The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

11
votes
5answers
2k views

Why do most browsers store browsing history by default?

Why do most browsers store browsing history by default? It seems like people often have to go to the hassle of manually deleting their history or using incognito mode. Are there some major advantages ...
11
votes
11answers
8k views

Besides IP addresses, how else could one be identified? [closed]

OP: I'm curious how else an actor seeking to identify someone online could accomplish this task besides just using an IP address. What methods would they employ? What knowledge must they have of the ...
11
votes
8answers
3k views

Can a website identify me if I go in privacy mode with a different IP ? Or should I use a different computer?

Assume I am a regular user of website A that forbids multiple accounts. I assume it can identify me with cookies and IP. So if I use a VPN, then open a private tab in my browser, can it still identify ...
11
votes
4answers
3k views

Does HTTPS encryption on a site prevent the NSA from knowing you visited its domain / the URL?

The reason I ask whether HTTPS protects the metadata of your Internet activity from a wiretapping entity on the backbone like the NSA or not, is the following scenario: Say I am browsing the ...
11
votes
2answers
2k views

How can I hide my logged in sessions from other websites?

Most people go on browsing the web while connected to their facebook/gmail/etc. accounts. Other websites somehow know what accounts you're logged in. For example, if you go to hide.me's torrent page, ...
11
votes
2answers
2k views

How might the U.K. Government's proposed internet surveillance equipment “bypass” encryption?

http://www.channel4.com/news/black-boxes-to-monitor-all-internet-and-phone-data http://rt.com/news/uk-privacy-internet-freedom-186/ 'Black boxes' will be installed by internet services providers ...
11
votes
3answers
845 views

Is Gmail showing images by default a good idea for privacy?

Google have decided to show images in Gmail messages accessed via the web, iOS and Android by default: Instead of serving images directly from their original external host servers, Gmail will now ...
11
votes
1answer
2k views

Who is responsible for leaking my personal information to companies? [closed]

Lets say I have a couple of friends who I have in my address book and of course they saved me in theirs. There might be the obvious information about me like my phone number and my email address but ...
11
votes
4answers
13k views

How to find a reliable private mail drop or ghost address provider? (Not CMRA)

A mail drop or ghost address is an entity that can receive mail in your name. For a little more on why would you want to do this, see JJ Luna. A CMRA stands for a commercial mail receiving agency. ...
11
votes
2answers
337 views

How to store private data both securely and publicly accessible?

The task may not be solvable in as broad a formulation as in the title, but this is my scenario (which is somewhat similar e.g. to newsletter subscriptions and therefore certainly has already been ...
10
votes
8answers
800 views

iPhone Tracking debacle - risks and countermeasures

For those of you who are not familiar with the topic, a quick search will turn up a lot of hits, e.g. see the researcher's report at Got an iPhone or 3G iPad? Apple is recording your moves - O'Reilly ...
10
votes
4answers
1k views

Personal Information shows up in Google Search from a mailing list

Years ago, when I was young and fool, I sent personal information on a mailing list. Now, if someone type my first name and last name, this content shows up. I do not want this content to show up. ...
10
votes
5answers
2k views

Do VPNs really mask your identity or is it a facade? [duplicate]

Disclaimer: This is NOT intended to educate myself or others on carrying out illegal activities. I am interested in security topics and as a craftsman I pride myself on continued education. THAT SAID:...
10
votes
5answers
10k views

Check photos for geotagging and remove lat/long data

I like to upload photos to various internet services, but I prefer not to share my geographic location. I understand Facebook and other services strip out the geolocation data, but they still have ...
10
votes
2answers
2k views

Privacy risk in using Google APIs

If I use JQuery from Google APIs: http://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js Is there a privacy risk to my site? E.g. does this link enable Google to read my pages, track my ...
10
votes
4answers
39k views

Can an employer access Whatsapp messages if you are using their servers?

Does anyone know if an employer can access whatsapp messages if you are using their servers? Whatsapp apparently say the messages are encrypted, but I'm not sure about this.
10
votes
3answers
507 views

Should I ask a user to re-authenticate if the browser thumbprint changes? Is a server side library available?

Is there a security benefit to using the browser's thumbprint in addition to a session identifier to identify a unique session? Would it then be advisable to ask the user to reauthenticate (or simply ...
10
votes
3answers
259 views

Why don't despotic countries simply block all encrypted traffic?

This is a question I often think of when I hear about countries considering blocking just one protocol with encryption, such as tor: How would a resourceful government block tor. Clearly France ...
10
votes
3answers
977 views

With whom does my PC communicate at startup?

I've been reading about Windows 10 and its incessant desire to call home. I've tried putting some firewall rules in place. I am sure they are working but I got to thinking that many events probably ...
10
votes
2answers
2k views

How to improve the security and privacy of Firefox

What would be a sensible approach to enhance the security and privacy of Firefox? I did not find a question about this and I feel that some guidelines for casual web users would be handy. Currently ...
10
votes
1answer
3k views

Do burned DVDs contain trackable information?

I'd like to know if it's possible to burn a video DVD (not just a regular CDFS DVD with video files in it; I mean a DVD that you can play the video of using regular DVD players), without the ...
9
votes
5answers
3k views

Is it ethical to use ReCAPTCHA to decode house addresses? [closed]

I noticed recently that ReCAPTCHA is using house numbers and street numbers as images for humans to decode. How ethical is it for Google to do this to this? Does it hamper privacy of an ...
9
votes
4answers
3k views

Can a VPN avoid the Prism Surveillance Programme?

This is causing me major concern and i can understand it is for a lot of users as well. I have nothing to hide but it's the moral aspect of snooping which has ticked me off. Can a VPN avoid the ...
9
votes
6answers
4k views

Whats the probability of a personal computer being hacked?

For a normal computer user following these practices: Have an up to date anti-virus with a firewall installed (Norton). Do not install cracked software. Do not open suspicious links or download ...
9
votes
1answer
604 views

How can meta data be used to identify users through chained VPNs?

Online privacy is a big issue for many people nowadays. Using VPNs is the usual suggestion as a means to stay anonymous. More often than not, somebody comes up with the point "just chain multiple VPNs ...
9
votes
2answers
18k views

Why do some companies ask last 4 digits of my SSN or a scan of my ID? What are my risks?

Yesterday I found out that some major service provider (online rentals) that I use now requires proof of my identity if I want to continue and make a booking. I was offered 2 options: 1) Enter last ...
9
votes
1answer
930 views

Can BitTorrent clients be fingerprinted?

As https://panopticlick.eff.org/ demonstrates, web browsers are very prone to fingerprinting, both active and passive (often you can fingerprint a web browser by simply monitoring the wire). My ...
9
votes
4answers
105 views

Fingerprinting the webpage content

I'm moderating a closed section of a forum - think 'covered by NDA' (not actually, but it's a good equivalent of the situation), with restricted access. Sometimes we find screenshots from that forum ...
9
votes
1answer
124 views

In VMs, do shared folders reduce security effectiveness?

VirtualBox offers the option of using shared folders, others probably offer the same thing. I am not sure whether the host is directly accessing the memory of the guest, or if there some process which ...
9
votes
1answer
1k views

How is YouTube able to identify anonymous users?

A few days ago I was searching YouTube and I noticed an "outlier" video poped up in the suggestions list. This video had nothing to do with the topic being searched, but instead it was based on a ...
8
votes
5answers
19k views

Does chatting over Skype expose my IP address?

Is there a way to identify a person's IP address in Skype, when you're chatting with them? Does this depend on their Skype settings? And if you've recorded chat messages, can they lead to the actual ...
8
votes
3answers
2k views

Does excluding Tor nodes by country improve privacy? [closed]

Here's the situation: the government of West Nauru is known to run a lot of TOR exit nodes and to collect a lot of data on the traffic, using extra large arithmometers to collate & correlate stuff....
8
votes
5answers
3k views

What do the various browser “private modes” do?

Recently there has been some disagreement as to what "private mode" means when it comes to various browsers. Primarily I am referring to... IE's "InPrivate Browsing" Google Chrome's "Incognito ...
8
votes
5answers
13k views

What is the most secure way for two people to communicate?

There are various services on the internet that offer secure communications. Typically in the past if I want to share some sensitive information with someone, I will do so over a Cryptocat chat ...
8
votes
4answers
4k views

What web browsers support OCSP stapling? Are the privacy and performance features the same?

OCSP stapling decreases the load on a PKI infrastructure's OCSP server by attaching a signed OCSP response to the target in a TLS connection. In addition it creates a more secure/private session ...
8
votes
2answers
402 views

Can other customers on shared hosting see requests from/to my site?

I installed a wiki on my shared webhosting (using Apache) account. This wiki is set to private (no read/edit/create rights for unauthorized users) and I'm the only one with an account. The wiki ...
8
votes
2answers
270 views

Where to find papers / information about spyware, tracking and cookie problems?

I am right now working on a problem and looking for some papers / information about spyware, tracking and cookie problems. I am no expert in that area, so I lack the knowledge where to find material (...
8
votes
1answer
607 views

what is differential privacy?

Currently I have heard a lot about differential privacy but I am unable to find out what exactly it is in a non-mathematicians language. Up-till now my understanding is that it add noise to the answer ...
8
votes
4answers
32k views

Advanced techniques for detecting a proxy/getting original IP

In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used: Firefox with a proxy ...
8
votes
4answers
3k views

Keyboard sniffing through audio recorded typing patterns

I've been thinking about this for a while; I know people are aware of wireless wiretapping of keyboards. However, has there been research on how to wiretap keyboards based on typing patterns? I'm ...
8
votes
1answer
122 views

School installs something on my Mac in order to connect to the school network. Should I be concerned?

Recently my school started a program which allowed us to bring our own laptops to school. Previously we were given laptops (owned by the school) to use. I'm still currently using the laptop given by ...
8
votes
3answers
605 views

How do you find out if a phone is secretly sending private data to a remote server?

I read a recent article on a Chinese phone manufacturer on Wall Street Journal that says: The rumors had begun when a user posted online in mid-July that his RedMi Note smartphone was “secretly”...
8
votes
4answers
486 views

Establishing a Reputable Pseudonym with PGP Key

This has become a bit of a thought experiment for me. Suppose someone would like to establish a pseudonym along with a corresponding PGP Key, how could other people verify the correspondence between ...
8
votes
1answer
3k views

What are the privacy pros and cons of using a public DNS server vs. your own?

Whether I'm using a normal internet connection setup, or tunnelling it through an anonymizing VPN or through TOR, what information of mine is revealed to whatever DNS server that I choose (e.g. Google ...
8
votes
1answer
499 views

Are there any reasons why browsers should block mixed passive content by default?

Most browsers block "active" content that's being loaded over HTTP on HTTPS pages. This includes stuff like javascript which can be modified with an MITM and compromise the security of the entire page....
8
votes
1answer
887 views

Device fingerprinting & Mass Computer Surveillance

Device fingerprinting is one of the biggest privacy problems as explained because people think cleaning cookies, using proxy servers or blocking domains can protect them (when blacklisted trackers ...
8
votes
0answers
10k views

How to defend against auto-scanning license plate cameras? (computer vision) [closed]

I just read a very interesting article in Popular Science about repo trucks and their new auto-scanning license plate cameras. The cameras are mounted on all four corners of their trucks, as as ...
7
votes
3answers
622 views

Is it secure to have an “email no longer available” feature on your registration form?

I was just implementing a new feature on the registration form of my site that checks if an email address is still available to register an account with. I am wondering if it is secure to show a user ...
7
votes
6answers
52k views

Company computer use from home - how much can they see on the desktop?

I have a company supplied computer that I use from home. I log into VPN (cisco AnyConnect) when i need to access company email or internal company sites. In the past the company has been able to "...
7
votes
5answers
2k views

Privacy issues with email providers [closed]

I am looking for an email provider (or for a way to do it myself) that will not divulge my personal information under no circumstances. I found out that getting this information with a order for ...