Tag Info

Hot answers tagged

68

Disclosing the MAC address in itself shouldn't be a problem. MAC addresses are already quite predictable, easily sniffable, and any form of authentication dependent on them is inherently weak and shouldn't be relied upon. MAC addresses are almost always only used "internally" (between you and your immediate gateway). They really don't make it to the outside ...


19

A MAC address is a number used to uniquely identify your device on the local network segment. The address is (and needs to be) visible to everyone on the network segment, but because of how network routing works, is not normally visible to anyone else. Unless you take steps to change it regularly, your MAC address uniquely identifies your device. Someone ...


10

One significant thing is that there are databases that, given a mac address, can give the longitude and latitude of a wifi router. Most try to make sure you can only get your own location, but anyone can drive around and scan for the right mac address. Skyhook wireless unofficial api CNET article on google maps' database Google maps official API Wireless ...


8

For all practical purposes, if you are accessing the internet from your own personal computer, then using SSL alone will prevent your network administrator from knowing the exact URL (initial DNS connection will only reveal hostname) of the images you download from https://images.google.com/. However, if you are using your employer's computer, where the OS ...


5

In my hands, both Chrome's incognito and Firefox's private browsing still send the HTTP header line HTTP_ACCEPT_LANGUAGE => 'en-US,en;q=0.5' headers, telling all and sundry that I want American English. I haven't tried all the various plugins you mention, but I would be surprised if any of them block this header. If you run your own web server, you can ...


3

Wikipedia is awesome: it contains a lot of useful information. In this case, the following schema: So there are basically 46 bits for global unicast MAC addresses, for 246 possible addresses. MAC addresses do not leak beyond your local link (machines on the same LAN as you see your MAC address, other people do not). IP addresses are used for global ...


3

Keep in mind that the HTTPS connection only works between you and Google - the website that actually hosts the picture might not support HTTPS. If you never click the "visit page" or "view image" buttons, you are probably safe since you are viewing Google's copy of the image. However, if you click one of those buttons, you will download the image from ...


2

Mostly, no. If knew your MAC, I could disguise my network card as yours when dealing with a gateway (e.g. a Wi-Fi router); that's pretty much all of it. It's extremely unlikely that this could cause any annoyance to you, let alone pose a security risk. The only situation I can think of is something on the lines of We're staying at the same hotel. The ...


2

This is a bit odd, usually the provider staff would have their own accounts with which to make changes to customer details. How it works isn't as important as providing: Accountability: all actions by staff accounts would be auditable (if it's implemented properly) Protection for customer accounts: the staff would not know customer login details Having ...


2

There is no way to be sure that the resipient won't retransmit your documents unsecured to others. You could use password secured PDF files, theoretically they sould be safe if you forbit to print and edit them. But even in this case, one could easily take a screenshot and get the crititcal Information out of the PDF. Or someone resends your files in the ...


2

That's a bit unfortunate. So long as your code and testing framework are both public, there's nothing that you can do that your unauthorized users can't. You need to lock something down. The best this I can think of is to put the data on the server running your tests. Limit access to the server to only authorized individuals. That way even if people find ...


2

There was real case when guy discovered that some website used MySQL's UUID value somewhere in URL. Also he learned that output of function contains MAC address. Guy looked up and found that MAC belongs to Dell. So, server is probably Dell make. After making this discovery about 2am he went to sleep and in some reason looked on this site again on morning. ...


2

You can't necessarily know if an email you receive is designed to be tracked but as tracking is limited to certain techniques, you can infer a higher probability of this behaviour if the email seems tailored towards such an end: Email includes images that need to be downloaded remotely Typically an email can have all images and formatting stored internally ...


1

So there is nothing you can do about his activity, except to ignore it as the comments suggest. What you can do, is to re-evaluate your security practices, and make sure your house is in order in case he decides he wants to try to do some digital damage, to ensure you're as well protected as can be. This means: Choose strong passwords. Don't reuse ...


1

In order to make e-mails look pretty, most mail clients allow the use of HTML. Some senders use this to their advantage and add an iframe. This, of course, makes you basically download a webpage from the sender. The sender can use monitoring tools on the webpage to determine who has opened the e-mail, what IP they opened it from, etc. They can even see which ...


1

If their encryption is indeed secure, it would ensure that anyone who can eavesdrop on your connection between you and their server will not be able to find out what you are doing. This is a very big if because they don't provide any details on their FAQ about what algorithms they are using and how they use them. Their FAQ only mentions "our proprietary ...


1

If you haven't disabled search history, they'd be able to look at your searches if they go to the search history record for your account. You can check your own Google search history by logging in here. They may also be able to track activity on other Google services, like Youtube, Maps, News, etc since they've implemented Single Sign-On which logs you ...


1

There are a number of providers available for this. You want to make sure that the provider you select has built in encryption options for which you can maintain the key. The below providers all support this. Crashplan BackBlaze Remember that you need configure the software to use an encryption key you have generated yourself and keep this secure and ...


1

Differentially private mechanisms have been implemented in prototypes. These prototypes will usually take a set of records (eg. a database table) and a query, and then return the result of the query on the table with a small amount of added noise to guarantee differential privacy. While proving that a mechanism is differentially private is mathematically ...


1

They're probably setting the language based on your system and browser's language setting, not based on your location.


1

Pretty much all mail systems have a limit on email size. You can howevr overcome it by splitting your big file in several mails. As for policy, you should read the terms of use of each provider to figure out. For instance GMail restricts (restricted?) usage of third-party applications to avoid that you use GMail as a virtual drive (there were several ...


1

Yes, malware/spyware can indeed detect antivirus software and perform defensive mechanisms. This is a never-ending ‘arms race’ on how and where they hide code. Fortunately, once a system is compromised there is no 100% accuracy on getting back to a clean slate without wiping the system back to a known good state. In my enterprise environment, once we ...



Only top voted, non community-wiki answers of a minimum length are eligible