The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

2
votes
3answers
4k views

Does WhatsApp disclose the sender's IP address?

Does WhatsApp disclose the sender's IP address? Is it possible to get it by running netstat -a or via Wireshark?
2
votes
2answers
194 views

How would iOS or Android app “firewall” for extended permissions (location, etc) work?

I'm interested in blocking or reporting any application's usage of extended permissions, regardless if they are granted those rights, such as: GPS / Location / Wifi Radio signal data Telemetry My ...
1
vote
1answer
29 views

How to properly use PGP for e-mail encryption/signature (key generation, key rollover, etc.) [duplicate]

To improve my privacy, I would like to use PGP to encrypt/sign my e-mails. How should I proceed to use PGP in a secure fashion? I am trying to think about how to do it properly. From what I found, ...
1
vote
2answers
386 views

How do private photos get stolen?

I'm not referring to any of the below: A spiteful partner sharing private photos of the other after editing themselves out. Someone stealing photos from a professional photographer/artist without ...
3
votes
2answers
816 views

How can I prevent private data from being disclosed outside of my organization?

I'm not looking to secure my internal network. Our company keeps sensitive customer information. How can I prevent this information from spreading outside of the company? How do big companies ...
2
votes
1answer
44 views

Security requirements of storing ID numbers in database EU/USA?

I am dealing with a client (an official organization in one EU country) who is storing all clients' ID numbers in an Excel spreadsheet. They need those numbers to present their clients once per year ...
1
vote
5answers
77 views

Using an e-mail service anonymously [closed]

What are the options, to use an e-mail service anonymously without exposing yourself (your private info, name etc.) ?
1
vote
0answers
13 views

Multiple email addresses connected to same PGP identity [duplicate]

I am setting up PGP (using GPGTools GPG Suite for OS X) and I use multiple email addresses daily. It appears I have several choices on how to do this, and I am wondering what is most secure/most ...
64
votes
13answers
9k views

Should I allow browsers to remember my passwords and synchronize them?

I wonder, how wise is it to allow Chrome and Firefox to a) remember the passwords b) synchronize them? My gut tells me that if it's not man in the middle who can intercept them, but Google and Mozilla ...
0
votes
0answers
14 views

Has Anyone Published the Typical Netstat Profile for TAILS Linux?

Using TAILS, and with concerns typical of anyone security conscious enough to be drawn to it in the first place, I was wondering if boum.org or anywhere else has put the typical netstat profile for ...
4
votes
1answer
155 views

Someone called my cell phone offering services about something I have been looking for in the web

I recently started gathering information about poker and poker online. I had no idea about it and I have spent about a week surfing the web (mainly using Google) and consulting different web pages ...
2
votes
4answers
61 views

Is knowing someone's card expiration date a means of finding info about them?

Card as in debit or credit cards. I heard that even showing someone your debit/CC can be considered an exploit not because of the number or name, but because of the date of expiration. He said that ...
17
votes
3answers
50k views

Can law enforcement track a criminal through dynamic IP address?

I ask because a week ago my home was broken into and, among other things, my iMac computer was stolen. I am desperate to get it back because it has all the pictures of my daughters from the last ...
0
votes
0answers
28 views

using home wifi for telegram messaging app [duplicate]

If I use telegram messaging app on my phone using my home wifi, can other members of my family see my texts or my files on their devices?
1
vote
0answers
37 views

working from home, can they monitor my other computers [closed]

I work from home on my own desktop. The company I work for has me use a keyfob and six digit number to synchronize with their servers. they can monitor me and warned me they do monitor as well as the ...
-4
votes
3answers
101 views

Is there a way to secure a Linux machine in a way that no one else (but me) can access its contents? [closed]

And I mean, even if someone tries rooting with a Live CD, even if one takes the HDD away and plug it in somewhere else, etc... I want to be able to give a client a machine with a service running, but ...
1
vote
2answers
141 views

Whatsapp decryption by government agencies

I would like to know why government agencies need the help of WhatsApp for decryption. As can be seen in this article. They asked for WhatsApp help to decrypt the messages. They did more complicated ...
1
vote
3answers
90 views

Can a rogue DNS server see my passwords?

Recently I've been testing a couple DNS servers to see which one performs the fastest because I need a really fast connection. On to my point, if I were to use a malicious DNS, could they see my ...
4
votes
1answer
67 views

Detect PC Boot from Live CD

is it possible to detect a boot-up via live CD (eg. Ubuntu, Debian, Tails ...) that happened in the past? If yes, where can this information be obtained? I suspect my PC has been booted through a ...
40
votes
5answers
10k views

How to fight browser fingerprinting?

https://panopticlick.eff.org/ , aka "How unique and trackable is your browser". For example it usually gives me a unique score. The biggest entropy values come from navigator.plugins and fonts via ...
1
vote
1answer
51 views

What are the privacy implications of using Yubico OTP with YubiCloud?

I am considering purchasing Yubikey devices (made by Yubico) to add two-factor authentication when my users ssh to our various servers. I figured I would configure the device to use Yubico OTP with ...
3
votes
2answers
49 views

How to host application monitoring and administration dashboards?

I'm in the middle of completing a web app for production. This is my first one. I'm at the point where I have to put together an administrator dashboard for comprehensive monitoring and administration ...
-1
votes
2answers
55 views

Can I dis-identify myself if I use VPN on sites?

This is for irc site. but identification mechanism is what I need to know. On IRC (since it's the kinpin of tracking,identifying) if I use a different IP, can I still be identified if someone is ...
1
vote
1answer
60 views

Is there a way to create separate environments on your computer with no way of detection?

I would like to know if there is a way to create two different systems/environments on your PC (Windows OS) that you will enter each by different username and password. When someone enters your ...
4
votes
2answers
55 views

The history of thumbnails (or just a previous thumbnail) is embedded in an image file?

I was surprised when I cropped an image on Windows Phone, saved it, sent it via e-mail to a PC, and then downloaded it - and the thumbnail in the download folder was the one of original, not cropped ...
10
votes
3answers
895 views

With whom does my PC communicate at startup?

I've been reading about Windows 10 and its incessant desire to call home. I've tried putting some firewall rules in place. I am sure they are working but I got to thinking that many events probably ...
1
vote
1answer
41 views

Gmail password on another device. [closed]

I sold my android phone. I had account saved for google apps. When I change my password of gmail account, can it be possible to log in from previous phone by buyer?
22
votes
1answer
2k views

What are the privacy and security implications of Windows Telemetry

There have been quite a few news stories relating to the use of "Telemetry" in Windows 10 (and also now Windows 7/8) with suggestions that users would want to disable or remove these updates due to ...
-5
votes
1answer
51 views

Adblock browsing history security [closed]

A lot of people use adblock. From a security aspect, ad blocking would involve intercepting and parsing HTML contents and URL's. Hackers attacking adblock servers could gain access to that valuable ...
8
votes
1answer
118 views

School installs something on my Mac in order to connect to the school network. Should I be concerned?

Recently my school started a program which allowed us to bring our own laptops to school. Previously we were given laptops (owned by the school) to use. I'm still currently using the laptop given by ...
1
vote
2answers
115 views

How can someone know technically if antivirus provider tracks him? [closed]

Is there a technical way to make sure that your antivirus provider doesn't send any information from your computer? Is there a reliable list of antivirus providers that this issue was checked and it ...
25
votes
6answers
5k views

What real world benefits does PGP have over sending email with SSL/TLS such as with HTTPS?

I've been learning about PGP, and I asked myself, "Why?" For example, if I'm using https://mail.google.com, then what benefit would adding PGP offer that would justify it being used? I can ...
4
votes
1answer
112 views

Erase broken external Hard Drive before returning to store

I've seen similar questions out there but not the same. I have a broken Seagate hard drive that I want to return to the store. It has a lot of private data on it. I can't access it through the ...
0
votes
1answer
33 views

Is there a way when using WIFI to know the specific users computer ids?

When you use WIFI is there a way to know the other users computer ids and MAC addresses? What other WIFI users can know about you when you share same WIFI?
88
votes
8answers
11k views

How can I protect my internet-connected devices from discovery by Shodan?

There's been a lot of buzz around this recent CNN article about Shodan, a search engine that can find and allow access to unsecured internet-connected devices. Shodan runs 24/7 and collects ...
2
votes
2answers
89 views

Is there any risk in placing a scan of a diploma online?

I wonder whether there is any risk in placing a scan of one's diploma online.
3
votes
1answer
52 views

What are the potential privacy issues in using a TPM chip with GNU/Linux

I'm planning to buy a TPM module to bring more security in my system (GNU/Linux, dm-crypt/LUKS, SED) but I'm not sure with the big debate around it. What are the (possible) privacy concerns in using ...
12
votes
5answers
11k views

Why is Tor safer than a proxy?

If I use a Tor router to browse the regular internet, my traffic must leave the Tor network through an exit node. Apparently the exit node can see the data originally sent. Is this true? If an ...
24
votes
7answers
10k views

Can a WiFi access point operator tell that I'm streaming video to my phone?

I work at an office typing numbers into a computer. It gets quite boring sometimes, so I go on Netflix while using their WiFi on my phone. Can they tell what apps I'm using, based on network traffic? ...
1
vote
1answer
42 views

Does using Ghostery with Privacy Badger impair PB's heuristic learning?

I am running Ghostery and Privacy Badger for FF. From what I have read at eff.org/privacybadger, PB uses a heuristic algorithm to learn what 3rd-party sites are tracking me. If I am running Ghostery ...
1
vote
1answer
95 views

How to only let end user to access data in a web app

I've been read a lot about common encryption methods used in a django app. However, my requirements are very different. I am looking for a way to encrypt my web app data so only the owner of the data ...
1
vote
0answers
48 views

What personal information, if any, can be gleaned from a Microsoft APPCRASH problem signature?

I am trying to debug an "APPCRASH" problem event for a program running on Microsoft Windows 7. When this happens a problem signature is presented, like this example from SuperUser: Problem Event ...
4
votes
2answers
146 views

Is it possible to hide my physical location from my ISP?

It's generally difficult, if not impossible, to know how any given company is going to use the information they gather about you. In some cases, it's also night-impossible to opt-out of their data ...
100
votes
13answers
26k views

Where do you store your personal private GPG key?

So, I want to start using pass, but I need a GPG key for this. This application will store all of my passwords, which means it's very important that I don't lose my private key, once generated. Hard ...
1
vote
3answers
137 views

Is it possible for Apple or any other company to create fully encrypted smartphone?

From the latest Apple vs FBI story it's known that Apple is technically capable of changing the boot-loader of the iPhone to provide interface for brute-force finding of 4-digit password. I'm ...
1
vote
1answer
183 views

How to protect against the new malware Mazar Bot?

Mazar Bot is new Android malware that spreads via SMS. Its capabilities: It can read incoming SMS and send itself, make calls to directory contacts, contaminate Chrome, access to the Network, read the ...
0
votes
0answers
19 views

Mic port soundproofing [duplicate]

What options are there for placing physical, removable soundproofing over work issued laptops mic ports? Sound block must be removed for frequent meetings virtually. Nothing can be downloaded due to ...
80
votes
4answers
7k views

What is the risk of copy and pasting Linux commands from a website? How can some commands be invisible? [duplicate]

Like all beginners in the land of Linux, I usually look for websites that contain some useful shell commands, mark it with my mouse, copy it (CTRL + C) and paste it into a terminal. For example, if ...
1
vote
1answer
84 views

How does add-on for the Firefox with a custom proxy server prevents info from Google?

I would like to know how does add-on for the Firefox web browser with a custom proxy server prevent Google from collecting information about your browsing? Does it prevent also from your internet ...
42
votes
6answers
7k views

Are random URLs a safe way to protect profile photos?

I would like to move from sequential to random user IDs, so I can host profile photos publicly, i.e. example.com/profilepics/asdf-1234-zxcv-7890.jpg. How long must user IDs be to keep anyone from ...