New answers tagged

1

Tor works by routing the traffic through many nodes between you and the host. Here is a good diagram


0

To answer this question directly: is using just proxy protection for this? Possibly, but a proxy would have to be specially configured to manipulate the traffic it receives. Even then it is still might go over the ISP "wire" where they inspect the traffic and forward it along. Keep in mind a proxy is just something between your end point and the ...


1

A relevant base of the level of trust of an app can be how much of your phone does it needs to access. Some apps require very little access and can do a lot of useful stuff. Some require only needed access, like a flashlight app needing camera access, but many also abuse wanting access to way more than they actually need. It would be illogical for a ...


3

This issue affect both laptops, tablets and cellphones with similar solutions, so even if only laptops were explicitly mentioned in the OP's question (with still a link to an article focusing on cellphones), I think it can be useful to address the issue as a whole. There are several ways to counter malicious use of embedded microphones: Physical ...


1

I think the goal of self-destructing email is not to erase the email, but to erase the information about who generates/sends the email. Under this idea: Self-destructing email works if content of the email can be easily generated. If the email contains only text (e.g. "I love you!"), then the receiver can easily write it down or copy it. But with a self-...


6

The article itself clarifies that the source of the tip was an employer: Update: Police in Suffolk County, NY, released the following statement on Thursday evening: "Suffolk County Criminal Intelligence Detectives received a tip from a Bay Shore based computer company regarding suspicious computer searches conducted by a recently released ...


0

I have this problem. I solved it by using a WiFi media bridge to connect to the existing WiFi, connected that to a firewall, then could connect another device behind the firewall (another AP with a different password if necessary). It protects things like my file stored on my NAS and prevents users from directly connecting to my devices.. however as the ...


0

I only have a windows version in my house to connect to a computer. The rest is run on Linux. Most of us are decent people, and doubt that would eve be subject to the interest of Microsoft. But in reality this is an honest declaration that your data is available to them and anybody that has access to that data in transit. If you have something that you ...


4

There can be two cases while you're browsing : Over HTTP : In this case all your traffic goes in plain-text format, hence if an ISP wants to keep track of browsing history, they can easily do that. But in most cases, ISPs doesn't care(unless Government force them to) about what you do with your internet package. But they surely can track you including ...


0

Yes and no. Location - easily traceable. Browsing history - not traceable Credit card - as long as the site is using HTTPS, no. Anything transmitted over HTTPS using a secure certificate isn't traceable. Give me time to write a more detailed answer later explaining why and how.


2

As Knorke mentions and the expanded passage explains, the article you referenced specifically refers to information stored on Microsoft Owned information systems such as that stored on servers that provide outlook.com email, or the file servers that house OneDrive cloud storage. A few other good references can be found in the following links: General ...


1

Can my cellphone be located when I use X/Y/Z? As long as it manages to reach any cell network, yes it can be located, and what you use on it will never change anything to this (no matter if it is GPS, VPN, or any other technology or software). Your cellphone needs to contact nearest cellphone masts in order to reach the network, and once it's done the ...


2

There are different layers and concepts to locating a phone. From a web server perspective: using the IP (and a geo IP lookup), which gives a quite broad location (country or regional level) adding the requested language (if any), in combination with the above can further narrow down the estimate You can hide these with a VPN and a languange setting. ...


6

Phones can be localized by various means: GPS sensor Wireless networks in range: Imagine you drive through a country and for every point on the map you store the wireless networks that you are receiving a signal from. Later when you try to locate yourself, you can query the map with the networks you are currently receiving and find out where on the map you ...


3

If you suspect someone of snooping on your electronic devices, you have to assume that person is tech-savvy enough to avoid being detected; especially with methods learnt on a public community site. Plant a false information compelling that person to perform a certain action (like spying physically) or reveal knowledge of that information, and verify the ...


9

This is the whole passage (source: https://privacy.microsoft.com/en-us/privacystatement): Finally, we will access, disclose and preserve personal data, including your content (such as the content of your emails in Outlook.com, or files in private folders on OneDrive), when we have a good faith belief that doing so is necessary to: comply ...


1

The are numerous opportunities for fingerprinting/privacy leakage at all levels of abstraction. A good survey can be found on this upcoming PETS paper (full disclosure: I am one of the authors). With regard to your specific question, I guess you are looking for something analogous to iHasApp? There are a number of ways of bypassing Apple's restrictions ...


3

If the device is enrolled on your company's network (using a device enrollment / Mobile Device Management process), they could have a lot of visibility. iOS allows for a "always-on VPN" (link). This allows for either certain or all applications to use a particular VPN connection; which could be your place of employment. With the implementation of enforced ...


0

As this page says: https://support.google.com/googleplay/answer/6014972?hl=en identity is mainly used to get your "contact card" which is obviously useful if the application want to automatically fill signature or sender friendly name. By following the link guideline to check the authorization: Using the Settings app on your device (for apps you've ...


0

Your network provider will see to which servers on which ports your device will connect. Your WhatsApp client will connect to well-known servers. So your provider will probably put the traffic you make over some WhatsApp servers into another category than any other traffic. This can be done by passively looking at your traffic. They probably have some ...


3

I'm afraid I do not have a good answer, but I do have some thoughts to consider that might help others to find a good answer. You leave your fingerprint behind everywhere already. However if someone wants to get your fingerprint, they currently have to spend the time and energy to get physically close to you and find a spot where they can lift a good ...


0

Well, if you use your fingerprint alone to unlock some highly secure device, this example should seriously worry you. It is harmless only if: they do not voluntarily store a full image of client fingerprints they have not been targeted by an attacker that steals them what they store cannot be used to build an image back But you should also know that each ...


1

I am the CEO of a real no Log VPN service. Here is how I would do it without violating a no log policy. I would create Layer 7 filters on the firewall that would pattern match abusive traffic in real time and then mark the matched packets. Once you have the abusive packets marked you could login to your router or WAF and monitor the marked traffic. From ...


-1

I cannot believe so many people tell you "no worries mate, there are other ways for someone to target you" The problem here is UNTARGETED ATTACKS. Someone getting your fingerprint digital hash and using it BECAUSE IT WAS IN A LEAKED DATABASE NOT BECAUSE THEY TARGETED YOU. I am sure what the theme park is doing is illegal in my country. I am not sure where ...


4

Well, If you may believe what their policy says, you shouldn't be that worried. In fact, even if they'd store your fingerprints and their database would be leaked doesn't mean that everyone can copy your fingerprint in the wild. Because a biometric device scans a part of your body (e.g finger) but the software used in that device must convert that image to ...


0

There are some devices like that, but there's actually an easier approach. If you really want to keep your screen from being seen then you can make your screen a privacy screen. When someone tries to look at this from odd angles, they can't see anything but dark grey. The screen filters are easy to find at many online retailers(search privacy screen filter)....


2

Yes. There are 'screen-protectors', or anti-glare protectors. A kind of foil you put on your screen so you can only see your screen in a specific angle (your angle). The other person would have hard times viewing your screen. NSA-employers are forced to use this. Also, on most Unix(-like) systems when you put in your password in the terminal, no asterix-...


0

There are a lot of settings and you will find a lot of collections of those. Here's another shameless self-promotion, but i think it will really help you: https://ffprofile.com The site guides you through different settings and after deciding what you want to disable, you get a generated config-file and possibly some addons. The project is linked there and ...


1

As a complimentary answer, in terms of Intel, nobody really knows because, for one, thus far no one has been able to figure out the custom compression algorithm that's used for packing portions of the underlying on-die and on-board binaries used to drive this feature. Compound that with the fact that attempts to dump shared libraries for the code, including ...


1

There are many ways that advertisers can track you across different sites. As mentioned here, Skype displays Google ads. In Google's Terms of Service, they state: Our automated systems analyze your content (including emails) to provide you personally relevant product features, such as customized search results, tailored advertising, and spam and ...


3

The new Intel Core vPro processors contain a remote access feature that allows full remote access to a PC at any time, even if when the computer is turned off. As long as the power supply is available, the system can be woken up by the Core vPro processor, which is able to quietly turn individual hardware components on and access anything on them. ...


1

I have contacted the authors and they were very helpful. The original quote says it all: The book is about randomized algorithms that act on data sets. You can always view these as deterministic algorithms, which take two inputs -- the data set, and also a string of random bits. The definition of differential privacy has a probability operator, and ...


1

This question bothers a lot of our customers. There are three major effects switching from a local-only account to a Microsoft account: Identification Microsoft will be able to identify the users from within different applications, websites and services. Even if they are using other hardware after a successful login (e.g. mobile phones or your friends ...


3

What are some reasonable/interesting ideas of ways to address this issue practically? GPG encryption, with steganography to hide the fact that you're using encryption in plain sight. The basic idea you need to avoid mandatory compromise to encryption, is find any data channel that is not blocked and use non-compromised encryption over that data channel. ...


0

You can try to create a SSH tunnel to tunnel HTTPS through it. I guess this post explains how to perform this in an effective way, otherwise you can find a lot of guides on the web explaining how to create a SSH tunnel.


0

Can I know if my mobile phone/computer camera has been hacked? Honestly these days it is not very likely that you will notice a hack unless you are installing from untrusted sources or have rooted (or jailbreak for an Apple device) in which case the sophistication of the malware is not enough to hide all the usual tell-tale signs (slowness, new ...


6

Figuring out if any device has been hacked is an extremely complex subject. In most cases, unless you know precisely what to look for or have weird side-effects of the hack, you may never notice it. Duct tape on camera lens will most definitely prevent anyone from seeing you. You'd obviously need to cover both cameras on a mobile phone. Other than that, ...


1

Q1 It depends on the sophistication of the attack. For a user of the device it would be difficult to perform an after-the-fact analysis, however there are examples of software that warn user in real time that some other software is using the camera. One such commercial solution for Mac is Micro Snitch. But these measures can be disabled by a prepared ...


2

Good webcams have a built-in feature that turns on the light whenever the camera is active specifically so you can't trick someone into thinking the camera isn't recording when it actually is. If it were done securely, that would be entirely in hardware, so that it can't be bypassed with software. Now, as to whether or not that's actually the case, it may ...



Top 50 recent answers are included