The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

4
votes
2answers
87 views

How much can I trust the “factory restore/reset” on a(n) (potentially compromised) android?

This question is a simple one: how much can you trust the "factory restore/reset" option on an android device? If the device has possibly been compromised, is it possible the "factory reset" will ...
4
votes
2answers
177 views

Privacy/Security with SSH Tunnels and QuickVPN

I currently use QuickVPN, however, it does not seem to route my web browsing traffic through a tunnel. Am I correct? It only opens up a tunnel for accessing windows shares and documents back at the ...
4
votes
1answer
573 views

Android for the Paranoid

In the case of a rooted phone, what are the various options to stay anonymous and keep your data secure? I've seen the guys at The Guardian Project work towards this: ...
4
votes
2answers
104 views

Solution to remain anonymous on a website that dismiss tor users?

I want to access to a website who recognize tor users and dismiss them. I have read that if you connect to a proxy after your tor exit node, the website wouldn't know that you are a tor user and ...
4
votes
1answer
70 views

Will my method for managing account data work?

I'm looking at whats nessecary to create a small accounts server for a video game I'm programming in my spare time. User privacy is a very important topic for me, and I don't want to keep anything ...
4
votes
0answers
1k views

How can you remove your presence from the Internet? [duplicate]

How can you remove your presence from the Internet? For example from social networks, from email servers, from forums etc. Problem is how records of you are identified on the internet? We have well ...
3
votes
4answers
564 views

What Gmail features should be Opted-Out to prevent PII from being indexed?

The Massachusetts and Nevada PII laws require all email with SSNs or other personally identifying information to be encrypted (TLS or otherwise). Of the free email providers, GMail does support TLS ...
3
votes
5answers
538 views

What should one do when he/she wants to protect him/her home--computer--?

As you know, deleting a file by pressing shift-delete or by using the Trash doesn't mean that the file is unrecoverable. It's data persists on your computer. In day to day life, adversaries use ...
3
votes
6answers
249 views

Does an email signature increase security?

I'm using Thunderbird with Enigmail. It has both encrypt and sign options for sending PGP emails -- but why is an email signature needed? It just looks overkill to me! Alice and Bob can use PGP to ...
3
votes
4answers
238 views

Anonymized Votes

Background Looking to create an anonymous voting system. The system must track whether or not a user voted on an item (public information), but only that user is ever allowed to know whether they ...
3
votes
2answers
333 views

Is my email client violating my privacy?

There are many ways that emails can be used to violate the privacy of the recipient (Return-Receipt-To:, web bugs, iframes loaded from an external page, and other email tracking methods). It may be ...
3
votes
2answers
45k views

Can a SIM card be tracked without cell phone and battery?

I have a SIM card alone without cell phone and battery. Can it be be tracked?
3
votes
5answers
1k views

TrueCrypt dataleaks that might betray the “Deniable File System” option

Reading into "Operation Satyagraha", one would have to believe give all the resources used that the investigators had some reason to believe there was data to decrypt, even though in theory and in ...
3
votes
4answers
179 views

How to detect self destructing emails? How to prevent from self destruction?

Recently I came across a gmail extension for Chrome browsers which claims to send self destructive emails. I tested by sending self destructive emails to my email account and it works fine Now my ...
3
votes
2answers
864 views

How to make database of IP addresses anonymous?

I have to perform ip address connection stats anonymously because the data posses security risk, so how do I do it? Is it just like this, that the ip numbers and networks are replaced by random ...
3
votes
3answers
913 views

Are kiosk-style, full screen apps possible on iOS, Android, or Windows phone?

A popular car insurance company in the US has an app that displays "digital car insurance" papers. In the commercials, these apps are opened, and the user gives the unlocked phone to police officers. ...
3
votes
3answers
587 views

Can too much web searching be a danger to a security professional?

As a junior security professional, I spend a lot of time goggling for things such as 'wpa dictionaries', 'vulnerabilities...' , 'how to crack ...','and so on. I sometimes feel like I am calling for ...
3
votes
5answers
1k views

Can teleworking let my boss to sniff my network traffic? What else could he do?

My boss proposed me to code from home on the their machines via internet, in two possible ways: I would connect to their computer and work on their machine, as if I was in front of the computer(from ...
3
votes
5answers
2k views

Is it wrong to collect and store IP addresses?

I am developing a PHP analytics program. I am using IP addresses to get its corresponding country. I was wondering if its OK to store both the IP address and Country or if its better if I just store ...
3
votes
4answers
267 views

What actions should be taken by site according to Data Protection legislations?

Many countries have data protection legislation: Data Protection Directive in EU Data Protection Act 1998 in UK privacy laws in USA Web application may have registration form where fields for ...
3
votes
4answers
155 views

Record IP pseudonymously?

I'd like to be able to ban an IP from my website, but for privacy reasons I would like to not have a record of the IP itself. Hashing the IP would allow for the hash to be brute forced in mere ...
3
votes
4answers
223 views

Improving the privacy of a casual Web user

I am interested in improving the privacy available to me as a casual internet user with a default browser. I think that Tor is too slow and that the "Privacy Mode" in browsers isn't really practical. ...
3
votes
2answers
5k views

Using Cain and Abel to capture traffic of machine in the same network

I have installed Cain and Able in machine A, which is connected to another machine B via a LAN. Now I want to analyze all the traffic of machine B. Is this possible by installing Cain and Abel on ...
3
votes
3answers
392 views

Privacy and VPN - does employer's VPN still log activity when I am connected by wifi?

A company I work for wanted to use a VPN client called Junos Pulse to connect to their file server. I am on my personal computer, and connected to my personal wifi. I was not using their VPN for ...
3
votes
2answers
1k views

Does a VPN hide what URLs I visit?

It's clear that someone listening on a network could still find out what website I visit over HTTPS (as discussed here) but what about when surfing in a VPN? What exactly can the underlying network ...
3
votes
2answers
657 views

Is it safe to rely on UUIDs for privacy?

I'm uploading files on S3, where the filename is a UUID. All files uploaded are publicly read/write, however these files are considered private to users. Is it possible for someone to guess a UUID, ...
3
votes
3answers
8k views

Why is JavaScript disabled in the Tor Browser Bundle?

Didn't Tor create a local socks proxy? Why doesn't all the Web traffic go over this local socks proxy and why is JavaScript disabled in the Tor Browser bundle? If you would connect with firefox for ...
3
votes
1answer
173 views

Is it a good idea to generate certificate-specific CRLs? What is this technique called?

Suppose I create 3 certificates with the following CRLs Cert1 http://crl.server.com/batch1/root1.crl Cert2 http://crl.server.com/batch2/root2.crl Cert3 ...
3
votes
3answers
579 views

Privacy issues in Peer to Peer networks

In any typical P2P file sharing app, say DC++, the typical operations are search content, push content and pull content. A peer node broadcasts/multicasts its query to fellow peers and receives ...
3
votes
2answers
2k views

How Is It Possible For Hackers To “Dig Up The Dirt” On People?

Like the title says, I was wondering how its possible for hackers to "dig up the dirt" and get peoples personal information such as address, credit cards, bank accounts, social insurance number, etc? ...
3
votes
4answers
8k views

Is it normal that my new VISA debit card has almost the same number as the old one? Is it secure?

My bank issued me a new debit card (VISA Electron) because the old one expired and to my surprise, the card number is almost the same as on my old card. I don't think there would be much chance that ...
3
votes
3answers
652 views

Two-way PGP email without publishing your key / address to a key server?

If I want to have some privacy and avoid the attention of publishing my email address to the public key server web of trust, yet have a secure two-way email conversation with one recipient, what are ...
3
votes
2answers
850 views

Pop-ups in Private Browsing?

The new Firefox private browsing mode allows for both non/private browsing windows at the same time. So if a website pops up a new window (which will be in non private mode) can it read stored data? ...
3
votes
3answers
2k views

How Tor, Privoxy, Vidalia and Polipo are getting together?

I realized that these applications are frequently used together. What is the role of each software in the mission of anonymity and privacy on the web? While I understand Vidalia is a GUI provider, I ...
3
votes
2answers
84 views

Time zone settings and leakage of location

When you set up your clock in Linux systems and select a timezone: How easily can sites access this information? Can they do it through Javascript? Can they do it if Javascript is blocked? Where ...
3
votes
1answer
58 views

A good privacy policy or pursue encryption for private community?

I am planning to create a private web site where people of a very specific target group would keep private stuff. I am between two major roads for this. Road 1 -Build a trusting and personal ...
3
votes
2answers
258 views

Protect sensitive data from sysadmin prying eyes

I'm thinking about this problem. What if I have to manage sensitive data (i.e. health data), and I use a managed server? I'd use encryption of course, but if they have root access they can see conf ...
3
votes
4answers
189 views

In a monitored network, can the admins tell if Tor is being used?

I'm not asking if Tor is secure, I'm asking if an observer can know you are using Tor? For example if a persons ISP or company network monitors traffic would they be able to determine with certainty ...
3
votes
3answers
451 views

Can a zero knowledge proof of voting be made using a trusted auth server (without client side crypto)?

Questions: Can one implement a secure voting system having all the features described below? e.g. without disclosing any individual's vote to the government server (or the third party), preserving ...
3
votes
1answer
378 views

Using only private non-government resources, how can something be sent such that the NSA will see it? [closed]

Supposing you want the NSA to see something, what does one have to do to guarantee it. This means in their normal data collection it will be swept up, not in a targeted probe of an individual or with ...
3
votes
1answer
8k views

House owner can see who's connected to WiFi; what more can he see?

I live in a rental house, and use the house-owner's wireless network to connect to the internet. The owner can see who is connected to his wireless network and I had a few questions regarding this ...
3
votes
3answers
617 views

Encryption Question for patient PHI

I am the Compliance Officer for a laboratory. Is it permissible to send an unencrypted email with a patient accession number? It does not include patient name, DOB, SS# or address. It is just an ...
3
votes
3answers
390 views

What are the best practices for maintaining privacy on a non-jailbroken iOS device?

iOS, like most other mobile OSs, has the potential to leak significant chunks of personal information to 3rd-party apps and to ad and tracking networks used by those apps, which in turn also has the ...
3
votes
2answers
145 views

WHOIS Contact Details Abused

The system for the internet and the way people can abuse it is getting worse and worse. I am having several issues with people abusing the information within my WHOIS, which if I remember is protected ...
3
votes
3answers
133 views

Fingerprints of my computer

I'm recently interested in having an paranoid level of privacy but there is little question in my mind for which I cannot find an answer. I know there is fingerprint of my browser which it gives away ...
3
votes
2answers
542 views

When using private browsing can a website view data stored before private browsing was turned on?

If a browser has been used to visit a few sites and has active logins and then the user turns on private browsing, can the sites still access data such as cookies and cached files that were created ...
3
votes
1answer
132 views

Data Protection in EU for usage of personal documents

I don't know if this question fits into this forum or not. Is there some template documents that comply with the EU regulations for Data Protection and Privacy that I can reuse / (get them signed by ...
3
votes
2answers
174 views

How does my browser detect my location, even via proxy?

How does my browser detect my location even via proxy? I have tried this code via VPN and got the same result as without it. According to the specification my browser should detect it from: ...
3
votes
4answers
136 views

Do search engines give searcher's IP address to sites that come up in search? [closed]

Ok so for example, I search "stackexchange" and a bunch of pages come up in the search result - of course most of them from this very site, and many other ones talking about stackexchange. Would this ...
3
votes
1answer
56 views

Security of reading articles via an RSS reader

Would a site or blog owner know who is reading their site if the visitor is reading it with an RSS reader? Can they get the IP of the person? Say I had a Netvibes account with RSS feeds, can the site ...