The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

67
votes
3answers
3k views

Did US and UK spy agencies defeat privacy and security on the internet?

This question is meant as a canonical question in regard to the US and UK spy agencies compromising end nodes and encryption between nodes to spy on people they suspect to be terrorists. However, this ...
32
votes
5answers
2k views

How do I deal with companies that call and ask for personal information?

Several times I get a phone call from a company- my bank, utility companies etc. Many times they are just cold calling me, but once or twice they were calling for legitimate reasons (ie, something to ...
1
vote
2answers
2k views

Why does chrome connects to MarkMonitor (always on startup)

While using internet (over Chrome), I noticed that lsof -i returned certain suspicious URL(s). A whois lookup suggested that all of those belonged to MarkMonitor. For example: chrome 3224 ...
3
votes
3answers
567 views

Can too much web searching be a danger to a security professional?

As a junior security professional, I spend a lot of time goggling for things such as 'wpa dictionaries', 'vulnerabilities...' , 'how to crack ...','and so on. I sometimes feel like I am calling for ...
34
votes
7answers
2k views

Why does one need a high level of privacy/anonymity for legal activities?

This question is sort-of spun off of a previous one. How to counter the statement: "You don't need (strong) security if you're not doing anything illegal"? There are a lot of great ...
4
votes
2answers
127 views

Privacy/Security with SSH Tunnels and QuickVPN

I currently use QuickVPN, however, it does not seem to route my web browsing traffic through a tunnel. Am I correct? It only opens up a tunnel for accessing windows shares and documents back at the ...
0
votes
1answer
112 views

Hacking through a browser? [closed]

I was looking at this question: How can you be caught using Private VPN when there's no logs about who you are? and everyone who read it and responded seemed to be taking for granted that every ...
23
votes
7answers
28k views

How can you be caught using Private VPN when there's no logs about who you are?

I know there are 2 services of VPN (free and paid). Normally, free VPNs need money from somewhere and sometimes they can sell your information to any agency that needs it. Now, if we are talking about ...
2
votes
3answers
259 views

Can a zero knowledge proof of voting be made using a trusted auth server (without client side crypto)?

Questions: Can one implement a secure voting system having all the features described below? e.g. without disclosing any individual's vote to the government server (or the third party), preserving ...
0
votes
1answer
346 views

Sniffing 3g network Pockethound

I was wondering if its possible to prevent 3g sniffing. Its not about the security of the information sent over 3g, but being able to use your 3g without anyone able to see traffic. There are machines ...
46
votes
8answers
5k views

Online backup : how could encryption and de-duplication be compatible?

A "soon to enter beta" online backup service, Bitcasa, claims to have both de-duplication (you don't backup something already in the cloud) and client side encryption. ...
0
votes
2answers
498 views

How secure is XMPP with self-signed SSL certificates?

I'm looking for an easy way to set up a simple IM infrastructure that protects messages in transit as well as avoids having logs in places that neither I nor someone I trust controls. I'm based in ...
12
votes
2answers
2k views

Ingress collects a lot of data - what impact could this have on my privacy or security?

The Augmented Reality game from Google, Ingress, has players travel to specific GPS locations to destroy and rebuild virtual targets, link locations, and team up with other players in order to carry ...
10
votes
3answers
622 views

Is Gmail showing images by default a good idea for privacy?

Google have decided to show images in Gmail messages accessed via the web, iOS and Android by default: Instead of serving images directly from their original external host servers, Gmail will now ...
3
votes
6answers
214 views

Does an email signature increase security?

I'm using Thunderbird with Enigmail. It has both encrypt and sign options for sending PGP emails -- but why is an email signature needed? It just looks overkill to me! Alice and Bob can use PGP to ...
1
vote
1answer
120 views

Do any tracking networks or ad networks not use JavaScript and only track based on IP address? If yes, how can they be prevented?

Are there any websites that collectively track one computer based on its IP address alone? Browser extensions such as Ad block plus, Do Not Track Plus and Ghostery modify the client side script but is ...
1
vote
1answer
3k views

Efficacy of Chrome incognito mode

I am curious about the true efficacy of the browser private mode. I did a bit of googling and stumbled upon the following page. ...
2
votes
2answers
389 views

How to prevent user's mobile phone position tracked

Trying to follow up this post How to trace a (mobile) phone? , the answers on how to prevent being tracked while you own a mobile phone are: You cant. (even if you use disposable phones etc) 1) Why a ...
3
votes
1answer
320 views

Can a site I browse in private browsing mode tell if I visited it in regular mode before?

I've noticed when updating a blog, that sometimes refreshing the page won't actually fetch it again, because it is still in the cache. Now, even when I open it in incognito in that same browser(say ...
0
votes
3answers
422 views

Can my customer's ISP trace who visited my business website?

I own a private business and a web site with a domain name hosted with Godaddy US. I live in Europe. I want to know if the various ISP of my customers in my country can find out who visited my web ...
4
votes
5answers
7k views

Company computer use from home - how much can they see on the desktop?

I have a company supplied computer that I use from home. I log into VPN (cisco AnyConnect) when i need to access company email or internal company sites. In the past the company has been able to ...
2
votes
1answer
194 views

Evil maids in the server room [closed]

I am well aware of the fact that physical insecurity in principle means no security. But let´s say I own a root server with full disk encryption which is unlocked/booted via dropbear ssh. In which ...
0
votes
1answer
157 views

How to use clipboard manager software more securely?

I want to minimize the risks using a clipboard manager or clipboard history software. I want to use it because it really eases my work so not using it is not a good option. These programs usually ...
11
votes
3answers
10k views

Is a password protected PDF file safe for bank statement attachments?

My bank emails my monthly statement to me in a password protected PDF attachment. Is this a secure method of transmitting something as sensitive as bank statement?
2
votes
3answers
1k views

How Tor, Privoxy, Vidalia and Polipo are getting together?

I realized that these applications are frequently used together. What is the role of each software in the mission of anonymity and privacy on the web? While I understand Vidalia is a GUI provider, I ...
6
votes
3answers
324 views

Phone Privacy for Small Business

I'm a small business operator and I'm looking for ways to provide security and reasonable privacy for my own business communications and communications of customers. All these businesses operate ...
6
votes
2answers
1k views

Considering that SRP is better than SSH and Basic Auth, how can it be implemented in a website?

SRP is short for Secure Remote Password protocol, and provides a better way for passwords to be sent over the internet. I've read the information at it's Stanford University home page, the Wiki ...
16
votes
6answers
2k views

Anonymous web browser. Is it real?

Do anonymous browsers work? What principles do they use? Can I use them to test access to my web site? Can I detect if a visitor is using one? What is the different between traditional and anonymous ...
2
votes
2answers
119 views

How to create an anti-flood mechanism without leaving VPN's out?

I'm trying to protect my applications from some bots that are either malfunctioning or trying to take my sites down (lots of requests from the same IPs in the logs). Every time someone requests an ...
2
votes
2answers
68 views

ICO compliance and Google Cloud SQL

I have a basic simple question for which I couldn't find anywhere. Is is possible to use Google Cloud SQL services and still retain the regulations from ICO and other similar requirements? I ...
3
votes
1answer
379 views

How is a Tor hidden service immune to exit node attacks?

Let me explain with a nifty diagram: IP/RP <-> bunch of Tor clients/node (Tor circuit) <-> Tor hidden service Wouldn't the last Tor client in the circuit knows that the message is for the Tor ...
1
vote
1answer
108 views

what info can web bugs track?

From EFF's Web Bug FAQ(point 6), What information is sent to a server when a Web Bug is viewed? The IP address of the computer that fetched the Web Bug The URL of the page that the Web ...
5
votes
7answers
1k views

Is PGP combined with a regular web-based email service secure?

With the disappearance of private email services like Lavabit and Tormail (http://www.dailydot.com/news/email-anonymous-hushmail-lavabit-nsa/) it seems that we will need to resort back to standard ...
1
vote
1answer
846 views

Open source video conferencing software with encryption [closed]

A couple of friends and I are looking for an open source video conferencing software. We'd like to run the server on a Debian box, but the clients are Windows machines. Most importantly, it should ...
3
votes
4answers
5k views

Is it normal that my new VISA debit card has almost the same number as the old one? Is it secure?

My bank issued me a new debit card (VISA Electron) because the old one expired and to my surprise, the card number is almost the same as on my old card. I don't think there would be much chance that ...
2
votes
5answers
1k views

How can a non-technical user verify a message was sent “securely”? …or over TLS?

I have a situation where B2B and B2C communication needs to be sent securely and not visible to most SMTP hijackers. I don't care about conspiracy theories or NSA style attacks, but want to provide ...
2
votes
1answer
194 views

Torception: An onion within an onion

With the recent takedown of silkroad, I am pondering on how anonymous you actually can be on the Tor Network. Other more legal or moral uses such as anonymity as a right, or avoiding censorship. These ...
1
vote
1answer
91 views

How can I block flash from obtaining a list of available fonts in my browser? [closed]

How can I block Flash, at least in Chrome, from obtaining the list of available fonts in my browser? It seems that the combination of fonts available is the easiest way to fingerprint a browser.
0
votes
1answer
93 views

Browser Extension to show how your session is being shared

A while back I came across a browser extension (was available for Firefox and Chrome, maybe others) that showed you through a graphical 'node' interface how your browser session was shared with so ...
4
votes
3answers
729 views

Does Google's SSL encryption for searches thwart NSA spying?

Given everything that is suspected about NSA (and GCHQ, DGSE, etc.) access to user data: Avoiding speculation, can and do we know whether Google's recent action to make all searches use SSL ...
1
vote
0answers
61 views

How did these websites see through the VPN tunnel? [duplicate]

I'm using privateineternetaccess to VPN my internet connection. Recently I've noticed some web sites appear to know my real location and IP address. The most alarming incident I've seem to have been ...
2
votes
2answers
4k views

Using Cain and Abel to capture traffic of machine in the same network

I have installed Cain and Able in machine A, which is connected to another machine B via a LAN. Now I want to analyze all the traffic of machine B. Is this possible by installing Cain and Abel on ...
2
votes
3answers
180 views

Avoid third party access to system

I need to go through airport security and customs, and its known that at least the German customs (http://en.wiktionary.org/wiki/Bundestrojaner) (and I suspect others as well) try to upload software ...
1
vote
1answer
144 views

Security Standards for storing private customer data

A certain government regulation in my country mandates all non-resident donors to provide a copy of their identification (usually, the passport). So, we ask the donors to upload a copy of their ...
1
vote
2answers
125 views

Does a OS manufacturer have permission to access your computer unauthorized? [closed]

Many services such as email and online storage have stated in their Terms of Service that they have the right to view and delete your files at any time. I'm wondering if they same applies to software ...
2
votes
1answer
206 views

Using only private non-government resources, how can something be sent such that the NSA will see it? [closed]

Supposing you want the NSA to see something, what does one have to do to guarantee it. This means in their normal data collection it will be swept up, not in a targeted probe of an individual or with ...
7
votes
1answer
233 views

Are there any reasons why browsers should block mixed passive content by default?

Most browsers block "active" content that's being loaded over HTTP on HTTPS pages. This includes stuff like javascript which can be modified with an MITM and compromise the security of the entire ...
1
vote
2answers
1k views

Privacy of Gmail for business?

Considering the recent litigation in which Google apparently claimed that all the emails, all the data in them, are Google's property and can do with the data whatever they want, I get frequent ...
0
votes
3answers
129 views

Securely transferring data from service provider to client

Suppose a client C wants to transfer form a service provider P, who collected data on behave of C using a web-application. Additionally, suppose the amount of data is larger than 100 MByte and ...
0
votes
2answers
111 views

Germany: Privacy Protection Regulations and Response [closed]

Do privacy protection laws within Germany/EU protect students from gross invasions of privacy? I have reason to believe that through some either permitted or unsanctioned channel my teacher was able ...