43
votes
8answers
11k views

Why am I allowed to access protected Windows files when I boot Ubuntu from USB?

How come I'm allowed to reboot a computer that I don't own, put in a USB, boot ubuntu from it and then access all files stored on the drives available (even critical files such as system files on C ...
0
votes
0answers
27 views

What is attribute-based authentication?

I found the following definition here : From a privacy perspective a better solution would be the use of attribute-based authentication (Goyal et al. 2006) which allows access of online ...
2
votes
5answers
2k views

If a hacker were to compromise a GMail database

Assuming the systems that store the Gmail database is compromised what is preventing them from reading everyone's emails by looking at the data in the database? I assume nothing, and in order for ...
7
votes
6answers
47k views

Company computer use from home - how much can they see on the desktop?

I have a company supplied computer that I use from home. I log into VPN (cisco AnyConnect) when i need to access company email or internal company sites. In the past the company has been able to ...
1
vote
2answers
26 views

Random autofill [closed]

I was trying to pay for something just now, and when I put my name in the chrome autofill came up and I clicked it. The address that showed up was wrong though but corresponded to the postcode of one ...
1
vote
0answers
20 views

Information and Settings Collected from a PC Connected to a Web Server

1- What are the information and settings collected from my pc when I connect to a website server? 2- When I connect through a VPN, Could the website server detect a mismatch between my new location ...
49
votes
8answers
3k views

Why does one need a high level of privacy/anonymity for legal activities?

This question is sort-of spun off of a previous one. How to counter the statement: "You don't need (strong) security if you're not doing anything illegal"? There are a lot of great ...
6
votes
3answers
7k views

What is the risk of leaking IMEI / IMSI numbers over a network

Should I worry if a developer programmed an app to send IMEI / IMSI number of the phone where the app is installed back to him? What can an attacker do with such information?
4
votes
2answers
234 views

Is it a good or bad practice to fake user agent?

I'm using a mobile browser. I found a program that can fake my User Agent (UA), so I changed to something else. Is this good practice or bad practice in terms of preserving privacy?
4
votes
0answers
33 views

.com domain registered offshore [migrated]

I want to register a .com domain, without risking it being seized by America. Articles such as these worry me: http://www.wired.com/2012/03/feds-seize-foreign-sites/ ...
2
votes
2answers
150 views

How to test my anonymity?

let's assume that I've used proxies and anonymizing tools as much as I want. How to be sure that I'm totally anonymous? I'm not talking only about IP spoofing and identity hiding, but other and ...
9
votes
2answers
13k views

Why do some companies ask last 4 digits of my SSN or a scan of my ID? What are my risks?

Yesterday I found out that some major service provider (online rentals) that I use now requires proof of my identity if I want to continue and make a booking. I was offered 2 options: 1) Enter last ...
0
votes
3answers
64 views

If I'm the owner of VPN network, what can my ISP see?

I'm planning to build small VPN network, so that me and my customers can connect and use it. But from my understanding, if I use my own VPN network, still my ISP can see the traffic, am I right? Here ...
7
votes
7answers
658 views

Does Windows 10 leak information about your IP address?

There are various reports of Windows 10 automatically sending out data when the user opens the start menu. Can that information or other information that Windows 10 automatically sends out to the ...
1
vote
0answers
14 views

Steps before updating privacy policy [closed]

What are the steps to be taken before changing/updating the privacy policy of an app or a service? Such as informing the user etc. Are there any strict rules to be followed?
2
votes
1answer
29 views

How to list all the permissions requested by an extension?

To install an extension, the browser (Chromium Web browser) give us an alert "can read all data on your computer and the websites you visit" , Sometimes we need to install an extension at least to ...
5
votes
1answer
186 views

Can I redact by converting PDF to TIFF and back?

Background My boss asked me to come up with a way ordinary users can redact information from PDF files using free software. We get a lot of scanned documents and our client requires that sensitive ...
4
votes
3answers
662 views

Are there any addons that disable only some functionality of scripts?

Tor comes bundled with NoScript. Correct me if I'm wrong but that's because client sided scripts can determine the originating IP address regardless of who the traffic is passed through. But NoScript ...
-4
votes
1answer
95 views

Can email be traced if sent from a phone with no sim card [closed]

I am using an old phone for web surfing only. If i sent an anonymous email (nothing illegal, just a flirty thing) can that email be traced back to the phone through my wifi?
0
votes
1answer
31 views

PGP/GPG: Do I need more encrypton subkeys?

As far as I know after reading several tutorials, it's reasonable to create one subkey for signing per each device I use, especially one that can be stolen, like laptop. However, having multiple ...
10
votes
4answers
1k views

Personal Information shows up in Google Search from a mailing list

Years ago, when I was young and fool, I sent personal information on a mailing list. Now, if someone type my first name and last name, this content shows up. I do not want this content to show up. ...
21
votes
2answers
2k views

Can address details be “googled” from the whois information, without knowing the domain name?

As above - if I register a domain name, will my postal address become "googleable" via WHOIS by someone that doesn't know what the domain name is? (Say I have a fairly distinctive first and last name) ...
1
vote
1answer
88 views

How to send sensitive data through an email?

Many times I have been in situation where I needed to send something sensitive, like my personal data, medical report, or something else over the email. In my country governmental institutions do not ...
24
votes
3answers
3k views

Listening to phone calls as user profiling for marketing [closed]

I had a landline phone call about xyz with an xyz-expert (also on landline) for about an hour, for the first time. After couple of days I started getting suggested links on websites as an ad exactly ...
0
votes
1answer
35 views

What are the requirements of becoming a WHOIS Proxy or Privacy service (not a registrar)?

This question was put on hold as off-topic at Webmasters, so I'm hoping it's ok to ask here. I've read up on the (outrageous) costs of becoming, maintaining and operating a registrar, but I cannot ...
4
votes
3answers
2k views

Keeping Whois domain registration details private

Most domain registers offer a service to keep your details private in the Whois database. Usually this works by replacing your email, telephone and snailmail addresses with proxies or P.O. Box ...
124
votes
9answers
15k views

Is Google spying on all of us?

I am curious because, I experienced something bizarre recently. About a month ago, someone asked me to find out a price for a T-shirt printing machine, and probably for the first time, I pressed these ...
3
votes
1answer
65 views

Company's right to insist on personal info [closed]

I have a maintenance contract with Scottish Hydro for my boiler. Whenever I call them, or they call me, about a repair or service, they demand my name, DOB and address (even when I provide them with ...
1
vote
2answers
120 views

What to do when a connection to a government website for submitting personally identifiable data is not encrypted?

I need to apply for a new passport, but my government's official website for submitting applications containing personally identifiable data does not use HTTPS — http://passport.gov.in/nri/Online.do ...