The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

1
vote
2answers
181 views

A secure alternative for e-mail

I am looking for an alternative for my current e-mail provider (gmail). I would like to gain back a little bit more "privacy" on the internet. I would like the following things: The e-mails I send ...
2
votes
1answer
72 views

Can we determine how securely files are stored on a cloud storage service?

After asking two questions about the security of online cloud storage, it seems to me that we can only at best speculate as to the security practices of the hosting company, and believe what they tell ...
2
votes
2answers
310 views

From an infosec expert perspective, how secure is using Windows 10 as a daily os? [closed]

I have a Windows 10 pro license and i wanted to use Windows 10. But seeing how it treats the user's privacy and all, I am having second thoughts. I've read a lot about how Windows 10 is a disaster and ...
2
votes
2answers
373 views

Email “privacy” when sending within same domain

Scenario: email is hosted third party (think Outlook, Gmail etc.) I am sending email to another person with an email account on the same domain (think from user1@example.com to user2@example.com) ...
1
vote
2answers
126 views

How can a seamless cloud storage service be Zero-knowledge?

Cloud based storage services like Dropbox and Google Drive are a cause for concern when it comes to privacy. They store encryption keys for your files on their servers. Therefore, anyone who manage to ...
2
votes
2answers
207 views

Is it a good or bad practice to fake user agent?

I'm using a mobile browser. I found a program that can fake my User Agent (UA), so I changed to something else. Is this good practice or bad practice in terms of preserving privacy? The way I ...
2
votes
3answers
94 views

Google Public DNS- private enough?

Google claims that they do not keep any personally identifiable information but they do keep a user's ISP and geo-location information including the geocode, as shown here. To keep the question ...
-1
votes
1answer
65 views

robots.txt and risk associated [closed]

robots.txt is a file that contains path which cannot be crawled by bot most of time search-engine bots like Google bot, etc. It tells search-engine that this directory is private and cannot be crawled ...
6
votes
1answer
936 views

How does a website detect proxy? [duplicate]

How can a specific website detect that I'm surfing via proxy? Is there a way to use proxy and not get detected? If so, how?
3
votes
1answer
127 views

Can I redact by converting PDF to TIFF and back?

Background My boss asked me to come up with a way ordinary users can redact information from PDF files using free software. We get a lot of scanned documents and our client requires that sensitive ...
11
votes
4answers
10k views

How to find a reliable private mail drop or ghost address provider? (Not CMRA)

A mail drop or ghost address is an entity that can receive mail in your name. For a little more on why would you want to do this, see JJ Luna. A CMRA stands for a commercial mail receiving agency. ...
21
votes
4answers
5k views

How can I encrypt a file using gpg without including the recipient's key ID?

An OpenPGP encrypted file will include the key ID of the intended recipient's public encryption key, as explained in this question. Is there any way to remove that information from the resulting ...
0
votes
1answer
521 views

I want to encrypt my SSD, should I still use TrueCrypt or Is there a better open source alternative? [duplicate]

Before anything I have say that I have no experience with cryptography, at all. Anyway, I have a laptop with Windows 10 and an SSD. I don't want to use BitLocker since I don't trust Microsoft in this ...
22
votes
1answer
1k views

What are the privacy and security implications of Windows Telemetry

There have been quite a few news stories relating to the use of "Telemetry" in Windows 10 (and also now Windows 7/8) with suggestions that users would want to disable or remove these updates due to ...
7
votes
4answers
234 views

Solution to remain anonymous on a website that dismiss tor users?

I want to access to a website who recognize tor users and dismiss them. I have read that if you connect to a proxy after your tor exit node, the website wouldn't know that you are a tor user and ...
1
vote
4answers
347 views

Find out if someone copied a file from my external hard disk

I want to find out if someone has copied my personal details from my external hard disk. I don't care whether they read it, but it should not be copied to their system. So is there any method to find ...
14
votes
2answers
739 views

How does the Copyright Alert System work? Who has implemented it?

Some ISPs are participating in a Copyright Alert System that notifies content authors of violations of their copyright. I'm concerned how this oversight relates to my private traffic, and what laws ...
-1
votes
1answer
53 views

Measuring privacy policy [closed]

I want to measure if the user's data which is collected by the system is mentioned in the privacy policy. What is the best measure that I can use it in such case?
1
vote
0answers
103 views

What information can be gained given only a phone number? [closed]

What personal information can be obtained given only a phone number? What information is your phone number publicly (or privately, but with easy access) linked to? Here is the way I am looking at ...
6
votes
3answers
4k views

CV to a Suspicious Professor [closed]

Here's the situation: we have this professor this semester who is an excellent teacher and is very friendly, but he has some ego issues. He promised a few of us internships at Princeton, Stanford, ...
4
votes
2answers
132 views

What is a “roving” backdoor?

What is a "roving" backdoor? I understand the general concept of a backdoor. Emphasis on keyword qualifier: "roving"...
1
vote
2answers
2k views

Does WhatsApp disclose the sender's IP address?

Does WhatsApp disclose the sender's IP address? Is it possible to get it by running netstat -a or via Wireshark?
1
vote
2answers
103 views

How much information a Flash program (Flash app) can gather about computer when running?

Does anyone know if a Flash web application has access to local hard drive? What about OS information or hardware information? If I allow webcam and microphone access, how much information can it get ...
3
votes
2answers
9k views

any information about en.quiente.info who has visited your account website

I ran across this site http://en.quiente.info, my friends tried it and they say it worked for them. It asks for most of the privileges on Facebook even sending messages on behalf of you. Any one has ...
4
votes
1answer
2k views

How traceable is ATM and point-of-sale credit card use back to you in practice?

A friend said ATM use is traceable easily, while point-of-sale credit card use isn't - this statement goes against my common sense. I searched for the the topic and this is what I have found: ...
2
votes
1answer
151 views

Webrtc privacy issues?

I've been reading about WebRTC, and I'm interested in using it for a drawing web application that uses real-time collaboration. However, as I understand, WebRTC communication requires all parties ...
2
votes
2answers
87 views

Confidentiality and privacy

I understand that the confidentiality aimed at protecting access to the system data, while privacy aimed at protecting access to the person data. Now, could we consider anonymity as a ...
2
votes
2answers
151 views

Should I regularly erase cookies?

Cookies really do make for a better experience on the web but do they also create a vulnerability? How often should I clean them out and what benefits are gained by doing so?
4
votes
3answers
134 views

Is there any point to opting out of interest-based ads?

There are various browser extensions for opting out of interest-based ads, e.g.: https://chrome.google.com/webstore/detail/iba-opt-out-by-google/gbiekjoijknlhijdjbaadobpkdhmoebb ...
0
votes
0answers
28 views

What is the new searchdefaulthash in the Firefox profile search metadata?

During a recent review of changes to the Firefox profile (I'm version controlling it) there turned out to be a new property searchdefaulthash in search-metadata.json: "[global]":{ [...] ...
6
votes
2answers
113 views

Should I be worried if somebody uses my email to sign up for accounts?

I recently received e-mails from two services: Paytm and Uber. They both seem like legitimate services. However I have no idea why I received these e-mails or why somebody would want to create an ...
7
votes
4answers
685 views

airgap a smartphone?

I'm looking to use my smartphone purely as a portable computer, with no network functionality in order to protect my privacy. Is removing the sim cards from it enough to airgap it or do I need to go ...
7
votes
5answers
283 views

Can a website detect my local WIFI network I am in?

I have two computers, both of them locate at the same local WIFI network ( ie: connected to the same router). I use VPN on a computer to visit a website, and don't use VPN on another to visit the ...
1
vote
1answer
160 views

Any real-world examples of root certificate store compromises?

Apart from the infamous Superfish/Lenovo case this year, are there any other known cases of a malicious root certificate being installed on a target machine to allow transparent MITM attacks, whether ...
1
vote
0answers
124 views

Windows 10 privacy concerns for other accounts on same computer [closed]

What are the privacy concerns for a local account on a Windows 10 computer, which has all settings set to "private", if an additional "Microsoft" account is being used on the same computer with ...
4
votes
2answers
146 views

What parts of IPv6 address may I show publicly and safely?

I want to ask question about some network issue, i.e. about printing the IPv6 address correctly. I assume the users expect me to provide some meaningful examples of what I expect and what I have. ...
0
votes
1answer
276 views

Twitter phone verification while on Tor [closed]

Twitter locked me out of my account. I can log in but I can't do anything with it until I give them a phone number. I've had the account for years but they've decided now there's "suspicious ...
46
votes
7answers
2k views

Why does one need a high level of privacy/anonymity for legal activities?

This question is sort-of spun off of a previous one. How to counter the statement: "You don't need (strong) security if you're not doing anything illegal"? There are a lot of great ...
1
vote
1answer
334 views

Why Skype discloses my IP address to anybody? [closed]

Apparently there is a Skype exploit that allows people to obtain your IP address through your Skype username if you're online. The problem has existed since 2012. There exists countless websites which ...
1
vote
3answers
199 views

How can an organization know my age based on my IP address?

My teenage daughter was recently banned from a teen forum. The response we got from the forum administrators explained that she was banned because the IP address revealed that she was "over age" (too ...
7
votes
3answers
1k views

Does Google's SSL encryption for searches thwart NSA spying?

Given everything that is suspected about NSA (and GCHQ, DGSE, etc.) access to user data: Avoiding speculation, can and do we know whether Google's recent action to make all searches use SSL ...
1
vote
2answers
111 views

Can a “client-initiated” session cookie provide more privacy and security than existing session alternatives?

There are several uses for a cookie, and I would like to offer some kind of guarantee that a cookie is being used for a specific, limited purpose and scope. In my case, I want to prove that a cookie ...
6
votes
3answers
10k views

Privacy implications of IDFA/IDFV? (iPhone/iOS)

Apparently, iOS 6 introduced IDFA, "identifier for advertisers", which identifies your device so that advertisers can track you and send you ads. It appears they also introduced IDFV, "identifier for ...
1
vote
0answers
241 views

What are the best ways for an iOS 9 user to protect against device fingerprinting?

In response to this series of questions: What unique device fingerprinting information can an iOS9 app collect? and as an update to this question: What are the best practices for maintaining privacy ...
-2
votes
1answer
264 views

Facebook and people you may know suggestions [duplicate]

I know all the conspiracy theories about if how you search for someone on it they can find out etc but I have a question. We all know Facebook likes to keep its mining secret. Both mine and my ...
1
vote
0answers
140 views

What unique device fingerprinting information can an iOS9 app collect?

As a follow-on to these questions: What unique fingerprinting information can an iOS7 app collect? What unique device fingerprinting information can an iOS8 app collect? Apple has apparently ...
3
votes
1answer
621 views

What unique fingerprinting information can an iOS7 app collect?

I'm interested in unique information that is beyond typical user knowledge or control. As of iOS 7, users can easily protect local physical tracking by controlling radios (cell, WiFi, Bluetooth) in ...
4
votes
2answers
131 views

How can I verifiably demonstrate that steganography or hidden partitions do not exist?

I want to verifiably demonstrate that there are no hidden partitions, or hidden messages in a given message. In this scenario, assume the subject is being monitored (consensually) and agrees to align ...
0
votes
1answer
146 views

How secure are the passwords stored at Google Passwords? [closed]

It seems Google activated central place for storing app/website passwords which is accessible at https://passwords.google.com/ and all the remembered Chrome passwords are synched there. In what ...
1
vote
1answer
103 views

In the United States, when can someone legally search my personal laptop? (Government or private security) [closed]

Unlike the United Kingdom, U.S. citizens don't have an explicit right to privacy in the Constitution. Although there are implied privacy rights within "penumbras" of the Bill of Rights this has ...