The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

3
votes
3answers
154 views

Using Tor browser on a Windows machine

Suppose a person is running a Windows 7/8 operating system. If she/he uses the TOR web-browser, can Microsoft see what they are browsing? Would that not defeat the point of using TOR in the first ...
3
votes
1answer
60 views

Browsers root CA accepted, countries and checking fingerprints

This is a question derived from several others, and I can not comment on those, so it is not duplicated, please read: In some related questions some users comment that: "They wouldn't ...
-2
votes
2answers
47 views

Is there any way to formally ensure privacy to my clients by technical means?

Imagine you are a software solutions company. One of the solutions you provide are domains, email and forwarding mail to their Gmail accounts. After we have created a domain and several email ...
1
vote
1answer
49 views

Resellers and web admins and email privacy

Maybe I'm missing something, but this is "my problem". If you ask some company to create some domain for you and several e-mail account with that domain and forward that information to your gmail ...
6
votes
2answers
373 views

Why do some companies ask last 4 digits of my SSN or a scan of my ID? What are my risks?

Yesterday I found out that some major service provider (online rentals) that I use now requires proof of my identity if I want to continue and make a booking. I was offered 2 options: 1) Enter last ...
0
votes
0answers
33 views

Websites disclosing their users emails [on hold]

What if I have found several websites that do not correctly protect users information. For example, if you open the developer tools to see the XHR requests and websocket messages you may see the ...
-2
votes
1answer
50 views

Freedom method for anonymity

In a book I am reading, a system called Freedom is mentioned as a means to protect user privacy. Though at some point it mentions that it uses multiple proxies, so even if a node behaves maliciously ...
-1
votes
0answers
40 views

What software ISPs (or else) use for DPI? [closed]

I am wondering what type of software or what exact product Internet Service Providers (ISP) all around the world can use for Deep Packet Inspection (DPI) purposes? As i understand DPI, this is a ...
-1
votes
2answers
43 views

Mobile Phone security - help finding security/privacy review/discussion [closed]

I'm in the market for a new phone, and was wondering which modles/operating systems are the best to protect privacy/security. I don't use social media, so won't have Facebook/Twitter,etc. I am fairly ...
0
votes
0answers
56 views

facebook security question [closed]

Facebook question. How does facebook get list of "people you may know"? I am a professional with 1500 clients on my computer. All of a sudden, my clients are listed as "people you may know" Many of ...
1
vote
2answers
79 views

Is It Good or Bad Practice to Fake User Agent

I'm using a browser on Mobile. I found a program that can fake my User Agent (UA), so I changed to something else. Is this good practice or bad practice in terms of preserving privacy? The way I ...
-9
votes
0answers
64 views

Can someone explain how to remove a tagger? [closed]

Can someone explain how to remove a person who is following my IP? A person followed me from one site where my user name was z11 to a different site where i was called newuser. They said hello to ...
0
votes
0answers
76 views

How can secure email be used while avoiding government attention?

Presumably all unencrypted email is available to federal agencies including IP addresses, header information, and email content (eg, through SMTP with or without SSL and TLS -- thunderbird has an ...
-5
votes
1answer
111 views

Is Google intercepting my emails? [closed]

I was recently checking my Recent Activity under the "Details" tab inside my Gmail inbox, and I noticed this IP Address, it's not my IP: I proceeded to look up the IP and it's located in Mountain ...
4
votes
0answers
45 views

What are the compliance requirements or standards for a non-US firm hosting personal data in the US?

I work for a head hunting company with offices in Canada and Asia. We migrated our custom built CRM system from our own servers hosted in Japan to an Amazon hosting service meaning that all our data ...
4
votes
1answer
40 views

How accurate the recent activities location provided by Microsoft emails

One of my emails is on hotmail.com provided by Microsoft. Recently, after few suspicious incidents where my computer was hacked and many other accounts, I changed all my passwords including this ...
-2
votes
0answers
25 views

So I have a compter from my company and I want to know. if I am not on windows working page can my employer still see my browsing data? [duplicate]

So I go on incognito and I watch videos and browse websites. so if I do this can my employer see what I am doing? And how can they see. Please give a brief step by step description. By the way I ...
-3
votes
3answers
75 views

Why has there been a complete focus on privacy against the government but not against everybody else? [closed]

Not sure why the concern on privacy has been focused on the government. There has been no mention for people on the ability of their companies, exes, and even the random stalker to snoop their online ...
1
vote
1answer
61 views

Do file hosting services check user data manually by human? [closed]

I wonder if file hosting services like Dropbox, MediaFire, OneDrive, Google Drive, etc. manually check user data for piracy or copyright infringement. Although their terms of service always say that ...
-1
votes
1answer
58 views

Is someone reported a video to the fbi, would the IP address be traced? [closed]

Supposedly, if someone were to report a video to the fbi, if anyone watched that video, would their ip address be traced down?
-1
votes
1answer
35 views

Should a Web Search with Evernote results be a concern?

While using a Chromium based browser (Chromodo) and doing a regular Google search, Evernote is now appearing on the side with "related results in your notes". Does anyone know how they are doing ...
5
votes
3answers
109 views

Can a website detect my local WIFI network I am in?

I have two computers, both of them locate at the same local WIFI network ( ie: connected to the same router). I use VPN on a computer to visit a website, and don't use VPN on another to visit the ...
2
votes
1answer
52 views

Hushmails “Secure Forms” & HIPAA

I just picked up a job for integrating Hushmail's Secure Web Forms into a medical website. The forms will submit patient's (PHI) data to Hushmail's servers, encrypt the data, and then send it to their ...
13
votes
1answer
1k views

Which parts of an HTTPS connection can be revealed? [duplicate]

Say, I use a public WiFi connection to load https://google.com in the browser, and then continue browsing on that site for a few more pages (performing searches in Google). Can anyone else (like ...
5
votes
1answer
77 views

Are images created with commercial software stamped with identifiers that can be traced back to a serial number?

To the best of your knowledge, do images created with Photoshop and/or other commercial software embed any bits of information that can allow someone (governments, security agencies?) to trace the ...
-1
votes
2answers
66 views

Can the payer of my cell bill listen to my calls? [closed]

I am not an IT person so I'd need a simply-worded answer. I'm considering getting a smart phone, and someone else would be paying the bill, someone I don't necessarily trust. I'd like to know: would ...
3
votes
1answer
37 views

What are the security benefits to block all http referer header requests for web browser?

I would like to know also if you lose site functionality. Is this a security benefit that is beneficial than compromising functionality (if compromising at all)? What I mean by this is one a ...
47
votes
6answers
7k views

Why do security experts like Snowden use email services like Lavabit and Hushmail rather than self-hosted email?

Why would anyone like Edward Snowden rely on 3rd party services like Lavabit or Hushmail to host his email? I mean it's very easy to set up a self-hosted email server. What you need: Rent VPS (even ...
1
vote
0answers
52 views

How do overlay network nodes communicate without IP addresses? [migrated]

I've been reading about how Tor and I2P use cryptographic addresses to send messages to other nodes, but how does this work? I looked through the documentation for each and neither is very clear on ...
1
vote
1answer
117 views

Is it there any effective way to prevent shodan to access my webcams [duplicate]

Recently while browsing using shodan, I came across a search string to explore webcams. Some of the searches I carried out were: webcamxp city:city name webcamxp geo: longitude and latitude ...
3
votes
2answers
113 views

Cryptographic algorithm to anonymise strings in pronounceable fashion?

NB: I originally posted this on SO (link), but then realise Security SE be more suitable, since there's existing questions around Crypto-PAn, which is similar here I have a logfile of database ...
1
vote
1answer
134 views

Can my ISP/MSP read my Whatsapp messages?

I wonder whether the Whatsapp messages are sufficiently encrypted so that the ISP/MSP ( mobile service provider) cannot read what is inside? I will be travelling to some of the most oppressive ...
0
votes
0answers
81 views

How 'private' is my setup?

I'm currently running QubesOS (so essentially a virtualized Fedora operating system), which I use to access an offshore VPS through I2P (using garliccat). I then route all my traffic through the VPS ...
1
vote
0answers
39 views

How to monitor kernel mode driver traffic (ESEA client)

E-Sports Entertainment Association (ESEA) is an alternative method of finding players to match up against in (among others) Counter Strike GO. They are known for having the best anti-cheating measure ...
1
vote
2answers
130 views

Online anonymity for a journalist in a dangerous country [closed]

I am a journalist in a corrupt country. I am concerned that my online usage will allow my antagonists to track me down, and it wouldn't end very good. I am aware that I may use TOR and VPNs, and ...
0
votes
0answers
42 views

Theoretical VPN and Tor Encryption Chain

Okay, so I've been looking around at the benefits of using tor to access you vpn and vice versa. Here's what I've come up with: VPN -> Tor Pros: Hides Tor usages from isp Hides your activities ...
1
vote
0answers
132 views

Minds.com : Can we trust it on privacy terms? [closed]

The Minds.com social networking offers: Open Source encryption algorithms for all communications and data storage. Open Source code for their associated tools (as for now: Android and iOS). How ...
1
vote
1answer
363 views

What happens if an attacker steals my phone's IMEI number?

I have some questions regarding IMEI numbers and data and identity theft. While searching online I have found many conflicting answers regarding this topic and would like some clarification if ...
5
votes
1answer
102 views

How do I protect myself from the aftermath of the OPM hack?

As a federal employee, I, along with some 4 million other Americans had our information compromised in the recent OPM (office of personal management) hack. Former and current addresses, names of ...
0
votes
1answer
72 views

Court order and domain + hosting privacy [closed]

I'm receiving legal threats from a law firm that wants me to remove information from my website that one of their clients are unhappy with. Specifically they threaten me with a court order forcing me ...
0
votes
2answers
130 views

Authenticating Hotmail's certificate and connection security

I've recently received the following error message from hotmail.com (or live.com) after I have logged in using Chrome browser, consistent using different accounts and computers (regardless of 2FA or ...
1
vote
1answer
17 views

What TCP-level commands affect the global configuration of the stack?

I'm looking at TCP, and what options may affect the global configuration so that I can detect a repeat visitor. What TCP commands (for lack of a better word) affect the global TCP stack? Or that or ...
0
votes
1answer
147 views

Defeating Browser Fingerprinting by spoofing the browser user agent and VPN

I don't want any website to identify me and to know what is my geographical location. As far as a website is concerned, I am always a new visitor who never visits it prior. If I leave the website, ...
3
votes
3answers
438 views

Privacy and VPN - does employer's VPN still log activity when I am connected by wifi?

A company I work for wanted to use a VPN client called Junos Pulse to connect to their file server. I am on my personal computer, and connected to my personal wifi. I was not using their VPN for ...
-4
votes
1answer
125 views

I abused my VPN, what are realistic privacy consequences? [closed]

Ok let me give you a small background of my problem. I am using a (very good) VPN service as I am trying to hide the fact that it is me (ip:....,name:....,etc) who is managing a particular website. I ...
2
votes
3answers
220 views

How can two parties compare whether a simple (5 letter) shared word matches, without disclosing their word to each other?

I'm having some trouble with this scenario, some advice would be great. The context is that a group of people have each been give a simple 5 letter word - for example: Alice: ACTOR Bob: JEANS Dan: ...
-1
votes
1answer
151 views

Can other people monitor my internet activity in the same WiFi network? [duplicate]

I have a tablet that I share the same WiFi with two other people/computers. I have installed the CM Security anti virus app, and also a cleaning app. I think that my activities are being monitored by ...
4
votes
1answer
44 views

Practical implications of 2014's android SOP vulnerability

For a project at university I have done research about all kinds of security issues, especially privacy-related ones, that have come up on mobile OS and applications over the last few years. One of ...
-1
votes
1answer
34 views

What is the best formal method to prove the privacy (anonymity) of a security protocol

I am studying about TOR. I require to formally verify that the involved protocols provide anonymity. However, I could not find a suitable formalism of anonymity. If there exist any ...
1
vote
2answers
189 views

What is the importance of an ISP maintaining IP-Assignment logs?

I was reading an article which explained that there is a growing movement to force ISP's to store IP-assignment logs for DHCP connections for longer periods of time in order to fight cyber-crime. ...