The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

3
votes
1answer
774 views

How is a Tor hidden service immune to exit node attacks?

Let me explain with a nifty diagram: IP/RP <-> bunch of Tor clients/node (Tor circuit) <-> Tor hidden service Wouldn't the last Tor client in the circuit knows that the message is for the Tor ...
1
vote
1answer
192 views

what info can web bugs track?

From EFF's Web Bug FAQ(point 6), What information is sent to a server when a Web Bug is viewed? The IP address of the computer that fetched the Web Bug The URL of the page that the Web ...
6
votes
7answers
2k views

Is PGP combined with a regular web-based email service secure?

With the disappearance of private email services like Lavabit and Tormail (http://www.dailydot.com/news/email-anonymous-hushmail-lavabit-nsa/) it seems that we will need to resort back to standard ...
2
votes
1answer
2k views

Open source video conferencing software with encryption [closed]

A couple of friends and I are looking for an open source video conferencing software. We'd like to run the server on a Debian box, but the clients are Windows machines. Most importantly, it should ...
3
votes
4answers
12k views

Is it normal that my new VISA debit card has almost the same number as the old one? Is it secure?

My bank issued me a new debit card (VISA Electron) because the old one expired and to my surprise, the card number is almost the same as on my old card. I don't think there would be much chance that ...
2
votes
1answer
239 views

Torception: An onion within an onion

With the recent takedown of silkroad, I am pondering on how anonymous you actually can be on the Tor Network. Other more legal or moral uses such as anonymity as a right, or avoiding censorship. These ...
1
vote
1answer
138 views

How can I block flash from obtaining a list of available fonts in my browser? [closed]

How can I block Flash, at least in Chrome, from obtaining the list of available fonts in my browser? It seems that the combination of fonts available is the easiest way to fingerprint a browser.
0
votes
1answer
113 views

Browser Extension to show how your session is being shared

A while back I came across a browser extension (was available for Firefox and Chrome, maybe others) that showed you through a graphical 'node' interface how your browser session was shared with so ...
1
vote
0answers
78 views

How did these websites see through the VPN tunnel? [duplicate]

I'm using privateineternetaccess to VPN my internet connection. Recently I've noticed some web sites appear to know my real location and IP address. The most alarming incident I've seem to have been ...
3
votes
2answers
5k views

Using Cain and Abel to capture traffic of machine in the same network

I have installed Cain and Able in machine A, which is connected to another machine B via a LAN. Now I want to analyze all the traffic of machine B. Is this possible by installing Cain and Abel on ...
2
votes
3answers
200 views

Avoid third party access to system

I need to go through airport security and customs, and its known that at least the German customs (http://en.wiktionary.org/wiki/Bundestrojaner) (and I suspect others as well) try to upload software ...
1
vote
1answer
178 views

Security Standards for storing private customer data

A certain government regulation in my country mandates all non-resident donors to provide a copy of their identification (usually, the passport). So, we ask the donors to upload a copy of their ...
1
vote
2answers
145 views

Does a OS manufacturer have permission to access your computer unauthorized? [closed]

Many services such as email and online storage have stated in their Terms of Service that they have the right to view and delete your files at any time. I'm wondering if they same applies to software ...
8
votes
1answer
461 views

Are there any reasons why browsers should block mixed passive content by default?

Most browsers block "active" content that's being loaded over HTTP on HTTPS pages. This includes stuff like javascript which can be modified with an MITM and compromise the security of the entire ...
1
vote
2answers
3k views

Privacy of Gmail for business?

Considering the recent litigation in which Google apparently claimed that all the emails, all the data in them, are Google's property and can do with the data whatever they want, I get frequent ...
0
votes
3answers
156 views

Securely transferring data from service provider to client

Suppose a client C wants to transfer form a service provider P, who collected data on behave of C using a web-application. Additionally, suppose the amount of data is larger than 100 MByte and ...
0
votes
2answers
128 views

Germany: Privacy Protection Regulations and Response [closed]

Do privacy protection laws within Germany/EU protect students from gross invasions of privacy? I have reason to believe that through some either permitted or unsanctioned channel my teacher was able ...
1
vote
1answer
76 views

Gaining sensible information from advertisement displayed in web pages

As we all know, JavaScript loaded inside a website A gets restricted to access the domain itself [same origin policy]. Unfortunately, same origin policy does not apply to newly created DOM nodes, ...
4
votes
2answers
198 views

To What Extent does an Attacker Have Access to the Browser History through the CSS Pseudoclass :visited Styles?

I have read this article on how a scripted web page is able to obtain the visited history of a user browsing the page. However, I can't find any clear information in the article describing the extent ...
0
votes
1answer
195 views

In which country can you host a service which honors privacy?

Recent events like the Lavabit case have shown that it is no loger possible to host a server in the United States and guarantee your users that you will keep their data confidential, because the US ...
0
votes
2answers
6k views

Windows user: Is having many active TCP connections normal?

Is this normal? Can any ports be "dangerous"? I have 9 tcp's in a listening state, 4 in a close_wait state, and 4 in an established state. Some of them route to odd procceses using PID such as ...
4
votes
2answers
90 views

Time zone settings and leakage of location

When you set up your clock in Linux systems and select a timezone: How easily can sites access this information? Can they do it through Javascript? Can they do it if Javascript is blocked? Where ...
0
votes
1answer
148 views

Atm/Debit card Security [closed]

Is it possible for a person who has your ATM/debit card number and PIN, to withdraw your money? If so, how?
4
votes
3answers
10k views

Why is JavaScript disabled in the Tor Browser Bundle?

Didn't Tor create a local socks proxy? Why doesn't all the Web traffic go over this local socks proxy and why is JavaScript disabled in the Tor Browser bundle? If you would connect with firefox for ...
2
votes
2answers
625 views

Is it possible to respect a user's privacy while collecting phone MAC addresses?

In London, there are trash bins that track a phone's MAC address and monitor the users movement from one location to another. I want to see if there is any best practice for collecting private ...
16
votes
3answers
401 views

What expectation of privacy is there with US-based vendors with the LavaBit and SilentCircle shutdown?

Lavabit hosts a secure messaging service that was recently shut down. Likewise SilentCircle has preemptively done the same thing with their email-based service. It seems that the justification for ...
0
votes
3answers
426 views

Is it possible to War Drive for specific Bluetooth devices? What is the range?

Is it possible for someone to remotely/covertly scan for Bluetooth devices? If so, what is the operational range of this scanner? My concern is that a Bluetooth based door lock will emit a signal ...
0
votes
2answers
244 views

A thought experiment about obfuscating the location of a smartphone when it is in use, is it possible? [closed]

I was thinking about how smartphones are very difficult to use in a way that does not transmit your location, with all the networks it has to connect to (and let's say a 'burner phone' is too ...
1
vote
3answers
301 views

Do obscure image URLs prevent image harvesting?

On a Web site which requires user login, and all content is viewable by any registered user, is there any point in making obscure image URLs like "1mh9cr2m78234bc23-32xy4723nxy12.jpg" to protect the ...
1
vote
2answers
502 views

Alternative Email Provider [closed]

As a continuation to Why would someone trust DuckDuckGo or other providers with a similar privacy policy? it seems like we already have a secure way to make a search without writing history and etc. ...
41
votes
3answers
15k views

What is the best practice: separate ssh-key per host and user VS one ssh-key for all hosts?

Is it better to create a separate ssh-key for each host and user or just using the id_rsa key for all host to authenticate? Could one id_rsa be a malpractice for the privacy/anonymity policies? ...
8
votes
3answers
1k views

Does excluding Tor nodes by country improve privacy? [closed]

Here's the situation: the government of West Nauru is known to run a lot of TOR exit nodes and to collect a lot of data on the traffic, using extra large arithmometers to collate & correlate ...
2
votes
1answer
324 views

Twitter.com in private browsing leaks data to normal browser. Other sites as well? Bug or feature?

This is the first time I encountered similar thing. When I log into the Twitter web site in Chrome (namely, the Iron version which is said to be security enhanced, but that does not matter here) in ...
-3
votes
3answers
307 views

How to download data anonymously? [duplicate]

How to download data anonymously, were to store the data. I was reading a post on a forum and a guy was asking how do you download data anonymously and he asked how do hackers do it ,everybody started ...
9
votes
4answers
3k views

Can a VPN avoid the Prism Surveillance Programme?

This is causing me major concern and i can understand it is for a lot of users as well. I have nothing to hide but it's the moral aspect of snooping which has ticked me off. Can a VPN avoid the ...
38
votes
5answers
3k views

Client-side encryption, but cloud service can still decrypt data in the event of a death? Is this possible?

I've been worried about this password manager, PasswordBox that seems to be gathering quite a bit of steam lately. They seem to have raised VC funding and are offering a free password management and ...
1
vote
1answer
354 views

When a browser extension or user script pulls a JS file from Google's CDN, how does this compromise the user's privacy in terms of Google's reach? [duplicate]

The context from which my question has arisen is this user script which locally removes ads from Ixquick.com, which is an anonymizing 'proxy' search engine that gives the results from Google's index ...
4
votes
2answers
209 views

Is there a Security/Privacy risk in storing computers' hardware thumbprint?

I'm asking this because according to this article , Microsoft collects much less information than actually exists for Windows licensing (e.g. only 10 bits for MAC addresses, 6 for CPU serial number ...
12
votes
11answers
7k views

Besides IP addresses, how else could one be identified? [closed]

OP: I'm curious how else an actor seeking to identify someone online could accomplish this task besides just using an IP address. What methods would they employ? What knowledge must they have of the ...
0
votes
1answer
363 views

What are the performance and security tradeoffs when selecting “ECC” or “Subgroup” in a U-Prove token?

In one of the U-Prove documents, I remember reading something that compared Subgroups versus ECC and it went something like this (paraphrased): Subgroups Requires a bigger key to achieve equivalent ...
3
votes
1answer
5k views

How can I get the IP address for a ToR Hidden Service (HSP) with a .onion address?

I'd like to find out the IP address of a given .onion address. Is it possible for me to simply assign an exit node (that I control) to my client and just monitor it to determine what IP address ...
2
votes
2answers
243 views

What may a Hungarian employer do with the employee monitoring logs?

Employers often monitor employee network access, even install keyloggers on their computers, etc. But the articles I found on the internet, is about the monitoring but not what they may do with the ...
2
votes
3answers
2k views

Have the police placed a bug on my line [closed]

As a pretty dedicated anarchist, rule-breaker and malcontent, I often find myself at odds with the British police. I have been the subject of 3 searches (that I know of) over the last 8 months ...
3
votes
2answers
697 views

How can I protect my domain names without exposing too much personal information?

I guess more specifically I want to know how to ensure I retain ownership by having sufficient contact information in the Administrative, Technical and Billing contact fields, but without exposing too ...
1
vote
1answer
79 views

Couldn't websites that want to track our activity just store the data in the DOM?

For example as the value of an attribute of a html tag. <div cookie='id=1234'></div> Then if the user deletes the cookies while at least one page of the website is open, a javascript ...
-2
votes
2answers
762 views

How to minimize your fingerprint, or become invisible on the web? [duplicate]

With all of these news stories about the government reading emails and snooping information from other sources, what are ways to minimize or eliminate an organization's ability to actually track and ...
-1
votes
1answer
168 views

Who can view my https browsing habbits? [closed]

I was wondering about HTTPS security and how easily is compromised. I have already read the similar threads in here, but I have some more questions: Let's say I am searching something at Google. ...
7
votes
3answers
613 views

How secret are secret forums?

I'm looking into setting up a forum for a writers group I attend; this would be for sharing stories amongst ourselves. In order to retain first rights, this has to be within a hidden forum, where the ...
6
votes
3answers
864 views

Does Google log my activity on service A when logged in to service B or by IP address?

Now that Google's new Privacy Policy will combine data from their various services... Will Google associate me to my activity on one service even if I am not logged in to that service? Did they ...
3
votes
2answers
296 views

PDF files on webserver file system

We create PDF files as relevant to a customer's e-mail communication. These PDF's contain some personal information, specific to the client. The client is emailed a link to the PDF. The link to the ...