The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

6
votes
1answer
309 views

What countries have laws in place that respect Do Not Track HTTP headers or cookies?

Google offers a Chrome plugin that uses cookies to control privacy, while Firefox offers a HTTP Header to tell websites to not track the users and log the data anonymously. This obviously extends a ...
6
votes
4answers
190 views

Solution to remain anonymous on a website that dismiss tor users?

I want to access to a website who recognize tor users and dismiss them. I have read that if you connect to a proxy after your tor exit node, the website wouldn't know that you are a tor user and ...
5
votes
3answers
7k views

Resolving an IP address of a Remote machine to its MAC address

I wanted to know whether its possible to get the MAC address of remote node (computer/Access Point) if I know its IP address. I have heard that if someone sends you an email (even through gmail), you ...
5
votes
5answers
23k views

Using Private Browsing mode while connected to organization's network

At the workplace I use the organization's network for accessing internet (well that's the only option). I am not sure if the network administrators monitor what I browse, how frequently I access ...
5
votes
4answers
770 views

What issues are most important to cover in Corporate Security Policy?

What about a Privacy Policy? Both internal, and external.
5
votes
4answers
2k views

Ways to monitor someone's internet traffic

If some authority for whatever reason decides they want to monitor your traffic on a wired DSL connection, how would they do it besides exploiting your OS? What are the other ways assuming the OS is ...
5
votes
7answers
2k views

Is PGP combined with a regular web-based email service secure?

With the disappearance of private email services like Lavabit and Tormail (http://www.dailydot.com/news/email-anonymous-hushmail-lavabit-nsa/) it seems that we will need to resort back to standard ...
5
votes
4answers
6k views

How to avoid leaving any local trace that I went to a website?

I want to visit a web site, but I want to ensure there is no trace left on my computer that I did so. How do I do that? This question is not concerned with anonymity or detection on the network ...
5
votes
2answers
425 views

How safe can connecting to VPN really be?

I would like to make this story as short as possible since my question is not that long, I have worked with journalists previously in war zone where we investigated the involvement of EU IT companies ...
5
votes
3answers
660 views

Are there security (esp. privacy) benefits to deleting cookies?

As the title says, I'm wondering if there are any security/privacy benefits to managing cookies - that is, managing by deleting cookies you don't want or need. I deleted all my cookies about a week ...
5
votes
2answers
416 views

How to refute “don't use internet if you don't like it” answer?

I hope it is legit question, similar to, for example, Why do law-abiding citizens need strong security?, et al. and it is tightly conected with user's security, privacy, etc. The response I always ...
5
votes
4answers
355 views

How to communicate securely

What is the proper way for two parties, say A and B, to communicate securely where: Communication between A and B must be secure so that only they know the content of the communication. A isn't ...
5
votes
2answers
600 views

Mobile phone security eavesdropping based on data transfer

is there an easy way for particular governmental organizations (especially in countries where freedom of speech is a problem) have some technology where they can easily eavesdrop on cellphone internet ...
5
votes
3answers
653 views

What are NoScript surrogates and should one disable them for more privacy in browsing?

NoScript has a feature of supplying its own "surrogate" scripts instead of well-known tracking/ad scripts (Google Analytics, for one). Does it matter for my privacy if I do not change the factory ...
5
votes
1answer
362 views

Is it safe to abandon a free webmail account that has been in use for a significant amount of time?

I have a free webmail account that I have been using for around ten years now. Over the past two years I have almost phased out using this address. I have concerns around accounts that I may have ...
5
votes
2answers
715 views

Workarounds for :visited CSS History reconnaissance

Several years ago it was possible to use a:visited { background: url('/log.php'); } to figure out on what website user has been previously. But now it is restricted by browsers. Is there any ...
5
votes
2answers
283 views

Files encryption for flash drive privacy/security

Looking to encrypt files on flash drive (for backup) just in case it gets stolen or lost. Don't want to install any extra software like TrueCrypt but instead just use what's already on most computers. ...
5
votes
3answers
1k views

Does Google's SSL encryption for searches thwart NSA spying?

Given everything that is suspected about NSA (and GCHQ, DGSE, etc.) access to user data: Avoiding speculation, can and do we know whether Google's recent action to make all searches use SSL ...
5
votes
2answers
290 views

Single vs multiple personas? What are the security implications?

I have two email addresses, one for work and one for home. I have have two cellphone numbers, one for work and one for home. But I am just one individual (and only have one social security number ...
5
votes
2answers
111 views

What parts of IPv6 address may I show publicly and safely?

I want to ask question about some network issue, i.e. about printing the IPv6 address correctly. I assume the users expect me to provide some meaningful examples of what I expect and what I have. ...
5
votes
1answer
133 views

How long can I store personal information on unconfirmed subscriptions?

I have a monthly newsletter. In my subscribe form I use a double opt-in method: The visitor subscribes. I send him a confirmation email. If I receive a reply, I add him/her to my system. In the ...
5
votes
1answer
78 views

Are images created with commercial software stamped with identifiers that can be traced back to a serial number?

To the best of your knowledge, do images created with Photoshop and/or other commercial software embed any bits of information that can allow someone (governments, security agencies?) to trace the ...
5
votes
1answer
103 views

How do I protect myself from the aftermath of the OPM hack?

As a federal employee, I, along with some 4 million other Americans had our information compromised in the recent OPM (office of personal management) hack. Former and current addresses, names of ...
5
votes
2answers
342 views

What is the ideal anonymous workstation setup? [closed]

My goal is to build a perfect stationary workstation from which I can work anonymously. Most instructions on being anonymous usually involve, at some point, moving around and switching from coffee ...
5
votes
2answers
523 views

Should IBAN and bank details be considered private data and encrypted?

To pay off our users, they are asked to enter their IBAN and bank name and bank address. The users are mostly based in Europe. As far as I know (see also this question) these details can not be used ...
5
votes
1answer
579 views

Android for the Paranoid

In the case of a rooted phone, what are the various options to stay anonymous and keep your data secure? I've seen the guys at The Guardian Project work towards this: ...
5
votes
1answer
1k views

What happens if an attacker steals my phone's IMEI number?

I have some questions regarding IMEI numbers and data and identity theft. While searching online I have found many conflicting answers regarding this topic and would like some clarification if ...
5
votes
1answer
4k views

Can an iOS 7 app access either device camera without user knowledge?

This statement in the iOS 7 release notes implies that non-China devices do not need user consent: iOS now requests user consent for apps to use audio input on all iOS 7 devices. For devices ...
5
votes
1answer
78 views

What are the security challenges encountered with attribute exchange?

OpenID has Attribute Exchange, Facebook has Facebook Connect, and authorization services such as Oauth enable access to user data distributed across a range of content providers. What are the ...
4
votes
5answers
1k views

Could I be defrauded by a website who has my address, phone number, and credit card number?

Exactly what kind of information does a scammer need to scam someone money? For example, if there's a website which wants me to provide my details, Exactly what kind of information can I divulge and ...
4
votes
4answers
432 views

Received a Kindle from a stranger, what are the risks?

While getting a coffee today, a man walked up to me and offered me a kindle. he said he no longer wanted it and that he was looking to give it away. An avid reader, I accepted. It has no accounts on ...
4
votes
3answers
629 views

Is there any way of preventing (or punishing) abuse of anonymity networks? [closed]

Anonymity services/networks like Tor, VPNs that don't log etc., seem like very double edged swords. Is there any way to prevent people with bad intentions (like breaking the law) from using them or ...
4
votes
3answers
589 views

How to protect against a determined harasser

My girlfriend is an admin on a German speaking site that for some time has been harassed by what we presume is a disgruntled user. At first it was merely an annoyance but a couple of days ago the ...
4
votes
4answers
2k views

Does using Google DNS make extensions like AdBlock Plus useless?

As many of you probably do, I am not using my ISP DNS because of very low performance, and I am using Google's primary and secondary DNS (8.8.8.8 and 8.8.4.4) which are good speed-wise but, knowing ...
4
votes
4answers
248 views

Anonymized Votes

Background Looking to create an anonymous voting system. The system must track whether or not a user voted on an item (public information), but only that user is ever allowed to know whether they ...
4
votes
4answers
563 views

Is silverlight and Java running on the web browser capable of saving “state” into the user's local machines?

I am aware that even after we have cleared our cache and cookies, websites can still save files/information into our computer using Flash (Flash ever cookies), I was wondering does other plugins like ...
4
votes
4answers
350 views

How to securely share files with other individuals?

I have a collection of files I would like to securely share with a small number of other people. The collection is mostly static; no more than one or two new files will be added per month (after the ...
4
votes
2answers
96 views

What level of anonymity can I expect while using a library's user session?

At the library, computer are typically open for internet browsing, if you can provide them your library card number. To what extend can I expect to protect my internet browsing privacy from ...
4
votes
2answers
442 views

Privacy of Image search with https

I am connected to the internet in the office where I don't want the administrator of the network to find out the contents I check (for example images). First I use a Firefox private browsing window ...
4
votes
3answers
588 views

Further potential problems with Windows 8 SmartScreen

Some research was recently published that showed that Windows 8's SmartScreen feature sends certain details about every single application that you install to Microsoft. Ignoring the obvious privacy ...
4
votes
2answers
4k views

Does Google record search / source IP [/ user] pairs?

Does Google record search / source IP [/ user] pairs? What if my Search History is off?
4
votes
6answers
1k views

When storing private identifying information in a web application, what is “industry standard” best practices? [closed]

I am building a hosted (SaaS) web application that stores PII like name, email address, and employer of the user. As of right now, I don't intend to ever store credit card numbers or bank account ...
4
votes
2answers
185 views

Is there a Security/Privacy risk in storing computers' hardware thumbprint?

I'm asking this because according to this article , Microsoft collects much less information than actually exists for Windows licensing (e.g. only 10 bits for MAC addresses, 6 for CPU serial number ...
4
votes
2answers
88 views

What is a “roving” backdoor?

What is a "roving" backdoor? I understand the general concept of a backdoor. Emphasis on keyword qualifier: "roving"...
4
votes
2answers
990 views

P3P HTTP Headers and Session ID's

Is there any chance that Session ID's can be shared between different websites (one in other IFRAME of others) through P3P Headers?
4
votes
2answers
344 views

Issues with the use of network surveillance tool in your company?

What issues will we face with the use of network surveillance tool in the company network with respect to the Telecommunication Interception Act and Privacy Act ? And what policies could be ...
4
votes
2answers
3k views

Does Java applets reveal the real IP address, even when using proxy or vpn?

Can a Java applet reveal the original client IP address, when browsing through a proxy or a VPN? Why?
4
votes
2answers
96 views

Internet and Email privacy in an “internet-enemy” country [closed]

Here where I live, it is believed that all the internet traffic goes through the hands of government agencies, and the telecommunication office is actually owned by the government. Given the ...
4
votes
3answers
494 views

Protect our payroll data from a legal and moral obligation

We have our payroll software to be installed on our file server. This contains all the details of current and past employees. The data contained in the payroll software includes tax, bank, National ...
4
votes
2answers
258 views

Can Heartbleed expose a TOR user's IP address?

It is interesting to observe, that TOR exit nodes with out-of-date OpenSSL implementations can themselves be affected by the Heartbleed bug. Can Heartbleed expose a TOR user's IP address merely by ...