The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all
7
votes
2answers
132 views
Privacy violation even when queries with too few results are rejected
I was reading a Computing security book1 and saw a question regarding database security and privacy. I can't quite figure out the answer, so I thought I will ask here.
One approach to ensure ...
7
votes
1answer
154 views
GPG-encrypted mailing list and other approaches to safe communication
What is the best way to communicate privately on a mailing-list?
Requiring each member of the list to have the public key of each other member, and encrypt their messages with those, is cumbersome to ...
7
votes
1answer
251 views
Device fingerprinting & Mass Computer Surveillance
Device fingerprinting is one of the biggest privacy problems as explained because people think cleaning cookies, using proxy servers or blocking domains can protect them (when blacklisted trackers ...
6
votes
4answers
239 views
Circumventing a “freemail” account form filter
I'll be honest - I want to download a free PDF from a website which requires me to enter my "non freeware" email address. I do have them, but I dont want to use one as I'm afraid of landing up on a ...
6
votes
6answers
9k views
If someone hacks my wi-fi connnection, what can they see and how?
I have two questions on wifi security:
If someone knows my wifi password (be it WEP or WPA) what can they
see on my screen? Do they just see URLs I visit, or can they see
everything in my ...
6
votes
3answers
48 views
Patient Hashes for Compression and Security
Are there any front-running approaches to using server-generated hashes to encapsulate patient condition in a concise manner while maximizing security?
For example, a system to represent current med ...
6
votes
4answers
11k views
Can an employer access Whatsapp messages if you are using their servers?
Does anyone know if an employer can access whatsapp messages if you are using their servers? Whatsapp apparently say the messages are encrypted, but I'm not sure about this.
6
votes
3answers
961 views
How can a “server” know that what browser i'm using besides the user-agent?
How can a "webserver" know (or a sniffer between the srv<->and the client) that what browser i'm using besides the user-agent?
Are there any "magic tricks"? javascript? java? How can I securely, ...
6
votes
2answers
173 views
Where to find papers / information about spyware, tracking and cookie problems?
I am right now working on a problem and looking for some papers / information about spyware, tracking and cookie problems. I am no expert in that area, so I lack the knowledge where to find material ...
6
votes
2answers
305 views
With Google's new Privacy Policies going into effect soon, how can I better protect myself using their services?
From what I can tell, the gist of the new Privacy Policy from Google is that they're making a blanket policy to allow using your data between all their services, however they see fit. So now one ...
6
votes
2answers
250 views
Is it proper to be prompted that I entered an old password
I changed my Facebook password a few days ago. Today, I entered the old password chronically, and saw the prompt:
Sorry! You Entered An Old Password
And even shows the date&time when I ...
6
votes
3answers
494 views
Does Google log my activity on service A when logged in to service B or by IP address?
Now that Google's new Privacy Policy will combine data from their various services...
Will Google associate me to my activity on one service even if I am not logged in to that service? Did they ...
6
votes
4answers
385 views
Keyboard sniffing through audio recorded typing patterns
I've been thinking about this for a while; I know people are aware of wireless wiretapping of keyboards. However, has there been research on how to wiretap keyboards based on typing patterns? I'm ...
6
votes
1answer
99 views
Creating a Private Key using Human Intervention
In a hypothetical system, lets say that a design requirement is that people who snoop around the database of a web application (sysadmin gone rogue, or what have you), do not have access to the plain ...
5
votes
3answers
1k views
Resolving an IP address of a Remote machine to its MAC address
I wanted to know whether its possible to get the MAC address of remote node (computer/Access Point) if I know its IP address.
I have heard that if someone sends you an email (even through gmail), you ...
5
votes
4answers
607 views
Ways to monitor someone's internet traffic
If some authority for whatever reason decides they want to monitor your traffic on a wired DSL connection, how would they do it besides exploiting your OS? What are the other ways assuming the OS is ...
5
votes
2answers
208 views
Is it secure to have an “email no longer available” feature on your registration form?
I was just implementing a new feature on the registration form of my site that checks if an email address is still available to register an account with. I am wondering if it is secure to show a user ...
5
votes
3answers
645 views
What can a hacker do when he has physical access to a system?
I mean, I'm a tech guy here in my region (not a hacker...). When I sit in the front of another person's PC, I notice a little fear about what I can do in the system.
It's obvious that I will not ...
5
votes
3answers
394 views
How secret are secret forums?
I'm looking into setting up a forum for a writers group I attend; this would be for sharing stories amongst ourselves. In order to retain first rights, this has to be within a hidden forum, where the ...
5
votes
2answers
295 views
How to refute “don't use internet if you don't like it” answer?
I hope it is legit question, similar to, for example, Why do law-abiding citizens need strong security?, et al. and it is tightly conected with user's security, privacy, etc.
The response I always ...
5
votes
1answer
182 views
Is it safe to abandon a free webmail account that has been in use for a significant amount of time?
I have a free webmail account that I have been using for around ten years now. Over the past two years I have almost phased out using this address.
I have concerns around accounts that I may have ...
5
votes
2answers
274 views
Workarounds for :visited CSS History reconnaissance
Several years ago it was possible to use
a:visited {
background: url('/log.php');
}
to figure out on what website user has been previously. But now it is restricted by browsers. Is there any ...
5
votes
2answers
605 views
Considering that SRP is better than SSH and Basic Auth, how can it be implemented in a website?
SRP is short for Secure Remote Password protocol, and provides a better way for passwords to be sent over the internet.
I've read the information at it's Stanford University home page, the Wiki ...
5
votes
5answers
964 views
How can you remove your presence from the Internet?
How can you remove your presence from the Internet?
For example from social networks, from email servers, from forums etc. Problem is how records of you are identified on the internet?
We have well ...
5
votes
4answers
4k views
Advanced techniques for detecting a proxy/getting original IP
In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used:
Firefox with a proxy ...
5
votes
1answer
96 views
How long can I store personal information on unconfirmed subscriptions?
I have a monthly newsletter. In my subscribe form I use a double opt-in method:
The visitor subscribes.
I send him a confirmation email.
If I receive a reply, I add him/her to my system.
In the ...
5
votes
1answer
279 views
Could TOR nodes collect IPs and filter them to unmask .onion url IP addresses?
I feel that I generally understand TOR onion routing. From what I understand, the node knows the IP it is receiving data from and the IP it is sending data to. So surely a node can collect the IP ...
5
votes
2answers
689 views
How to find a reliable private mail drop or ghost address provider? (Not CMRA)
A mail drop or ghost address is an entity that can receive mail in your name.
For a little more on why would you want to do this, see JJ Luna.
A CMRA stands for a commercial mail receiving agency. ...
5
votes
1answer
59 views
What are the security challenges encountered with attribute exchange?
OpenID has Attribute Exchange, Facebook has Facebook Connect, and authorization services such as Oauth enable access to user data distributed across a range of content providers.
What are the ...
4
votes
5answers
498 views
Could I be defrauded by a website who has my address, phone number, and credit card number?
Exactly what kind of information does a scammer need to scam someone money?
For example, if there's a website which wants me to provide my details, Exactly what kind of information can I divulge and ...
4
votes
4answers
477 views
What issues are most important to cover in Corporate Security Policy?
What about a Privacy Policy? Both internal, and external.
From another Area51 proposal.
4
votes
2answers
5k views
Does chatting over Skype expose my IP address?
Is there a way to identify a person's IP address in Skype, when you're chatting with them? Does this depend on their Skype settings? And if you've recorded chat messages, can they lead to the actual ...
4
votes
4answers
427 views
Is silverlight and Java running on the web browser capable of saving “state” into the user's local machines?
I am aware that even after we have cleared our cache and cookies, websites can still save files/information into our computer using Flash (Flash ever cookies),
I was wondering does other plugins like ...
4
votes
4answers
398 views
Can a VPN avoid the Prism Surveillance Programme?
This is causing me major concern and i can understand it is for a lot of users as well. I have nothing to hide but it's the moral aspect of snooping which has ticked me off.
Can a VPN avoid the ...
4
votes
4answers
349 views
Received a Kindle from a stranger, what are the risks?
While getting a coffee today, a man walked up to me and offered me a kindle. he said he no longer wanted it and that he was looking to give it away. An avid reader, I accepted. It has no accounts on ...
4
votes
4answers
188 views
How to securely share files with other individuals?
I have a collection of files I would like to securely share with a small number of other people. The collection is mostly static; no more than one or two new files will be added per month (after the ...
4
votes
4answers
816 views
What is the most secure way for two people to communicate?
There are various services on the internet that offer secure communications. Typically in the past if I want to share some sensitive information with someone, I will do so over a Cryptocat chat ...
4
votes
3answers
414 views
Further potential problems with Windows 8 SmartScreen
Some research was recently published that showed that Windows 8's SmartScreen feature sends certain details about every single application that you install to Microsoft.
Ignoring the obvious privacy ...
4
votes
3answers
292 views
Are there security (esp. privacy) benefits to deleting cookies?
As the title says, I'm wondering if there are any security/privacy benefits to managing cookies - that is, managing by deleting cookies you don't want or need.
I deleted all my cookies about a week ...
4
votes
2answers
1k views
Does Google record search / source IP [/ user] pairs?
Does Google record search / source IP [/ user] pairs? What if my Search History is off?
4
votes
2answers
365 views
Mobile phone security eavesdropping based on data transfer
is there an easy way for particular governmental organizations (especially in
countries where freedom of speech is a problem) have some technology where
they can easily eavesdrop on cellphone internet ...
4
votes
2answers
238 views
Issues with the use of network surveillance tool in your company?
What issues will we face with the use of network surveillance tool in the company network with respect to the Telecommunication Interception Act and Privacy Act ?
And what policies could be ...
4
votes
2answers
913 views
Does Java applets reveal the real IP address, even when using proxy or vpn?
Can a Java applet reveal the original client IP address, when browsing through a proxy or a VPN? Why?
4
votes
2answers
617 views
P3P HTTP Headers and Session ID's
Is there any chance that Session ID's can be shared between different websites (one in other IFRAME of others) through P3P Headers?
4
votes
2answers
213 views
single vs multiple persona's? What are security implications?
I have two email addresses, one for work and one for home. I have have two cellphone numbers, one for work and one for home. But I am just one individual (and only have one social security number ...
4
votes
1answer
111 views
Computational Feasibility of finding 'Good Links' of the following format
I recently stumbled upon this and am checking here to see if what I am proposing is indeed feasible and can be considered a breach of privacy.
For obvious reasons I am not revealing the website ...
4
votes
3answers
1k views
What is a good email site that doesn't mine your personal data? [closed]
I am becoming less and less ok with Google and Facebook collecting data on me based on my online activities and then selling that to companies. Is there a good email service out there that respects ...
4
votes
4answers
165 views
Secure file sharing, instead of attaching files to emails?
Allow me to give a background, so you may understand my situation better.
We have been prone to sending emails to unintended recipients, many of which contained confidential data. Email is the only ...
4
votes
1answer
123 views
How can browser select suggestions for my private searches?
I use a VPN service that provides a pool of IP addresses, I clean history/cookies/etc - all the browsing data before a session.
Regardless, when I type in the search of one particular search engine, ...
4
votes
3answers
298 views
Are there any same origin issues (SOP) with TOR?
Are there any issues with Same Origin Policy (SOP) with TOR or *.onion addresses?
I'm thinking of
cookies
Plugins (Silverlight, Flash, Java, etc)
Javascript
