Tag Info

Hot answers tagged

53

Rent VPS (even better: home server) & Domain (May take up to 2 days, who cares..) How many ISPs do not provide law enforcement access to their sites and to the systems they provide for their customers? And with a home server: lots of sites explicitly deny access to their mail server from a "home" IP address (these are known address blocks), in ...


25

As someone who has actually done this for a couple of years, I can tell you that it's not nearly as simple as you're describing and it doesn't offer the security properties you want. In summary: Why do so many security experts (i.e. cryptologists & co.) not host their own email? Because it takes enormous amounts of time and specialized knowledge ...


14

When you send emails in your scenario, you announce the IP of your custom, private email server. Every recipient, and any interested party, now knows you use your own email server and where it is. This results in a one-to-one mapping of this server and your connection to it. If a government agency wants to track you down, all they need to do is to look for ...


8

There speaks someone who has never run their own email. You don't mention an inbound antispam solution. DKIM and related techniques are for authenticating your own mail as not spam and making it deliverable. (Deliverability is the main barrier against home hosting: most providers block port 25 and many mail recipients block all ranges known to be ADSL). But ...


5

Short answer, it's not the easiest solution. " it's very easy to set up a self-hosted email server" You are wrong, the rest is wrong because it's based on this. I assume you imply it's easy to set up a safe server (otherwise, what's the purpose of it all?). Your laundry list of what you need is long, and not even so it is complete. It's much easier ...


5

Sign out of Junos to keep your traffic off their network, there is no need to uninstall the VPN client completely. If you had signed in to Junos, it was routing all your network traffic through their VPN. Although you were on your own Wifi, when you logged in to Junos, it would have redirected all your traffic into their VPN. There is a chance that they ...


4

The problem you are asking about is called the Socialist Millionaire problem and has been discussed in research before; as far as I know there is a protocol to do this comparison without disclosing any of the two secrets and without involvement of a third party. I will edit my answer with a full explanation as soon as possible.


4

I haven't studied this specific vulnerability, but from the points you mention I should note: Cross-Frame-Options is not used too much on websites. Although this SOP vulnerability is dwarfed by X-Frame-Options, two months before there was another one where it didn't seem to matter. Most outdated phones where you will be able to exploit one of them, most ...


3

The same exact rules apply to webcams as in the thread you referenced. If you put your webcam on an obscure port (not just 8080 or a common variant) then Shodan will not find it while crawling. If you keep your webcam protected from anonymous access (set unique user/pass settings for all accounts on the cam) then outsiders will not be able to see it even ...


3

I'm not a expert, but since nobody said the magic word " encryption " here yet, i will write this answer. It seems to me that what you want is to prevent NSA to get the hands on your communications data, but you are looking the wrong way, you must trust only the encryption algorithm that make the data secure and private and nothing more, you should aim to ...


2

Tor could be a solution for you, if you could compromise some of the browsing speed. Tor tries to implement many countermeasures for your anonymity theft. I would recommend that just using Tor is not enough please read the Tor FAQ for further details. Update: Apart from that I would say you have to change your browsing habits too in order to stay ...


2

The most likely case is that the VPN is setup to only send traffic to/from the private network's subnet. So normal web traffic would go through your normal network interface. While going to fileshare.company.net will resolve to a private network that is only reachable through the VPN. Most companies don't want/force all of an employee's traffic through ...


2

I'm not a lawyer, nor do I play one on TV. (you might want to consult a real one who specializes in this type of thing) It seems to me that if you are just reviewing a product and giving your honest opinion then that is freedom of speech. HOWEVER, if they have the resources and the will to do so, they can easily make at least some part of your life ...


2

You might try a syllable hash. Start with a basic hash algorithm to digest individual data identifiers; it doesn't really have to be crypto-strength, and I'd recommend against. Most implementations will produce a byte array which is perfect; a few will produce a single larger primitive or arrays of larger primitives in which case you'll want to split them ...


2

Short answer: NO, if you are sure you are using end to end encryption, and MOST LIKELY NO, if you aren't using end to end encryption. Whatsapp uses encryption two ways: first it has an "outer layer" built by TLS, which has ben analyzed thoroughly by the security company Praetorian in February 2014, with almost all issues pointed out being fixed within a ...


2

OPM has released statements offering credit protection and advice on how to respond. Phishing e-mails were listed as one of their concerns. Their recommendation was to use anti-phishing plugins to your web browser to help identify phishing e-mails and keep your systems patched. For the layman, that's probably the best you can do. I believe it's important to ...


1

(PS: This post is just a general discussion. I am in no ways enticing anyone to commit any crime!) In order to be anonymous you really have to consider other things too, other than just using some tools while browsing the internet. Tor or VPN might help you to anonymize your identity online but have you considered being anonymous in your real(Offline) life. ...


1

TCP fingerprinting doesn't really help you identify a client. When we talk about TCP fingerprinting, we're talking about the configuration details that, taken together, help identify the habitual configuration of an OS. Different OSes have different default TTL values, for example. You're asking about identifying non-habitual (unique) aspects of TCP ...


1

Consequences depend on, who do you want do prevent from tracking you: adversiters and small/poor site owners - sleep safe. big site owners, that can afford Big Data (eg. Yahoo) - they can time-correlate your visits, but rather for statistics, UX analysis etc., than personally. local Police or other local forces - they can possibly deanonymize you, but ...



Only top voted, non community-wiki answers of a minimum length are eligible