The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all
3
votes
4answers
126 views
Anonymized Votes
Background
Looking to create an anonymous voting system. The system must track whether or not a user voted on an item (public information), but only that user is ever allowed to know whether they ...
3
votes
5answers
379 views
Is it wrong to collect and store IP addresses?
I am developing a PHP analytics program. I am using IP addresses to get its corresponding country. I was wondering if its OK to store both the IP address and Country or if its better if I just store ...
3
votes
4answers
322 views
What's the safest way to access my US-based bank's website from within Mexico? VPN vs SSH vs HTTPS?
I will soon be moving to Mexico and living there for an extended period. During that time I will need to occasionally access my US-based bank's website. I'll always be connecting using my own laptop, ...
3
votes
4answers
178 views
Improving the privacy of a casual Web user
I am interested in improving the privacy available to me as a casual internet user with a default browser. I think that Tor is too slow and that the "Privacy Mode" in browsers isn't really practical. ...
3
votes
2answers
1k views
Using Cain and Abel to capture traffic of machine in the same network
I have installed Cain and Able in machine A, which is connected to another machine B via a LAN. Now I want to analyze all the traffic of machine B. Is this possible by installing Cain and Abel on ...
3
votes
3answers
353 views
Can too much web searching be a danger to a security professional?
As a junior security professional, I spend a lot of time goggling for things such as 'wpa dictionaries', 'vulnerabilities...' , 'how to crack ...','and so on.
I sometimes feel like I am calling for ...
3
votes
6answers
307 views
When storing private identifying information in a web application, what is “industry standard” best practices?
I am building a hosted (SaaS) web application that stores PII like name, email address, and employer of the user. As of right now, I don't intend to ever store credit card numbers or bank account ...
3
votes
3answers
208 views
Privacy issues in Peer to Peer networks
In any typical P2P file sharing app, say DC++, the typical operations are search content, push content and pull content. A peer node broadcasts/multicasts its query to fellow peers and receives ...
3
votes
4answers
2k views
Is it normal that my new VISA debit card has almost the same number as the old one? Is it secure?
My bank issued me a new debit card (VISA Electron) because the old one expired and to my surprise, the card number is almost the same as on my old card. I don't think there would be much chance that ...
3
votes
5answers
1k views
How to avoid leaving any local trace that I went to a website?
I want to visit a web site, but I want to ensure there is no trace left on my computer that I did so. How do I do that?
This question is not concerned with anonymity or detection on the network ...
3
votes
2answers
141 views
Protect sensitive data from sysadmin prying eyes
I'm thinking about this problem. What if I have to manage sensitive data (i.e. health data), and I use a managed server?
I'd use encryption of course, but if they have root access they can see conf ...
3
votes
3answers
208 views
Encryption Question for patient PHI
I am the Compliance Officer for a laboratory. Is it permissible to send an unencrypted email with a patient accession number? It does not include patient name, DOB, SS# or address. It is just an ...
3
votes
1answer
89 views
Data Protection in EU for usage of personal documents
I don't know if this question fits into this forum or not.
Is there some template documents that comply with the EU regulations for Data Protection and Privacy that I can reuse / (get them signed by ...
3
votes
2answers
230 views
Is Chrome giving out information about me?
I'm stepping up my privacy online and have recently switched to Google Chrome, which may be a huge step backwards. Chrome pesters the user to sign in with their Gmail account. When I first created my ...
3
votes
4answers
88 views
What is the technique to determine if a user is “reading” a page called? (similar to “infinite scroll”)
When I read an article at Salon.com I notice that the "overflow content" (where I need to scroll down) is loaded on demand. I can't imagine this being a useful bandwidth savings technique, so the ...
3
votes
2answers
1k views
Privacy implications of IDFA/IDFV? (iPhone/iOS)
Apparently, iOS 6 introduced IDFA, "identifier for advertisers", which identifies your device so that advertisers can track you and send you ads. It appears they also introduced IDFV, "identifier for ...
3
votes
1answer
168 views
Protect our payroll data from a legal and moral obligation
We have our payroll software to be installed on our file server. This contains all the details of current and past employees. The data contained in the payroll software includes tax, bank, National ...
3
votes
1answer
213 views
Can SIP registrars and VOIP providers eavesdrop?
An e-mail provider provides people with usernames for e-mail accounts. That normally means that they have access to your e-mail if it is unencrypted.
Likewise, do sip registrars have access to ...
3
votes
2answers
307 views
Keeping Whois domain registration details private
Most domain registers offer a service to keep your details private in the Whois database. Usually this works by replacing your email, telephone and snailmail addresses with proxies or P.O. Box ...
3
votes
2answers
765 views
How do I use DuckDuckGo securely?
The Privacy Policy of DuckDuckGo.com mentions using HTTPs and POSTs affects the privacy of the search requests.
Since HTTPS is disabled by default, and POSTs is enabled by default, how does this ...
3
votes
1answer
186 views
HITECH : New United States Federal Act on Data Security
Has anyone heard of the new HITECH Federal Act? I understand that it is an underscore of the HIPAA Federal Act but am unclear of the requirements that they are requesting.
It targets companies that ...
3
votes
2answers
169 views
What are the consequences for deceptive practices against stated privacy policy
Disclaimer: I'm aware my question is a bit far from IT security practices but here is the most appropriate place I can think of to post my question within the whole stackexchange.
Let's say, many ...
3
votes
1answer
214 views
Does a TMSI change often enough to prevent tracking?
A company called Path Intelligence has a product called Footpath which uses the TMSI, WiFi MAC address, and bluetooth MAC address to track phones as they move through stores.
However, I don't see ...
3
votes
1answer
145 views
Facebook changed the default email address for every contact. How do I mitigate the impact and risk?
Facebook created a problem for regulated industries and Registered Investment Advisers (RIAs) by changing the default outgoing SMTP address for every contact to a @Facebook.com address.
This is an ...
3
votes
2answers
166 views
Securely storing (email) lookup database
Looking for suggestions on implementing a server-side lookup table, where the key is an email address.
Goal: Keep these email address private, even if data on the server is stolen.
Assumptions: The ...
3
votes
1answer
312 views
How traceable is ATM and point-of-sale credit card use back to you in practice?
A friend said ATM use is traceable easily, while point-of-sale credit card use isn't - this statement goes against my common sense.
I searched for the the topic and this is what I have found:
...
3
votes
2answers
116 views
What information will dig leak to an attacker?
What information will the axfr and ixfr commands in DIG provide to an attacker?
3
votes
1answer
358 views
Where and How is data stored in a session?
Where is the information in the fields of a session stored? If I, for instance, store in a session something like $_SESSION['foo'] = 'bar'. Where is "bar" stored?
If I store an object of a class, in ...
3
votes
1answer
2k views
Is there a sms authentication that works like 10minutemail?
I remember reading on this site a user recommending 10minutemail.com as a way to register or give email address to non-trusted websites.
Is there any similar site for disposable phone number for ...
2
votes
4answers
295 views
Which Wifi encryption method is secure?
you may wonder apple just removed ethernet port from new macbooks which means we have to use wifi! i made a wifi hotspot with my windows laptop to use for my macbook (my modem don't have wifi because ...
2
votes
3answers
217 views
How can I send and receive untraceable emails? [duplicate]
I have been receiving threatening emails from someone, and I don't want them to know my location for my safety's sake, but I need to send them a "Cease and Desist" notice. This person has great ...
2
votes
3answers
115 views
Company computer use from home - how much can they see on the desktop?
I have a company supplied computer that I use from home. I log into VPN (cisco AnyConnect) when i need to access company email or internal company sites.
In the past the company has been able to ...
2
votes
4answers
544 views
TrueCrypt dataleaks that might betray the “Deniable File System” option
Reading into "Operation Satyagraha", one would have to believe give all the resources used that the investigators had some reason to believe there was data to decrypt, even though in theory and in ...
2
votes
3answers
309 views
Security issues with email accounts
I am starting to become wary of giving out my email account to anyone, just by doing reconnaissance it is evident how easy it is to pull so much information from a person just by a email,
There is a ...
2
votes
4answers
234 views
What actions should be taken by site according to Data Protection legislations?
Many countries have data protection legislation:
Data Protection Directive in EU
Data Protection Act 1998 in UK
privacy laws in USA
Web application may have registration form where fields for ...
2
votes
4answers
1k views
If a hacker were to compromise a GMail database
Assuming the systems that store the Gmail database is compromised what is preventing them from reading everyone's emails by looking at the data in the database?
I assume nothing, and in order for ...
2
votes
2answers
190 views
Studies on Android users' attitude to security
I'm a final year BSc. student of Computer Security & Forensics at the University of Bedfordshire (UK). I'm investigating perceptions of security on Android platforms, and how to educate users of ...
2
votes
4answers
924 views
What web browsers support OCSP stapling? Are the privacy and performance features the same?
OCSP stapling decreases the load on a PKI infrastructure's OCSP server by attaching a signed OCSP response to the target in a TLS connection. In addition it creates a more secure/private session ...
2
votes
1answer
54 views
Is it a good idea to generate certificate-specific CRLs? What is this technique called?
Suppose I create 3 certificates with the following CRLs
Cert1 http://crl.server.com/batch1/root1.crl
Cert2 http://crl.server.com/batch2/root2.crl
Cert3 ...
2
votes
2answers
507 views
How Is It Possible For Hackers To “Dig Up The Dirt” On People?
Like the title says, I was wondering how its possible for hackers to "dig up the dirt" and get peoples personal information such as address, credit cards, bank accounts, social insurance number, etc? ...
2
votes
2answers
517 views
Interesting article on a vulnerability found in Tor
This article describes how French researchers compromised users using Tor. I'm not sure I fully understand or agree with it. I don't see what Bit Torrent has to do with anything? I mean they start out ...
2
votes
3answers
207 views
Would people object my website just because I use Google Analytics, +1, or FB Connect?
Are there people who will refuse to use a website just because that site sends browser information to Google Analytics?
Could the +1 button be a red flag?
Should I expect that there would be ...
2
votes
4answers
278 views
How to prevent private data being disclosed to unwanted audience over internet?
Everyday, in order to subscribe to certain services on the Internet we are almost forced to disclose private data even though those services don't necessarily require it.
For example, I need to ...
2
votes
1answer
36 views
A good privacy policy or pursue encryption for private community?
I am planning to create a private web site where people of a very specific target group would keep private stuff.
I am between two major roads for this.
Road 1
-Build a trusting and personal ...
2
votes
1answer
148 views
What user information does Wikipedia retain when a page is viewed?
People worry about privacy issues of Facebook and Google, but Wikipedia, being the nice and not-for-profit guys that they really are, does not receive much attention. However, if access logs are not ...
2
votes
2answers
165 views
What may a Hungarian employer do with the employee monitoring logs?
Employers often monitor employee network access, even install keyloggers on their computers, etc.
But the articles I found on the internet, is about the monitoring but not what they may do with the ...
2
votes
3answers
127 views
Why is security across a network “hard” to achieve?
This may be a naive question. If it is, I'm fine with just a link to outside information. I studied RSA encryption about 2 years ago, but that's about it.
I'm just wondering: is it a matter of ...
2
votes
2answers
174 views
How can I protect content distributed on a linux virtual machine?
What assets am I trying to protect?
An unofficial pre-alpha software prototype provided as a reproducible example for evaluation during the scientific peer-review process. The software will be ...
2
votes
3answers
115 views
How important is user acceptance when deciding whether to deploy biometric authentication?
I've been browsing through several studies on user acceptance of biometrics, and I've been noticing that they all focus on attitudes and beliefs about biometrics. While it's important to know a ...
2
votes
2answers
241 views
How to prevent private data being disclosed outside of Organization
I'm not looking to secure my internal network
Our company keeps sensitive customer information. How can I prevent this information spreading outside of the company ?
How do big companies prevent to ...
