New answers tagged

9

Very good question. Metadata is insanely powerful, and most people just don't realize how powerful it can be. Fortunately, it's not that hard to discover if you do a little digging into how technology and the internet works. I'm of the opinion that it's not very easy to hide online. In most cases, if you're a small fry, nobody's going to pay attention to ...


2

Have you read Google's TOS and PP? It says they will divulge any information they deem necessary to comply with any enforceable legal request. **We will share personal information with companies, organizations or individuals outside of Google if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably ...


2

Using the same private key across separate domains is basically secure. If you authenticate to a system, you don't give away you private key, and that system cannot impersonate you. So you can use your key across work and personal systems, and a work system cannot then access your personal systems. However, there are often reasons to use different keys. For ...


0

I'm an expert on this particular issue and I can assure you that No, you do NOT need to worry about Skype compromising the security of your computer. Skype should be the LEAST of your worries. The most important thing to remember for the security of your computer is: Don't open any file attached to an email UNTIL you have verified who it came from, you know ...


0

It deppends, of course but, imagine you go shopping and, when paying, the most kind and honest employee ever made asks for your name, date of birth and some other personal info (not so harmfull at first sight). Would you answer the questions? Long story short is: it all deppends on your principles And, to be honest, nowadays people share 95% of their ...


2

First: privacy and the level of privacy someone wants to achieve is a very individual thing. Second: That said, it is difficult to explain to some people why they should care much, but what I found worked for me is following analogy: You lock the door to your appartment - totally independend of weither you have valuables in there or not. You also never ...


4

The problem with this approach is that the same identity is used by every destination, so sites can swap notes to see where you've been and draw correlations that you may not want to expose. There are several ways to solve this issue, such as the one used in the FIDO U2F security key. In this case, the device contains a symmetric key (not an asymmetric key ...


5

Google has some servers (Edge Nodes) located into ISPs for quicker response, this is what they call the Google Global Cache. They are basically big proxy caches for serving static content (such as YouTube videos). According to their FAQ, it is «designed for end-user networks with greater than 1Gbps of peak Google traffic» As you have observed, Alaska ...


1

That's not the problem. Some people use VPNs for privacy (which is arguably misguided, as a VPN is a remote network connectivity tool and not a privacy tool, but that's an argument for another day) and having DNS queries leak out of the non-VPN connection is a concern in that scenario. Say, for example, I live in an oppressive regime with little regard for ...


1

Generally, no. Your computer should not be reachable from outside your local network, with the name or without. However, it can leak info like your real name, or allow people who know your computer name to match your online username to the real you. Whether this is a major concern is up to you.


1

None of these answers are actually answering the question, and nobody is mentioning the power behind meta data. Let's go into detail as to how this can be done. How can you be caught using Private VPN when there's no logs about who you are? Generally speaking, there are logs about who you are, even if your VPN provider isn't logging anything about ...


0

So, what prevents ISP from seeing IP address of the first relay I'm connected to? Nothing. This is the whole point of Tor: this is part of the security model and it doesn't matter that your ISP can see you talking to a Tor node. Similarly, what prevents other ISPs of each Tor relay nodes/chain of proxies to see where they route traffic to and from, ...


0

The question is really about deniable authentication. There might be more than one way for the desiderata to be satisfied in the context given. For example, Alice and Bob could follow this protocol: Alice creates an OpenPGP signing key-pair with a fake name. She sends an encrypted email to Bob with the "public" key attached and instructs him to keep ...


2

Note: this question might have been better on the Tor community despite being on-topic here. Thomas Roth demonstrated that Protonmail was vulnerable to a Cross-site scripting (XSS) attack. The video (Vimeo) he made shows that at least the mail body was vulnerable to Javascript injection. As soon as the receiver read the mail, the code is executed. ...


3

She pays for your internet. Many providers offer plans "for kids" with parental control, including full reports of visited resources. Using those is the easiest and most obvious option for computer-illiterate person. Changing PC or other hardware won't help of course as long as you use same internet access. If your PC is free of non-standard security ...


4

Others have mentioned shared profiles, known passwords, and google history, and the ways to resolve those. But even more likely is: what do you get if you google your name, plus the word "youtube"? Do you get the videos she mentioned, because those are the ones you have commented on using your account? That is to say - perhaps she is not spying on you, ...


9

First thought that came into my mind is shared browser user, maybe you have used computer at home with your account, and then did not sign out? For example, if you use Chrome, all your browser history is being synced between all of your devices, including your moms computer. You could use a different browser, and some kind of VPN to ensure that your traffic ...


4

You could use Tor, or maybe simply a VPN, for no more time than necessary to find out if she still knows what you've been browsing. If positive, you have determined that your computer is compromised. Now: Make sure there are no weird pieces attached to it (there are hardware keyloggers). Format your hard drive and do a clean install of the operating system ...


82

One possibility that I came across by accident: Google (and possibly other search engines), keep track of what you search for, if you are logged in. Anyone with (access to) your login name and password can access your search history. This includes any computer you logged in to Google on (e.g. if you accessed your Gmail from your mother's computer). I do ...


24

Sorry if I'm stating the obvious, but: Why don't you ask your mother how she's doing it? Or someone at the uni, if your mom is not cooperative? Or, if you receive support from a social worker, ask him/her? Or, if all the above fails, a sufficiently trusted computer-literate friend who can gain access to your computer (if the monitoring is device-based) or ...


182

Be careful about assuming too much. You say that you know "surefire" that your university is spying on you, but your only evidence is that your mom is computer illiterate and you're "sure some of them know more than they should" about you (WARNING - this is a red flag for those of us not in your situation, you do indeed sound extremely paranoid). If you ...


0

Given the current information there are a lot of possibilities how this could happen. Try to eliminate a few. Do you have a mobile device with a separate data plan that is not paid by your mom? If not you can get cheap prepaid ones for like 10$. If you have a mobile data plan do all your surfing on your computer for some time over this mobile plan by ...


3

I say that you haven't given us enough information to identify how this is done. Your mother's lack of technical literacy may not matter much as long as she knows somebody (or knows somebody who knows somebody) who was willing to lend a hand getting a solution installed. Perhaps, also, it's not your mother who is spying on you, but someone else (with more ...


3

If you want to be sure that you are safe, reinstall your operating system from a clean (stock) image. Then turn on 2-factor authetication for all possible services (Google, Facebook) and change all passwords (including your mailbox password). Against network traffic spying you have to use VPN connection - it encrypts traffic from your computer to the VPN ...


74

This sounds like it would mostly likely be some kind of Internet monitoring software (a.k.a legal spyware) installed on your computer when you set it up. Some ISPs provide this kind of service either network blocking or device monitoring (e..g this article from the UK). From the statement that they can view HTTPS connections, we can rule out just standard ...


10

Was your computer supplied by the university, or using a university OS image, or custom network access software? You mentioned you're not using the university network, however if you have their network monitoring software installed, then they still could see your history. It's unlikely to be your ISP. They don't typically have the resources, or inclination ...


0

I would almost disagree with Matthew. Not saying its impossible but to release that information would require more than just "Being a parent". We are talking about Warrants and Subpoenas to obtain that information given that she does not lease the Line for the university and you are older than 18. My guess is something similar to a Trojan. She installed a ...


0

The key here is your university. More than likely, the university intercepts all traffic on it's network and applies filtering (as well as logging). Thus your mother simply gets that info from them. I would suggest using a VPN for your connection. Tor maybe over kill and isnt even the best solution for this case. Note that in some cases the school may ...


1

You used a VPN. You hoped that the effect would be that you could hide your location and IP. There are lots of ways that websites can determine your real IP, and they are not considered hacking. What you need to do is to harden your setup to make it harder for these "de-anonymizing" techniques to work.


0

What would be ideal would be for gmail to scan your mail and when placing it in your inbox encrypt it with your public PGP key. That way, they get to accomplish their goals per their agreement and the user has the assurance that their e-mail is encrypted and safe on disk when it is at rest. The added benefit is the user gets the benefit of security and ...


2

As long as Bob keeps his private key secret you can simply encrypt everything which only Bob should see with Bobs public key. This also includes the signature, i.e. when sending a mail from Alice to Bob: encrypt the mail with Bobs public key make a detached signature for this mail using Alice private key encrypt this detached signature using Bobs public ...


2

What steps should I take next to protect myself in case? If you're really concerned that someone might be using your google account on a different Chrome (which would result in Chrome syncing their autofills to your Chrome), make sure you have 2-Factor Authentication enabled for your Google account. You can also set a "Sync Pass-phrase" for your Chrome ...


1

We can't give a definitive answer from the info you've given. That said, I wouldn't worry. Most identity theft attacks wouldn't type things into your Chrome browser. Once an attacker can type things into your browser, there are better attacks (eg: stealing financial info) than identity theft that they can perform. Most likely, this is a problem with auto ...


0

One of the major reasons I've heard about, and from my own government no less as a warning (when facebook was new) is none other than preventing crime from being committed to you in the first place. Lets spin things around, government surveillance is bad, sure but government being able to watch you means that anybody else with a relatively simple set of tech ...


4

I'm going to answer just one aspect of this problem: browser identification. Your browser is a great source to identify you. You can test and see how unique your browser is using EFF anopticlick. I just did that test, and while my browser is pretty good at fighting off trackers, it can be uniquely identified: your browser has a unique fingerprint Your ...


3

There were several facts which can be used for testing anonymity. In general you could check it out by the following Set two email accounts send the email to another account ,verify the ip address. Your Browser might reveal some sensitive info,check it out here Use network analysis tools like wireshark and you could analyze the packets for anonymity If ...


1

Yes, this ISP can see your traffic, asssuming other protocols (HTTPS, etc) do not prevent them from doing so. You've got two aspects to the connection. Client <---> VPN Endpoint VPN Endpoint <---> Internet For (1), assuming it has been setup correctly, no one will be able to see anything outside of encrypted traffic. This is true whether you're ...


2

The ISP sees everything as it is, the connection is only safe between you and the VPN. As you mentioned, this VPN allows you to browse on insecure networks, public wifi hotspots with safety, defends against eavesdropping and MITM, so still good to have. There are no other solutions. If you try to communicate with a website with or without VPN that only ...


8

Is Windows 10 Leaking my IP Address? Almost everything is leaking your IP address. I'm going to avoid telling you your IP address isn't secret. You seem to already know that. Instead, I'm going to tell you what you're looking for: Yes, Windows 10 leaks information about your IP address ten over a hundred times until Sunday, even if you're behind a proxy! ...


0

This is a question you should answer for yourself. The most accurate way to know what you're sending is to download and install Wireshark, and set it to capture from your WiFi network interface. Connect to the cafe's wireless hotspot, and observe the start menu for a minute or so. Terminate the capture. You'll see literally hundreds or thousands of IP ...


0

To be more simple, lets assume, you have set internet time sync on your windows. By default it contacts time.windows.com to fetch the time. When a client connects to a server, the IP is disclosed, because IP is the metadata of the established connection. Let that be any kind of connection on any OS irrespective of Windows 10, the answer is so so so simple. ...


0

Windows "leaks" your IP Address to Microsoft since there's Internet Support. The Network Connectivity Status requests a file from Microsofts servers to check if your connection works. This can not be connected with your computer, tho. If I'm at an internet café with my notebook and go online, does Windows 10 send out information that can be used to ...


0

The start menu only fires web requests if either Cortana or the search bar is enabled. If both are turned off, you're not leaking your IP to Microsoft.


1

Menu > Settings > Extensions > Details You can't change the permissions of an extension. It is assumed that the extension can't work properly without all the permissions, so allowing it some permissions and not others would break it partially.


0

This is something a LOT of people asked a LOT of times, and honestly the information is outlined pretty easily in your Terms of Service and how the internet works as a WHOLE. However more specifically in the start menu there is the smart panels, which have web based content, which will send your IP address out to the web servers(same with the search pane). ...


7

Since your IP address is essentially the internet equivalent of your postal address and since it is required for routing your request (and especially the response) over the internet, any website that you connect to will have access to it. Any email server you connect to will have access to it, etc. Every time you connect to another computer, that computer ...


2

It doesn't make any difference with or without SIM card. Briefly said, by sending email you will leave some traces. Some email services will send your IP address. (X-Originating-IP) Here you can analyze email header, it's useful to understand what's happening in background. https://mxtoolbox.com/EmailHeaders.aspx


1

However, having multiple encryption subkeys is cumbersome since the person sending a message to me must known which key to use to encrypt their message. Am I correct? Yes. There is not even a way to couple subkeys to user IDs or any kind of target devices. Is it possible to decrypt messages even after the key is revoked? Yes. Revocation does not ...


0

There is much you can do. CEE laws include the "right to be forgotten". That means, you have to personaly find each and every site and search engine that could have a track of the information you want to remove, an ask the site manager to remove it. No problem for major search engine like google, at least at first sight. You ask them to de-reference the ...



Top 50 recent answers are included