The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all
13
votes
5answers
1k views
How to be completely anonymous online?
I recently saw this post on reddit: http://www.slashgeek.net/2012/06/15/how-to-be-completely-anonymous-online/
But the majority argument, both on reddit and on comments on that post seems to be that ...
2
votes
3answers
217 views
How can I send and receive untraceable emails? [duplicate]
I have been receiving threatening emails from someone, and I don't want them to know my location for my safety's sake, but I need to send them a "Cease and Desist" notice. This person has great ...
41
votes
1answer
5k views
What is the difference between https://google.com and https://encrypted.google.com?
Is it there any difference between the encrypted Google search (at https://encrypted.google.com) and the ordinary HTTPS Google search (at https://google.com)?
In terms of security what were the ...
4
votes
2answers
851 views
Does Java applets reveal the real IP address, even when using proxy or vpn?
Can a Java applet reveal the original client IP address, when browsing through a proxy or a VPN? Why?
11
votes
3answers
1k views
How can I prevent tracking by ETAGs?
An ETAG is a HTTP header that is sent-behind-the-scenes between a web browser and an web server. This value is intended to control how long a particular file is cached on the client side.
There is ...
1
vote
1answer
301 views
Safe harbor in USA, EU, and Russia
I am doing research on Google's Blogger service and its privacy protection features.
They say that Google complies with the U.S.-EU Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework. I've ...
-6
votes
1answer
61 views
may DNS companies track visitors by traffic analysis? [closed]
Internet is based on name servers, we always type stackexchange.com in address bar to access this website no stackexchange's IP address. as ICANN is managing every DNS records for every website where ...
-8
votes
0answers
73 views
New work phone that belonged to someone else [closed]
I got a phone at work that belonged to someone else. I still get calls intended to for him, but is it possible that I am seeing his WhatsApp messages (I get messages and I don't recognize the sender) ...
3
votes
2answers
307 views
Keeping Whois domain registration details private
Most domain registers offer a service to keep your details private in the Whois database. Usually this works by replacing your email, telephone and snailmail addresses with proxies or P.O. Box ...
2
votes
1answer
136 views
How can I protect my domain names without exposing too much personal information?
I guess more specifically I want to know how to ensure I retain ownership by having sufficient contact information in the Administrative, Technical and Billing contact fields, but without exposing too ...
-5
votes
1answer
90 views
attacks on airlines [closed]
a hacker who has been harassing me and others always seems to know when we book flights (all international). one of these people the hacker has stalked worked in a high level IT security job. for this ...
2
votes
3answers
115 views
Company computer use from home - how much can they see on the desktop?
I have a company supplied computer that I use from home. I log into VPN (cisco AnyConnect) when i need to access company email or internal company sites.
In the past the company has been able to ...
9
votes
2answers
366 views
How does the Copyright Alert System work? Who has implemented it?
Some ISPs are participating in a Copyright Alert System that notifies content authors of violations of their copyright.
I'm concerned how this oversight relates to my private traffic, and what laws ...
0
votes
2answers
60 views
Do keyservers keep logs of who adds whom to their keyrings?
Maybe it depends on the keyserver. Does that pose privacy issues?
14
votes
2answers
678 views
Can robots.txt for your face be made effective?
As Google Glass slowly starts shipping, I've recently came across an article on stopthecyborgs.org that mirrors my anxieties that Google Glass currently does not feature a robots.txt for my face. It ...
5
votes
4answers
8k views
Can an employer access Whatsapp messages if you are using their servers?
Does anyone know if an employer can access whatsapp messages if you are using their servers? Whatsapp apparently say the messages are encrypted, but I'm not sure about this.
4
votes
1answer
122 views
How can browser select suggestions for my private searches?
I use a VPN service that provides a pool of IP addresses, I clean history/cookies/etc - all the browsing data before a session.
Regardless, when I type in the search of one particular search engine, ...
4
votes
6answers
6k views
If someone hacks my wi-fi connnection, what can they see and how?
I have two questions on wifi security:
If someone knows my wifi password (be it WEP or WPA) what can they
see on my screen? Do they just see URLs I visit, or can they see
everything in my ...
10
votes
2answers
254 views
Ingress collects a lot of data - what impact could this have on my privacy or security?
The Augmented Reality game from Google, Ingress, has players travel to specific GPS locations to destroy and rebuild virtual targets, link locations, and team up with other players in order to carry ...
5
votes
4answers
4k views
Advanced techniques for detecting a proxy/getting original IP
In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used:
Firefox with a proxy ...
-3
votes
1answer
75 views
Automated scanning of personal email [closed]
I am a current user of gmail, and have recently become interested in the privacy policies of the large webmail providers like gmail, yahoo, hotmail etc. I understand that it is commonplace for them to ...
7
votes
2answers
129 views
Privacy violation even when queries with too few results are rejected
I was reading a Computing security book1 and saw a question regarding database security and privacy. I can't quite figure out the answer, so I thought I will ask here.
One approach to ensure ...
70
votes
7answers
4k views
How can I protect my internet-connected devices from discovery by Shodan?
There's been a lot of buzz around this recent CNN article about Shodan, a search engine that can find and allow access to unsecured internet-connected devices.
Shodan runs 24/7 and collects ...
1
vote
0answers
53 views
OTR and/or SecureIM library for C# .NET [closed]
I'm looking for implementations (or even wrappers) for OTR or SecureIM encrypted chat protocols usable from C#.
Currently I found none, and considering porting Java OTR library and/or wrapping ...
1
vote
1answer
130 views
What is the “about:blank” context for browser security and privacy?
This blog is describing a way to hide the referer header in various situations. Specifically he is referring to things that run in the about:blank context.
What is the about:blank context?
How does ...
1
vote
2answers
64 views
What kind of privacy leakage do stuff printed to stdout pose?
1- When a program outputs to stdout, is that normally logged anywhere else?
2- When is it an issue to make a command verbose in printing to stdout instead of working quietly or redirecting to a file?
...
-1
votes
1answer
2k views
What data is Facebook's “People You May Know” based on? [closed]
There has been a lot of speculation that some "People You May Know" lists are generated by IP addresses and shared computers, some people have logged into a computer to see that the person who logged ...
1
vote
2answers
55 views
Is time zone information saved in files?
Do files written and timestamped in a certain timezone simply keep the -0000 time in their modification and creation timestamps and adjust the time displayed according to the user's timezone? Or do ...
0
votes
3answers
45 views
Is connection to keyserver encrypted?
When you retrieve someone's information from a keyserver to add him to your pgp keyring, that is made through unencrypted keyservers, unless the user uploaded it to https://keyserver.pgp.com/. Even ...
1
vote
1answer
40 views
Time zone settings and leakage of location
When you set up your clock in Linux systems and select a timezone:
How easily can sites access this information? Can they do it through Javascript? Can they do it if Javascript is blocked?
Where ...
-4
votes
3answers
156 views
Cellphone where I don't have to worry about location tracking [duplicate]
I'd like to use a cellphone, but I don't want to have my location tracked. Richard Stallman told once that there was a cellphone without GPS. If I can find a phone without a GPS, would that ensure I ...
2
votes
1answer
79 views
Secure Development Environment for University dealing with private data
We are a development team within a state public university. Much of our development deals with working with private student and employee data. Some applications push data from internal databases out ...
1
vote
2answers
159 views
How do private photos get stolen
I'm not referring to any of the below:
Spiteful partner sharing private photos of other after editing oneself out.
Someone stealing photos from a professional photographer/artist without permission.
...
-2
votes
1answer
70 views
Pedometer with strong privacy (no data in cloud, local analysis software, no iOS) [closed]
I wish to do 10,000 steps a day. Now searching for an accurate pedometer. I don't wish a cloud solution, data must be local and a nice analysis software.
What do you recommend me? I am using a Mac.
1
vote
1answer
267 views
How can I ensure privacy when outsourcing authentication to an IdP (Identity Provider)
I need to outsource authentication to an IdP (Identity Provider) but I don't want that IdP to know of the calling site. The two major issues are the callback URL and the referer header.
Is there any ...
1
vote
2answers
247 views
Is there an anti-proxy detection available?
Sites like Wikipedia and Google (among others) don't let you sign up through a proxy or TOR (at least with Google, you have to provide SMS verification if you sign up through proxy.) Somehow they ...
4
votes
1answer
164 views
Is it safe to abandon a free webmail account that has been in use for a significant amount of time?
I have a free webmail account that I have been using for around ten years now. Over the past two years I have almost phased out using this address.
I have concerns around accounts that I may have ...
-1
votes
1answer
120 views
Is it still possible to sign up for a Google account without SMS verification? (March, 2013) [closed]
Non of these two methods worked: http://googlesystem.blogspot.com/2012/01/new-google-accounts-require-gmail-and.html
-3
votes
1answer
75 views
OTR encrypted chatroom or IM [closed]
I need a secure, encrypted environment for conducting text based interviews online. It's for academic research purposes where data protection is paramount so there cant be any data stored on 3rd ...
7
votes
1answer
216 views
Device fingerprinting & Mass Computer Surveillance
Device fingerprinting is one of the biggest privacy problems as explained because people think cleaning cookies, using proxy servers or blocking domains can protect them (when blacklisted trackers ...
3
votes
4answers
126 views
Anonymized Votes
Background
Looking to create an anonymous voting system. The system must track whether or not a user voted on an item (public information), but only that user is ever allowed to know whether they ...
5
votes
5answers
939 views
How can you remove your presence from the Internet?
How can you remove your presence from the Internet?
For example from social networks, from email servers, from forums etc. Problem is how records of you are identified on the internet?
We have well ...
1
vote
2answers
166 views
Why are we told to hide local info in pictures we post to the Internet
When I post a picture to an Internet forum or Stack Exchange site I am told to hide and destroy names, domain names, user names, server names and computer names.
We know that user names are ...
10
votes
3answers
296 views
Should I ask a user to re-authenticate if the browser thumbprint changes? Is a server side library available?
Is there a security benefit to using the browser's thumbprint in addition to a session identifier to identify a unique session?
Would it then be advisable to ask the user to reauthenticate (or simply ...
2
votes
2answers
179 views
What certification would be considered equivalent to the U.S.-EU Safe Harbor Framework?
The Safe Harbor website says the following:
The European Commission’s Directive on Data Protection went into effect in October of 1998, and would prohibit the transfer of personal data to ...
1
vote
1answer
304 views
What's most standard way to secure internet connections and protect privacy?
It's common knowledge that Wi-Fi, or other Internet connections, should be encrypted via a VPN to be secure, and to hide our real IP address from intermediary network observers. However, one can't ...
2
votes
1answer
36 views
A good privacy policy or pursue encryption for private community?
I am planning to create a private web site where people of a very specific target group would keep private stuff.
I am between two major roads for this.
Road 1
-Build a trusting and personal ...
7
votes
8answers
4k views
Is it possible to Identify a VPN user by finding relations in traffic?
If I am using VPN service to protect my identity, can my traffic be used to identify all my traffic?
For example, if I am accessing two services:
Some service A, where I do not leave any ...
-2
votes
3answers
117 views
Basic Algebra and How it Applies to Information Security? [closed]
I'm an undergraduate student at Kaplan University and one of my projects in my Algebra class is to be able to identify two concepts that we've learned thus far and how they might apply towards my ...
5
votes
5answers
751 views
Is a TOR router really safer than a proxy?
If I use a tor router to browse the regular internet that it has to leave the TOR network through an exit node. Apparently the exit node has all the information from the original user it came from on ...
