The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

5
votes
0answers
108 views

How to defend against auto-scanning license plate cameras? (computer vision) [closed]

I just read a very interesting article in Popular Science about repo trucks and their new auto-scanning license plate cameras. The cameras are mounted on all four corners of their trucks, as as ...
7
votes
4answers
3k views

What web browsers support OCSP stapling? Are the privacy and performance features the same?

OCSP stapling decreases the load on a PKI infrastructure's OCSP server by attaching a signed OCSP response to the target in a TLS connection. In addition it creates a more secure/private session ...
15
votes
2answers
906 views

Can robots.txt for your face be made effective?

As Google Glass slowly starts shipping, I've recently came across an article on stopthecyborgs.org that mirrors my anxieties that Google Glass currently does not feature a robots.txt for my face. It ...
0
votes
3answers
71 views

What is the technical rationale behind intermediary email servers?

EFF's Survelliance Self-Defense (SSD) project has an illustration of how email over SMTP goes through intermediate mail exchange servers: AFAIK each intermediate servers is expected to add its own ...
-1
votes
2answers
38 views

What is the likelihood of a government organization having a copy of the major .COM private keys? [closed]

This is a bit of a vague question, but it seems relevant these days with the information on all those "mass spying" programs getting leaked. I will describe the scenario and I just want to know if it ...
2
votes
2answers
81 views

Can DNS servers log users requests for commercial use (e.g. track direct access to websites)?

How does it work? For example, could OpenDNS be tracking everything (source ip + requested url) and then selling it to who have the necessary information to correlate the ip addresses with people ...
3
votes
3answers
325 views

How to prevent CAS from leaking user identity to arbitrary visited websites?

Summary evil.example.com could use a hidden frame to request a CAS ticket from corporation.example.net, then validate it to receive the username of the hapless user. This effectively deanonymizes the ...
-2
votes
1answer
52 views

Voicemail PIN reset - what is a DDN? [closed]

Here is a recording of Glenn Mulcaire using social engineering to reset the PINs to voice mailboxes to which he did not have authorised access. (At least, that's my understanding.) He appears to say ...
1
vote
2answers
142 views

How does Google track a user?

Some days ago, I was studying Web Programming for academic purposes. So I was learning SQL Injection by applying it on a sample website sqlzoo.net/hack/ But soon after it, in the Google ads on every ...
2
votes
5answers
628 views

How to safely show some text on a webpage?

I want to display some very sensitive information on a web page and I want to make sure that nobody, except the user in front of the browser, is able to access this information. I'm aware that in ...
12
votes
8answers
14k views

Is it possible to Identify a VPN user by finding relations in traffic?

If I am using VPN service to protect my identity, can my traffic be used to identify all my traffic? For example, if I am accessing two services: Some service A, where I do not leave any ...
35
votes
3answers
3k views

How to know if firmware is stealing my information?

The recent news item Chinese Star N9500 Android smartphone contains factory-installed Trojan, says security firm has prompted me to think about firmware security. The news mentions the spyware is part ...
0
votes
2answers
140 views

how can I stop someone from watching my internet history? [duplicate]

I use someone's wifi network. Is there anyway to stop him by getting my browsing information or can I somehow hide my browsing history from him?
0
votes
1answer
93 views

How secure is split tunneling on a VPN?

What protocols get encrypted and go through the VPN? Is it just port 80 and DNS traffic that does not go through the VPN? Does this impose any security risks by running a split tunnel? Making the ...
54
votes
12answers
19k views

Can I prevent my neighbors, whom I pay for shared internet (wifi), from seeing the sites I've visited?

I pay my neighbors to use their wifi. They have listed me as "guest" with a separate password from theirs. Is there any way to prevent them from seeing the sites I've visited? My browser history ...
-4
votes
2answers
108 views

How to respond to Cyber Bullying?

I am trying to learn about Cyber Bullying and I was thinking that if in future I get bullied, then what I can do? I have learned how to use Maltego, but if someone damages your reputation, then is ...
5
votes
1answer
709 views

Can an iOS 7 app access either device camera without user knowledge?

This statement in the iOS 7 release notes implies that non-China devices do not need user consent: iOS now requests user consent for apps to use audio input on all iOS 7 devices. For devices ...
83
votes
8answers
7k views

How can I protect my internet-connected devices from discovery by Shodan?

There's been a lot of buzz around this recent CNN article about Shodan, a search engine that can find and allow access to unsecured internet-connected devices. Shodan runs 24/7 and collects ...
1
vote
2answers
100 views

How can Facebook use history data in browser

Web is filled up with the recent decision by Facebook to track user browsing history like adage.com andNYTimes. How can a web application use browsing history which is local to that browser? Is it ...
8
votes
5answers
1k views

Is it ethical to use ReCAPTCHA to decode house addresses? [closed]

I noticed recently that ReCAPTCHA is using house numbers and street numbers as images for humans to decode. How ethical is it for Google to do this to this? Does it hamper privacy of an ...
2
votes
2answers
134 views

Indexing of URLs over IM protocols

Recently, I scanned a physical document for a friend, put it on my web server so that he could download it, and sent him the URL over the MSN chat network. I removed the file again shortly afterwards, ...
0
votes
2answers
110 views

Is the lack of https reason enough to abort form submission?

Preamble: Am in awe about the quality of both questions and answers on https / SSL on this site. My humble question below pales in comparison. Both on professional and amateur websites I've ...
3
votes
5answers
467 views

Can teleworking let my boss to sniff my network traffic? What else could he do?

My boss proposed me to code from home on the their machines via internet, in two possible ways: I would connect to their computer and work on their machine, as if I was in front of the computer(from ...
2
votes
1answer
136 views

Are legal notices in a login banner legally significant in terms of computer misuse?

Is there any case-law where having or not having a legal notice (example here) in the login banner of a system of nay kind made a difference in prosecution? The question is in consideration both of ...
27
votes
4answers
8k views

Can web sites detect whether you are using private browsing mode?

Most modern browsers support "private browsing mode" (also known in Chrome as "Incognito mode"), where the browser does not save any information to disk about your browsing while in this mode. In ...
15
votes
4answers
4k views

How can I protect against email tracking services?

Recently a free service came out for email tracking, bananatag. It's able to track the fact that the email was read in gmail without any notice or strange inclusions in the email body. In this case ...
0
votes
0answers
37 views

Can one scan multiple websites for tracking cookies and beacons?

Do you know of any tools or techniques that allow one to scan multiple sites for the use of tracking cookies, beacons, web bugs, or offsite javascript includes? As far as I can tell, major web ...
2
votes
2answers
174 views

How can I separate two OS's files with encryption without using TrueCrypt?

I want to create a dual-boot such that the content of each OS is separated from the other using encryption. The main point point would be to to test out potentially harmful software on one OS, and ...
30
votes
7answers
2k views

Is there a difference between GET and POST for web application security?

I have 2 choices in sending data between 2 web applications. I encode the data in Base64 and append to the URL and retrieve these parameters at my destination application and decode the parameters. ...
1
vote
1answer
35 views

service providers and web activity

It is good to know that ISP have legal boundaries for retaining a client's internet activity. Is it possible that individuals can hack the ISP and then have access to someone's web history activity?
4
votes
1answer
64 views

Will my method for managing account data work?

I'm looking at whats nessecary to create a small accounts server for a video game I'm programming in my spare time. User privacy is a very important topic for me, and I don't want to keep anything ...
0
votes
2answers
485 views

How can I protect myself against programs that turn the webcam on without the indicator light? [duplicate]

Webcams can be turned on without the indicator light: to prevent unwanted use, I wonder whether there exist applications warning that the webcam is being used, or any other kind of protection. ...
1
vote
1answer
104 views

What companies drive around recording license plates? What do they do this for and on what grounds are they able to do so, legally speaking?

A friend shared a "security service" he just read about. Apparently the product is in beta and can thus be tried by anyone right now. I found it very interesting and surprising. I'm curious to know ...
5
votes
2answers
579 views

How does dnsleaktest.com find my DNS provider

Can't see how they find this over the web. I'm on Windows, its in my network config. It changes when I use a VPN provider, but not when I use a local socks proxy connected to a remote server over ...
3
votes
2answers
98 views

WHOIS Contact Details Abused

The system for the internet and the way people can abuse it is getting worse and worse. I am having several issues with people abusing the information within my WHOIS, which if I remember is protected ...
10
votes
4answers
3k views

How to find a reliable private mail drop or ghost address provider? (Not CMRA)

A mail drop or ghost address is an entity that can receive mail in your name. For a little more on why would you want to do this, see JJ Luna. A CMRA stands for a commercial mail receiving agency. ...
1
vote
1answer
194 views

What unique fingerprinting information can an iOS7 app collect?

I'm interested in unique information that is beyond typical user knowledge or control. As of iOS 7, users can easily protect local physical tracking by controlling radios (cell, WiFi, Bluetooth) in ...
33
votes
6answers
5k views

Are random URLs a safe way to protect profile photos?

I would like to move from sequential to random user-ids so I can host profile photos publicly. i.e. example.com/profilepics/asdf-1234-zxcv-7890.jpg How long must user-ids be to keep anyone from ...
0
votes
3answers
140 views

Create live USB that hides IP address from foreign government

I may have to visit family in a few months overseas. Unfortunately, the local government of the area my family is from has gotten more corrupt and vicious. I am compelled to go here and may need to ...
5
votes
6answers
10k views

Using Private Browsing mode while connected to organization's network

At the workplace I use the organization's network for accessing internet (well that's the only option). I am not sure if the network administrators monitor what I browse, how frequently I access ...
1
vote
2answers
28 views

Privacy Policy for Mobile Apps

We are next to launch an iOS app in App Store which is asking us for a privacy policy url as part of process when this app is being uploaded to app store. We and most of our users are outside USA and ...
3
votes
5answers
1k views

TrueCrypt dataleaks that might betray the “Deniable File System” option

Reading into "Operation Satyagraha", one would have to believe give all the resources used that the investigators had some reason to believe there was data to decrypt, even though in theory and in ...
1
vote
4answers
4k views

Open VPN has DNS leak

Since using www.dnsleaktest.com I have found that any VPN service using Open VPN will leak my DNS through the tunnel. I have tried and tested several VPN providers, even those who say that they have ...
3
votes
4answers
139 views

Record IP pseudonymously?

I'd like to be able to ban an IP from my website, but for privacy reasons I would like to not have a record of the IP itself. Hashing the IP would allow for the hash to be brute forced in mere ...
2
votes
2answers
193 views

Skype Audio / Video Session over VPN?

Basically I'm wondering if a Skype video session along with audio could be logged (or recorded) over a virtual private network? I know whoever hosts the VPN server can log which websites you visit (or ...
-3
votes
1answer
186 views

How could an attacker have gained remote access to my laptop? [closed]

I have a 15 yr old daughter who's become not only a certified Microsoft Expert, but by pure accident, it came to my attention she'd long ago created a SPLIT network connection on our internet, HIDDEN ...
1
vote
2answers
174 views

Does Skype compromise my system (beyond the scope of calls/chats)?

First of all, please don't shout at me for wanting to use Skype. I know that it's evil and I fully expect all the calls and text chats going through it to be stored permanently in govt data centers, ...
6
votes
1answer
532 views

Imei and phone number given to unknown sources. What are the risks?

The facts: A friend put his phone number (and possibly the IMEI) for his android device into some kind of hacking PC software that promised to (and actually did) extend his Whatsapp account that was ...
1
vote
2answers
325 views

I work for a company from home online, using my own laptop. Privacy issues [closed]

I work for a company from home online, using my own laptop. To work, I have to login to their network through a web browser, Google Chrome. The URL begins with: https:// . I use a User ID and ...
-3
votes
2answers
65 views

Partial/Missing Privacy Policy? [closed]

I'm having a heck of a time with a new LG TV. I'm trying to contact LG support via email - a form on their web site which requires one to agree to a privacy policy. When I click Read Policy (near the ...