The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

2
votes
1answer
4k views

Clearing IE temp files don't erase CRL history. How can this be purged?

Even after I purge all my Internet temporary files, I still see information when I type certutil -urlcache How do I purge this information?
2
votes
3answers
224 views

Why is security across a network “hard” to achieve?

This may be a naive question. If it is, I'm fine with just a link to outside information. I studied RSA encryption about 2 years ago, but that's about it. I'm just wondering: is it a matter of ...
3
votes
2answers
1k views

Keeping Whois domain registration details private

Most domain registers offer a service to keep your details private in the Whois database. Usually this works by replacing your email, telephone and snailmail addresses with proxies or P.O. Box ...
1
vote
1answer
916 views

Storing US employer identification number (EIN / FEIN) in a database

What are considerations for storing a United States Employer Identification Number (EIN / FEIN) in a database? Is this considered sensitive information along the lines of an SSN? Are there legal ...
0
votes
1answer
116 views

Are there privacy implications with ESET Web Protection?

I got the most recent ESET Cyber Security Beta for Mac. It offers a mode called “Web Protection” and “Email Protection”. The documentation don’t really explain what these two modes does, and I’m ...
6
votes
4answers
1k views

What's the safest way to access my US-based bank's website from within Mexico? VPN vs SSH vs HTTPS?

I will soon be moving to Mexico and living there for an extended period. During that time I will need to occasionally access my US-based bank's website. I'll always be connecting using my own laptop, ...
0
votes
2answers
491 views

How to build a secure socks tunnel?

I was using a socks proxy to access websites blocked by my ISP, now it don't work any more in an strange way. Using the proxy is same as not using it! (i.e. I can access open sites but filtered sites ...
2
votes
1answer
391 views

secret key compromise in SSL vs in Kerberos

Consider the consequences of compromise of a secret key in the Kerberos system vs. in SSL. For example, suppose your individual shared secret key (for your user account) becomes compromised (i.e. it ...
3
votes
2answers
4k views

Using Cain and Abel to capture traffic of machine in the same network

I have installed Cain and Able in machine A, which is connected to another machine B via a LAN. Now I want to analyze all the traffic of machine B. Is this possible by installing Cain and Abel on ...
2
votes
2answers
416 views

How can I protect content distributed on a linux virtual machine?

What assets am I trying to protect? An unofficial pre-alpha software prototype provided as a reproducible example for evaluation during the scientific peer-review process. The software will be ...
-1
votes
4answers
809 views

How to protect myself from cyberbullying?

I want to learn how can I protect my PC from getting hacked in order to protect myself from cyberbullying. There is an intruder who has hacked my system over the last 4 years. He has hacked my all ...
2
votes
3answers
219 views

How important is user acceptance when deciding whether to deploy biometric authentication?

I've been browsing through several studies on user acceptance of biometrics, and I've been noticing that they all focus on attitudes and beliefs about biometrics. While it's important to know a ...
1
vote
1answer
184 views

What privacy methods exist for P2P transfers?

I love my VPN, it gives me to a certain extent privacy from isp & to what I connect. I also use P2P to get & provide data, but I would like to create a level of privacy. What methods exist ...
0
votes
4answers
1k views

Does Facebook merge accounts? In what circumstances? [closed]

I have two different Facebook accounts with two different passwords and two distinct online personalities, one as myself and one as someone else. Since the last one week, to my horror, both accounts ...
3
votes
4answers
267 views

What actions should be taken by site according to Data Protection legislations?

Many countries have data protection legislation: Data Protection Directive in EU Data Protection Act 1998 in UK privacy laws in USA Web application may have registration form where fields for ...
8
votes
4answers
472 views

What steps should one take to provide “reasonable” levels of privacy from a government?

I'm highly uncomfortable with the recent news surrounding government snooping in the UK. If we define a typical user to mean somebody who: Browses web sites such as BBC News and Stack Overflow Uses ...
3
votes
3answers
582 views

Encryption Question for patient PHI

I am the Compliance Officer for a laboratory. Is it permissible to send an unencrypted email with a patient accession number? It does not include patient name, DOB, SS# or address. It is just an ...
4
votes
3answers
382 views

What are the best practices for maintaining privacy on a non-jailbroken iOS device?

iOS, like most other mobile OSs, has the potential to leak significant chunks of personal information to 3rd-party apps and to ad and tracking networks used by those apps, which in turn also has the ...
5
votes
1answer
290 views

What countries have laws in place that respect Do Not Track HTTP headers or cookies?

Google offers a Chrome plugin that uses cookies to control privacy, while Firefox offers a HTTP Header to tell websites to not track the users and log the data anonymously. This obviously extends a ...
6
votes
2answers
1k views

Considering that SRP is better than SSH and Basic Auth, how can it be implemented in a website?

SRP is short for Secure Remote Password protocol, and provides a better way for passwords to be sent over the internet. I've read the information at it's Stanford University home page, the Wiki ...
2
votes
3answers
227 views

Would people object my website just because I use Google Analytics, +1, or FB Connect?

Are there people who will refuse to use a website just because that site sends browser information to Google Analytics? Could the +1 button be a red flag? Should I expect that there would be ...
7
votes
3answers
430 views

Is it secure to have an “email no longer available” feature on your registration form?

I was just implementing a new feature on the registration form of my site that checks if an email address is still available to register an account with. I am wondering if it is secure to show a user ...
7
votes
4answers
3k views

What web browsers support OCSP stapling? Are the privacy and performance features the same?

OCSP stapling decreases the load on a PKI infrastructure's OCSP server by attaching a signed OCSP response to the target in a TLS connection. In addition it creates a more secure/private session ...
25
votes
6answers
5k views

How can I prevent tracking by ETAGs?

An ETAG is a HTTP header that is sent-behind-the-scenes between a web browser and an web server. This value is intended to control how long a particular file is cached on the client side. There is ...
76
votes
8answers
18k views

Why would someone trust DuckDuckGo or other providers with a similar privacy policy?

DuckDuckGo is a search engine that claims it will not share your results with others. Many of my skeptical coworkers think it may be a scam. Is there any proof that any web search engine will ...
4
votes
3answers
8k views

What is a good email site that doesn't mine your personal data? [closed]

I am becoming less and less ok with Google and Facebook collecting data on me based on my online activities and then selling that to companies. Is there a good email service out there that respects ...
7
votes
1answer
10k views

Is there a sms authentication that works like 10minutemail? [closed]

I remember reading on this site a user recommending 10minutemail.com as a way to register or give email address to non-trusted websites. Is there any similar site for disposable phone number for ...
18
votes
5answers
2k views

How does preventing automatic download of pictures help to protect my privacy?

When viewing some emails in Microsoft Outlook, if the sender has included images, I get the following option appear at the top of the email: "To help protect your privacy, Outlook prevented ...
5
votes
3answers
625 views

Are there security (esp. privacy) benefits to deleting cookies?

As the title says, I'm wondering if there are any security/privacy benefits to managing cookies - that is, managing by deleting cookies you don't want or need. I deleted all my cookies about a week ...
5
votes
1answer
128 views

How long can I store personal information on unconfirmed subscriptions?

I have a monthly newsletter. In my subscribe form I use a double opt-in method: The visitor subscribes. I send him a confirmation email. If I receive a reply, I add him/her to my system. In the ...
3
votes
3answers
383 views

Are there any same origin issues (SOP) with TOR?

Are there any issues with Same Origin Policy (SOP) with TOR or *.onion addresses? I'm thinking of cookies Plugins (Silverlight, Flash, Java, etc) Javascript
10
votes
1answer
1k views

Do burned DVDs contain trackable information?

I'd like to know if it's possible to burn a video DVD (not just a regular CDFS DVD with video files in it; I mean a DVD that you can play the video of using regular DVD players), without the ...
4
votes
2answers
2k views

How do I use DuckDuckGo securely?

The Privacy Policy of DuckDuckGo.com mentions using HTTPs and POSTs affects the privacy of the search requests. Since HTTPS is disabled by default, and POSTs is enabled by default, how does this ...
8
votes
2answers
249 views

Where to find papers / information about spyware, tracking and cookie problems?

I am right now working on a problem and looking for some papers / information about spyware, tracking and cookie problems. I am no expert in that area, so I lack the knowledge where to find material ...
6
votes
3answers
784 views

Does Google log my activity on service A when logged in to service B or by IP address?

Now that Google's new Privacy Policy will combine data from their various services... Will Google associate me to my activity on one service even if I am not logged in to that service? Did they ...
2
votes
4answers
390 views

How to prevent private data being disclosed to unwanted audience over internet?

Everyday, in order to subscribe to certain services on the Internet we are almost forced to disclose private data even though those services don't necessarily require it. For example, I need to ...
5
votes
2answers
375 views

How to refute “don't use internet if you don't like it” answer?

I hope it is legit question, similar to, for example, Why do law-abiding citizens need strong security?, et al. and it is tightly conected with user's security, privacy, etc. The response I always ...
3
votes
5answers
1k views

TrueCrypt dataleaks that might betray the “Deniable File System” option

Reading into "Operation Satyagraha", one would have to believe give all the resources used that the investigators had some reason to believe there was data to decrypt, even though in theory and in ...
4
votes
2answers
3k views

Does Google record search / source IP [/ user] pairs?

Does Google record search / source IP [/ user] pairs? What if my Search History is off?
-2
votes
3answers
397 views

Available alternative DNS protocol not another dark-net [closed]

Hi does any one knows any DNS alternative Protocols ? If so what is the most used ? Is easy to setup ? Is easy to have two DNS protocols one where you connect to the Common Internet and the other ...
7
votes
5answers
13k views

Does chatting over Skype expose my IP address?

Is there a way to identify a person's IP address in Skype, when you're chatting with them? Does this depend on their Skype settings? And if you've recorded chat messages, can they lead to the actual ...
15
votes
5answers
16k views

What are the pros and cons of a VPN for privacy

Recently I have been getting more and more interested in the security (privacy and anonymity) issues of my online life. Not that I have anything to hide, or that what I do online is so interesting to ...
6
votes
2answers
454 views

With Google's new Privacy Policies going into effect soon, how can I better protect myself using their services?

From what I can tell, the gist of the new Privacy Policy from Google is that they're making a blanket policy to allow using your data between all their services, however they see fit. So now one ...
2
votes
4answers
2k views

If a hacker were to compromise a GMail database

Assuming the systems that store the Gmail database is compromised what is preventing them from reading everyone's emails by looking at the data in the database? I assume nothing, and in order for ...
2
votes
3answers
536 views

Security issues with email accounts

I am starting to become wary of giving out my email account to anyone, just by doing reconnaissance it is evident how easy it is to pull so much information from a person just by a email, There is a ...
11
votes
3answers
14k views

Is a password protected PDF file safe for bank statement attachments?

My bank emails my monthly statement to me in a password protected PDF attachment. Is this a secure method of transmitting something as sensitive as bank statement?
4
votes
5answers
1k views

Could I be defrauded by a website who has my address, phone number, and credit card number?

Exactly what kind of information does a scammer need to scam someone money? For example, if there's a website which wants me to provide my details, Exactly what kind of information can I divulge and ...
4
votes
1answer
571 views

Android for the Paranoid

In the case of a rooted phone, what are the various options to stay anonymous and keep your data secure? I've seen the guys at The Guardian Project work towards this: ...
2
votes
1answer
443 views

Safe harbor in USA, EU, and Russia

I am doing research on Google's Blogger service and its privacy protection features. They say that Google complies with the U.S.-EU Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework. I've ...
3
votes
3answers
584 views

Can too much web searching be a danger to a security professional?

As a junior security professional, I spend a lot of time goggling for things such as 'wpa dictionaries', 'vulnerabilities...' , 'how to crack ...','and so on. I sometimes feel like I am calling for ...