The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all
15
votes
3answers
699 views
How can I protect against email tracking services?
Recently a free service came out for email tracking, bananatag.
It's able to track the fact that the email was read in gmail without any notice or strange inclusions in the email body. In this case ...
1
vote
1answer
75 views
Compromised server with psyBNC - what are our next steps?
One of our VPS servers has an install of psybnc on it. The install has been present for quite some time, and has now been brought to our attention. We have backups, but they also have psybnc on them. ...
1
vote
1answer
114 views
Google Chrome stores recent items I've opened in my computer?
Is it normal or legal for chrome to have a list of recent items I've opened in my computer?
I have an old version of chrome installed in my PC. Then recently, I downloaded a newer version. But before ...
1
vote
2answers
178 views
When connecting to internet through VPN what precautions should be taken?
I've read this similar question and it has some very good information. Can a site that has personal information about you be accessed by another site to determine who you are/where you are? For ...
2
votes
2answers
233 views
What are the best practices for maintaining privacy on a non-jailbroken iOS device?
iOS, like most other mobile OSs, has the potential to leak significant chunks of personal information to 3rd-party apps and to ad and tracking networks used by those apps, which in turn also has the ...
5
votes
1answer
230 views
Could TOR nodes collect IPs and filter them to unmask .onion url IP addresses?
I feel that I generally understand TOR onion routing. From what I understand, the node knows the IP it is receiving data from and the IP it is sending data to. So surely a node can collect the IP ...
23
votes
6answers
1k views
Is there a difference between GET and POST for web application security?
I have 2 choices in sending data between 2 web applications.
I encode the data in Base64 and append to the URL and retrieve these parameters at my destination application and decode the parameters.
...
1
vote
2answers
394 views
Best practices for operating a Bitcoin-Qt client regarding netwok privacy?
As privacy is part of security, I know there is a Bitcoin SE here but they couldn't answer my question so I hope it's appropriate to ask it here.
I don't ask about how to secure my wallet on my ...
6
votes
3answers
47 views
Patient Hashes for Compression and Security
Are there any front-running approaches to using server-generated hashes to encapsulate patient condition in a concise manner while maximizing security?
For example, a system to represent current med ...
24
votes
4answers
795 views
How do I deal with companies that call and ask for personal information?
Several times I get a phone call from a company- my bank, utility companies etc. Many times they are just cold calling me, but once or twice they were calling for legitimate reasons (ie, something to ...
4
votes
4answers
343 views
Received a Kindle from a stranger, what are the risks?
While getting a coffee today, a man walked up to me and offered me a kindle. he said he no longer wanted it and that he was looking to give it away. An avid reader, I accepted. It has no accounts on ...
0
votes
3answers
113 views
What day-to-day activities can compromise a person's information security [closed]
Recently a car was stopped next to me at the traffic lights. The driver had his phone connected to the car's bluetooth and the conversation could be heard by me crystal clear in the next car - the ...
0
votes
3answers
270 views
Privacy in torrents?
It seems that if you download a file via torrent, each downloader can see other downloaders IP addresses. I also noticed that my (windows) pc's name was sometimes displayed briefly.
How does one keep ...
1
vote
1answer
117 views
Can p2p use be traced by targeting a known individual rather than an offending IP Address?
My understanding of most filesharing lawsuits initiated by copyright holders is as follows:
The monitoring agency will connect to a torrent swarm and collect
the ip addresses of people downloading ...
0
votes
3answers
101 views
how Cookie tracking threat works?
as explained here and lots of other cases , what is this tracking story ? browser vendors say we have same origin policy and for example google.com can only read cookies saved by google.com or read ...
-1
votes
1answer
56 views
Can a sim number be traced to who topped it up by telecommunications if it was by credit/debit card? [closed]
Someone has been texting me and I want to find out who it is. Is this possible?
3
votes
2answers
227 views
Is Chrome giving out information about me?
I'm stepping up my privacy online and have recently switched to Google Chrome, which may be a huge step backwards. Chrome pesters the user to sign in with their Gmail account. When I first created my ...
5
votes
2answers
613 views
How to find a reliable private mail drop or ghost address provider? (Not CMRA)
A mail drop or ghost address is an entity that can receive mail in your name.
For a little more on why would you want to do this, see JJ Luna.
A CMRA stands for a commercial mail receiving agency. ...
10
votes
3answers
1k views
Can law enforcement track a criminal through dynamic IP address?
I ask because a week ago my home was broken into and, among other things, my iMac computer was stolen. I am desperate to get it back because it has all the pictures of my daughters from the last ...
4
votes
2answers
208 views
single vs multiple persona's? What are security implications?
I have two email addresses, one for work and one for home. I have have two cellphone numbers, one for work and one for home. But I am just one individual (and only have one social security number ...
1
vote
1answer
171 views
Protecting peers communicating with WebRTC
For reference: WebRTC Homepage
I've been really interested in these new RTC technologies that are coming out, specifically the fact that use the PeerConnection API to establish a connection between ...
1
vote
1answer
905 views
proxy services for torrents vs encrypting data
I've noticed growing popularity in proxy services for torrent clients; such as BTGuard. Most torrent clients encrypt traffic so aren't these services pointless? I read that it's because the encryption ...
3
votes
4answers
88 views
What is the technique to determine if a user is “reading” a page called? (similar to “infinite scroll”)
When I read an article at Salon.com I notice that the "overflow content" (where I need to scroll down) is loaded on demand. I can't imagine this being a useful bandwidth savings technique, so the ...
-1
votes
3answers
251 views
Available alternative DNS protocol not another dark-net [closed]
Hi does any one knows any DNS alternative Protocols ?
If so what is the most used ?
Is easy to setup ?
Is easy to have two DNS protocols one where you connect to the Common Internet and the other ...
2
votes
3answers
216 views
Repudiation in Copyright Infringement (BitTorrent)
Seeing this question : How did an alleged illegal downloading be detected? sparked a question I have had for a long time.
How does repudiation/non-repudiation work in such cases ?
Argument: It is ...
1
vote
1answer
158 views
What privacy methods exist for P2P transfers?
I love my VPN, it gives me to a certain extent privacy from isp & to what I connect.
I also use P2P to get & provide data, but I would like to create a level of privacy. What methods exist ...
3
votes
3answers
204 views
Privacy issues in Peer to Peer networks
In any typical P2P file sharing app, say DC++, the typical operations are search content, push content and pull content. A peer node broadcasts/multicasts its query to fellow peers and receives ...
1
vote
1answer
107 views
Is privacy a part of security? (Bruce Schneier) [closed]
From this talk: http://vimeo.com/8053634, around 35 minutes he argues that privacy is part of security.
What is your take on that? Are privacy questions on topic on this board?
1
vote
1answer
49 views
Privacy laws' right-to-amend (and right-to-delete) requests and archived data/backups
Under HIPAA and some privacy laws (in US, EU and other countries), the user has the right to amend (under some laws even delete) his/her data. What is the right way to handle a request to amend/delete ...
3
votes
1answer
308 views
How traceable is ATM and point-of-sale credit card use back to you in practice?
A friend said ATM use is traceable easily, while point-of-sale credit card use isn't - this statement goes against my common sense.
I searched for the the topic and this is what I have found:
...
4
votes
4answers
633 views
What is the most secure way for two people to communicate?
There are various services on the internet that offer secure communications. Typically in the past if I want to share some sensitive information with someone, I will do so over a Cryptocat chat ...
7
votes
2answers
84 views
Can other customers on shared hosting see requests from/to my site?
I installed a wiki on my shared webhosting (using Apache) account. This wiki is set to private (no read/edit/create rights for unauthorized users) and I'm the only one with an account.
The wiki ...
2
votes
1answer
54 views
Is it a good idea to generate certificate-specific CRLs? What is this technique called?
Suppose I create 3 certificates with the following CRLs
Cert1 http://crl.server.com/batch1/root1.crl
Cert2 http://crl.server.com/batch2/root2.crl
Cert3 ...
0
votes
2answers
872 views
Why does chrome connects to MarkMonitor (always on startup)
While using internet (over Chrome), I noticed that
lsof -i
returned certain suspicious URL(s). A whois lookup suggested that all of those belonged to MarkMonitor. For example:
chrome 3224 ...
0
votes
1answer
237 views
Can Microsoft monitor my computer because of Windows 8 email sign in
Because Windows 8 uses an email sign in/cloud profile, do they have access to view my data and what I am doing with it? I am always wary that one of the EULAs is signing away the rights to my soul (or ...
7
votes
1answer
121 views
GPG-encrypted mailing list and other approaches to safe communication
What is the best way to communicate privately on a mailing-list?
Requiring each member of the list to have the public key of each other member, and encrypt their messages with those, is cumbersome to ...
2
votes
1answer
111 views
Youtube & Google Services that ID you based on stuff on your computer - what is the risk?
If I'm on a VPN and accessing sites like Youtube or other's using Google services, am I still at risk for being located geographically via scripts in content I am viewing? Like I think some scripts ...
0
votes
1answer
75 views
How to use clipboard manager software more securely?
I want to minimize the risks using a clipboard manager or clipboard history software. I want to use it because it really eases my work so not using it is not a good option.
These programs usually ...
3
votes
1answer
205 views
Does a TMSI change often enough to prevent tracking?
A company called Path Intelligence has a product called Footpath which uses the TMSI, WiFi MAC address, and bluetooth MAC address to track phones as they move through stores.
However, I don't see ...
2
votes
1answer
148 views
What user information does Wikipedia retain when a page is viewed?
People worry about privacy issues of Facebook and Google, but Wikipedia, being the nice and not-for-profit guys that they really are, does not receive much attention. However, if access logs are not ...
-1
votes
2answers
108 views
Secure risks of online chat for customer service
Some merchants provide the ability to chat over the web for customer service or help.
Are there any risks in using these online chat channels? If so, what are the primary risks? Can the chat ...
-2
votes
1answer
96 views
Google getting your information everywhere [closed]
What Google is doing, is it right, I don't know if it is legal or not, like is it legal for youtube to continually giving recommendation inspite of you deleting all the history.
I'm not an expert in ...
-4
votes
1answer
45 views
Is it likely that security authorities track downloads of pen-testing related software? [closed]
Lots of security related software, like backtrack and metasploit, can be used for illegal purposes. Is it likely that national security organisations (e.g. federal police) track the downloads of such ...
2
votes
4answers
292 views
Which Wifi encryption method is secure?
you may wonder apple just removed ethernet port from new macbooks which means we have to use wifi! i made a wifi hotspot with my windows laptop to use for my macbook (my modem don't have wifi because ...
9
votes
5answers
3k views
What are the pros and cons of a VPN for privacy
Recently I have been getting more and more interested in the security (privacy and anonymity) issues of my online life. Not that I have anything to hide, or that what I do online is so interesting to ...
1
vote
1answer
151 views
Are there security or privacy concerns in using YaCy as a substitute for Google or Duckduckgo?
The concept of YaCy of decentralized web search seems smart. Does anyone see any flaws in its design that may lead to additional exposures of privacy or security compared to the usual alternatives or ...
4
votes
2answers
1k views
Does Google record search / source IP [/ user] pairs?
Does Google record search / source IP [/ user] pairs? What if my Search History is off?
3
votes
2answers
10k views
Can a SIM card be tracked without cell phone and battery?
I have a SIM card alone without cell phone and battery. Can it be be tracked?
4
votes
4answers
157 views
Secure file sharing, instead of attaching files to emails?
Allow me to give a background, so you may understand my situation better.
We have been prone to sending emails to unintended recipients, many of which contained confidential data. Email is the only ...
8
votes
11answers
3k views
I'm leaving my job and want to erase as many personal details etc. as possible; any tips?
Obviously this is very open-ended. But, I'm just paranoid about people going through everything on my laptop after I leave my job. Here are the things I'm planning to do:
Completely wipe all browser ...
