The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

7
votes
5answers
2k views

Privacy issues with email providers [closed]

I am looking for an email provider (or for a way to do it myself) that will not divulge my personal information under no circumstances. I found out that getting this information with a order for ...
7
votes
7answers
754 views

Does Windows 10 leak information about your IP address?

There are various reports of Windows 10 automatically sending out data when the user opens the start menu. Can that information or other information that Windows 10 automatically sends out to the ...
7
votes
3answers
644 views

How secret are secret forums?

I'm looking into setting up a forum for a writers group I attend; this would be for sharing stories amongst ourselves. In order to retain first rights, this has to be within a hidden forum, where the ...
7
votes
4answers
717 views

airgap a smartphone?

I'm looking to use my smartphone purely as a portable computer, with no network functionality in order to protect my privacy. Is removing the sim cards from it enough to airgap it or do I need to go ...
7
votes
2answers
1k views

How does dnsleaktest.com find my DNS provider

Can't see how they find this over the web. I'm on Windows, its in my network config. It changes when I use a VPN provider, but not when I use a local socks proxy connected to a remote server over ...
7
votes
2answers
764 views

Privacy of my company's guest Wi-Fi [duplicate]

I use my company's guest Wi-Fi along with another maybe 1500 other people across our site. On my breaks I access some random chat servers. Can my company see and hear my conversation?
7
votes
4answers
256 views

Solution to remain anonymous on a website that dismiss tor users?

I want to access to a website who recognize tor users and dismiss them. I have read that if you connect to a proxy after your tor exit node, the website wouldn't know that you are a tor user and ...
7
votes
3answers
1k views

Does Google's SSL encryption for searches thwart NSA spying?

Given everything that is suspected about NSA (and GCHQ, DGSE, etc.) access to user data: Avoiding speculation, can and do we know whether Google's recent action to make all searches use SSL ...
7
votes
2answers
314 views

Privacy violation even when queries with too few results are rejected

I was reading a Computing security book1 and saw a question regarding database security and privacy. I can't quite figure out the answer, so I thought I will ask here. One approach to ensure ...
7
votes
2answers
28k views

What happens if an attacker steals my phone's IMEI number?

I have some questions regarding IMEI numbers and data and identity theft. While searching online I have found many conflicting answers regarding this topic and would like some clarification if ...
7
votes
2answers
137 views

How much can I trust the “factory restore/reset” on a(n) (potentially compromised) android?

This question is a simple one: how much can you trust the "factory restore/reset" option on an android device? If the device has possibly been compromised, is it possible the "factory reset" will ...
7
votes
2answers
1k views

Where are the anonymous/private domain validation SSL certs?

I have yet to find a CA that doesn't require personal information for DV certificates. Is this because all of the major browsers and operating systems have a policy to reject CAs that don't require ...
7
votes
1answer
17k views

Is there a sms authentication that works like 10minutemail? [closed]

I remember reading on this site a user recommending 10minutemail.com as a way to register or give email address to non-trusted websites. Is there any similar site for disposable phone number for ...
7
votes
1answer
707 views

What unique fingerprinting information can an iOS7 app collect?

I'm interested in unique information that is beyond typical user knowledge or control. As of iOS 7, users can easily protect local physical tracking by controlling radios (cell, WiFi, Bluetooth) in ...
7
votes
2answers
149 views

What are the security benefits to block all http referer header requests for web browser?

I would like to know also if you lose site functionality. Is this a security benefit that is beneficial than compromising functionality (if compromising at all)? What I mean by this is one a ...
7
votes
5answers
350 views

Can a website detect my local WIFI network I am in?

I have two computers, both of them locate at the same local WIFI network ( ie: connected to the same router). I use VPN on a computer to visit a website, and don't use VPN on another to visit the ...
6
votes
4answers
347 views

Circumventing a “freemail” account form filter

I'll be honest - I want to download a free PDF from a website which requires me to enter my "non freeware" email address. I do have them, but I dont want to use one as I'm afraid of landing up on a ...
6
votes
3answers
81 views

Patient Hashes for Compression and Security

Are there any front-running approaches to using server-generated hashes to encapsulate patient condition in a concise manner while maximizing security? For example, a system to represent current med ...
6
votes
7answers
2k views

Is PGP combined with a regular web-based email service secure?

With the disappearance of private email services like Lavabit and Tormail (http://www.dailydot.com/news/email-anonymous-hushmail-lavabit-nsa/) it seems that we will need to resort back to standard ...
6
votes
3answers
3k views

How can a “server” know that what browser i'm using besides the user-agent?

How can a "webserver" know (or a sniffer between the srv<->and the client) that what browser i'm using besides the user-agent? Are there any "magic tricks"? javascript? java? How can I securely, ...
6
votes
3answers
3k views

What can a hacker do when he has physical access to a system?

I mean, I'm a tech guy here in my region (not a hacker...). When I sit in the front of another person's PC, I notice a little fear about what I can do in the system. It's obvious that I will not ...
6
votes
1answer
2k views

How does a website detect proxy? [duplicate]

How can a specific website detect that I'm surfing via proxy? Is there a way to use proxy and not get detected? If so, how?
6
votes
4answers
7k views

How to avoid leaving any local trace that I went to a website?

I want to visit a web site, but I want to ensure there is no trace left on my computer that I did so. How do I do that? This question is not concerned with anonymity or detection on the network side,...
6
votes
4answers
2k views

What's the safest way to access my US-based bank's website from within Mexico? VPN vs SSH vs HTTPS?

I will soon be moving to Mexico and living there for an extended period. During that time I will need to occasionally access my US-based bank's website. I'll always be connecting using my own laptop, ...
6
votes
2answers
435 views

How to refute “don't use internet if you don't like it” answer?

I hope it is legit question, similar to, for example, Why do law-abiding citizens need strong security?, et al. and it is tightly conected with user's security, privacy, etc. The response I always ...
6
votes
4answers
505 views

How to communicate securely

What is the proper way for two parties, say A and B, to communicate securely where: Communication between A and B must be secure so that only they know the content of the communication. A isn't ...
6
votes
2answers
836 views

Workarounds for :visited CSS History reconnaissance

Several years ago it was possible to use a:visited { background: url('/log.php'); } to figure out on what website user has been previously. But now it is restricted by browsers. Is there any ...
6
votes
2answers
564 views

Stolen Laptop - Next steps

My laptop (modded 2007 Macbook Pro) was stolen 2 days ago when I didn't pay attention to my backpack in a tourist spot in Europe and while I'm quite certain they won't have much use for it (the apple ...
6
votes
2answers
2k views

Considering that SRP is better than SSH and Basic Auth, how can it be implemented in a website?

SRP is short for Secure Remote Password protocol, and provides a better way for passwords to be sent over the internet. I've read the information at it's Stanford University home page, the Wiki ...
6
votes
1answer
191 views

What can be tracked by my boss if I am logged into my work Gmail but using private Wi-Fi at home

Basically, I had the Gmail app on my personal mobile. I was on Google doing a search about coming out as gay and I had only searched on Google, not clicked on any pages yet. I noticed at the bottom ...
6
votes
3answers
8k views

What is the risk of leaking IMEI / IMSI numbers over a network

Should I worry if a developer programmed an app to send IMEI / IMSI number of the phone where the app is installed back to him? What can an attacker do with such information?
6
votes
3answers
12k views

Privacy implications of IDFA/IDFV? (iPhone/iOS)

Apparently, iOS 6 introduced IDFA, "identifier for advertisers", which identifies your device so that advertisers can track you and send you ads. It appears they also introduced IDFV, "identifier for ...
6
votes
3answers
2k views

Is it proper to be prompted that I entered an old password

I changed my Facebook password a few days ago. Today, I entered the old password chronically, and saw the prompt: Sorry! You Entered An Old Password And even shows the date&time when I ...
6
votes
3answers
891 views

Does Google log my activity on service A when logged in to service B or by IP address?

Now that Google's new Privacy Policy will combine data from their various services... Will Google associate me to my activity on one service even if I am not logged in to that service? Did they ...
6
votes
1answer
313 views

TOR: I'm repeatedly being connected to a couple of Entry Nodes!

I'm using TOR (Orbot for Android), and when I look at the log of the connection establishment phase, I see that I'm repeatedly being connected to familiar nodes, especially the Entry Nodes which 3 out ...
6
votes
1answer
314 views

Is it unwise to use Redis to store PII, private keys, and other secrets?

I'm reviewing a system that is using Redis to store all client secrets, private keys, and other things. The problem is that Redis loads the entire DB into RAM Since SSL's heartbleed, Rowhammer, and ...
6
votes
3answers
421 views

Phone Privacy for Small Business

I'm a small business operator and I'm looking for ways to provide security and reasonable privacy for my own business communications and communications of customers. All these businesses operate ...
6
votes
1answer
11k views

Where and How is data stored in a session?

Where is the information in the fields of a session stored? If I, for instance, store in a session something like $_SESSION['foo'] = 'bar'. Where is "bar" stored? If I store an object of a class, in ...
6
votes
1answer
195 views

Creating a Private Key using Human Intervention

In a hypothetical system, lets say that a design requirement is that people who snoop around the database of a web application (sysadmin gone rogue, or what have you), do not have access to the plain ...
6
votes
1answer
120 views

How do I protect myself from the aftermath of the OPM hack?

As a federal employee, I, along with some 4 million other Americans had our information compromised in the recent OPM (office of personal management) hack. Former and current addresses, names of ...
6
votes
1answer
131 views

How did my browsing choices reach an Alibaba seller?

Events, spaced about evenly over 2 months: Repeatedly ordered small amounts of webbing on a rather reputable Polish site (Allegro.pl, much like ebay). Got targeted ads in Skype for webbing on ...
6
votes
1answer
4k views

IMEI and phone number given to unknown sources. What are the risks?

The facts: A friend put his phone number (and possibly the IMEI) for his android device into some kind of hacking PC software that promised to (and actually did) extend his Whatsapp account that was ...
6
votes
1answer
148 views

What are the compliance requirements or standards for a non-US firm hosting personal data in the US?

I work for a head hunting company with offices in Canada and Asia. We migrated our custom built CRM system from our own servers hosted in Japan to an Amazon hosting service meaning that all our data ...
6
votes
2answers
125 views

What information is collected because of signing into Windows 10 with a Microsoft account?

The question is specifically as stated - "because of signing into Windows 10 with a Microsoft account". Not including what is collected even when using a local account. And not including what is ...
5
votes
3answers
4k views

CV to a Suspicious Professor [closed]

Here's the situation: we have this professor this semester who is an excellent teacher and is very friendly, but he has some ego issues. He promised a few of us internships at Princeton, Stanford, etc....
5
votes
3answers
10k views

Resolving an IP address of a Remote machine to its MAC address

I wanted to know whether its possible to get the MAC address of remote node (computer/Access Point) if I know its IP address. I have heard that if someone sends you an email (even through gmail), you ...
5
votes
3answers
25k views

Can a website still detect my real MAC address even if I use different virtual machine each time I visit the website?

Suppose I use a proxy and a different virtual machine each time I visit a particular website, will a website still be able to detect my MAC address and/or uniquely identify me? Assume that the website ...
5
votes
5answers
33k views

Using Private Browsing mode while connected to organization's network

At the workplace I use the organization's network for accessing internet (well that's the only option). I am not sure if the network administrators monitor what I browse, how frequently I access ...
5
votes
4answers
821 views

What issues are most important to cover in Corporate Security Policy?

What about a Privacy Policy? Both internal, and external.
5
votes
3answers
641 views

How to protect against a determined harasser

My girlfriend is an admin on a German speaking site that for some time has been harassed by what we presume is a disgruntled user. At first it was merely an annoyance but a couple of days ago the ...