The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

0
votes
1answer
95 views

How do I convert a GPG certificate to a CRT certificate that can be imported into Windows Certificate Manager?

I have a GPG certificate from someone used for email -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) I would like to import that into Windows Certificate Manager So ...
10
votes
5answers
5k views

How to find a reliable private mail drop or ghost address provider? (Not CMRA)

A mail drop or ghost address is an entity that can receive mail in your name. For a little more on why would you want to do this, see JJ Luna. A CMRA stands for a commercial mail receiving agency. ...
29
votes
11answers
6k views

Can 'cracked' product keys harm the user in any way?

If a user download commercial software through the official, corresponding website, but use a product key which you did not legitimately purchase (e.g. websites that offer a list of product keys for ...
2
votes
2answers
180 views

Might Google log every website I visit using Chrome?

I wanted to start using Chrome for quite some time now, but I really don't want to tell Google about whatever sites I visit. So I was wondering if Chrome sends any data to Google telling them what ...
1
vote
2answers
69 views

Anti-virus anonymity question

Many people pay for VPNs and select the VPN based on whether or not that VPN keeps logs of the user's activities and if so for how long. The motivation is privacy- they don't want their surfing habits ...
1
vote
0answers
35 views

Policy Privacy Italian / EU and anonymous blog [closed]

I would like to write a personal blog without making my real identity public. It's not a "war blog" or similar, I would like to write about several personal problems and give (if possible) some ...
1
vote
2answers
39 views

Dealing with Spam with an unkown party harvesting the email address [closed]

I have a situation where I keep receiving spam from several IT companies (solicitations, marketing etc.). I think I gave away my email to a company in the last couple of years for reading a white ...
25
votes
8answers
6k views

A person knows my IP address: how to save my data and address? [duplicate]

I was chatting to a guy on a site, and the chat went wrong when I wrote a few wrong words by mistake. He then threatened that he will send my every detail to the vigilant team and soon my address will ...
8
votes
1answer
162 views

Is it unwise to use Redis to store PII, private keys, and other secrets?

I'm reviewing a system that is using Redis to store all client secrets, private keys, and other things. The problem is that Redis loads the entire DB into RAM Since SSL's heartbleed, Rowhammer, and ...
1
vote
1answer
149 views

Does the browser still stores the website you visited Private Browsing [incognito Firefox]?

As they clearly state in their website they mention that What does Private Browsing not save? Visited pages: No pages will be added to the list of sites in the History menu, the Library window's ...
0
votes
4answers
187 views

Help understanding VPN

I've been reading about VPNs lately, and I'm struggling to understand what they do and how they're essential components to upholding anonymity online. The basic idea I have is that a VPN allows two ...
1
vote
1answer
63 views

Are there different degrees of “confidentiality”? What is the best way for a psychologist to maintain confidentiality of communications with patients?

A non-tech savvy friend of mine is a psychologist. She has many patients who constantly invite her to communicate through all sorts of mediums such as text, email, voicemail, and other mediums. But ...
2
votes
3answers
739 views

Can DNS servers log users requests for commercial use (e.g. track direct access to websites)?

How does it work? For example, could OpenDNS be tracking everything (source ip + requested url) and then selling it to who have the necessary information to correlate the ip addresses with people ...
0
votes
2answers
112 views

What are the risks in using a VPN tunnel

I live in a small town and I know my ISP in person. I don't like the idea he can read all my unsecured communication (if he wanted to do so). I know I can use a VPN tunnel such as SecurityKISS.com to ...
1
vote
1answer
59 views

Which things can facebook access like contacts etc

I had two incidents . I added john to my skype account and i exchaged few messages. Then i went home and was checking facebook . Then at right side i saw Do you know john and it was his acoount ...
1
vote
1answer
76 views

Why should we focus on protecting root access on a home computer?

I understand why root access should be protected in general, especially in the context of a server environment. An unknown party can essentially control everything you do on a computer remotely ...
2
votes
0answers
184 views

What unique device fingerprinting information can an iOS8 app collect?

As a follow-on to this question: What unique fingerprinting information can an iOS7 app collect? What remaining device fingerprinting privacy / security vulnerabilities still exist as of iOS 8? Can ...
4
votes
3answers
380 views

What are the best practices for maintaining privacy on a non-jailbroken iOS device?

iOS, like most other mobile OSs, has the potential to leak significant chunks of personal information to 3rd-party apps and to ad and tracking networks used by those apps, which in turn also has the ...
5
votes
1answer
246 views

What are the security differences between SMIME email and PGP email? [closed]

Outside of key distribution, and specific to the technical details relating to encrypted email data (message body), what's the difference between SMIME and PGP? Example comparisons Security ...
16
votes
4answers
3k views

Is it dangerous to publicly share ciphertext?

Alice wants to share a message with Bob, but Alice and Bob can never be in the same place at the same time. We can assume they both know each others public keys (or agreed on a shared key, if that ...
21
votes
2answers
1k views

Does this CSS code expose if a message is read, and how long they have been reading it?

This email analytics company offers an 'engagement metric' that shows how much time someone spends looking at an email, whether the email is printed or deleted. They also claim it works in pretty ...
9
votes
4answers
30k views

Can an employer access Whatsapp messages if you are using their servers?

Does anyone know if an employer can access whatsapp messages if you are using their servers? Whatsapp apparently say the messages are encrypted, but I'm not sure about this.
0
votes
1answer
70 views

How secure is it to store information in Google products

I think many people have been gradually forking over more and more personal information to Google. I was noticing how I now have details about my doctor appointments stored in Google Calendar and on ...
1
vote
1answer
96 views

Can zip files be cracked if they were split into parts and only one part was available?

I am talking here about zip files that were compressed using basic protection and those using AES protection. In both cases, if only one of the many parts of the zip were available, will it be able to ...
0
votes
2answers
117 views

Is using an free and anonymous VPN service safe? [closed]

There are VPN services that are totally free and high speed vpn which makes me think, how can they offer such a service for free without ads nor donations? Is using this VPN safe? Regarding my ...
3
votes
1answer
51 views

Security of reading articles via an RSS reader

Would a site or blog owner know who is reading their site if the visitor is reading it with an RSS reader? Can they get the IP of the person? Say I had a Netvibes account with RSS feeds, can the site ...
0
votes
2answers
144 views

OSX Yosemite and Security/Privacy

I currently have a Macbook Pro running OSX Mavericks, being the skeptic that I am I always wait a bit before upgrading to 'new' OS versions when they are released to see how they fare both stability ...
2
votes
1answer
151 views

Does HTTPS protect you from fingerprinting by the NSA?

We've established that, for all intents and purposes, HTTPS hides what page you visit on a given server from NSA backbone wiretapping, but not the domain itself. But that's only IP / domain ...
0
votes
1answer
26 views

Would an IM app server holding user's messages long after the content was delivered be an issue of personal data protection? [closed]

Take a IM app like WhatsApp. If I send a message to another user while their client is offline, the server holds the message and then delivers it when the receiver's client goes online. It even has ...
6
votes
2answers
910 views

How does dnsleaktest.com find my DNS provider

Can't see how they find this over the web. I'm on Windows, its in my network config. It changes when I use a VPN provider, but not when I use a local socks proxy connected to a remote server over ...
12
votes
1answer
2k views

In CitizenFour, What Was Snowden Mitigating with Head Blanket?

A scene in the documentary, CitizenFour, showed Snowden using a blanket to cover his head and the laptop screen. When asked by Greenwald about this, he answered affirmatively, but I couldn't really ...
6
votes
6answers
18k views

Company computer use from home - how much can they see on the desktop?

I have a company supplied computer that I use from home. I log into VPN (cisco AnyConnect) when i need to access company email or internal company sites. In the past the company has been able to ...
37
votes
4answers
3k views

How to know if firmware is stealing my information?

The recent news item Chinese Star N9500 Android smartphone contains factory-installed Trojan, says security firm has prompted me to think about firmware security. The news mentions the spyware is part ...
0
votes
1answer
91 views

Need To Use Live CD With Mac without Shutting Down Computer (VMWare/Parallels Secure?) [closed]

I've heard of using Live CDs such as Tails to protect yourself online. Is there a similar setup to this that would work except run a Mac OS? I've done some searching, but have yet to find anything. ...
2
votes
2answers
159 views

Stealing document.cookie from Google domain, is this a privacy breach?

When I am logged into the Google and prints document.cookie I could see following cookies. My doubt is what all an attacker can do if attacker could steal these cookies of the victim using exploiting ...
0
votes
1answer
237 views

At Starbucks, is my MAC address sent when I accept the terms of service for free Wifi? [closed]

Recently, I overheard by chance some technically savvy guys saying that when you accept the terms of service in order to use the "free" WiFi at Starbucks (which you pay for when you buy some coffee), ...
0
votes
0answers
80 views

Brute-forcing a RSA private key password vs. LUKS volume

I need to store various private keys for my clients. Given these options, what would be the least prone to brute force attacks: Encrypt the private keys using a separate RSA key (each user get its ...
11
votes
2answers
939 views

How can I hide my logged in sessions from other websites?

Most people go on browsing the web while connected to their facebook/gmail/etc. accounts. Other websites somehow know what accounts you're logged in. For example, if you go to hide.me's torrent page, ...
2
votes
1answer
97 views

Is an SSL/TLS HTTPS certificate 'fingerprinting' attack possible?

If you download a friend's site's unique HTTPS root certificate (independent of default browser-shipped ones), or you simply make a 'permanent exception' to an obscure self-signed cert, in Firefox, I ...
6
votes
4answers
296 views

Circumventing a “freemail” account form filter

I'll be honest - I want to download a free PDF from a website which requires me to enter my "non freeware" email address. I do have them, but I dont want to use one as I'm afraid of landing up on a ...
-1
votes
2answers
106 views

How can I tell if a website is sharing what videos I'm watching without my consent?

It seems that publishers are getting sued or threatened for possibly sharing video watching information - information that an individual has watched a video, before this individual has explicitly ...
4
votes
2answers
88 views

What level of anonymity can I expect while using a library's user session?

At the library, computer are typically open for internet browsing, if you can provide them your library card number. To what extend can I expect to protect my internet browsing privacy from ...
7
votes
3answers
430 views

Is it secure to have an “email no longer available” feature on your registration form?

I was just implementing a new feature on the registration form of my site that checks if an email address is still available to register an account with. I am wondering if it is secure to show a user ...
1
vote
2answers
103 views

Securing Laptop's Wireless

When ones goes into a public space, like a train or plane, how does one prevent their previously joined SSIDs from being broadcast? I noticed that my phone and tablet tend to try to join these ...
1
vote
4answers
240 views

untangle server at work place privacy

When I am browsing in an environment where Untangle server is installed, can the network admin track everything I do? for example: Skype chat messages Personal emails (Gmail, Yahoo)
4
votes
3answers
617 views

Is there any way of preventing (or punishing) abuse of anonymity networks? [closed]

Anonymity services/networks like Tor, VPNs that don't log etc., seem like very double edged swords. Is there any way to prevent people with bad intentions (like breaking the law) from using them or ...
3
votes
2answers
808 views

How to make database of IP addresses anonymous?

I have to perform ip address connection stats anonymously because the data posses security risk, so how do I do it? Is it just like this, that the ip numbers and networks are replaced by random ...
10
votes
2answers
1k views

ISPs are now adding unique header identifiers to web traffic. Can this be avoided? If so, how?

I'm a security-conscious Verizon user, and it has recently come to light that Verizon is now serving up my web traffic to ad partners while en route. I understand that once my data has left the ...
19
votes
4answers
5k views

Why users want to disable cookies?

I just started to create a new web application. In the documentation, it is written that I have to prepare for the situation where users have disabled cookies. This is not the first time I have read ...
7
votes
2answers
6k views

What is the difference between ATA Secure Erase and Security Erase? How can I ensure they worked?

I'd like to wipe a stack of drives (spinning and SSD) securely. I'm familiar with the ATA Secure Erase (SE) command via hdparm, but I'm not sure if I should use the Security Erase (SE+) command ...