The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

5
votes
1answer
245 views

what is differential privacy?

Currently I have heard a lot about differential privacy but I am unable to find out what exactly it is in a non-mathematicians language. Up-till now my understanding is that it add noise to the answer ...
5
votes
2answers
108 views

Files encryption for flash drive privacy/security

Looking to encrypt files on flash drive (for backup) just in case it gets stolen or lost. Don't want to install any extra software like TrueCrypt but instead just use what's already on most computers. ...
5
votes
2answers
278 views

Single vs multiple personas? What are the security implications?

I have two email addresses, one for work and one for home. I have have two cellphone numbers, one for work and one for home. But I am just one individual (and only have one social security number ...
5
votes
3answers
145 views

In a monitored network, can the admins tell if Tor is being used?

I'm not asking if Tor is secure, I'm asking if an observer can know you are using Tor? For example if a persons ISP or company network monitors traffic would they be able to determine with certainty ...
5
votes
1answer
259 views

What are the security differences between SMIME email and PGP email? [closed]

Outside of key distribution, and specific to the technical details relating to encrypted email data (message body), what's the difference between SMIME and PGP? Example comparisons Security ...
5
votes
1answer
128 views

How long can I store personal information on unconfirmed subscriptions?

I have a monthly newsletter. In my subscribe form I use a double opt-in method: The visitor subscribes. I send him a confirmation email. If I receive a reply, I add him/her to my system. In the ...
5
votes
1answer
458 views

How is YouTube able to identify anonymous users?

A few days ago I was searching YouTube and I noticed an "outlier" video poped up in the suggestions list. This video had nothing to do with the topic being searched, but instead it was based on a ...
5
votes
1answer
4k views

Can an iOS 7 app access either device camera without user knowledge?

This statement in the iOS 7 release notes implies that non-China devices do not need user consent: iOS now requests user consent for apps to use audio input on all iOS 7 devices. For devices ...
5
votes
1answer
76 views

What are the security challenges encountered with attribute exchange?

OpenID has Attribute Exchange, Facebook has Facebook Connect, and authorization services such as Oauth enable access to user data distributed across a range of content providers. What are the ...
5
votes
1answer
290 views

What countries have laws in place that respect Do Not Track HTTP headers or cookies?

Google offers a Chrome plugin that uses cookies to control privacy, while Firefox offers a HTTP Header to tell websites to not track the users and log the data anonymously. This obviously extends a ...
4
votes
5answers
1k views

Could I be defrauded by a website who has my address, phone number, and credit card number?

Exactly what kind of information does a scammer need to scam someone money? For example, if there's a website which wants me to provide my details, Exactly what kind of information can I divulge and ...
4
votes
4answers
423 views

Received a Kindle from a stranger, what are the risks?

While getting a coffee today, a man walked up to me and offered me a kindle. he said he no longer wanted it and that he was looking to give it away. An avid reader, I accepted. It has no accounts on ...
4
votes
4answers
710 views

What issues are most important to cover in Corporate Security Policy?

What about a Privacy Policy? Both internal, and external. From another Area51 proposal.
4
votes
3answers
618 views

Is there any way of preventing (or punishing) abuse of anonymity networks? [closed]

Anonymity services/networks like Tor, VPNs that don't log etc., seem like very double edged swords. Is there any way to prevent people with bad intentions (like breaking the law) from using them or ...
4
votes
3answers
568 views

How to protect against a determined harasser

My girlfriend is an admin on a German speaking site that for some time has been harassed by what we presume is a disgruntled user. At first it was merely an annoyance but a couple of days ago the ...
4
votes
4answers
1k views

Does using Google DNS make extensions like AdBlock Plus useless?

As many of you probably do, I am not using my ISP DNS because of very low performance, and I am using Google's primary and secondary DNS (8.8.8.8 and 8.8.4.4) which are good speed-wise but, knowing ...
4
votes
4answers
558 views

Is silverlight and Java running on the web browser capable of saving “state” into the user's local machines?

I am aware that even after we have cleared our cache and cookies, websites can still save files/information into our computer using Flash (Flash ever cookies), I was wondering does other plugins like ...
4
votes
4answers
338 views

How to securely share files with other individuals?

I have a collection of files I would like to securely share with a small number of other people. The collection is mostly static; no more than one or two new files will be added per month (after the ...
4
votes
2answers
88 views

What level of anonymity can I expect while using a library's user session?

At the library, computer are typically open for internet browsing, if you can provide them your library card number. To what extend can I expect to protect my internet browsing privacy from ...
4
votes
2answers
423 views

Privacy of Image search with https

I am connected to the internet in the office where I don't want the administrator of the network to find out the contents I check (for example images). First I use a Firefox private browsing window ...
4
votes
3answers
574 views

Further potential problems with Windows 8 SmartScreen

Some research was recently published that showed that Windows 8's SmartScreen feature sends certain details about every single application that you install to Microsoft. Ignoring the obvious privacy ...
4
votes
2answers
3k views

Does Google record search / source IP [/ user] pairs?

Does Google record search / source IP [/ user] pairs? What if my Search History is off?
4
votes
6answers
1k views

When storing private identifying information in a web application, what is “industry standard” best practices? [closed]

I am building a hosted (SaaS) web application that stores PII like name, email address, and employer of the user. As of right now, I don't intend to ever store credit card numbers or bank account ...
4
votes
2answers
177 views

Is there a Security/Privacy risk in storing computers' hardware thumbprint?

I'm asking this because according to this article , Microsoft collects much less information than actually exists for Windows licensing (e.g. only 10 bits for MAC addresses, 6 for CPU serial number ...
4
votes
2answers
935 views

P3P HTTP Headers and Session ID's

Is there any chance that Session ID's can be shared between different websites (one in other IFRAME of others) through P3P Headers?
4
votes
2answers
263 views

Issues with the use of network surveillance tool in your company?

What issues will we face with the use of network surveillance tool in the company network with respect to the Telecommunication Interception Act and Privacy Act ? And what policies could be ...
4
votes
2answers
2k views

Does Java applets reveal the real IP address, even when using proxy or vpn?

Can a Java applet reveal the original client IP address, when browsing through a proxy or a VPN? Why?
4
votes
2answers
93 views

Internet and Email privacy in an “internet-enemy” country [closed]

Here where I live, it is believed that all the internet traffic goes through the hands of government agencies, and the telecommunication office is actually owned by the government. Given the ...
4
votes
3answers
457 views

Protect our payroll data from a legal and moral obligation

We have our payroll software to be installed on our file server. This contains all the details of current and past employees. The data contained in the payroll software includes tax, bank, National ...
4
votes
3answers
382 views

What are the best practices for maintaining privacy on a non-jailbroken iOS device?

iOS, like most other mobile OSs, has the potential to leak significant chunks of personal information to 3rd-party apps and to ad and tracking networks used by those apps, which in turn also has the ...
4
votes
5answers
250 views

Secure file sharing, instead of attaching files to emails?

Allow me to give some background information, so you may understand my situation better. We have been prone to sending emails to unintended recipients, many of which contained confidential data. ...
4
votes
1answer
179 views

Computational Feasibility of finding 'Good Links' of the following format

I recently stumbled upon this and am checking here to see if what I am proposing is indeed feasible and can be considered a breach of privacy. For obvious reasons I am not revealing the website ...
4
votes
1answer
267 views

Security Consequences of compromised passport data

In light of the recent hack of the EC-Council site, where the hacker makes the point that he has access to passport data a general question arises. What, if any, are the security/privacy consequences ...
4
votes
2answers
482 views

Tor traffic correlation attacks by global adversaries

I recently came across a paper called "Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries" (Aaron Johnson et al) ... which seems to be saying that adversaries (like the NSA) that ...
4
votes
2answers
151 views

To What Extent does an Attacker Have Access to the Browser History through the CSS Pseudoclass :visited Styles?

I have read this article on how a scripted web page is able to obtain the visited history of a user browsing the page. However, I can't find any clear information in the article describing the extent ...
4
votes
2answers
931 views

Does a TMSI change often enough to prevent tracking?

A company called Path Intelligence has a product called Footpath which uses the TMSI, WiFi MAC address, and bluetooth MAC address to track phones as they move through stores. However, I don't see ...
4
votes
2answers
8k views

Privacy implications of IDFA/IDFV? (iPhone/iOS)

Apparently, iOS 6 introduced IDFA, "identifier for advertisers", which identifies your device so that advertisers can track you and send you ads. It appears they also introduced IDFV, "identifier for ...
4
votes
2answers
5k views

WiFi security from another authorized user (roommate)

I believe we use WPA or WPA2 encryption. To what extent can another user monitor my traffic? Monitor my desktop activity? View documents I've saved on my computer? Tell what sites i visit? Tell ...
4
votes
1answer
325 views

Can SIP registrars and VOIP providers eavesdrop?

An e-mail provider provides people with usernames for e-mail accounts. That normally means that they have access to your e-mail if it is unencrypted. Likewise, do sip registrars have access to ...
4
votes
3answers
8k views

What is a good email site that doesn't mine your personal data? [closed]

I am becoming less and less ok with Google and Facebook collecting data on me based on my online activities and then selling that to companies. Is there a good email service out there that respects ...
4
votes
2answers
3k views

How do I use DuckDuckGo securely?

The Privacy Policy of DuckDuckGo.com mentions using HTTPs and POSTs affects the privacy of the search requests. Since HTTPS is disabled by default, and POSTs is enabled by default, how does this ...
4
votes
2answers
237 views

What are the consequences for deceptive practices against stated privacy policy

Disclaimer: I'm aware my question is a bit far from IT security practices but here is the most appropriate place I can think of to post my question within the whole stackexchange. Let's say, many ...
4
votes
2answers
645 views

When is an intermediate page needed before directing a user off my primary website? What is the best implementation?

The NSA has a page that intercepts redirections off the primary site. (click "TLS: "Suite B Cipher Suites for TLS," RFC 5430" for an example). I've seen this used in Exchange Outlook Web Access ...
4
votes
1answer
181 views

How can browser select suggestions for my private searches?

I use a VPN service that provides a pool of IP addresses, I clean history/cookies/etc - all the browsing data before a session. Regardless, when I type in the search of one particular search engine, ...
4
votes
1answer
664 views

Could TOR nodes collect IPs and filter them to unmask .onion url IP addresses?

I feel that I generally understand TOR onion routing. From what I understand, the node knows the IP it is receiving data from and the IP it is sending data to. So surely a node can collect the IP ...
4
votes
2answers
76 views

What's the best way to transform sensitive account numbers

I work on a web application that manages information about transmission setups and processes client transmission statistics to generate billing charges for the services used by these clients. The team ...
4
votes
2answers
143 views

I am worried because my college asks students to confirm their credit card number, location, SSN and full name on signup. What do I do?

When a user logs in with their username (Their public ID number) and a password (Their birthday, by default) their name, full social security number, partial credit card number/Expiration date, and ...
4
votes
2answers
294 views

What is the ideal anonymous workstation setup? [closed]

My goal is to build a perfect stationary workstation from which I can work anonymously. Most instructions on being anonymous usually involve, at some point, moving around and switching from coffee ...
4
votes
1answer
57 views

Are these precautions sufficient for scam baiting?

I'm a tired of these stupid scammers trying to rip off fellow university students desperate for housing, so as for some free time activity I thought I'd try and do some scam baiting, and send him to ...
4
votes
2answers
373 views

Should IBAN and bank details be considered private data and encrypted?

To pay off our users, they are asked to enter their IBAN and bank name and bank address. The users are mostly based in Europe. As far as I know (see also this question) these details can not be used ...