The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

-1
votes
0answers
29 views

My friend was fired from her job. Overnight, on her personal phone all her work contacts were mysteriously deleted

As the title stated. My friend personal email is connected to her personal phone. She works on the Ipad and her work Ipad is connected to her work email. She never checked her personal email on her ...
13
votes
0answers
416 views

What unique device fingerprinting information can an iOS8 app collect?

As an addition to this question: What unique fingerprinting information can an iOS7 app collect? What remaining device fingerprinting privacy/security vulnerabilities still exist as of iOS 8? Can ...
2
votes
1answer
56 views

What does “probability space is over coin flips of algorithm M” mean?

In the book The Algorithmic Foundations of Differential Privacy by Cynthia Dwork, Aaron Roth on page 16 (actually page 20 in the pdf viewer) it says at the very bottom of the page: Definition 2.2 (...
6
votes
2answers
120 views

What information is collected because of signing into Windows 10 with a Microsoft account?

The question is specifically as stated - "because of signing into Windows 10 with a Microsoft account". Not including what is collected even when using a local account. And not including what is ...
3
votes
2answers
64 views

How to secure communications between a web front-end and the web server when/where the HTTPS protocol is compromised?

A country in the Central Asia has issued a law enforcing all the ISPs to decrypt the transit HTTPS traffic and encrypt it with a special certificate issued by the government. Every client is to ...
97
votes
14answers
28k views

How can mom monitor my internet history from a distance?

This might sound like a funny question from a twelve-year-old. The less funny part is that I am 21 and currently studying at university (I don't live at University, although I am 15 minutes away. I do ...
0
votes
4answers
82 views

Can duct tape prevent hackers from watching me?

Since hackers can hack into my mobile phone/computer and use its camera to watch over me, Q1: Can I know if my mobile phone/computer camera has been hacked? Q2: If I was hacked, does putting duct ...
64
votes
13answers
9k views

Should I allow browsers to remember my passwords and synchronize them?

I wonder, how wise is it to allow Chrome and Firefox to a) remember the passwords b) synchronize them? My gut tells me that if it's not man in the middle who can intercept them, but Google and Mozilla ...
-1
votes
2answers
794 views

How to minimize your fingerprint, or become invisible on the web? [duplicate]

With all of these news stories about the government reading emails and snooping information from other sources, what are ways to minimize or eliminate an organization's ability to actually track and ...
2
votes
3answers
132 views

How can VPN providers end violating accounts when “they don't log any data”?

VPN providers can end accounts which violate their terms of use. If you look at https://nordvpn.com/terms-of-service/ for example, you see that they will terminate accounts violating their ToS. The ...
1
vote
2answers
56 views

What policies and agreements regarding information security are a must have for every self respecting company?

I assume that it's a good idea to supply the users of a system (or employees) with policies and agreements regarding information security. What kind of documents should be considered? For example (...
5
votes
1answer
118 views

What should I store in the case that a user posts a threatening post?

I am building a social-media type website. I am going to have the users create a profile with their name, email and phone number. When a post is created I plan to have a spot in the database that ...
4
votes
1answer
100 views

Hidden service security SSH

Pretend I have a Tor hidden service. For ultimate security I would firewall the internet entirely, except for Tor, to try to reduce IP address leakage and other security risks. My problem is how ...
134
votes
21answers
21k views

Hardening Linux desktop machine against people from my household

I am looking to make a clean install of a Debian system on my home desktop. To clarify, I am switching from Windows and wish to use it as my day-to-day home OS - I'm not going to be running any ...
6
votes
1answer
4k views

IMEI and phone number given to unknown sources. What are the risks?

The facts: A friend put his phone number (and possibly the IMEI) for his android device into some kind of hacking PC software that promised to (and actually did) extend his Whatsapp account that was ...
1
vote
1answer
58 views

Microsoft support asking me for my phone IMEI?

I just contacted Microsoft support on my Lumia phone via the preinstalled "Contact Support" app, about an issue of the language of comments on apps in the Store being in the wrong language (different ...
-5
votes
1answer
41 views

Software intrusion via sweeping firmware updates? [closed]

I have a lot of different hardware ranging from smart phones and smart TVs to Unix servers and everything in-between. Within the last few weeks everything I own has needed an update or upgrade. ...
0
votes
1answer
60 views

How should I handle a spam account I don't control from sending spam emails with my username?

A family member contacted me yesterday saying their email has been hacked and that some other family members received spam emails from their account. For this example, lets say the hacked family ...
6
votes
1answer
148 views

What are the compliance requirements or standards for a non-US firm hosting personal data in the US?

I work for a head hunting company with offices in Canada and Asia. We migrated our custom built CRM system from our own servers hosted in Japan to an Amazon hosting service meaning that all our data ...
2
votes
0answers
58 views

Is it possible to overwrite a phone through physical means?

I am currently doing some research into the Apple vs FBI controversy. During my research, I found a Edward Snowden comment that claimed that the government can actually override a phone's data, ...
2
votes
1answer
90 views

Does Skype use audio watermarking?

Today on CNN they conducted an interview with a career criminal, who spoke by Skype on condition of anonymity. It occurred to me that, if Skype uses digital watermarking to embed identifying ...
4
votes
2answers
63 views

How are SSDs different from HDDs from the privacy point of view? [duplicate]

How are SSDs different from HDDs from the privacy point of view? Is it easier or harder to recover traces of deleted and/or wiped (overwritten) files from an SSD than from a HDD?
151
votes
2answers
93k views

What is the difference between https://google.com and https://encrypted.google.com?

Is it there any difference between the encrypted Google search (at https://encrypted.google.com) and the ordinary HTTPS Google search (at https://google.com)? In terms of security what were the ...
1
vote
0answers
206 views

Can one scan multiple websites for tracking cookies and beacons?

Are there any tools or techniques that allow a scan of multiple sites for the use of tracking cookies, beacons, web bugs, or offsite javascript includes? As far as I can tell, major web application ...
-2
votes
1answer
90 views

Can my employer see my activity over their WiFi if I'm using the Tumblr app? [duplicate]

I have a great relationship with my employer and I don't think anyone is spying on me and I don't care if they read my email. But if I'm logged into their WiFi and I'm using the Tumblr app on my ...
2
votes
1answer
67 views

What is vulnerable in this comprehensive browser setup to avoid fingerprinting/tracking?

What is vulnerable in this browser setup to avoid fingerprinting/tracking for general browsing that is still easy to use? The setup is as follows: Firefox on my personal machine with several ...
24
votes
2answers
2k views

How trustworthy is `sudo apt-get install (package name)` in Ubuntu?

One of the easy ways to install a program in Ubuntu Linux is to type a command in the terminal, but how do I know that the program is coming from a trusted source and not from somewhere dangerous? ...
3
votes
2answers
36 views

Does rotating proxy provide better privacy?

We have anonymous rotating proxy service like ProxyMesh. ProxyMesh provides 14 rotating IP address proxy servers, each with 10 IP addresses rotating twice per day, giving you a total of 280 IP ...
56
votes
7answers
6k views

Closed source binary blobs in chipsets - privacy threat?

I wanted to buy a Librem Purism 13 because I care about my privacy and generally wanted a laptop to test Linux on. However, I was advised against it because it uses Intel i5 processors which contain ...
3
votes
2answers
113 views

Is storing an encrypted zip file to an insecure cloud service an admissible way of securing privacy?

Consider the following scenario: I use a cloud service that is not considered secure (meaning no encryption whatsoever) i.e. Dropbox, OneDrive, Google Drive etc. In my account I have a .zip or .7z ...
1
vote
1answer
121 views

Firefox security certificate issues: FUD or truth?

I was doing a little reading over at gHacks, and came across this comment attributed to Joey Spinosa regarding certificates in Firefox: These certificates are installed automatically by the ...
4
votes
1answer
49 views

Do Social Network Mobile Apps Track Your Browsing?

Facebook are known to track you even after you have logged out of your Facebook account. With mobile apps being given permission to access so much information on the devices, is it possible for ...
2
votes
1answer
50 views

OpenVPN Client Id appearing in emails

I use OpenVPN to connect to a server. I just found that in a series of emails I sent and received to and from the same person the following line appeared after every message I sent: [cid:{a long ...
64
votes
1answer
5k views

Tell browser my site has no scripts

I have created a Tor hidden service site which has absolutely no JavaScript or other types of client side scripts. The page is HTML, CSS, images, and some JSP for handling user input. I encourage ...
1
vote
3answers
114 views

Can my employer see the actual video chat if I use Facebook messenger on work WiFi?

I used my personal iPad over work WiFi (Verizon jetpack) to have a video chat with a friend over Facebook messenger. Can my employer actually see the video or just that I used messenger?
0
votes
2answers
95 views

Are VPN tunnels really completely private? [duplicate]

I've been considering a VPN tunnel, specifically PIA. These types of companies make bold claims of complete anonymity and privacy, with no one in the world (ISP's, governments, school or corporate ...
1
vote
0answers
33 views

What information about a user can wireless carriers access?

What is the maximum amount of imformatiom about a user and the user's phone that can be obtained by a wireless carrier on a GSM network? Here is a list of the things I know, but are there more? IMEI,...
12
votes
3answers
2k views

ISPs are now adding unique header identifiers to web traffic. Can this be avoided? If so, how?

I'm a security-conscious Verizon user, and it has recently come to light that Verizon is now serving up my web traffic to ad partners while en route. I understand that once my data has left the device,...
12
votes
5answers
660 views

What steps should one take to provide “reasonable” levels of privacy from a government?

I'm highly uncomfortable with the recent news surrounding government snooping in the UK. If we define a typical user to mean somebody who: Browses web sites such as BBC News and Stack Overflow Uses ...
2
votes
0answers
24 views

Are deleted offline calendar events in Android actually deleted?

When an Android app deletes a calendar event in a local (offline / non-synced) calendar, does Android's Calendar Storage (com.android.providers.calendar) actually delete the event or does it just flag ...
1
vote
1answer
615 views

What's most standard way to secure internet connections and protect privacy?

It's common knowledge that Wi-Fi, or other Internet connections, should be encrypted via a VPN to be secure, and to hide our real IP address from intermediary network observers. However, one can't ...
3
votes
1answer
43 views

Why is data quality important for privacy?

"Outdated personal data" is number 8 on the OWASP Top 10 Privacy Risks, and also the OECD Privacy Principles mention that data should be kept up to date: Personal data should be relevant to the ...
44
votes
5answers
11k views

How to fight browser fingerprinting?

https://panopticlick.eff.org/ , aka "How unique and trackable is your browser". For example it usually gives me a unique score. The biggest entropy values come from navigator.plugins and fonts via ...
3
votes
5answers
3k views

Should I shred documents with only name and address details?

I routinely shred documents with any personal information on them to protect myself and others against identity theft. I have no doubts that shredding any documents with ID numbers, account details ...
2
votes
6answers
12k views

Open VPN has DNS leak

Since using www.dnsleaktest.com I have found that any VPN service using Open VPN will leak my DNS through the tunnel. I have tried and tested several VPN providers, even those who say that they have ...
3
votes
0answers
79 views

Security of the shared secret key for a smart meter (Linky) [closed]

Reading the specs of a new electricity smart meter (called Linky in France), I was surprised about the chosen encryption method (128 bits symmetric key AES), based on a single secret key (called CCC ...
-1
votes
1answer
118 views

Can VPN provider see my data?

I have a 2 questions: If I use a VPN and I go to any websites via HTTP - does VPN provider will be able to see the traffic? Those. logins, passwords, all the texts that pass through the channel (in ...
53
votes
8answers
3k views

Why does one need a high level of privacy/anonymity for legal activities?

This question is sort-of spun off of a previous one. How to counter the statement: "You don't need (strong) security if you're not doing anything illegal"? There are a lot of great ...
4
votes
4answers
14k views

Is it normal that my new VISA debit card has almost the same number as the old one? Is it secure?

My bank issued me a new debit card (VISA Electron) because the old one expired and to my surprise, the card number is almost the same as on my old card. I don't think there would be much chance that ...
46
votes
6answers
7k views

How do I deal with companies that call and ask for personal information?

Several times I get a phone call from a company- my bank, utility companies etc. Many times they are just cold calling me, but once or twice they were calling for legitimate reasons (ie, something to ...