New answers tagged

0

Apparently the question is "is this a big deal". The answer is no, there are way more entertaining prospects than a person you don't know. That is... unless you're a celebrity.


2

Editing Wikipedia with an IP address as your identifier is often less anonymous than editing with a normal account. Why is this the case? Your IP address usually links you to an Internet Service Provider (ISP), and that often links you to a particular geographical location, or to a particular company. Internet tools such as whois and Reverse ...


3

Building on @AdHominem's good answer, I would add that your organization should have a security policy that clearly lays out your information classification guidelines. It's common to define three or four levels, such as "public", "internal", "confidential", and "sensitive". With each level, the policy should state very clearly what can happen with ...


0

You shouldn't trust the Firefox password manager because the master password is damn inconvenient to use. I've tried it, and after some days, each time I saw the annoying modal master password box each time the firefox crashed or was restarted has just become painful. I guarantee you that any normal user would quickly disable it, and you can do nothing to ...


1

Why not save the password in the browser: Because it makes it easier for attackers. If the site has an XSS or similar vulnerability they can steal your password. You install a bad plugin/... it can steal your password directly. The same is true if a legitimate plugin has a security hole used by an attacker. Getting it from a different process is much more ...


6

How trustworthy? Good enough for most purposes, and better than using the same password everywhere. Your data is encrypted Your Firefox Sync data is encrypted, and the encryption key remains on devices you control. Mozilla's servers only see the encrypted data and do not have access to the key. If they were hacked or served a government order, it is only ...


4

Sensitivity of data is determined by the data owner who is responsible for classifying the information and also liable in case the information gets compromised. So no matter if data is used by human resources department or marketing, the classification will stay the same. The relevant metric for estimating the sensitivity is closely related to the cost of ...


1

To answer your first question: the main reason you might not want to use the built in password manager for Firefox, or any given browser, is more to do with potential accessibility than security. By using KeePass with the appropriate browser add-in to gain access to that KeePass you may use a single KeePass vault to store all your passwords and gain access ...


1

The reason you might not want to trust Firefox is that you can get the usability and security benefits of using a password manager without trusting Firefox (or any cloud provider). As RobM points out, there a risk that Firefox can be compelled to turn over the data you send to them. There's also a risk that someone will break into their servers. Firefox ...


17

I agree with RobM. So it would be possible that they share everything they know about me with (american) governmental organizations. Yes, very possible. Are there even alternative browsers which wouldn't do this? The Onion Router. There may be others. Even Firefox will work this way if you use local syncing, and disable malware and phishing ...


7

To me, trustworthiness doesn't necessarily require a claim that an organisation will never disclose your details. Rather it means that any claims made should be honest. As a business, Firefox can be compelled by the governments of any countries it operates in to conform with their laws. An organisation that acknowledges this and clearly explains their ...


1

The privacy of a system is all about making clear to the user how their information is going to be used and shared. That is, the amount of control an individual should be able to have and expect. The security of a system is ensuring that this expectation of privacy is met. That is, the mechanisms that can be put into place to provide this level of control.


5

Security is defined as the state of a system in which confidentiality, integrity and availability of data is granted. Privacy is the ability of a natural person to control the distribution of his or her personal information. If you are using for example a system of a big company - let's call it Oogle - it might be that their system is pretty secure, but ...


0

A common website design has: User -> Website -> Application layer (e.g. Java, PHP, ASP.Net) -> Database The application layer connects to the database with one username and password all the time, the database contains the usernames and password hashes in tables like any other data, and user login and access controls happen inside the application ...


1

This might not be exactly what you're looking for but... Having your iPhone near your keyboard can make you vulnerable to keylogging. Before you call me crazy, I've actually conducted this experiment using neural networks and an Android's accelerometer and it could 80% guess what region of the keyboard the key press came from and could guess within a few ...


0

specific answer: Unblock-Us' website (incl the image you included) is quite misleading, as their DNS servers themselves don't offer any additional protection. What they actually mean is that instead of giving you the real IP addresses for some websites (e.g. Netflix.com), it'll resolve them to an IP for one of their proxies, which will then proxy the website ...


48

Essentially, it doesn't. DNS servers let your computer look up where websites and other services are based on friendly names, by converting those to IP addresses. Your ISP provides this as a service, but knows precisely who you are, and what IP your computer has, so can easily look up to see that @user1 has made a request to look at google.com. A third ...


2

It does not stop them from seeing your activity, it really does not. private DNS or not you will still be visible, you would need extra layers to ensure your privacy, but it does allow you to skip government rules. if anyone wanted to they could easily see who you are, you still use your public IP dont think doing this hides who you are.


5

DNS/Internet service providers may collect information about the traffic that you request, for internal auditing or to sell. One example from 2015 is that AT&T offered data privacy for a price By using private DNS servers the request for traffic will go through a trusted channel, still use the ISP infrastructure but not their resolution service.


7

One obvious answer is when the website contains applications that you can download - it can then offer the content appropriate for your operating system. If I go to www.videolan.org with Javascript turned off, the download link goes to the Windows binary, but if I turn Javascript on, it goes to the appropriate binary for the system I'm actually using.


0

The only way to do this is to deliver the data encrypted to the users browser and have browser code decrypt it. To achieve that, you must also provide a mechanism for the user to enter some form of key that only they know. You can simply present that to them as a passcode however and set suitable minimum length/complexity requirements. It is possible ...


2

Is this a security benefit It serves no real security purpose, but it serves a privacy purpose. By blocking the referrer then the sites you visit will not know what site you were previously on (maybe my visit to a clothing website was due to a link I found on a deviant sexual forum discussing how the clothing company has a sale on?). A lot of ...


1

They "technically" work by providing the company name and address to the whois database instead of yours. That's it. The main advantage is that you don't get your domain revoked for providing bogus information. And you can still be contacted through the registration company where needed.


2

Exiftool is excellent at viewing/editing document metadata. It's also multi-platform -http://www.sno.phy.queensu.ca/~phil/exiftool/ You can run it with the recursive switch so it can process all files in the current directory and all subdirectories. You could even write a bat one liner so it will be a set and forget operation to cleanse all metadata in the ...


1

Laws on computer surveillance are derived from laws regarding telephone surveillance and wiretapping. Those laws don't always fit the current situation, and the laws have not kept up with rapidly changing technology. So there are lots of holes in regulation and privacy law. One important concept is the "expectation of privacy," where a reasonable person ...


3

I believe that you are asking if a side-channel can be used to extract information from encrypted communications without breaking the encryption. Specifically, can detecting the number of ongoing communication channels provide you with information? The answer is absolutely. Note that I don't know how UK police radios work or whether what you propose is ...


3

Metadata can potentially provide information that an attacker would find valuable. For example, the author value can reveal the organization's username convention, which could be later used in conjunction with password guessing or social engineering. The software used to create the file can also be potentially usable for an attacker if the target is using ...


0

A keylogger like Micro keylogger can easily steal your passwords. Just change your passwords and never login your private account in those public computers.


2

Skype is definitely not a safe client to use. A Google search of "Skype exploit" will reveal a lot of its problems in regards to exploits and various news articles provide information on how the NSA uses Skype as part of its Prism program (e.g. ...


2

Typically, if you know ahead of time that you're going to want to revisit a page in the future, you'd add it to your favourites/bookmarks. The history feature is there for when you suddenly realise you want to revisit a page you were on yesterday / a week ago / a month ago. It is too late to turn the feature on. Yes, from a security perspective it seems ...


1

Almost all web browsers implement caching, so they technically have to manage a list of what is in the cache anyway. While the history feature nowadays might be implemented separately, and while you could build a cache that does not make deriving a history from it without analysing the cached content trivial (by using hashes instead of URLs as cache keys), ...


0

You can of course never be sure that there are no back doors in software you get from random places on the internet. So you have to a similar "due diligence" that is always warranted in security: to consider the value of what you are trying to shred up against how much you can trust the vendor. So go with the high-reputation vendors or write your own ...


7

He was using the blanket to fool visual recording devices attempting to steal his password, even though with modern technology x-ray or thermal imaging could effectively 'see through' the blanket.


6

Because it fits the majority Surveys (e.g. http://www.aleecia.com/authors-drafts/tprc-behav-AV.pdf) show that something like ~25% of people have ever used incognito mode and ~50% of people have ever cleared browser history. Needless to say, many of them don't do that all the time, so at any given moment a majority of users prefer to use a mode that does ...


1

TL;DR; It depends how you moved it. If you have never moved the files to Hard Drive B, it won't carry over the traces. The way the files are stored on a hard drive would leave traces of the file on Hard Drive A (gets overwritten over a period of time). The difference is that when you copy files from one hard drive to another, it only copies the files you ...


4

It depends on how you copy them. If you do a bitwise copy, aka exactly replicating every single bit from one disk to the other, you are copying over "slack space" which is where the recovery tool will work. If you do a file copy, then the empty space of the disk is ignored, and only the segments of data attached to a file header will copy over. The ...


12

The HTML standard is that unvisited links and previously-visited links are styled differently. By default in most browsers, an unvisited link is blue and a visited link is pink, but nearly every web page these days overrides that. In order to do this, you have to have a list of previously visited links so that you know what style to use for every link on ...


54

There are a lot of advantages. Here are some: Auto-completion of previously visited URLs you forgot, which can speed up the web surfing process tremendously. You might have remembered parts of a URL or website title, and your browser can usually pick those up if you typed them in. I love this feature. This can offer extra security. As mentioned by ...


4

First of all, I would change my password. Secondly, if at all possible, turn on two-factor authentication of some kind, so that you will be able to reset your password if someone should get access again, and actually change your password (is this possible with Hotmail? I know GMail supports it). You definitely don't want to be locked out of your own ...


1

Change your passwords from a trusted machine to prevent further access. Check your local privacy laws if that amount of monitoring is even legal in your jurisdiction. File a complaint that the monitoring activity interferes with your work and that you have reason to suspect abuse. But do not accuse a specific person without any proof.


7

TL;DR: Change your passwords Enable two-factor authentication to prevent attackers from changing your password Warn your sysadmin You should change your passwords ASAP. From a machine that you trust. What good is it going to do that the attacker can still log in too? What if they find a way to change the password, too? Any suspicious activity should ...


1

It might not be an admin, networksec, or a teacher. What if someone hacked their login? It might be best to raise the issue with your school. Do they have anyone that manages the security of their systems? Perhaps ask for a meeting with them and your college principal to have the issue investigated.


0

How it works NTFS, like other file system, goal is to maintain a logical map of file to the disk. The disk act as a large array. The file system allocate space using an efficient algorithm (Btree+ for NTFS). The logical representation : [file1, empty, file2, empty, file3, file4,...] actual disk : [file1, empty, file2, empty, file3, file4,...] ...


3

There are so many incorrect tinfoil hat solutions here. Allow me to present a correct tinfoil hat solution that fits into your "without formatting" requirements. Even magnetic force microscopy isn't going to get the files back if they've been deleted properly. Burning the drive is an extreme tinfoil hat option that is completely unnecessary. Taking Your ...


1

to add to the other answers, I also admit that the only true way of completely removing all treaces for even the most sphiscated attackers is to physcally burn/shred/etc. (destroy) the drive many people also go around the "standard" file shredding, working with the MFT etc. but this doesnt remove all traces that this thing even existed. for starters, dont ...


0

There are many methods and tools: Low Level Formatting Darik’s Boot And Nuke CCleaner SDelete Eraser Eraser is a freeware and open source security tool to completely remove data from your hard drive. It can overwrite data several times using randomized patterns of binary code. It essentially is a file shredder. Eraser is more convenient than ...


1

I'm just spitting in the wind; but to be certain I would use two hard drives. First, run command prompt as administrator. Then, type: cipher /w:drive letter and run. This will over write all free space on the drive, and all files marked for deletion. I believe it makes three passes. Use a utility to clone the data over to another hard drive verbatim ...


3

The Honest Truth Answer: Unless you physically destroy the drive by putting it through a metal shredder, there is no way to completely prevent that information from having a chance to be recovered by a skillful individual. If government level actors factor into your threat model, then you need to physically destroy the drive. The Good Enough Answer: ...


1

Wireshark is a passive packet analyzer which allows you to look at network traffic and search it. Ettercap can do that too, but it is also able to actively change any network traffic routed through it. You can set it up to drop, modify or insert certain network packets.


0

No, such features under mobile OSs today, do not unambiguously separate between 'privacy-leaks' and 'basic needs' — and that operating system developers are partly to blame. Details on this have been provided by other answerers, but this awareness was even reinforced in the question text.



Top 50 recent answers are included