The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [privacy]

The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all.

Filter by
Sorted by
Tagged with
-1
votes
0answers
53 views

What are the dangers of unstable ASCII characters? [on hold]

There are weak characters in ASCII that physically overlap other badly recognised characters, what exactly is the problem in here and what are the dangers?
1
vote
2answers
80 views

How do we cross-verify if the device is doing exactly what it is supposed to do?

How do we know any device is doing what it is supposed to do? For example, Android is an open-source OS (ignore google libraries for now) and they do claim that all passwords will only be stored on ...
0
votes
0answers
35 views

What is a fast and solid way to configure V2Ray in order to bypass China's GFW?

I do realize that the question can open a gate for discussion, but I am really looking after something concrete that would be working within the V2Ray toolkit, based on peoples experiences. I would ...
1
vote
0answers
109 views

Bizarre request being made from Chrome

I've been seeing a very weird request being made from my Chrome browser (haven't noticed it on Brave). It does not run on all websites, and not all the time (it can appear on a website, then after a ...
0
votes
0answers
23 views

Apps removing their permissions in OAuth

We are designing a web application for a customer and the main use case is that users will be using the system for anywhere between a few days and a few months. The customer would like to offer users ...
0
votes
1answer
65 views

How does DoH protect against ISP tracking?

Seems like a modern ISP would already be equipped with some basic level of packet inspection to identify outgoing TCP connections even if just for doing traffic shaping or carrier-grade NAT, and ...
0
votes
0answers
77 views

Can the employer fully access employee data according to EU law? [migrated]

The computers at the company I work for recently show the message below during log on. This computer system is the property of Company. It is for authorised use only. All activities conducted on ...
0
votes
0answers
2 views

Different tor bundle settings for different browsers [migrated]

I want to compartmentalize my digital activity dividing business, social, general browsing I don't want to use VPN cuz even if I pay, there is still an option for my data to be used the way I don't ...
3
votes
3answers
235 views

Can my employer monitor personal device use on my home network?

I occasionally work from home. I have a work laptop that I bring home and connect to my company's network using my home WiFi (I assume it has its own direct connection). I also have my personal ...
1
vote
1answer
62 views

Could we create a rating system for privacy?

I don't know whether something like this exists but I think it would be really useful if a privacy rating system would be established across all websites and apps. An example would be something like ...
0
votes
1answer
29 views

How to encrypt user data in app using Google Sign-In

I am currently writing an application which needs to store user data encrypted in the database. One of the requirements is that some of the data stored in the database needs to be encrypted in a way ...
1
vote
4answers
161 views

How can Facial Recognition surveilance be misused by police? [closed]

There has been a lot of news lately about facial recognition use by police forces being banned or that it should be banned. The obvious example is that a police officer who is motivated by personal ...
5
votes
1answer
224 views

How can WhatsApp be listed on the EFF secure application toolset when it's not opensource? [closed]

I see this EFF tool guide, proposing WhatsApp as one of "our pick of the best, most secure applications" source. How can WhatsApp be trusted as a secure application when it is not open-source (...
3
votes
3answers
159 views

Is it possible to track someone by sharing a youtube link with timestamp?

Is it possible to track someone by sharing a youtube link with them with a timestamp such as &t=1s if they click on it on their end? I've recently have been told not to use timestamps because of ...
0
votes
1answer
50 views

response when sent emailed links to personal information

I'm filling out tax information. The accountants out-source the survey collecting the tax info to another company. Seems fair enough - I'd rather have computer experts handle the technical ...
1
vote
0answers
66 views

I'm looking for an email provider like this [closed]

I am looking for email providers with the following conditions for privacy. email providers that: Are free. Do not require JavaScript or other credentials for registration. Provide an onion service. ...
1
vote
2answers
70 views

How can we avoid the Facebook SDK? General: Trusted forge for Android apps?

I know that privacy is dead etc, but I saw a presentation (Link: https://www.youtube.com/watch?v=OTt1AVRQyx0 )about developers of Android apps using the Facebook SDK for whatever reason in their ...
0
votes
0answers
33 views

Company CAs, what are the privacy risks for the employees? [duplicate]

The company I work in as an intern is using CA spoofing. When I check the certificate I have : Issued to : security.stackexchange.com Issued by : name of my company CA So here I'm sure that this is ...
2
votes
2answers
96 views

Is there any way to alter a caller's voice just enough to make voice recognition impossible?

I did search and found this post: Is it possible to identify mobile phone user with voice recognition It does not answer my question, however. Is there any way to alter a person's voice just enough ...
1
vote
0answers
45 views

Privacy implications of GCM on MicroG

GCM (now FCM after a change of ownership to a Google subsidiary) is a push notification framework which is commonly used on Android phones. MicroG is an open source reimplementation of Google ...
0
votes
1answer
60 views

How do XMPP servers process messages?

I'm trying to understand how XMPP works and I'm much concerned about how do both the protocol and existing implementations ensure privacy. More specifically, I want to understand how do XMPP servers ...
0
votes
0answers
28 views

Secure Peer-to-Peer Multicast Communication?

The problem: A single broadcaster needs to send a series of messages through a peer-to-peer mesh network such that only specific other pre-approved nodes can read them. The set of authorized receivers ...
0
votes
0answers
46 views

Received Google calendar invite but no organizer?

Whenever my wife and I invite each-other to an event which we create we always see the organizer above the guest but this spam invite does not have one. How is this possible? Can I achieve this?
1
vote
0answers
45 views

Is there any privacy- or security-relevant difference between FIDO2 and SQRL

I just learned about FIDO2 (WebAuthn) and try to make a comparison to the lesser-known novel SQRL authentication scheme. Both seem to use the same key elements: a private, user-resident "master key" ...
0
votes
1answer
85 views

Firefox Account - Export user data (GDPR)

Is there a way of exporting all user data associated with a Firefox Account? Yes? where can I request/download it? No? isn't right of access a legal requirement under the current GDPR ...
0
votes
0answers
96 views

Chrome extension screenshots- privacy risk?

Is it possible for Chrome extensions to monitor users without them knowing by taking screenshots and/or video? There's an extension called Screencastify that allows you to record your screen. This ...
1
vote
0answers
117 views

Stop smartphone microphone from listening in background [duplicate]

Recently it has come to light that tech companies such as Facebook and Microsoft use humans to listen and transcribe audio conversations on Facebook messenger and Skype to improve their AI. However ...
3
votes
1answer
93 views

How safe is your data when it passes from your laptop to your 4G wifi hotspot?

I would like to create a private mobile hotspot on my smartphone that I will connect to with my laptop to do online banking. My laptop will connect to my smartphone wirelessly, then my smart phone ...
0
votes
1answer
141 views

Facebook Knows About my Search History in Other Browsers

I use a private IE window to browse facebook (theoretically no data stored locally). I log in to facebook maybe once every 6 months. Two months ago, I used Chrome on the same machine to search for ...
1
vote
4answers
180 views

Collecting banking, credit-card statements from users

I want to build a service that collects user spending history with their permission. Users would send over (banking, credit card) account statements and I would extract, store the following ...
0
votes
1answer
50 views

If one user sees an email of another user, is it DSGVO conform?

I want to give a logged in user the ability to search for other users by their exact email. The search input is passed asynchronously by Javascript so the email would remain in server logs and so on. ...
0
votes
1answer
65 views

What additional methods for user tracking are there? [duplicate]

I was getting interested in data privacy and looked up how users are tracked on the internet to connect the different traces to a single user. I found this: In addition to regular cookies, pixel ...
2
votes
2answers
235 views

Do we have to be concerned about FaceApp?

After that FaceApp got viral, so many articles have been writing about privacy issues of FaceApp. They argue that FaceApp sends user pictures to their servers and store. As the company is based in ...
9
votes
1answer
1k views

Employer stores plain text personal data in a 'data warehouse' [closed]

I'm unsure if I have posted this in the correct community but the organisation I am currently working for currently uses an SQL 'data warehouse' which contains a bunch of tables from various sources, ...
1
vote
2answers
133 views

What can a 3rd party learn about a user through only CSS and images?

In its default settings, uMatrix content blocker allows CSS and images (JPG, PNG, etc) from all sources, unless denied by a site-specific block list. It also allows 1st party cookies, scripts, and ...
2
votes
0answers
62 views

Is it a privacy issue that iOS persists private keys between app installs of the same bundle ID?

In iOS apps, Apple goes to a lot of trouble to keep applications from creating a stable identifier for a specific device. For example, in iOS >= 5 they no longer allow apps to get the hardware-tied ...
1
vote
1answer
135 views

What alternatives do we have for Google's reCaptcha? [closed]

reCaptcha has been getting some criticism over that it's tracking visitor data recently. What are the best solutions available? Is there one that has better privacy for visitors?
0
votes
4answers
114 views

Issues with using Usernames as PC Names

Our organization is looking on changing the naming conventions on our Admin PCs to make it easier for tech staff to remote into user machines. A current favorite idea is to pair user names with the ...
0
votes
2answers
143 views

Easiest way to secure my home network from work pc

I am about to start a work at home position using a mac. I will be using my own personal internet to connect to their servers through their VPN. I want to isolate my work PC from accessing my home ...
1
vote
2answers
116 views

Anonymity: standardization or randomization?

I wonder if it's better to standardize or randomize data for anonymity. For example, think of browser fingerprinting. If you standardize every parameter, you would have all browsers returning the same ...
0
votes
0answers
47 views

How to use browser bookmarks more securely?

I have been wondering in how far any tracking sites or other instances could gather information about me through my browser bookmarks (ie. in Firefox). An online search did not result in a lot of ...
3
votes
1answer
275 views

Can my G Suite admin see my browsing history if: I am in incognito mode on iPad Chrome?

Can my G suite admin see by browsing history if: I am in incognito mode on iPad Chrome? iPadOS beta 3. I'm signed in with a G Suite account. If they are monitoring me, is it visible? Is there any way ...
0
votes
1answer
47 views

Why do we need token authentication?

If I'm creating an authorization service for my application, why can't I just hash the password and save the the username and hashed password in my User table? Why should I use a token authentication ...
1
vote
1answer
287 views

How can Instagram cause Chrome to attempt to login and show me my username when I'm using incognito mode?

When I reach Instagram user pages while in Incognito mode, Chrome pops up a window with my non-incognito username asking whether or not to sign in. See screenshot below. Although I assume Chrome ...
1
vote
2answers
365 views

Preventing tracking pixels on Mozilla Thunderbird

Is there a way to prevent loading of tracking pixels on Mozilla Thunderbird ? I know there's a way to prevent loading images by default but I'd like to be able to load images without having to worry ...
1
vote
0answers
54 views

Can my company see my network traffic if their certificate doesn't appear in the web browser? [duplicate]

I have a work-issued Mac, when I go to keychain access right now these are the following certificates: AddTrust External CA Root (Root certificate authority) COMODO RSA Certification Authority (Root ...
0
votes
0answers
50 views

Do any studies of Government Cybersecurity Agencies effictivness against preventing terrorism attacks exist?

Government Cybersecurity Agencies(GSA) blatantly spy on their own citizens. They justify all the data collection by claiming to being able to identify terrorist threats. So, is there some non-GSA ...
0
votes
1answer
137 views

I logged into my work computer with my personal email, can my employer see my google search history on Chrome? [duplicate]

Stupid mistake here. Today at home using my work computer I logged into my gmail on Chrome to check my personal email. I then went to look something up in google and saw several google search ...
1
vote
1answer
106 views

How does SameSite cookie header prevent tracking?

I understand how SameSite cookie header prevents CSRF. But how does it prevent tracking by 3rd party sites, since they could set SameSite=Lax or None, and the browser will still send them: https://web....
2
votes
1answer
79 views

When using a shared / public VPN, can others on the same IP address log into your accounts?

I know browsers use cookies so that, for example, if I log into Facebook on a public computer and forget to log out, the next person who opens up a new browser can go into my account. Does this work ...