The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all
3
votes
2answers
10k views
Can a SIM card be tracked without cell phone and battery?
I have a SIM card alone without cell phone and battery. Can it be be tracked?
4
votes
4answers
159 views
Secure file sharing, instead of attaching files to emails?
Allow me to give a background, so you may understand my situation better.
We have been prone to sending emails to unintended recipients, many of which contained confidential data. Email is the only ...
8
votes
11answers
3k views
I'm leaving my job and want to erase as many personal details etc. as possible; any tips?
Obviously this is very open-ended. But, I'm just paranoid about people going through everything on my laptop after I leave my job. Here are the things I'm planning to do:
Completely wipe all browser ...
87
votes
8answers
8k views
Is Google spying on all of us?
I am curious because, I experienced something bizarre recently. About a month ago, someone asked me to find out a price for a T-shirt printing machine, and probably for the first time, I pressed these ...
7
votes
3answers
464 views
Securing a laptop against attacks (article)
I came across this article when looking for ways of hardening my laptop, and this guide seemed extremely thorough. It is perhaps overly paranoid, but it will be good to have a guide I can trust should ...
-3
votes
2answers
105 views
GPS tracking device [closed]
Could anyone please tell me if there exists a GPS tracking device that is light, small and safe (e.g., does not cause harmful radiation) and can be tracked back via say an app on a phone?
3
votes
2answers
167 views
Is my email client violating my privacy?
There are many ways that emails can be used to violate the privacy of the recipient (Return-Receipt-To:, web bugs, iframes loaded from an external page, and other email tracking methods). It may be ...
0
votes
0answers
54 views
open source web development plugins,scripts store information? [closed]
I'm wondering if open source plugins like wordpress,drupal or jquery and many more detect for example what websites are using their plugin.
If so, is there any plugin which can detect which website ...
6
votes
4answers
354 views
Keyboard sniffing through audio recorded typing patterns
I've been thinking about this for a while; I know people are aware of wireless wiretapping of keyboards. However, has there been research on how to wiretap keyboards based on typing patterns? I'm ...
3
votes
2answers
1k views
Using Cain and Abel to capture traffic of machine in the same network
I have installed Cain and Able in machine A, which is connected to another machine B via a LAN. Now I want to analyze all the traffic of machine B. Is this possible by installing Cain and Abel on ...
2
votes
2answers
191 views
Studies on Android users' attitude to security
I'm a final year BSc. student of Computer Security & Forensics at the University of Bedfordshire (UK). I'm investigating perceptions of security on Android platforms, and how to educate users of ...
9
votes
2answers
422 views
How to fight browser fingerprinting?
https://panopticlick.eff.org/ , aka "How unique and trackable is your browser". For example it usually gives me a unique score. The biggest entropy values come from navigator.plugins and fonts via ...
3
votes
2answers
1k views
Privacy implications of IDFA/IDFV? (iPhone/iOS)
Apparently, iOS 6 introduced IDFA, "identifier for advertisers", which identifies your device so that advertisers can track you and send you ads. It appears they also introduced IDFV, "identifier for ...
1
vote
3answers
241 views
Are tracking cookies illegal?
I have a merchant website. When a user visits the website, a cookie is set. Then when the same user visits the site again, we provide him with suggestions, content that he may enjoy based on what ...
8
votes
6answers
865 views
Whats the probability of a personal computer being hacked?
For a normal computer user following these practices:
Have an up to date anti-virus with a firewall installed (Norton).
Do not install cracked software.
Do not open suspicious links or download ...
-1
votes
4answers
476 views
How to protect myself from cyberbullying?
I want to learn how can I protect my PC from getting hacked in order to protect myself from cyberbullying. There is an intruder who has hacked my system over the last 4 years.
He has hacked my all ...
1
vote
1answer
186 views
Silent (no user interaction) utility to clear cached credentials on Windows [closed]
Is there any way to clear cached credentials on Windows, that doesn't require:
user interaction (e.g. a confirmation window);
administrator access; or
making a persistent change to the ...
3
votes
1answer
186 views
HITECH : New United States Federal Act on Data Security
Has anyone heard of the new HITECH Federal Act? I understand that it is an underscore of the HIPAA Federal Act but am unclear of the requirements that they are requesting.
It targets companies that ...
1
vote
3answers
586 views
How to secure data before returning Macbook Air?
I am returning my MacBook Air to Apple and want to know the best way to ensure my data is not recoverable from the flash storage. I currently have Filevault 2 enabled, however before I enabled it I ...
10
votes
8answers
477 views
iPhone Tracking debacle - risks and countermeasures
For those of you who are not familiar with the topic, a quick search will turn up a lot of hits, e.g. see the researcher's report at Got an iPhone or 3G iPad? Apple is recording your moves - O'Reilly ...
5
votes
4answers
566 views
Ways to monitor someone's internet traffic
If some authority for whatever reason decides they want to monitor your traffic on a wired DSL connection, how would they do it besides exploiting your OS? What are the other ways assuming the OS is ...
5
votes
1answer
56 views
What are the security challenges encountered with attribute exchange?
OpenID has Attribute Exchange, Facebook has Facebook Connect, and authorization services such as Oauth enable access to user data distributed across a range of content providers.
What are the ...
4
votes
1answer
104 views
Computational Feasibility of finding 'Good Links' of the following format
I recently stumbled upon this and am checking here to see if what I am proposing is indeed feasible and can be considered a breach of privacy.
For obvious reasons I am not revealing the website ...
51
votes
8answers
6k views
Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
DuckDuckGo is a search engine that claims it will not share your results with others. Many of my skeptical coworkers think it may be a scam.
Is there any proof that any web search engine will ...
2
votes
2answers
65 views
Information disclosure by identifiers
I'm doing a small research and I observed quite a lot of sites that reveal some private information in the ID-s that they assign. As an example I would like to point out e-commerce sites that issue ...
1
vote
3answers
482 views
Email security and Home Mail Servers
Suppose you're truly paranoid (I assume the majority here identify with this?) and you don't want Google or other email service providers reading your email (to serve ads, etc). You don't want your ...
2
votes
4answers
929 views
What web browsers support OCSP stapling? Are the privacy and performance features the same?
OCSP stapling decreases the load on a PKI infrastructure's OCSP server by attaching a signed OCSP response to the target in a TLS connection. In addition it creates a more secure/private session ...
9
votes
5answers
973 views
Check photos for geotagging and remove lat/long data
I like to upload photos to various internet services, but I prefer not to share my geographic location. I understand Facebook and other services strip out the geolocation data, but they still have ...
3
votes
5answers
1k views
How to avoid leaving any local trace that I went to a website?
I want to visit a web site, but I want to ensure there is no trace left on my computer that I did so. How do I do that?
This question is not concerned with anonymity or detection on the network ...
5
votes
1answer
95 views
How long can I store personal information on unconfirmed subscriptions?
I have a monthly newsletter. In my subscribe form I use a double opt-in method:
The visitor subscribes.
I send him a confirmation email.
If I receive a reply, I add him/her to my system.
In the ...
6
votes
2answers
239 views
Is it proper to be prompted that I entered an old password
I changed my Facebook password a few days ago. Today, I entered the old password chronically, and saw the prompt:
Sorry! You Entered An Old Password
And even shows the date&time when I ...
3
votes
2answers
116 views
What information will dig leak to an attacker?
What information will the axfr and ixfr commands in DIG provide to an attacker?
1
vote
1answer
153 views
Is Oracle gathering information from my machine when I download Virtualbox or Netbeans?
When we try to download Netbeans or Virtualbox from the Oracle/Sun site, our firewall warns us that some suite called EdgeSuite tries to obtain information from our machines. I don't know what ...
12
votes
4answers
1k views
Why users want to disable cookies?
I just started to create a new web application. In the documentation, it is written that I have to prepare for the situation where users have disabled cookies. This is not the first time I have read ...
4
votes
4answers
180 views
How to securely share files with other individuals?
I have a collection of files I would like to securely share with a small number of other people. The collection is mostly static; no more than one or two new files will be added per month (after the ...
4
votes
3answers
2k views
WiFi security from another authorized user (roommate)
I believe we use WPA or WPA2 encryption.
To what extent can another user monitor my traffic?
Monitor my desktop activity?
View documents I've saved on my computer?
Tell what sites i visit?
Tell ...
5
votes
3answers
604 views
What can a hacker do when he has physical access to a system?
I mean, I'm a tech guy here in my region (not a hacker...). When I sit in the front of another person's PC, I notice a little fear about what I can do in the system.
It's obvious that I will not ...
-1
votes
2answers
177 views
Keeping the password secret over regular http
I would like to at first be clear that this is for poor site owners who can't afford the SSL option but require logins to their site, potentially from a public kiosk, and need a secure method of ...
1
vote
2answers
110 views
Repost: Wappalyzer selling datasets - possible website security implications? [closed]
This question has originally been posted to Stackoverflow but then I found that this was the right place to ask. If you are a moderator, please delete this question at SO.
Hello everyone,
I am ...
4
votes
3answers
406 views
Further potential problems with Windows 8 SmartScreen
Some research was recently published that showed that Windows 8's SmartScreen feature sends certain details about every single application that you install to Microsoft.
Ignoring the obvious privacy ...
3
votes
1answer
360 views
Where and How is data stored in a session?
Where is the information in the fields of a session stored? If I, for instance, store in a session something like $_SESSION['foo'] = 'bar'. Where is "bar" stored?
If I store an object of a class, in ...
27
votes
19answers
2k views
How can I prevent my kids from bypassing my computer restrictions?
My son has a downloaded copy of Ubuntu that he uses to "break" into my computer, bypassing Vista. I have two questions:
Can this damage my computer or corrupt my files? (I have lots of pictures)
Is ...
3
votes
5answers
381 views
Is it wrong to collect and store IP addresses?
I am developing a PHP analytics program. I am using IP addresses to get its corresponding country. I was wondering if its OK to store both the IP address and Country or if its better if I just store ...
1
vote
2answers
297 views
How to make database of IP addresses anonymous?
I have to perform ip address connection stats anonymously because the data posses security risk, so how do I do it?
Is it just like this, that the ip numbers and networks are replaced by random ...
3
votes
1answer
213 views
Can SIP registrars and VOIP providers eavesdrop?
An e-mail provider provides people with usernames for e-mail accounts. That normally means that they have access to your e-mail if it is unencrypted.
Likewise, do sip registrars have access to ...
2
votes
2answers
512 views
How Is It Possible For Hackers To “Dig Up The Dirt” On People?
Like the title says, I was wondering how its possible for hackers to "dig up the dirt" and get peoples personal information such as address, credit cards, bank accounts, social insurance number, etc? ...
3
votes
2answers
141 views
Protect sensitive data from sysadmin prying eyes
I'm thinking about this problem. What if I have to manage sensitive data (i.e. health data), and I use a managed server?
I'd use encryption of course, but if they have root access they can see conf ...
0
votes
2answers
287 views
Anonymous proxy over SSL [closed]
Can you name any anonymous proxy software that don't use VPN connections? Basically, I'm analyzing different encrypted traffic and now I need to analyse a simple anonymity proxy traffic. I'm analyzing ...
4
votes
2answers
254 views
Workarounds for :visited CSS History reconnaissance
Several years ago it was possible to use
a:visited {
background: url('/log.php');
}
to figure out on what website user has been previously. But now it is restricted by browsers. Is there any ...
2
votes
2answers
165 views
What may a Hungarian employer do with the employee monitoring logs?
Employers often monitor employee network access, even install keyloggers on their computers, etc.
But the articles I found on the internet, is about the monitoring but not what they may do with the ...
