The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

0
votes
0answers
32 views

What is attribute-based authentication?

I found the following definition here : From a privacy perspective a better solution would be the use of attribute-based authentication (Goyal et al. 2006) which allows access of online ...
2
votes
5answers
3k views

If a hacker were to compromise a GMail database

Assuming the systems that store the Gmail database is compromised what is preventing them from reading everyone's emails by looking at the data in the database? I assume nothing, and in order for ...
7
votes
6answers
49k views

Company computer use from home - how much can they see on the desktop?

I have a company supplied computer that I use from home. I log into VPN (cisco AnyConnect) when i need to access company email or internal company sites. In the past the company has been able to ...
1
vote
2answers
35 views

Random autofill [closed]

I was trying to pay for something just now, and when I put my name in the chrome autofill came up and I clicked it. The address that showed up was wrong though but corresponded to the postcode of one ...
1
vote
0answers
20 views

Information and Settings Collected from a PC Connected to a Web Server

1- What are the information and settings collected from my pc when I connect to a website server? 2- When I connect through a VPN, Could the website server detect a mismatch between my new location ...
6
votes
3answers
7k views

What is the risk of leaking IMEI / IMSI numbers over a network

Should I worry if a developer programmed an app to send IMEI / IMSI number of the phone where the app is installed back to him? What can an attacker do with such information?
4
votes
2answers
240 views

Is it a good or bad practice to fake user agent?

I'm using a mobile browser. I found a program that can fake my User Agent (UA), so I changed to something else. Is this good practice or bad practice in terms of preserving privacy?
2
votes
2answers
161 views

How to test my anonymity?

let's assume that I've used proxies and anonymizing tools as much as I want. How to be sure that I'm totally anonymous? I'm not talking only about IP spoofing and identity hiding, but other and ...
0
votes
3answers
70 views

If I'm the owner of VPN network, what can my ISP see?

I'm planning to build small VPN network, so that me and my customers can connect and use it. But from my understanding, if I use my own VPN network, still my ISP can see the traffic, am I right? Here ...
7
votes
7answers
705 views

Does Windows 10 leak information about your IP address?

There are various reports of Windows 10 automatically sending out data when the user opens the start menu. Can that information or other information that Windows 10 automatically sends out to the ...
1
vote
0answers
14 views

Steps before updating privacy policy [closed]

What are the steps to be taken before changing/updating the privacy policy of an app or a service? Such as informing the user etc. Are there any strict rules to be followed?
2
votes
1answer
30 views

How to list all the permissions requested by an extension?

To install an extension, the browser (Chromium Web browser) give us an alert "can read all data on your computer and the websites you visit" , Sometimes we need to install an extension at least to ...
5
votes
1answer
207 views

Can I redact by converting PDF to TIFF and back?

Background My boss asked me to come up with a way ordinary users can redact information from PDF files using free software. We get a lot of scanned documents and our client requires that sensitive ...
4
votes
3answers
664 views

Are there any addons that disable only some functionality of scripts?

Tor comes bundled with NoScript. Correct me if I'm wrong but that's because client sided scripts can determine the originating IP address regardless of who the traffic is passed through. But NoScript ...
-4
votes
1answer
106 views

Can email be traced if sent from a phone with no sim card [closed]

I am using an old phone for web surfing only. If i sent an anonymous email (nothing illegal, just a flirty thing) can that email be traced back to the phone through my wifi?
0
votes
1answer
34 views

PGP/GPG: Do I need more encrypton subkeys?

As far as I know after reading several tutorials, it's reasonable to create one subkey for signing per each device I use, especially one that can be stolen, like laptop. However, having multiple ...
10
votes
4answers
1k views

Personal Information shows up in Google Search from a mailing list

Years ago, when I was young and fool, I sent personal information on a mailing list. Now, if someone type my first name and last name, this content shows up. I do not want this content to show up. ...
21
votes
2answers
2k views

Can address details be “googled” from the whois information, without knowing the domain name?

As above - if I register a domain name, will my postal address become "googleable" via WHOIS by someone that doesn't know what the domain name is? (Say I have a fairly distinctive first and last name) ...
1
vote
1answer
89 views

How to send sensitive data through an email?

Many times I have been in situation where I needed to send something sensitive, like my personal data, medical report, or something else over the email. In my country governmental institutions do not ...
24
votes
3answers
3k views

Listening to phone calls as user profiling for marketing [closed]

I had a landline phone call about xyz with an xyz-expert (also on landline) for about an hour, for the first time. After couple of days I started getting suggested links on websites as an ad exactly ...
0
votes
1answer
38 views

What are the requirements of becoming a WHOIS Proxy or Privacy service (not a registrar)?

This question was put on hold as off-topic at Webmasters, so I'm hoping it's ok to ask here. I've read up on the (outrageous) costs of becoming, maintaining and operating a registrar, but I cannot ...
4
votes
3answers
2k views

Keeping Whois domain registration details private

Most domain registers offer a service to keep your details private in the Whois database. Usually this works by replacing your email, telephone and snailmail addresses with proxies or P.O. Box ...
124
votes
9answers
15k views

Is Google spying on all of us?

I am curious because, I experienced something bizarre recently. About a month ago, someone asked me to find out a price for a T-shirt printing machine, and probably for the first time, I pressed these ...
3
votes
1answer
65 views

Company's right to insist on personal info [closed]

I have a maintenance contract with Scottish Hydro for my boiler. Whenever I call them, or they call me, about a repair or service, they demand my name, DOB and address (even when I provide them with ...
1
vote
2answers
122 views

What to do when a connection to a government website for submitting personally identifiable data is not encrypted?

I need to apply for a new passport, but my government's official website for submitting applications containing personally identifiable data does not use HTTPS — http://passport.gov.in/nri/Online.do ...
2
votes
3answers
73 views

Should it considered a risk if an organization's server OS and version information is leaked? [duplicate]

I am assuming that it should be considered a risk because there may be several security issues of various OSes known to hackers. If a hacker gets access into the victim's network, the extra knowledge ...
36
votes
6answers
173k views

If someone hacks my wi-fi password, what can they see and how?

If someone knows my wifi password (be it WEP or WPA) what can they see? Do they just see URLs I visit, or can they see everything in my browser, or even everything I do on my computer? Does using ...
2
votes
3answers
4k views

Does WhatsApp disclose the sender's IP address?

Does WhatsApp disclose the sender's IP address? Is it possible to get it by running netstat -a or via Wireshark?
2
votes
2answers
197 views

How would iOS or Android app “firewall” for extended permissions (location, etc) work?

I'm interested in blocking or reporting any application's usage of extended permissions, regardless if they are granted those rights, such as: GPS / Location / Wifi Radio signal data Telemetry My ...
1
vote
1answer
31 views

How to properly use PGP for e-mail encryption/signature (key generation, key rollover, etc.) [duplicate]

To improve my privacy, I would like to use PGP to encrypt/sign my e-mails. How should I proceed to use PGP in a secure fashion? I am trying to think about how to do it properly. From what I found, ...
1
vote
2answers
390 views

How do private photos get stolen?

I'm not referring to any of the below: A spiteful partner sharing private photos of the other after editing themselves out. Someone stealing photos from a professional photographer/artist without ...
3
votes
2answers
856 views

How can I prevent private data from being disclosed outside of my organization?

I'm not looking to secure my internal network. Our company keeps sensitive customer information. How can I prevent this information from spreading outside of the company? How do big companies ...
2
votes
1answer
47 views

Security requirements of storing ID numbers in database EU/USA?

I am dealing with a client (an official organization in one EU country) who is storing all clients' ID numbers in an Excel spreadsheet. They need those numbers to present their clients once per year ...
1
vote
5answers
77 views

Using an e-mail service anonymously [closed]

What are the options, to use an e-mail service anonymously without exposing yourself (your private info, name etc.) ?
1
vote
0answers
13 views

Multiple email addresses connected to same PGP identity [duplicate]

I am setting up PGP (using GPGTools GPG Suite for OS X) and I use multiple email addresses daily. It appears I have several choices on how to do this, and I am wondering what is most secure/most ...
64
votes
13answers
9k views

Should I allow browsers to remember my passwords and synchronize them?

I wonder, how wise is it to allow Chrome and Firefox to a) remember the passwords b) synchronize them? My gut tells me that if it's not man in the middle who can intercept them, but Google and Mozilla ...
0
votes
0answers
15 views

Has Anyone Published the Typical Netstat Profile for TAILS Linux?

Using TAILS, and with concerns typical of anyone security conscious enough to be drawn to it in the first place, I was wondering if boum.org or anywhere else has put the typical netstat profile for ...
4
votes
1answer
157 views

Someone called my cell phone offering services about something I have been looking for in the web

I recently started gathering information about poker and poker online. I had no idea about it and I have spent about a week surfing the web (mainly using Google) and consulting different web pages ...
2
votes
4answers
77 views

Is knowing someone's card expiration date a means of finding info about them?

Card as in debit or credit cards. I heard that even showing someone your debit/CC can be considered an exploit not because of the number or name, but because of the date of expiration. He said that ...
17
votes
3answers
51k views

Can law enforcement track a criminal through dynamic IP address?

I ask because a week ago my home was broken into and, among other things, my iMac computer was stolen. I am desperate to get it back because it has all the pictures of my daughters from the last ...
0
votes
0answers
28 views

using home wifi for telegram messaging app [duplicate]

If I use telegram messaging app on my phone using my home wifi, can other members of my family see my texts or my files on their devices?
1
vote
0answers
42 views

working from home, can they monitor my other computers [closed]

I work from home on my own desktop. The company I work for has me use a keyfob and six digit number to synchronize with their servers. they can monitor me and warned me they do monitor as well as the ...
-4
votes
3answers
107 views

Is there a way to secure a Linux machine in a way that no one else (but me) can access its contents? [closed]

And I mean, even if someone tries rooting with a Live CD, even if one takes the HDD away and plug it in somewhere else, etc... I want to be able to give a client a machine with a service running, but ...
1
vote
2answers
148 views

Whatsapp decryption by government agencies

I would like to know why government agencies need the help of WhatsApp for decryption. As can be seen in this article. They asked for WhatsApp help to decrypt the messages. They did more complicated ...
1
vote
3answers
105 views

Can a rogue DNS server see my passwords?

Recently I've been testing a couple DNS servers to see which one performs the fastest because I need a really fast connection. On to my point, if I were to use a malicious DNS, could they see my ...
4
votes
1answer
69 views

Detect PC Boot from Live CD

is it possible to detect a boot-up via live CD (eg. Ubuntu, Debian, Tails ...) that happened in the past? If yes, where can this information be obtained? I suspect my PC has been booted through a ...
1
vote
1answer
73 views

What are the privacy implications of using Yubico OTP with YubiCloud?

I am considering purchasing Yubikey devices (made by Yubico) to add two-factor authentication when my users ssh to our various servers. I figured I would configure the device to use Yubico OTP with ...
3
votes
2answers
49 views

How to host application monitoring and administration dashboards?

I'm in the middle of completing a web app for production. This is my first one. I'm at the point where I have to put together an administrator dashboard for comprehensive monitoring and administration ...
-1
votes
2answers
56 views

Can I dis-identify myself if I use VPN on sites?

This is for irc site. but identification mechanism is what I need to know. On IRC (since it's the kinpin of tracking,identifying) if I use a different IP, can I still be identified if someone is ...
1
vote
1answer
60 views

Is there a way to create separate environments on your computer with no way of detection?

I would like to know if there is a way to create two different systems/environments on your PC (Windows OS) that you will enter each by different username and password. When someone enters your ...