The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

2
votes
2answers
130 views

Laptop had a NSFW page open when I got to work, cause for concern?

I use my personal lap top for work. The other day I took it in an opened it, logged in and there was a NSFW page open from when I last used it at home. I immediately closed the (incognito) page, no ...
9
votes
1answer
1k views

How is YouTube able to identify anonymous users?

A few days ago I was searching YouTube and I noticed an "outlier" video poped up in the suggestions list. This video had nothing to do with the topic being searched, but instead it was based on a ...
1
vote
3answers
195 views

how to protect my data from malware/spyware that infected my BIOS?

we all know that some countries do their best to spy on their citizens and the citizen of other countries and that countries maybe have specialized spying agencies wither they are known or not, and, ...
4
votes
1answer
51 views

Pre-Installed Tails OS Flashdrives

I ran across a pretty cool looking dongle that has Tails OS pre-installed, with tutorials on how to use the software. I wanted to ask the community how safe you guys think this kind of technology is? ...
2
votes
1answer
44 views

Are IP addresses used for tracking / advertising?

Many advertisers use tracking cookies or user-accounts (e.g. being logged into facebook or google while web browsing) to create relevant targeted advertising. However, what about IP addresses alone? ...
10
votes
3answers
255 views

Why don't despotic countries simply block all encrypted traffic?

This is a question I often think of when I hear about countries considering blocking just one protocol with encryption, such as tor: How would a resourceful government block tor. Clearly France ...
1
vote
2answers
97 views

privacy - Which parts of URL is protected by HTTPS? [duplicate]

Assuming the website I visit uses HTTPS, which parts of the URL is protected from the eyes of my ISP? eg; https://subdomain.domain.com/path/file.php?param=value I know that domain.com (and probably ...
3
votes
3answers
154 views

What do browser VPNs actually do?

Firstly, I am not sure if this is the correct forum to be asking this question so I apologise if not. What I would like to know is, what do VPN browser plug-ins (such as zenmate) actually do and how ...
3
votes
2answers
98 views

Reading mail from GMail with secure access

I recently implemented PHP code with IMAP for reading mails from a GMail account and further executing some command depending on the mail body. I got this to work after consulting the first answer ...
1
vote
0answers
117 views

How to get computer name and ip address when someone logs in to my gmail account? [closed]

Is it possible to get ip address and computer name into my secondary/recovery email when someone logs into my gmail account? Now what happens, when I log in to my gmail account, I receive email with ...
1
vote
1answer
46 views

Can a domain administrator read my search queries? [closed]

Google's privacy policy states that they log your search queries. They also state that domain administrators have access to your Google Account information (e-mail and "other data") as well as ...
2
votes
1answer
101 views

Data Leakage Prevention tips for regular home users

I am a "power user" with a limited knowledge of information security. I frequently store confidential documents on my computer. How can I protect these against a rootkit that gives an attacker ...
2
votes
1answer
162 views

Should I trust Grive2?

I am trying to run Google Drive on LUbuntu 64 bit, but since there isn't an official version yet, I was thinking to follow this tutorial. Since it's not an official software from Google, I am ...
3
votes
1answer
46 views

Prevent snapshots of VPS

Pretend I have a server. Is there anyway to prevent (or make more difficult) the administrator from taking snapshots? Feel free to give me a software way, or suggest if I should change server types; ...
0
votes
1answer
44 views

How am I identifiable when connecting to a site and is it possible to be anonymous? [duplicate]

When I visit a website, they get information about me such as IP address, country etc. What are other ways/other information with that they can identify me/my connection? How can I change/mask this ...
0
votes
1answer
55 views

Pinging a device

Forgive me if any of my terminology is incorrect but I have a question. I have a scan app on my phone to tell me of any network routers or other device are in the area. Usually it will show up with my ...
0
votes
2answers
2k views

Can a random person find me if my location services are turned off?

I was recently asked by a friend if it's possible for someone to find someone else's location if they didn't have the location services on, on their phone. I told him I'm not sure but I didn't think ...
-5
votes
2answers
174 views

If someone hacks my wifi connection what if any control do they have over radio waves in my house? [closed]

A couple questions on wifi security. If someone knows my wifi password (be it WEP or WPA) what kind of control do they have over radio waves? Can they emit radio waves from computers on my network? ...
2
votes
2answers
823 views

Connection to Google websites is not secure

When I open Gmail or Google search and leave it opened for a while, I notice this yellow warning triangle, as in these photos: However, when I refresh the page it returns to the usual green lock ...
54
votes
5answers
8k views

How can you be tracked using screen resolution/monitor size in Tor?

Whenever I maximize the Tor browser, it shows a warning: Maximizing Tor Browser can allow websites to determine you monitor size, which can be used to track you... How can screen resolution or ...
1
vote
2answers
187 views

Snoopers Charter VPN advice needed

With the Snoopers Charter coming soon in the UK, I intend to start using a VPN service. Disregarding issues of the VPN logging user details or leaving my IP address discoverable, what other potential ...
5
votes
1answer
104 views

Dragnet TEMPEST Surveillance?

Just something I considered recently -- TEMPEST attacks are pretty well known; basically you intercept EM leaks from a computer to discover compromising information (i.e. encryption keys, what's being ...
0
votes
1answer
132 views

can my internet provider see my communications? [duplicate]

Can my ISP see what i am communicating through Skype, Facebook, Yahoo-Mail and so on? I am not asking this from a legal perspective, but only from a technical one. Also I am not talking about ...
2
votes
3answers
497 views

Is it possible to look up all internet activity done by a MAC address, IP address, etc.?

It seems like something that an average person can't do, but can some big-name companies or maybe hackers have the technology to look up all Internet activity that has been done by a certain MAC ...
2
votes
3answers
395 views

Websites know which other websites I visited?

Google Chrome has a "do not track" option, but with a warning: Many websites will still collect and use your browsing data — for example to improve security, to provide content, services, ads ...
2
votes
3answers
189 views

Spoofing random browser information to defend against fingerprinting

Tor goes the way of trying to make everyone look the same to defend against browser fingerprinting. Wouldn't a simple addon that changes/adds as much information as possible randomly in short time ...
3
votes
0answers
68 views

Allowing WhatsApp data through specific bundle

My mobile network provider recently released a new GPRS bundle, it consist of 50 MB per month for WhatsApp data only! First, how do they identify WhatsApp data, and more important to me, isn't that ...
3
votes
1answer
52 views

OCSP responder servers and malicious site blocking

So I've been looking for an answer to this one but no one seemed to have asked this before. As far as I understand, when connecting to a website. The browser sends a query to an OCSP server to verify ...
0
votes
3answers
158 views

If I connect to a website using a cellular network, and change the sim card and connect again with the same phone, will they find its the same phone?

I read on a blog that when you connect to a website with your phone they track the model number id of the device, or something like it. I don't remember what its called. Even if you change your sim ...
1
vote
3answers
70 views

How should we store & share documents with restricted access

Up till now we have handled restricting access to documents by having a share on our server that only the 2 accounting people could access and another that only the 2 HR people could access. And ...
5
votes
1answer
258 views

Government/ISP tracking of internet activity trivial to evade?

The recently announced Investigatory Powers Bill in the United Kingdom will mean that ISPs must store the internet activity of everyone for one year. Anyone who wishes to evade such tracking can use ...
1
vote
1answer
175 views

MUST Share Personal Info with Windows 10?

Just upgraded to windows 10. Had window open in Firefox when I upgraded. Should point out that for some reason Windows 10 would not upgrade on it's own, I went to Microsoft and they used remote ...
1
vote
2answers
234 views

How to keep database record secret even from developer having access to it?

Imagine a web-based email app, such as GMail. The email should only be readable by the sender and the recipients. No one else, including the developer having access to the database server or ...
3
votes
1answer
110 views

How long is the information on Facebook stored? [closed]

I was wondering how long Facebook stores our photos and posts? I hear two theories, one saying it is around half a year, after which all the data centers are going to erase our data. The other one ...
1
vote
1answer
40 views

Is it possible to log all file reads performed by an application in Windows 7?

I have a piece of software I'm supposed to be running on my computer. The only thing I'm slightly worried about is the files it reads, as it's closed-source and slightly fishy. I know it's not ...
1
vote
2answers
607 views

How exactly does Google Account decide my device or location is “familiar”?

In Chrome, I delete all cookies and site data. I close the browser and re-open it. I double check that All Cookies and Site Data is a blank list. I type https://mail.google.com/ into the address ...
3
votes
1answer
60 views

Privacy of U2F keys

If I use the same U2F key for two accounts on some service, could the service detect that and match the accounts? Equivalently, if I used the same U2F key for two different services, could the ...
2
votes
1answer
157 views

GPG: Can't encrypt DSA 3072 keys

I would like to ask this question as I'm not the first person which has this behavior. I'm trying to encrypt a simple message using GnuPG using a public key I've received from a friend, he's using ...
3
votes
1answer
635 views

Encryption key exchange for Tor

I've been studying how Tor works - including the great QA "Why can a Tor exit node decrypt data, but not the entry node?". I understand the concept of onion routing and multiple layers of ...
11
votes
8answers
3k views

Can a website identify me if I go in privacy mode with a different IP ? Or should I use a different computer?

Assume I am a regular user of website A that forbids multiple accounts. I assume it can identify me with cookies and IP. So if I use a VPN, then open a private tab in my browser, can it still identify ...
1
vote
2answers
89 views

Why use the UUID method over traditional ID?

The following quote came from one of my Teachers not to long ago, along with an exercise to build an application: To follow guidelines, you are to use UUID's instead of ID's. Of course, the ...
4
votes
1answer
92 views

New EU Data protection Law and small businesses

I'm aware of the new EU law changes regarding data protection. As a security consultant for an IT company who manages multiple other companies systems, i was hoping someone might be able to clarify a ...
9
votes
1answer
123 views

In VMs, do shared folders reduce security effectiveness?

VirtualBox offers the option of using shared folders, others probably offer the same thing. I am not sure whether the host is directly accessing the memory of the guest, or if there some process which ...
3
votes
1answer
259 views

Can it be dangerous to use not popular(unknown) dns servers?

There is a service called tunlr, which let's you browse the web with no restrictions(Pandora, Hulu etc.). You just have to use their dns server. But now I'm concerned whether the owners of the dns ...
3
votes
0answers
115 views

How far should I go in protecting a user's SMBIOS UUID?

My server will be receiving data from several hundreds of computers. As part of keeping track of which computer sent what, I will be fingerprinting the hardware and keeping the results in my database. ...
3
votes
1answer
208 views

Privacy issues when mobile app has access to phone number and contacts

It seems that when it comes to mobile apps convenience defeats security - always. In particular all messaging/communication apps seem to require to have access to your contacts on the phone and your ...
4
votes
1answer
144 views

Way to keep Google from knowing the SIM card I am using on Android

We see that the the details of the Telecom operator along with other details are available to Google for the SIM card that we are using on an Android Phone. Is there any way that can be applied or ...
2
votes
1answer
163 views

Is it possible to feed Firefox Flash plugin with controlled data for privacy reasons?

For privacy and security reasons, it would be strongly recommended to deactivate the Flash plugin in the browser. But I don't want to deactivate it, I want to fake privacy relevant information. ...
12
votes
2answers
15k views

What is the difference between ATA Secure Erase and Security Erase? How can I ensure they worked?

I'd like to wipe a stack of drives (spinning and SSD) securely. I'm familiar with the ATA Secure Erase (SE) command via hdparm, but I'm not sure if I should use the Security Erase (SE+) command ...
0
votes
2answers
31 views

Is there a service that will auto scan a 'Terms if Service' to assess privacy issues? [closed]

Terms of Service agreements are very tedious and extensive, I am wondering if there exists yet in the privacy tools that are evolving a tool that will scan a TOS for common issues to privacy.