The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

5
votes
4answers
379 views

How to securely share files with other individuals?

I have a collection of files I would like to securely share with a small number of other people. The collection is mostly static; no more than one or two new files will be added per month (after the ...
5
votes
2answers
496 views

How safe can connecting to VPN really be?

I would like to make this story as short as possible since my question is not that long, I have worked with journalists previously in war zone where we investigated the involvement of EU IT companies ...
5
votes
2answers
636 views

Mobile phone security eavesdropping based on data transfer

is there an easy way for particular governmental organizations (especially in countries where freedom of speech is a problem) have some technology where they can easily eavesdrop on cellphone internet ...
5
votes
1answer
406 views

Is it safe to abandon a free webmail account that has been in use for a significant amount of time?

I have a free webmail account that I have been using for around ten years now. Over the past two years I have almost phased out using this address. I have concerns around accounts that I may have ...
5
votes
2answers
1k views

Does a TMSI change often enough to prevent tracking?

A company called Path Intelligence has a product called Footpath which uses the TMSI, WiFi MAC address, and bluetooth MAC address to track phones as they move through stores. However, I don't see ...
5
votes
2answers
348 views

Issues with the use of network surveillance tool in your company?

What issues will we face with the use of network surveillance tool in the company network with respect to the Telecommunication Interception Act and Privacy Act ? And what policies could be ...
5
votes
2answers
185 views

Best practices: Use of a single private key as a person, or multiple to identify self across domains?

Similar to the question here, I'd like to apply the same question to a person. For example, I have implanted a chip in my hand that holds an encrypted private key that serves as my personal unique ...
5
votes
1answer
192 views

What kind of information is exposed during a Firefox private browsing session?

I'm working with Firefox 43.0.1 on Windows 7 Pro 64 bit. I just noticed an odd behavior, and I don't think Firefox used to behave this way. I had a GMail tab open in private browsing mode, and then ...
5
votes
1answer
112 views

What should I store in the case that a user posts a threatening post?

I am building a social-media type website. I am going to have the users create a profile with their name, email and phone number. When a post is created I plan to have a spot in the database that ...
5
votes
3answers
108 views

Stalking and harassment [closed]

I believe my ex wife is redirecting my Yahoo and Google accounts and somehow has access to anything I do online. How can I know if my suspicions are true? She is director of I.T. of a large company, ...
5
votes
1answer
276 views

Government/ISP tracking of internet activity trivial to evade?

The recently announced Investigatory Powers Bill in the United Kingdom will mean that ISPs must store the internet activity of everyone for one year. Anyone who wishes to evade such tracking can use ...
5
votes
2answers
163 views

What parts of IPv6 address may I show publicly and safely?

I want to ask question about some network issue, i.e. about printing the IPv6 address correctly. I assume the users expect me to provide some meaningful examples of what I expect and what I have. ...
5
votes
2answers
491 views

Files encryption for flash drive privacy/security

Looking to encrypt files on flash drive (for backup) just in case it gets stolen or lost. Don't want to install any extra software like TrueCrypt but instead just use what's already on most computers. ...
5
votes
3answers
953 views

What are NoScript surrogates and should one disable them for more privacy in browsing?

NoScript has a feature of supplying its own "surrogate" scripts instead of well-known tracking/ad scripts (Google Analytics, for one). Does it matter for my privacy if I do not change the factory ...
5
votes
2answers
307 views

Single vs multiple personas? What are the security implications?

I have two email addresses, one for work and one for home. I have have two cellphone numbers, one for work and one for home. But I am just one individual (and only have one social security number ...
5
votes
2answers
125 views

Should I be worried if somebody uses my email to sign up for accounts?

I recently received e-mails from two services: Paytm and Uber. They both seem like legitimate services. However I have no idea why I received these e-mails or why somebody would want to create an ...
5
votes
2answers
187 views

Cryptographic algorithm to anonymise strings in pronounceable fashion?

NB: I originally posted this on SO (link), but then realise Security SE be more suitable, since there's existing questions around Crypto-PAn, which is similar here I have a logfile of database ...
5
votes
1answer
396 views

Security Consequences of compromised passport data

In light of the recent hack of the EC-Council site, where the hacker makes the point that he has access to passport data a general question arises. What, if any, are the security/privacy consequences ...
5
votes
1answer
139 views

How long can I store personal information on unconfirmed subscriptions?

I have a monthly newsletter. In my subscribe form I use a double opt-in method: The visitor subscribes. I send him a confirmation email. If I receive a reply, I add him/her to my system. In the ...
5
votes
1answer
116 views

Are images created with commercial software stamped with identifiers that can be traced back to a serial number?

To the best of your knowledge, do images created with Photoshop and/or other commercial software embed any bits of information that can allow someone (governments, security agencies?) to trace the ...
5
votes
3answers
853 views

Best practices for GPG user ids

What is the best practice for choosing GPG user id(s)? I've read various bits of advice, which sometimes even contradict each other. For instance, I've read that one should not use comments, because ...
5
votes
2answers
2k views

How are logs stored with ISP?

When dynamic IP addresses are assigned to users, how do ISPs store the logs? Do they just store the time and address of the websites visited or do they store the whole URL like we see in our browsers? ...
5
votes
2answers
1k views

Should IBAN and bank details be considered private data and encrypted?

To pay off our users, they are asked to enter their IBAN and bank name and bank address. The users are mostly based in Europe. As far as I know (see also this question) these details can not be used ...
5
votes
2answers
162 views

Should Android apps for communication encryption and security require permissions like identity, device ID, contacts, etc.?

There is a Android application Threema for communication encryption and that says it does not collect user data, but it requires the following permissions: identity, contacts and device ID. Can ...
5
votes
2answers
454 views

What is the ideal anonymous workstation setup? [closed]

My goal is to build a perfect stationary workstation from which I can work anonymously. Most instructions on being anonymous usually involve, at some point, moving around and switching from coffee ...
5
votes
1answer
587 views

Android for the Paranoid

In the case of a rooted phone, what are the various options to stay anonymous and keep your data secure? I've seen the guys at The Guardian Project work towards this: https://guardianproject.info/apps/...
5
votes
1answer
94 views

How does the “Privacy Protection” option from domain names registrars work?

Some domain names registrars are offering a "Privacy Protection" option to hide your registrant details. Your whois infos will then refer to the "privacy company" providing this service instead of the ...
5
votes
1answer
236 views

Can I redact by converting PDF to TIFF and back?

Background My boss asked me to come up with a way ordinary users can redact information from PDF files using free software. We get a lot of scanned documents and our client requires that sensitive ...
5
votes
1answer
104 views

Dragnet TEMPEST Surveillance?

Just something I considered recently -- TEMPEST attacks are pretty well known; basically you intercept EM leaks from a computer to discover compromising information (i.e. encryption keys, what's being ...
5
votes
1answer
6k views

Can an iOS 7 app access either device camera without user knowledge?

This statement in the iOS 7 release notes implies that non-China devices do not need user consent: iOS now requests user consent for apps to use audio input on all iOS 7 devices. For devices ...
5
votes
1answer
2k views

Best practice for data security on a web application

I read a couple articles on privacy/security but still cannot get a clear picture of the best practice to ensure that an attacker will not be able to access users' private information. For storing ...
5
votes
1answer
81 views

What are the security challenges encountered with attribute exchange?

OpenID has Attribute Exchange, Facebook has Facebook Connect, and authorization services such as Oauth enable access to user data distributed across a range of content providers. What are the ...
5
votes
1answer
362 views

What countries have laws in place that respect Do Not Track HTTP headers or cookies?

Google offers a Chrome plugin that uses cookies to control privacy, while Firefox offers a HTTP Header to tell websites to not track the users and log the data anonymously. This obviously extends a ...
5
votes
0answers
108 views

How did my browsing choices reach an Alibaba seller?

Events, spaced about evenly over 2 months: Repeatedly ordered small amounts of webbing on a rather reputable Polish site (Allegro.pl, much like ebay). Got targeted ads in Skype for webbing on ...
5
votes
1answer
106 views

What information is collected because of signing into Windows 10 with a Microsoft account?

The question is specifically as stated - "because of signing into Windows 10 with a Microsoft account". Not including what is collected even when using a local account. And not including what is ...
4
votes
4answers
38k views

How did my network admin identify my iPhone and how can I hide my ID?

I recently got a call from our network admin asking that I stop the app updates on my iPhone to open up bandwidth. It is my personal phone. My question is 2 part: Out of all of the personal devices ...
4
votes
5answers
1k views

Could I be defrauded by a website who has my address, phone number, and credit card number?

Exactly what kind of information does a scammer need to scam someone money? For example, if there's a website which wants me to provide my details, Exactly what kind of information can I divulge and ...
4
votes
4answers
471 views

Received a Kindle from a stranger, what are the risks?

While getting a coffee today, a man walked up to me and offered me a kindle. he said he no longer wanted it and that he was looking to give it away. An avid reader, I accepted. It has no accounts on ...
4
votes
4answers
277 views

Anonymized Votes

Background Looking to create an anonymous voting system. The system must track whether or not a user voted on an item (public information), but only that user is ever allowed to know whether they ...
4
votes
3answers
648 views

Is there any way of preventing (or punishing) abuse of anonymity networks? [closed]

Anonymity services/networks like Tor, VPNs that don't log etc., seem like very double edged swords. Is there any way to prevent people with bad intentions (like breaking the law) from using them or ...
4
votes
2answers
2k views

Can cookies reveal my email address?

When I visit livescore.com, ten seconds later I receive marketing emails from gambling companies. If I don't visit this site, I don't receive these emails. Similar things happen when I visit Twitter ...
4
votes
4answers
2k views

Does using Google DNS make extensions like AdBlock Plus useless?

As many of you probably do, I am not using my ISP DNS because of very low performance, and I am using Google's primary and secondary DNS (8.8.8.8 and 8.8.4.4) which are good speed-wise but, knowing ...
4
votes
4answers
601 views

Is silverlight and Java running on the web browser capable of saving “state” into the user's local machines?

I am aware that even after we have cleared our cache and cookies, websites can still save files/information into our computer using Flash (Flash ever cookies), I was wondering does other plugins like ...
4
votes
2answers
169 views

Is it possible to hide my physical location from my ISP?

It's generally difficult, if not impossible, to know how any given company is going to use the information they gather about you. In some cases, it's also night-impossible to opt-out of their data ...
4
votes
4answers
507 views

Can you use two hardware firewalls?

There is a rule that says "don't use/install more than one firewalls on one computer " (software firewalls to be exact) which means if you have a network and it has five computers you can only install/...
4
votes
3answers
638 views

Can too much web searching be a danger to a security professional?

As a junior security professional, I spend a lot of time goggling for things such as 'wpa dictionaries', 'vulnerabilities...' , 'how to crack ...','and so on. I sometimes feel like I am calling for ...
4
votes
2answers
503 views

Privacy of Image search with https

I am connected to the internet in the office where I don't want the administrator of the network to find out the contents I check (for example images). First I use a Firefox private browsing window ...
4
votes
3answers
311 views

Is blurring face secure?

I'm wondering how secure is to blur face in my photos? Is there any way to re-focus, or re-blur blurred object?
4
votes
7answers
798 views

How to completely remove all traces of a file in Windows 7?

I'm curious to know how to completely erase all possible traces of files in Windows 7. For example, let's say I have a subfolder containing five different files at work deemed sensitive (A document, ...
4
votes
2answers
105 views

What level of anonymity can I expect while using a library's user session?

At the library, computer are typically open for internet browsing, if you can provide them your library card number. To what extend can I expect to protect my internet browsing privacy from library'...