Tag Info

Hot answers tagged

15

I think what you are noticing is a client-side acknowledgement of your sessions with Facebook, Gmail, etc. If a sharing script originates from facebook.com and you have an active session with that hostname, they will present a streamlined share button (for example) for your account. The website linking you to the script on Facebook cannot see who you are ...


14

Officially, they are pushed forward to allow people in dictatorships to break laws restricting their freedom of information and/or expression. Because, the problem with the law is, that you need some people to make it, and wherever people are involved, they try to get their beliefs into the law. As such, laws, even in so-called "democracies", are not always ...


8

The short answer is in comments and @msw's response. There is, literally, no way that you can use the library's (or anyone else's) systems and/or infrastructure and have a 100% guarantee of anonymity. If the system and/or network owner is determined to be able to monitor and log your activity, there is nothing you can do to prevent it except simply not use ...


7

The Background The general situation was Snowden entering his password at that time, and he wanted to mitigate visual surveillance, let it be by observation or (hidden) cameras. It seems, Snowden didn't trust anything but his own laptop (if at all) during these first day(s) of contact with the journalists. He also offered the blanket to the others in the ...


6

A MAC address more-or-less* uniquely identifies a network card, and is only accessible to other devices on the local (non-routed) network. So yes, the Starbucks network can and does know your MAC address, and certainly could be sending it up into their database somewhere. Concern #1: That doesn't mean they're "recording traffic" (although, of course, they ...


4

In the case of Facebook, their SDK allows a website to determine whether a user is logged in: FB.getLoginStatus() allows you to determine if a user is logged in to Facebook and has authenticated your app. There are three possible states for a user: the user is logged into Facebook and has authenticated your application (connected) the user is ...


3

Nope. They own the machine and the network, they can log anything you do if they wish to.


3

Well, even if Google was vulnerable to XSS, this still wouldn't be a breach. Why? Because of the HTTPOnly flag. It is the big reason for XSS's downfall. You can say there are two kinds of cookies: those that your browser gets when it recieves an HTTP response from a remote server (like google.com). They are in the Set-Cookie part of the response. ...


2

Yes, most commercial RSS feeds do place beacons in RSS articles. They track your IP, and transfer it to their analytics service providers. You can test for yourself, by going to a feed by Feedburner, and examining all the tiny images that are loaded. You can also read the source code of the RSS feed to see for yourself that the link to "Full article" often ...


1

In response to the first question, One way to avoid the privacy risks you mentioned, AFAIK, could be to employ the use of a system-wide proxy wherein all traffic 'has to' pass through, say, the TOR network. Pertinently, this would depend heavily on the anonymity offered by TOR and any inherent weaknesses or vulnerabilities in TOR would thereby affect the ...


1

I can answer that for Germany only (caveat below). In German data protection law, it's basically forbidden to collect, process or use data that can be linked to a natural person and that's not publicly available unless you're explicity allowed by law or by the affected person. By sending the message, I'd assume (IANAL though) that you implicitly give your ...


1

You can use Tails with Mac OS by using a virtual machine! Think about it this way: in a situation where you want to preserve your privacy, you want to set up your operating system so that it can be wiped/thrown away quickly. That's why so many folks like to do their private operations off live USBs or virtual machines. Here are a few ideas: Use a live ...


1

There is no chance for fingerprint attack. The first point here is there is no unique certs as you can create and if you try to make it , you need to add digital signature in the certificate( self signed or not ), then you require private key. Its available only with the particular person. The second point here is you can't establish a secure ...


1

As soon as you download something, the site will know, and you have no control over who they share this information with. However, as @AJAr points out, the privacy policy of the site may affect it - as may the law. However, both the law, and a violation by a site of it's privacy policy, cannot change the damage that has already been done. You can try to ...


1

The answer to this is limited by the extents of sharing and personality one might deem significant to their own privacy. Most websites like these are legally obligated to reference a privacy policy linked at the foot of every page to describe what information is collected, how it may be shared and with whom (in terms of the content provider's relationship ...


1

Tor was originally created by the US Navy and DARPA in the 90s to protect online communications abroad. So there is certainly a legal use. On the other hand, it is used to break the law in many countries, like in Iran and China. Where do you live? Do you have a western viewpoint? If so, do you mind that people in Iran break the law using Tor to ...



Only top voted, non community-wiki answers of a minimum length are eligible