The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

2
votes
3answers
501 views

Repudiation in Copyright Infringement (BitTorrent)

Seeing this question : How can alleged illegal downloading be detected? sparked a question I have had for a long time. How does repudiation/non-repudiation work in such cases ? Argument: It is known ...
2
votes
2answers
416 views

Studies on Android users' attitude to security

I'm a final year BSc. student of Computer Security & Forensics at the University of Bedfordshire (UK). I'm investigating perceptions of security on Android platforms, and how to educate users of ...
44
votes
5answers
11k views

How to fight browser fingerprinting?

https://panopticlick.eff.org/ , aka "How unique and trackable is your browser". For example it usually gives me a unique score. The biggest entropy values come from navigator.plugins and fonts via ...
13
votes
2answers
763 views

How does the Copyright Alert System work? Who has implemented it?

Some ISPs are participating in a Copyright Alert System that notifies content authors of violations of their copyright. I'm concerned how this oversight relates to my private traffic, and what laws ...
9
votes
6answers
4k views

Whats the probability of a personal computer being hacked?

For a normal computer user following these practices: Have an up to date anti-virus with a firewall installed (Norton). Do not install cracked software. Do not open suspicious links or download ...
6
votes
3answers
12k views

Privacy implications of IDFA/IDFV? (iPhone/iOS)

Apparently, iOS 6 introduced IDFA, "identifier for advertisers", which identifies your device so that advertisers can track you and send you ads. It appears they also introduced IDFV, "identifier for ...
3
votes
3answers
751 views

Privacy issues in Peer to Peer networks

In any typical P2P file sharing app, say DC++, the typical operations are search content, push content and pull content. A peer node broadcasts/multicasts its query to fellow peers and receives ...
2
votes
1answer
738 views

Silent (no user interaction) utility to clear cached credentials on Windows [closed]

Is there any way to clear cached credentials on Windows, that doesn't require: user interaction (e.g. a confirmation window); administrator access; or making a persistent change to the configuration,...
1
vote
3answers
1k views

How to secure data before returning Macbook Air?

I am returning my MacBook Air to Apple and want to know the best way to ensure my data is not recoverable from the flash storage. I currently have Filevault 2 enabled, however before I enabled it I ...
1
vote
3answers
1k views

Are tracking cookies illegal?

I have a merchant website. When a user visits the website, a cookie is set. Then when the same user visits the site again, we provide him with suggestions, content that he may enjoy based on what ...
5
votes
4answers
3k views

Ways to monitor someone's internet traffic

If some authority for whatever reason decides they want to monitor your traffic on a wired DSL connection, how would they do it besides exploiting your OS? What are the other ways assuming the OS is ...
5
votes
1answer
81 views

What are the security challenges encountered with attribute exchange?

OpenID has Attribute Exchange, Facebook has Facebook Connect, and authorization services such as Oauth enable access to user data distributed across a range of content providers. What are the ...
4
votes
1answer
210 views

Computational Feasibility of finding 'Good Links' of the following format

I recently stumbled upon this and am checking here to see if what I am proposing is indeed feasible and can be considered a breach of privacy. For obvious reasons I am not revealing the website ...
2
votes
2answers
79 views

Information disclosure by identifiers

I'm doing a small research and I observed quite a lot of sites that reveal some private information in the ID-s that they assign. As an example I would like to point out e-commerce sites that issue ...
3
votes
3answers
2k views

Email security and Home Mail Servers

Suppose you're truly paranoid (I assume the majority here identify with this?) and you don't want Google or other email service providers reading your email (to serve ads, etc). You don't want your ...
8
votes
4answers
32k views

Advanced techniques for detecting a proxy/getting original IP

In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used: Firefox with a proxy ...
6
votes
4answers
7k views

How to avoid leaving any local trace that I went to a website?

I want to visit a web site, but I want to ensure there is no trace left on my computer that I did so. How do I do that? This question is not concerned with anonymity or detection on the network side,...
3
votes
2answers
159 views

What information will dig leak to an attacker?

What information will the axfr and ixfr commands in DIG provide to an attacker?
6
votes
3answers
2k views

Is it proper to be prompted that I entered an old password

I changed my Facebook password a few days ago. Today, I entered the old password chronically, and saw the prompt: Sorry! You Entered An Old Password And even shows the date&time when I ...
5
votes
4answers
379 views

How to securely share files with other individuals?

I have a collection of files I would like to securely share with a small number of other people. The collection is mostly static; no more than one or two new files will be added per month (after the ...
6
votes
3answers
3k views

What can a hacker do when he has physical access to a system?

I mean, I'm a tech guy here in my region (not a hacker...). When I sit in the front of another person's PC, I notice a little fear about what I can do in the system. It's obvious that I will not ...
0
votes
2answers
987 views

Keeping the password secret over regular http

I would like to at first be clear that this is for poor site owners who can't afford the SSL option but require logins to their site, potentially from a public kiosk, and need a secure method of ...
1
vote
2answers
497 views

Repost: Wappalyzer selling datasets - possible website security implications? [closed]

This question has originally been posted to Stackoverflow but then I found that this was the right place to ask. If you are a moderator, please delete this question at SO. Hello everyone, I am ...
4
votes
2answers
6k views

WiFi security from another authorized user (roommate)

I believe we use WPA or WPA2 encryption. To what extent can another user monitor my traffic? Monitor my desktop activity? View documents I've saved on my computer? Tell what sites i visit? Tell ...
4
votes
3answers
606 views

Further potential problems with Windows 8 SmartScreen

Some research was recently published that showed that Windows 8's SmartScreen feature sends certain details about every single application that you install to Microsoft. Ignoring the obvious privacy ...
6
votes
1answer
11k views

Where and How is data stored in a session?

Where is the information in the fields of a session stored? If I, for instance, store in a session something like $_SESSION['foo'] = 'bar'. Where is "bar" stored? If I store an object of a class, in ...
3
votes
2answers
68k views

Can a SIM card be tracked without cell phone and battery?

I have a SIM card alone without cell phone and battery. Can it be be tracked?
21
votes
4answers
9k views

Why users want to disable cookies?

I just started to create a new web application. In the documentation, it is written that I have to prepare for the situation where users have disabled cookies. This is not the first time I have read ...
3
votes
2answers
2k views

How Is It Possible For Hackers To “Dig Up The Dirt” On People?

Like the title says, I was wondering how its possible for hackers to "dig up the dirt" and get peoples personal information such as address, credit cards, bank accounts, social insurance number, etc? ...
3
votes
2answers
1k views

How to make database of IP addresses anonymous?

I have to perform ip address connection stats anonymously because the data posses security risk, so how do I do it? Is it just like this, that the ip numbers and networks are replaced by random codes,...
3
votes
2answers
342 views

Protect sensitive data from sysadmin prying eyes

I'm thinking about this problem. What if I have to manage sensitive data (i.e. health data), and I use a managed server? I'd use encryption of course, but if they have root access they can see conf ...
4
votes
2answers
3k views

Does Java applets reveal the real IP address, even when using proxy or vpn?

Can a Java applet reveal the original client IP address, when browsing through a proxy or a VPN? Why?
0
votes
2answers
566 views

Anonymous proxy over SSL [closed]

Can you name any anonymous proxy software that don't use VPN connections? Basically, I'm analyzing different encrypted traffic and now I need to analyse a simple anonymity proxy traffic. I'm analyzing ...
6
votes
2answers
829 views

Workarounds for :visited CSS History reconnaissance

Several years ago it was possible to use a:visited { background: url('/log.php'); } to figure out on what website user has been previously. But now it is restricted by browsers. Is there any ...
14
votes
8answers
45k views

Is it possible to Identify a VPN user by finding relations in traffic?

If I am using VPN service to protect my identity, can my traffic be used to identify all my traffic? For example, if I am accessing two services: Some service A, where I do not leave any ...
2
votes
2answers
247 views

What may a Hungarian employer do with the employee monitoring logs?

Employers often monitor employee network access, even install keyloggers on their computers, etc. But the articles I found on the internet, is about the monitoring but not what they may do with the ...
3
votes
5answers
3k views

Is it wrong to collect and store IP addresses?

I am developing a PHP analytics program. I am using IP addresses to get its corresponding country. I was wondering if its OK to store both the IP address and Country or if its better if I just store ...
1
vote
2answers
5k views

Why does chrome connects to MarkMonitor (always on startup)

While using internet (over Chrome), I noticed that lsof -i returned certain suspicious URL(s). A whois lookup suggested that all of those belonged to MarkMonitor. For example: chrome 3224 ...
3
votes
2answers
912 views

How can I prevent private data from being disclosed outside of my organization?

I'm not looking to secure my internal network. Our company keeps sensitive customer information. How can I prevent this information from spreading outside of the company? How do big companies ...
1
vote
1answer
463 views

What torrent software should I be aware of as a security professional? [closed]

I am new to the torrent world and want to experiment / learn with the lowest risk possible. What do I need to know about torrent software, and related software and network configuration in order to ...
4
votes
3answers
610 views

Protect our payroll data from a legal and moral obligation

We have our payroll software to be installed on our file server. This contains all the details of current and past employees. The data contained in the payroll software includes tax, bank, National ...
2
votes
2answers
784 views

Interesting article on a vulnerability found in Tor

This article describes how French researchers compromised users using Tor. I'm not sure I fully understand or agree with it. I don't see what Bit Torrent has to do with anything? I mean they start out ...
11
votes
2answers
2k views

How might the U.K. Government's proposed internet surveillance equipment “bypass” encryption?

http://www.channel4.com/news/black-boxes-to-monitor-all-internet-and-phone-data http://rt.com/news/uk-privacy-internet-freedom-186/ 'Black boxes' will be installed by internet services providers ...
4
votes
3answers
664 views

Are there any addons that disable only some functionality of scripts?

Tor comes bundled with NoScript. Correct me if I'm wrong but that's because client sided scripts can determine the originating IP address regardless of who the traffic is passed through. But NoScript ...
3
votes
1answer
1k views

Are there any anonymous OpenID providers similar to Gawker's “burner”?

Gwaker has an anonymous commenting system called Burner. It is offered as an alternative to Facebook, Twitter and Google. What's the difference between Burner and creating a throwaway Google , ...
3
votes
1answer
182 views

Facebook changed the default email address for every contact. How do I mitigate the impact and risk?

Facebook created a problem for regulated industries and Registered Investment Advisers (RIAs) by changing the default outgoing SMTP address for every contact to a @Facebook.com address. This is an ...
8
votes
5answers
3k views

What do the various browser “private modes” do?

Recently there has been some disagreement as to what "private mode" means when it comes to various browsers. Primarily I am referring to... IE's "InPrivate Browsing" Google Chrome's "Incognito ...
3
votes
4answers
239 views

Improving the privacy of a casual Web user

I am interested in improving the privacy available to me as a casual internet user with a default browser. I think that Tor is too slow and that the "Privacy Mode" in browsers isn't really practical. ...
32
votes
5answers
6k views

How to be completely anonymous online?

I recently saw this post on reddit: http://www.slashgeek.net/2012/06/15/how-to-be-completely-anonymous-online/ But the majority argument, both on reddit and on comments on that post seems to be that ...
2
votes
4answers
296 views

How do governments carry out computer surveillance?

If https is really secure as companies tell us, how do governments manage to eavesdrop on terrorist and criminal communications? http://en.wikipedia.org/wiki/Computer_surveillance