The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all
3
votes
5answers
1k views
How to avoid leaving any local trace that I went to a website?
I want to visit a web site, but I want to ensure there is no trace left on my computer that I did so. How do I do that?
This question is not concerned with anonymity or detection on the network ...
3
votes
2answers
116 views
What information will dig leak to an attacker?
What information will the axfr and ixfr commands in DIG provide to an attacker?
6
votes
2answers
239 views
Is it proper to be prompted that I entered an old password
I changed my Facebook password a few days ago. Today, I entered the old password chronically, and saw the prompt:
Sorry! You Entered An Old Password
And even shows the date&time when I ...
4
votes
4answers
179 views
How to securely share files with other individuals?
I have a collection of files I would like to securely share with a small number of other people. The collection is mostly static; no more than one or two new files will be added per month (after the ...
5
votes
3answers
597 views
What can a hacker do when he has physical access to a system?
I mean, I'm a tech guy here in my region (not a hacker...). When I sit in the front of another person's PC, I notice a little fear about what I can do in the system.
It's obvious that I will not ...
-1
votes
2answers
175 views
Keeping the password secret over regular http
I would like to at first be clear that this is for poor site owners who can't afford the SSL option but require logins to their site, potentially from a public kiosk, and need a secure method of ...
1
vote
2answers
109 views
Repost: Wappalyzer selling datasets - possible website security implications? [closed]
This question has originally been posted to Stackoverflow but then I found that this was the right place to ask. If you are a moderator, please delete this question at SO.
Hello everyone,
I am ...
4
votes
3answers
2k views
WiFi security from another authorized user (roommate)
I believe we use WPA or WPA2 encryption.
To what extent can another user monitor my traffic?
Monitor my desktop activity?
View documents I've saved on my computer?
Tell what sites i visit?
Tell ...
4
votes
3answers
406 views
Further potential problems with Windows 8 SmartScreen
Some research was recently published that showed that Windows 8's SmartScreen feature sends certain details about every single application that you install to Microsoft.
Ignoring the obvious privacy ...
3
votes
1answer
349 views
Where and How is data stored in a session?
Where is the information in the fields of a session stored? If I, for instance, store in a session something like $_SESSION['foo'] = 'bar'. Where is "bar" stored?
If I store an object of a class, in ...
3
votes
2answers
10k views
Can a SIM card be tracked without cell phone and battery?
I have a SIM card alone without cell phone and battery. Can it be be tracked?
12
votes
4answers
1k views
Why users want to disable cookies?
I just started to create a new web application. In the documentation, it is written that I have to prepare for the situation where users have disabled cookies. This is not the first time I have read ...
2
votes
2answers
505 views
How Is It Possible For Hackers To “Dig Up The Dirt” On People?
Like the title says, I was wondering how its possible for hackers to "dig up the dirt" and get peoples personal information such as address, credit cards, bank accounts, social insurance number, etc? ...
1
vote
2answers
296 views
How to make database of IP addresses anonymous?
I have to perform ip address connection stats anonymously because the data posses security risk, so how do I do it?
Is it just like this, that the ip numbers and networks are replaced by random ...
3
votes
2answers
141 views
Protect sensitive data from sysadmin prying eyes
I'm thinking about this problem. What if I have to manage sensitive data (i.e. health data), and I use a managed server?
I'd use encryption of course, but if they have root access they can see conf ...
4
votes
2answers
843 views
Does Java applets reveal the real IP address, even when using proxy or vpn?
Can a Java applet reveal the original client IP address, when browsing through a proxy or a VPN? Why?
0
votes
2answers
286 views
Anonymous proxy over SSL [closed]
Can you name any anonymous proxy software that don't use VPN connections? Basically, I'm analyzing different encrypted traffic and now I need to analyse a simple anonymity proxy traffic. I'm analyzing ...
4
votes
2answers
253 views
Workarounds for :visited CSS History reconnaissance
Several years ago it was possible to use
a:visited {
background: url('/log.php');
}
to figure out on what website user has been previously. But now it is restricted by browsers. Is there any ...
7
votes
8answers
4k views
Is it possible to Identify a VPN user by finding relations in traffic?
If I am using VPN service to protect my identity, can my traffic be used to identify all my traffic?
For example, if I am accessing two services:
Some service A, where I do not leave any ...
2
votes
2answers
165 views
What may a Hungarian employer do with the employee monitoring logs?
Employers often monitor employee network access, even install keyloggers on their computers, etc.
But the articles I found on the internet, is about the monitoring but not what they may do with the ...
3
votes
5answers
377 views
Is it wrong to collect and store IP addresses?
I am developing a PHP analytics program. I am using IP addresses to get its corresponding country. I was wondering if its OK to store both the IP address and Country or if its better if I just store ...
0
votes
2answers
874 views
Why does chrome connects to MarkMonitor (always on startup)
While using internet (over Chrome), I noticed that
lsof -i
returned certain suspicious URL(s). A whois lookup suggested that all of those belonged to MarkMonitor. For example:
chrome 3224 ...
2
votes
2answers
239 views
How to prevent private data being disclosed outside of Organization
I'm not looking to secure my internal network
Our company keeps sensitive customer information. How can I prevent this information spreading outside of the company ?
How do big companies prevent to ...
1
vote
1answer
260 views
What torrent software should I be aware of as a security professional? [closed]
I am new to the torrent world and want to experiment / learn with the lowest risk possible.
What do I need to know about torrent software, and related software and network configuration in order to ...
3
votes
1answer
165 views
Protect our payroll data from a legal and moral obligation
We have our payroll software to be installed on our file server. This contains all the details of current and past employees. The data contained in the payroll software includes tax, bank, National ...
2
votes
2answers
516 views
Interesting article on a vulnerability found in Tor
This article describes how French researchers compromised users using Tor. I'm not sure I fully understand or agree with it. I don't see what Bit Torrent has to do with anything? I mean they start out ...
9
votes
2answers
696 views
How might the U.K. Government's proposed internet surveillance equipment “bypass” encryption?
http://www.channel4.com/news/black-boxes-to-monitor-all-internet-and-phone-data
http://rt.com/news/uk-privacy-internet-freedom-186/
'Black boxes' will be installed by internet services providers ...
2
votes
3answers
316 views
Are there any addons that disable only some functionality of scripts?
Tor comes bundled with NoScript. Correct me if I'm wrong but that's because client sided scripts can determine the originating IP address regardless of who the traffic is passed through. But NoScript ...
2
votes
1answer
314 views
Are there any anonymous OpenID providers similar to Gawker's “burner”?
Gwaker has an anonymous commenting system called Burner. It is offered as an alternative to Facebook, Twitter and Google.
What's the difference between Burner and creating a throwaway Google , ...
3
votes
1answer
145 views
Facebook changed the default email address for every contact. How do I mitigate the impact and risk?
Facebook created a problem for regulated industries and Registered Investment Advisers (RIAs) by changing the default outgoing SMTP address for every contact to a @Facebook.com address.
This is an ...
7
votes
5answers
839 views
What do the various browser “private modes” do?
Recently there has been some disagreement as to what "private mode" means when it comes to various browsers.
Primarily I am referring to...
IE's "InPrivate Browsing"
Google Chrome's "Incognito ...
3
votes
4answers
177 views
Improving the privacy of a casual Web user
I am interested in improving the privacy available to me as a casual internet user with a default browser. I think that Tor is too slow and that the "Privacy Mode" in browsers isn't really practical. ...
12
votes
5answers
1k views
How to be completely anonymous online?
I recently saw this post on reddit: http://www.slashgeek.net/2012/06/15/how-to-be-completely-anonymous-online/
But the majority argument, both on reddit and on comments on that post seems to be that ...
0
votes
4answers
214 views
How do governments carry out computer surveillance?
If https is really secure as companies tell us, how do governments manage to eavesdrop on terrorist and criminal communications?
http://en.wikipedia.org/wiki/Computer_surveillance
1
vote
1answer
153 views
Is Oracle gathering information from my machine when I download Virtualbox or Netbeans?
When we try to download Netbeans or Virtualbox from the Oracle/Sun site, our firewall warns us that some suite called EdgeSuite tries to obtain information from our machines. I don't know what ...
1
vote
1answer
911 views
proxy services for torrents vs encrypting data
I've noticed growing popularity in proxy services for torrent clients; such as BTGuard. Most torrent clients encrypt traffic so aren't these services pointless? I read that it's because the encryption ...
1
vote
1answer
60 views
Verifying physical address via a verification service provider. Are there any threats?
The idea is to send address information to a service provider to see if the address actuall exist or will kick back not valid. If done over an unencrypted connection across the internet, are there ...
8
votes
3answers
864 views
SSL Inspection and privacy
I know my company is testing something called "SSL Inspection" based on Websense, which is our proxy. I can not provide more detail about this, but does this mean that in principle all my SSL traffic, ...
3
votes
1answer
213 views
Can SIP registrars and VOIP providers eavesdrop?
An e-mail provider provides people with usernames for e-mail accounts. That normally means that they have access to your e-mail if it is unencrypted.
Likewise, do sip registrars have access to ...
3
votes
2answers
165 views
Securely storing (email) lookup database
Looking for suggestions on implementing a server-side lookup table, where the key is an email address.
Goal: Keep these email address private, even if data on the server is stolen.
Assumptions: The ...
1
vote
1answer
1k views
Clearing IE temp files don't erase CRL history. How can this be purged?
Even after I purge all my Internet temporary files, I still see information when I type
certutil -urlcache
How do I purge this information?
2
votes
3answers
127 views
Why is security across a network “hard” to achieve?
This may be a naive question. If it is, I'm fine with just a link to outside information. I studied RSA encryption about 2 years ago, but that's about it.
I'm just wondering: is it a matter of ...
3
votes
2answers
306 views
Keeping Whois domain registration details private
Most domain registers offer a service to keep your details private in the Whois database. Usually this works by replacing your email, telephone and snailmail addresses with proxies or P.O. Box ...
1
vote
1answer
357 views
Storing US employer identification number (EIN / FEIN) in a database
What are considerations for storing a United States Employer Identification Number (EIN / FEIN) in a database?
Is this considered sensitive information along the lines of an SSN?
Are there legal ...
0
votes
1answer
53 views
Are there privacy implications with ESET Web Protection?
I got the most recent ESET Cyber Security Beta for Mac. It offers a mode called “Web Protection” and “Email Protection”.
The documentation don’t really explain what these two modes does, and I’m ...
3
votes
4answers
322 views
What's the safest way to access my US-based bank's website from within Mexico? VPN vs SSH vs HTTPS?
I will soon be moving to Mexico and living there for an extended period. During that time I will need to occasionally access my US-based bank's website. I'll always be connecting using my own laptop, ...
0
votes
2answers
284 views
How to build a secure socks tunnel?
I was using a socks proxy to access websites blocked by my ISP, now it don't work any more in an strange way. Using the proxy is same as not using it! (i.e. I can access open sites but filtered sites ...
2
votes
1answer
199 views
secret key compromise in SSL vs in Kerberos
Consider the consequences of compromise of a secret key in the Kerberos system vs. in SSL. For example, suppose your individual shared secret key (for your user account) becomes compromised (i.e. it ...
3
votes
2answers
1k views
Using Cain and Abel to capture traffic of machine in the same network
I have installed Cain and Able in machine A, which is connected to another machine B via a LAN. Now I want to analyze all the traffic of machine B. Is this possible by installing Cain and Abel on ...
2
votes
2answers
174 views
How can I protect content distributed on a linux virtual machine?
What assets am I trying to protect?
An unofficial pre-alpha software prototype provided as a reproducible example for evaluation during the scientific peer-review process. The software will be ...
