The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

3
votes
1answer
10k views

House owner can see who's connected to WiFi; what more can he see?

I live in a rental house, and use the house-owner's wireless network to connect to the internet. The owner can see who is connected to his wireless network and I had a few questions regarding this ...
30
votes
20answers
5k views

How can I prevent my kids from bypassing my computer restrictions?

My son has a downloaded copy of Ubuntu that he uses to "break" into my computer, bypassing Vista. I have two questions: Can this damage my computer or corrupt my files? (I have lots of pictures) Is ...
3
votes
1answer
168 views

How to (programmaticaly or by other means) encrypt or protect customer data

I am working on a web project and I want to (as far as possible) handle user data in a way that reduces damage to the users privacy in case of someone compromising our servers/databases. Of course we ...
4
votes
1answer
84 views

Are these precautions sufficient for scam baiting?

I'm a tired of these stupid scammers trying to rip off fellow university students desperate for housing, so as for some free time activity I thought I'd try and do some scam baiting, and send him to ...
20
votes
5answers
2k views

Should I let a user know they have entered an unknown username or email address?

On my website I have a password reset page that users can use if they have forgotten their password. On this page they can enter their username or their email address and hit "reset" which will send ...
2
votes
4answers
2k views

How to block web-sites from viewing browsing history within firefox?

How can I block websites in Firefox from viewing my browsing history within my browser cache? For example; I've done some Google searches that Amazon is now starting to use to target advertise; the ...
8
votes
4answers
4k views

What web browsers support OCSP stapling? Are the privacy and performance features the same?

OCSP stapling decreases the load on a PKI infrastructure's OCSP server by attaching a signed OCSP response to the target in a TLS connection. In addition it creates a more secure/private session ...
16
votes
2answers
968 views

Can robots.txt for your face be made effective?

As Google Glass slowly starts shipping, I've recently came across an article on stopthecyborgs.org that mirrors my anxieties that Google Glass currently does not feature a robots.txt for my face. It ...
0
votes
3answers
248 views

What is the technical rationale behind intermediary email servers?

EFF's Survelliance Self-Defense (SSD) project has an illustration of how email over SMTP goes through intermediate mail exchange servers: AFAIK each intermediate servers is expected to add its own ...
1
vote
2answers
55 views

What is the likelihood of a government organization having a copy of the major .COM private keys? [closed]

This is a bit of a vague question, but it seems relevant these days with the information on all those "mass spying" programs getting leaked. I will describe the scenario and I just want to know if it ...
3
votes
3answers
675 views

How to prevent CAS from leaking user identity to arbitrary visited websites?

Summary evil.example.com could use a hidden frame to request a CAS ticket from corporation.example.net, then validate it to receive the username of the hapless user. This effectively deanonymizes the ...
-2
votes
1answer
79 views

Voicemail PIN reset - what is a DDN? [closed]

Here is a recording of Glenn Mulcaire using social engineering to reset the PINs to voice mailboxes to which he did not have authorised access. (At least, that's my understanding.) He appears to say ...
2
votes
2answers
623 views

How does Google track a user?

Some days ago, I was studying Web Programming for academic purposes. So I was learning SQL Injection by applying it on a sample website sqlzoo.net/hack/ But soon after it, in the Google ads on every ...
2
votes
5answers
669 views

How to safely show some text on a webpage?

I want to display some very sensitive information on a web page and I want to make sure that nobody, except the user in front of the browser, is able to access this information. I'm aware that in ...
14
votes
8answers
46k views

Is it possible to Identify a VPN user by finding relations in traffic?

If I am using VPN service to protect my identity, can my traffic be used to identify all my traffic? For example, if I am accessing two services: Some service A, where I do not leave any ...
1
vote
2answers
3k views

how can I stop someone from watching my internet history? [duplicate]

I use someone's wifi network. Is there anyway to stop him by getting my browsing information or can I somehow hide my browsing history from him?
0
votes
1answer
613 views

How secure is split tunneling on a VPN?

What protocols get encrypted and go through the VPN? Is it just port 80 and DNS traffic that does not go through the VPN? Does this impose any security risks by running a split tunnel? Making the ...
62
votes
12answers
66k views

Can I prevent my neighbors, whom I pay for shared internet (wifi), from seeing the sites I've visited?

I pay my neighbors to use their wifi. They have listed me as "guest" with a separate password from theirs. Is there any way to prevent them from seeing the sites I've visited? My browser history ...
-3
votes
2answers
166 views

How to respond to Cyber Bullying? [closed]

I am trying to learn about Cyber Bullying and I was thinking that if in future I get bullied, then what I can do? I have learned how to use Maltego, but if someone damages your reputation, then is ...
5
votes
1answer
6k views

Can an iOS 7 app access either device camera without user knowledge?

This statement in the iOS 7 release notes implies that non-China devices do not need user consent: iOS now requests user consent for apps to use audio input on all iOS 7 devices. For devices ...
1
vote
2answers
228 views

How can Facebook use history data in browser

Web is filled up with the recent decision by Facebook to track user browsing history like adage.com andNYTimes. How can a web application use browsing history which is local to that browser? Is it ...
9
votes
5answers
3k views

Is it ethical to use ReCAPTCHA to decode house addresses? [closed]

I noticed recently that ReCAPTCHA is using house numbers and street numbers as images for humans to decode. How ethical is it for Google to do this to this? Does it hamper privacy of an ...
2
votes
2answers
307 views

Indexing of URLs over IM protocols

Recently, I scanned a physical document for a friend, put it on my web server so that he could download it, and sent him the URL over the MSN chat network. I removed the file again shortly afterwards, ...
0
votes
2answers
201 views

Is the lack of https reason enough to abort form submission?

Preamble: Am in awe about the quality of both questions and answers on https / SSL on this site. My humble question below pales in comparison. Both on professional and amateur websites I've ...
3
votes
5answers
2k views

Can teleworking let my boss to sniff my network traffic? What else could he do?

My boss proposed me to code from home on the their machines via internet, in two possible ways: I would connect to their computer and work on their machine, as if I was in front of the computer(from ...
2
votes
1answer
2k views

Are legal notices in a login banner legally significant in terms of computer misuse?

Is there any case-law where having or not having a legal notice (example here) in the login banner of a system of nay kind made a difference in prosecution? The question is in consideration both of "...
21
votes
4answers
11k views

How can I protect against email tracking services?

Recently a free service came out for email tracking, bananatag. It's able to track the fact that the email was read in gmail without any notice or strange inclusions in the email body. In this case ...
3
votes
2answers
366 views

How can I separate two OS's files with encryption without using TrueCrypt?

I want to create a dual-boot such that the content of each OS is separated from the other using encryption. The main point point would be to to test out potentially harmful software on one OS, and ...
33
votes
7answers
3k views

Is there a difference between GET and POST for web application security?

I have 2 choices in sending data between 2 web applications. I encode the data in Base64 and append to the URL and retrieve these parameters at my destination application and decode the parameters. ...
1
vote
1answer
37 views

service providers and web activity

It is good to know that ISP have legal boundaries for retaining a client's internet activity. Is it possible that individuals can hack the ISP and then have access to someone's web history activity?
4
votes
1answer
75 views

Will my method for managing account data work?

I'm looking at whats nessecary to create a small accounts server for a video game I'm programming in my spare time. User privacy is a very important topic for me, and I don't want to keep anything ...
1
vote
2answers
1k views

How can I protect myself against programs that turn the webcam on without the indicator light? [duplicate]

Webcams can be turned on without the indicator light: to prevent unwanted use, I wonder whether there exist applications warning that the webcam is being used, or any other kind of protection. ...
0
votes
1answer
149 views

What companies drive around recording license plates? What do they do this for and on what grounds are they able to do so, legally speaking?

A friend shared a "security service" he just read about. Apparently the product is in beta and can thus be tried by anyone right now. I found it very interesting and surprising. I'm curious to know ...
4
votes
2answers
197 views

WHOIS Contact Details Abused

The system for the internet and the way people can abuse it is getting worse and worse. I am having several issues with people abusing the information within my WHOIS, which if I remember is protected ...
1
vote
3answers
307 views

Create live USB that hides IP address from foreign government

I may have to visit family in a few months overseas. Unfortunately, the local government of the area my family is from has gotten more corrupt and vicious. I am compelled to go here and may need to ...
5
votes
5answers
34k views

Using Private Browsing mode while connected to organization's network

At the workplace I use the organization's network for accessing internet (well that's the only option). I am not sure if the network administrators monitor what I browse, how frequently I access ...
1
vote
2answers
43 views

Privacy Policy for Mobile Apps

We are next to launch an iOS app in App Store which is asking us for a privacy policy url as part of process when this app is being uploaded to app store. We and most of our users are outside USA and ...
3
votes
5answers
1k views

TrueCrypt dataleaks that might betray the “Deniable File System” option

Reading into "Operation Satyagraha", one would have to believe give all the resources used that the investigators had some reason to believe there was data to decrypt, even though in theory and in ...
3
votes
4answers
172 views

Record IP pseudonymously?

I'd like to be able to ban an IP from my website, but for privacy reasons I would like to not have a record of the IP itself. Hashing the IP would allow for the hash to be brute forced in mere minutes,...
3
votes
2answers
642 views

Skype Audio / Video Session over VPN?

Basically I'm wondering if a Skype video session along with audio could be logged (or recorded) over a virtual private network? I know whoever hosts the VPN server can log which websites you visit (or ...
-3
votes
1answer
466 views

How could an attacker have gained remote access to my laptop? [closed]

I have a 15 yr old daughter who's become not only a certified Microsoft Expert, but by pure accident, it came to my attention she'd long ago created a SPLIT network connection on our internet, HIDDEN ...
1
vote
2answers
1k views

I work for a company from home online, using my own laptop. Privacy issues [closed]

I work for a company from home online, using my own laptop. To work, I have to login to their network through a web browser, Google Chrome. The URL begins with: https:// . I use a User ID and password....
-3
votes
2answers
73 views

Partial/Missing Privacy Policy? [closed]

I'm having a heck of a time with a new LG TV. I'm trying to contact LG support via email - a form on their web site which requires one to agree to a privacy policy. When I click Read Policy (near the ...
-1
votes
1answer
24 views

Transparency Report Standards [closed]

Are there any standards around what information should be included in a transparency report? I have reviewed what other companies have provided and would like to follow suit but I'm not aware of any ...
2
votes
3answers
223 views

Security “Threat” with Picture of Yourself?

This is one issue which I have came by in the world of Security, which I can not seamlessly wrap my head around. How is it a threat to one's security by showing them a picture of themselves to people ...
1
vote
2answers
212 views

How to know what personal information companies know about myself

I've been learning about Cyber Security and how to protect myself online after reading some books on the subject and I want to know how much Information i've handed out to companies.
4
votes
2answers
283 views

Can Heartbleed expose a TOR user's IP address?

It is interesting to observe, that TOR exit nodes with out-of-date OpenSSL implementations can themselves be affected by the Heartbleed bug. Can Heartbleed expose a TOR user's IP address merely by ...
15
votes
4answers
14k views

Tor and regular browser side by side. Does that make sense?

Can I use a Tor browser session and a regular Firefox session side by side without corrupting the security of the Tor session? E.g. when I download a new Eclipse version or when I'm searching for ...
-1
votes
2answers
3k views

Can you listen to your last GSM call recorded when calling back a user?

My wife called a GSM/3G number abroad and the call was dropped. She called again and she could hear the whole conversation repeated with the other party but with blank period from her side of the ...
4
votes
4answers
283 views

Anonymized Votes

Background Looking to create an anonymous voting system. The system must track whether or not a user voted on an item (public information), but only that user is ever allowed to know whether they ...