Tag Info

Hot answers tagged

27

There's a great short essay written by Bruce Schneier on the right of privacy: The most common retort against privacy advocates -- by those in favor of ID checks, cameras, databases, data mining and other wholesale surveillance measures -- is this line: "If you aren't doing anything wrong, what do you have to hide?" Some clever answers: "If ...


22

Positive reasons Instead of a beach holiday, we joined a Christian Mission this summer in Malawi. We're keeping quiet about it in case the children are teased at school. I leapt into the road and saved a toddler's life. I just walked away because I don't want any fuss. Controlling dissemination My wife is pregnant, great news! We want to tell close ...


20

This is because Skype displays Google Ads. So Skype isn't getting information from Google about you. They are displaying Google hosted ads which are based on your Google search history. The search based ads shown are not based off your overall history but recent history by design as it is likely you are currently exploring the market for the product. Where ...


11

Just to address one point: Credit card insurance protects them from fraud This makes several assumptions, none of which are to be relied on: You assume that the insurance will pay out. It would be safer to assume that the insurer will try to avoid paying out, and require you to prove that you didn't give away your card details. This may be tricky if ...


10

Whether you company will be able to see the content of your chats depends on a couple of factors Is your access to the chat site encrypted? if you're using SSL, then normally someone running a network you're accessing it over, will not be able to see the content of the chat (although they will likely know the name of the site you're accessing). The ...


6

I believe they already have if this article is correct: http://community.skype.com/t5/Security-Privacy-Trust-and/How-to-protect-your-IP-from-skype-resolvers/td-p/3874291 Skype uses peer-to-peer instead of traditional client/server connections to make the calls happen though. Since there's no sole middleman the data needs to know where it's going between ...


4

For the fraud and "identity theft" angle on this, people should remember that dealing with it always takes someone's time and money. Identity theft can be extremely inconvenient or expensive, and your time is not usually covered by insurance. Another angle is price discrimination. "We see you have $1234.50 in your bank account, therefore the price of this ...


4

Confidentiality is about a data, whereas privacy is about a person/group of people/organization. Every data belongs to a person. Every person is identified by his data. So these 2 notions extend each others. Interpreting one of them as being a sub-characteristic of an other is correct at your will.


3

An easy way? Pehaps, but it depends on your own experiance with Android penetration testing or relatable systems; Linux. And what level of perinoa you're willing to advance to. If you're command line savy then install no-root BusyBox and run netstat -plant with auto sync off on the target device to list the ports and addresses and process IDs that it is ...


3

The same software library that Superfish uses is present in other products beside those found in Lenovo products last year: http://www.tripwire.com/state-of-security/latest-security-news/researchers-reveal-evidence-of-other-superfish-style-attacks-in-the-wild/ Then there are the 2011 Comodo and DigiNotar breaches, which may be the most famous, early root ...


3

I would have performed the same actions. Confirm the validity of the website, and request the account be removed. I don't believe you've exposed yourself to more risk at all by contacting these services. The key to performing the above is to not actually click the link in the email. Go to the service's webpage separately where you can verify the ...


3

Your question here is basically the question every steganalysts are asking. Reading from wikipedia page: The goal of steganalysis is to identify suspected packages, determine whether or not they have a payload encoded into them, and, if possible, recover that payload. The usual way to go is to have a set of known not-steganographed data to extrapolate ...


3

First of all, I hope by domain.com and subdomain.domain.com you do not mean you are using HTTP in which case the cookies are highly exposed and manipulated on an attacker's will. I hope also -in case you are not using HTTPS- the services of your website are not crucial (not e-commercial, for instance). As a general good security practice, **never store ...


3

Yes, there is a point. To be clear, "opting out" merely stops the targeting of ads. It does not eliminate ads, or reduce them in number, or vastly reduce the more insidious Tracking aspect of ads. In a broader context than just Chrome, it varies by platform and ad system, but some ad networks will not collect as much information knowing that they can't ...


3

WhatsApp uses a client/server architecture based on Jabber(XMPP) http://en.wikipedia.org/wiki/Jabber For the recipient(s) to see your IP addresses, the application will have to include your IP address in the metadata of the message. But this has no functional role in the design of such an application. Your packet capture will likely show IP addresses ...


2

Whether your company will control your use of the Wi-Fi will depend first of a key point: Is the policy of your company to provide a Wi-Fi network for professionnal use or for private use or for both? From the name with which you named your company Wi-Fi: "guest" Wi-Fi, I am tempted to diagnose that this Wi-Fi is targeted to provide an access to external ...


2

IMO, the only way to be sure about your firmware is if you build it and flash it yourself, and don't let system out of your hands. Intel Tunnel Mountain and MinnowBoard are the Intel dev platforms for UEFI. You can build your own firmware on these boxes. If you are concerned about this sort of thing, you might want to use a Novena or perhaps a Purism laptop ...


2

The only way to get control over your computer, that works always, is to physically replace the infected BIOS flash chip with a non-infected one (provided that only the BIOS is infected). It is possible that the flashing utilities aren't infected by the government, so you can perhaps even flash a non-infected BIOS from inside a system, which comes with its ...


2

You can post your unique local unicast address since they are pretty much the same as a IPv4 private address. It has the prefix fc00::/7 (fd00::/8). However I don't suggest you to post your IPv6 public address, especially in a network expert forums. You can try to abstract your question by making reference to its components (Network Identifier or EUI - ...


2

An IP address is definitely not the best source of information to match an individual's age. What I could imagine is that the forum could have an interface to a social network (such as Facebook) and if she has authorized the forum (for example by using Facebook as Iaas [Identity as a Service]) they could retrieve basic information from your daughter such ...


2

In theory, yes, the webrtc standard let's a website determine your local ip address, so it can create a direct connection for you to a another web-browser, allowing direct connections between browsers to set up video streaming for example. This website has a proof of concept showing you your internal and external ip address: ...


2

First of all, it is important to keep enough bits from the start of the address that it will still be clear which class of address it is. How many bits are needed in order to know that does however depend on which class of address it is. Here are a few examples: 2001:0:xxxx:xxxx:: a Teredo address - 32 bits (two groups of digits) is enough to know it is a ...


2

Twitter seems to have a complicated history with Tor's users. The linked article seems to doubt of Twitter explaining they do not put any specific restriction against Tor's IP: Twitter does not block or force Tor users to phone verify in order to sign up. Occasionally, signups and logins may be asked to phone verify as they may exhibit behavior ...


2

I would like to quote Edward Snowden on this: Arguing that you don’t care about the right to privacy because you have nothing to hide is no different than saying you don’t care about free speech because you have nothing to say. Just because you have nothing to hide (you likely do, but let's assume you are really OK with your government, foreign ...


2

The only thing I can think of at the moment is: some companies use these ads networks to remind you of things you have lately browsed in their site to push you forward to buy them. So imagine you are looking for some sexy underwear for your wife in your device and later at your work they show up while showing some sites to your customer (fake situation but ...


2

Cookies by themselves do not create any vulnerability. The goal to delete cookies is merely to improve privacy by keeping websites from tracking your activity. A common way to track users, for instance, is when you visit several websites which include contents from some defined third-party tracking service (this content may be advertisement for the ...


1

Did I perform the right steps? Have I exposed myself to more risk by contacting these services? Yes and No. The fact the link you clicked on looked legit on Google with a valid certificate does not necessarily mean it is an innocuous one (you can set a certificate to your website and run any malicious script to target your visitors), and scammers ...


1

You cannot verify someone's age by their IP address. What probably happened was your daughter filled out one of those quick age verification checks when she went to the site. The site admins probably linked her IP to that age verification request.


1

Short answer: they can't. Long answer: An IP address does not carry any information about the ages of any users behind them. The only thing they can do is correlate different activities from that IP address, hoping to find accesses to a service that does some kind of age verification, and then boldly deduce that since one user behind that IP address was ...


1

Is there any prior research that describes how a cookie, or cookie alternative would be used to provide such a guarantee? I don't think you can provide such a guarantee, except by perhaps saying so in your privacy policy and then following that policy. The scope would be restricted to a one, or a very limited set of URLs, Setting scope can be ...



Only top voted, non community-wiki answers of a minimum length are eligible