The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

21
votes
6answers
3k views

Why no self-hosted email? (Snowden, Lavabit, Hushmail, NSA)

Why would anyone like Edward Snowden rely on 3rd party services like Lavabit or Hushmail to host his email? I mean it's very easy to set up a self-hosted email server. What you need: Rent VPS (even ...
1
vote
0answers
52 views

How do overlay network nodes communicate without IP addresses? [migrated]

I've been reading about how Tor and I2P use cryptographic addresses to send messages to other nodes, but how does this work? I looked through the documentation for each and neither is very clear on ...
-1
votes
0answers
50 views

Guide me in building a successful career in cyber security field [on hold]

I recently watched Mr.Robot tv show and i'm very impressed with elliott-cyber security engineer. I like the way he does all those protecting the servers thing :D I am very interested to know what it's ...
1
vote
1answer
109 views

Is it there any effective way to prevent shodan to access my webcams [duplicate]

Recently while browsing using shodan, I came across a search string to explore webcams. Some of the searches I carried out were: webcamxp city:city name webcamxp geo: longitude and latitude ...
3
votes
2answers
86 views

Cryptographic algorithm to anonymise strings in pronounceable fashion?

NB: I originally posted this on SO (link), but then realise Security SE be more suitable, since there's existing questions around Crypto-PAn, which is similar here I have a logfile of database ...
1
vote
1answer
100 views

Can my ISP/MSP read my Whatsapp messages?

I wonder whether the Whatsapp messages are sufficiently encrypted so that the ISP/MSP ( mobile service provider) cannot read what is inside? I will be travelling to some of the most oppressive ...
0
votes
0answers
76 views

How 'private' is my setup?

I'm currently running QubesOS (so essentially a virtualized Fedora operating system), which I use to access an offshore VPS through I2P (using garliccat). I then route all my traffic through the VPS ...
1
vote
0answers
20 views

How to monitor kernel mode driver traffic (ESEA client)

E-Sports Entertainment Association (ESEA) is an alternative method of finding players to match up against in (among others) Counter Strike GO. They are known for having the best anti-cheating measure ...
1
vote
2answers
87 views

Online anonymity for a journalist in a dangerous country [closed]

I am a journalist in a corrupt country. I am concerned that my online usage will allow my antagonists to track me down, and it wouldn't end very good. I am aware that I may use TOR and VPNs, and ...
0
votes
0answers
34 views

Theoretical VPN and Tor Encryption Chain

Okay, so I've been looking around at the benefits of using tor to access you vpn and vice versa. Here's what I've come up with: VPN -> Tor Pros: Hides Tor usages from isp Hides your activities ...
1
vote
0answers
113 views

Minds.com : Can we trust it on privacy terms? [closed]

The Minds.com social networking offers: Open Source encryption algorithms for all communications and data storage. Open Source code for their associated tools (as for now: Android and iOS). How ...
0
votes
0answers
63 views

Adblock Plus blocking a lot of ads on webpages that don't even have ads? [migrated]

I was just checking my own website and noticed that Adblock Plus v1.9 blocked 13 ads on one of my pages and another 4 on one other. This is interesting to me because I have no ads on my site. I'm ...
1
vote
1answer
150 views

What happens if an attacker steals my phone's IMEI number?

I have some questions regarding IMEI numbers and data and identity theft. While searching online I have found many conflicting answers regarding this topic and would like some clarification if ...
5
votes
1answer
80 views

How do I protect myself from the aftermath of the OPM hack?

As a federal employee, I, along with some 4 million other Americans had our information compromised in the recent OPM (office of personal management) hack. Former and current addresses, names of ...
0
votes
1answer
71 views

Court order and domain + hosting privacy [closed]

I'm receiving legal threats from a law firm that wants me to remove information from my website that one of their clients are unhappy with. Specifically they threaten me with a court order forcing me ...
0
votes
2answers
104 views

Authenticating Hotmail's certificate and connection security

I've recently received the following error message from hotmail.com (or live.com) after I have logged in using Chrome browser, consistent using different accounts and computers (regardless of 2FA or ...
1
vote
1answer
17 views

What TCP-level commands affect the global configuration of the stack?

I'm looking at TCP, and what options may affect the global configuration so that I can detect a repeat visitor. What TCP commands (for lack of a better word) affect the global TCP stack? Or that or ...
0
votes
1answer
105 views

Defeating Browser Fingerprinting by spoofing the browser user agent and VPN

I don't want any website to identify me and to know what is my geographical location. As far as a website is concerned, I am always a new visitor who never visits it prior. If I leave the website, ...
3
votes
3answers
404 views

Privacy and VPN - does employer's VPN still log activity when I am connected by wifi?

A company I work for wanted to use a VPN client called Junos Pulse to connect to their file server. I am on my personal computer, and connected to my personal wifi. I was not using their VPN for ...
-4
votes
1answer
113 views

I abused my VPN, what are realistic privacy consequences? [closed]

Ok let me give you a small background of my problem. I am using a (very good) VPN service as I am trying to hide the fact that it is me (ip:....,name:....,etc) who is managing a particular website. I ...
2
votes
3answers
215 views

How can two parties compare whether a simple (5 letter) shared word matches, without disclosing their word to each other?

I'm having some trouble with this scenario, some advice would be great. The context is that a group of people have each been give a simple 5 letter word - for example: Alice: ACTOR Bob: JEANS Dan: ...
-1
votes
1answer
99 views

Can other people monitor my internet activity in the same WiFi network? [duplicate]

I have a tablet that I share the same WiFi with two other people/computers. I have installed the CM Security anti virus app, and also a cleaning app. I think that my activities are being monitored by ...
4
votes
1answer
41 views

Practical implications of 2014's android SOP vulnerability

For a project at university I have done research about all kinds of security issues, especially privacy-related ones, that have come up on mobile OS and applications over the last few years. One of ...
-2
votes
0answers
20 views

Restricting C drive access on windows by limited User but allow to install new software [migrated]

I want to restrict the user to access C drive but want to allow installation of new software. scenario is user is downloading a software and installing from a wizard but he can access to installation ...
-1
votes
1answer
30 views

What is the best formal method to prove the privacy (anonymity) of a security protocol

I am studying about TOR. I require to formally verify that the involved protocols provide anonymity. However, I could not find a suitable formalism of anonymity. If there exist any ...
1
vote
2answers
180 views

What is the importance of an ISP maintaining IP-Assignment logs?

I was reading an article which explained that there is a growing movement to force ISP's to store IP-assignment logs for DHCP connections for longer periods of time in order to fight cyber-crime. ...
1
vote
2answers
80 views

Saving an Id on a cookie. Security point of view?

I'm developing an ASP.NET MVC 5 website, which a user can select some filters, based on those fillers the server process a result, and the user can make a order and pay for it. In my Order table i ...
3
votes
4answers
223 views

How to detect self destructing emails? How to prevent from self destruction?

Recently I came across a gmail extension for Chrome browsers which claims to send self destructive emails. I tested by sending self destructive emails to my email account and it works fine Now my ...
0
votes
1answer
38 views

How would iOS or Android app “firewall” for extended permissions (location, etc) work?

I'm interested in blocking or reporting any application's usage of extended permissions, regardless if they are granted those rights, such as: GPS / Location / Wifi Radio signal data Telemetry My ...
9
votes
5answers
1k views

Do VPNs really mask your identity or is it a facade? [duplicate]

Disclaimer: This is NOT intended to educate myself or others on carrying out illegal activities. I am interested in security topics and as a craftsman I pride myself on continued education. THAT ...
2
votes
1answer
49 views

GPG: Can't encrypt DSA 3072 keys

I would like to ask this question as I'm not the first person which has this behavior. I'm trying to encrypt a simple message using GnuPG using a public key I've received from a friend, he's using ...
1
vote
2answers
91 views

Rationale behind hiding originating IP address in emails?

Gmail has been hiding originating IP addresses for quite some time now. Hotmail and Yahoo have started doing this too. Apart from obvious privacy implications of revealing the sender's IP address, is ...
1
vote
3answers
108 views

Should I use my trusted VPN for all my traffic? [closed]

I use my trusted VPN primarily for the sake of anonymity (to avoid data being collected about my Internet browsing), although I am aware of its security benefit -- traffic encryption. My question, ...
3
votes
4answers
193 views

In a monitored network, can the admins tell if Tor is being used?

I'm not asking if Tor is secure, I'm asking if an observer can know you are using Tor? For example if a persons ISP or company network monitors traffic would they be able to determine with certainty ...
-1
votes
1answer
71 views

Can I use a VPN to disguise internet traffic at work? [closed]

I have seen this question asked before; I want to know if I can use a VPN to disguise my internet traffic so my employer can't see what websites I'm visiting while at work. However, unlike most ...
1
vote
2answers
84 views

What are the pros and cons of using DNS to block unwanted domains?

There are many methods to block unwanted outgoing requests. Examples include browser settings and extensions, and .hosts files. While DNS blocking won't affect direct accesses to a numeric IP address, ...
1
vote
2answers
54 views

Potential worm damage on a physically isolated Tor system

I'm setting up a physically isolated Tor system (with one computer serving as the workstation and another as a Tor gateway), and I'm concerned about methods a worm could use to infect my OS. In the ...
0
votes
0answers
309 views

Does this list every Chrome extension/addin that may leak privacy?

I am looking for a simple list of all extensions, preference, custom processes, and "flags" that may disclose a user's privacy or other details to a 3rd party. To that end, I discovered: ...
2
votes
1answer
111 views

What is the best setup to keep my email private from both attackers and government agencies?

I am attempting to setup a secure and private email account for my company. we currently use gmail which actually requests the emails from a hosting service provider that is configured with our ...
3
votes
2answers
178 views

How does my browser detect my location, even via proxy?

How does my browser detect my location even via proxy? I have tried this code via VPN and got the same result as without it. According to the specification my browser should detect it from: ...
2
votes
3answers
630 views

How secure is VirtualBox for privacy/anonymity? [closed]

Is it possible that Oracle places backdoors in VirtualBox that compromise a user's privacy/anonymity? For example, is running Whonix through VirtualBox a secure set up if your host OS is unencrypted? ...
39
votes
5answers
6k views

Bring your own phone to a (new) job: Consequences?

I am starting a new job, and I have the choice to receive a phone from the company, or bring my own phone. I am considering using my own phone, to avoid having an extra device, but I want to better ...
5
votes
2answers
126 views

Files encryption for flash drive privacy/security

Looking to encrypt files on flash drive (for backup) just in case it gets stolen or lost. Don't want to install any extra software like TrueCrypt but instead just use what's already on most computers. ...
4
votes
2answers
108 views

Solution to remain anonymous on a website that dismiss tor users?

I want to access to a website who recognize tor users and dismiss them. I have read that if you connect to a proxy after your tor exit node, the website wouldn't know that you are a tor user and ...
0
votes
3answers
103 views

Security benefits of hosting your CMS on localhost

If I host the CMS for my online website on localhost, will that mean that no one online can access it? If not, what is the most secure way to store your CMS?
0
votes
2answers
79 views

How can I stop an account I don't control from sending spam email in my name to my contacts?

Recently I received an email from a friend with "My" email to them attached. The email "I" sent them was obviously spam, one of those "You have to see this..." emails. The email had been sent to ...
-1
votes
4answers
320 views

How to find out if somebody is spying on my private browsing data in the same WiFi network? [closed]

I live in a hostel and eight people including me, are using the same WiFi network. One of my friends is a "computer wizard". I would like to know if he is secretly checking my browsing history and ...
0
votes
2answers
145 views

Is all encryption compromised? [closed]

Assuming that what I read about the Nazi enigma encryption being broken in ww1 and ww2, where the code breakers hid the fact that they had broken the code, allowing the world to feel that the code was ...
-3
votes
2answers
96 views

Can free email provider's partners and affiliates read your emails? [closed]

I read that if you use free email, these entities have access to your very personal info!: "Your email provider company itself, like Google Their partners and affiliates Your ISP Various ...
3
votes
4answers
137 views

Do search engines give searcher's IP address to sites that come up in search? [closed]

Ok so for example, I search "stackexchange" and a bunch of pages come up in the search result - of course most of them from this very site, and many other ones talking about stackexchange. Would this ...