Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [privacy]

The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all.

0
votes
0answers
22 views

Is it good practice to delete old accounts?

Is it a good idea to delete all old accounts you no longer use? This was asked specifically about email here, but what about your Stack Exchange account? Or your social media accounts, old forum ...
5
votes
2answers
835 views

Hashing email addresses for GDPR compliance

We'd like to keep users old account email addresses in a database for the sole purpose of allowing them to reconnect old accounts of their new accounts. This would benefit them and be a cool feature, ...
-4
votes
0answers
88 views

I'm being remotely hacked & stalked by a man living about 1,750 miles away for the past 6 years [closed]

First off I know it is him, because he presented a text message I had written to a family member for them to read. When they asked if they could keep the printed copy, they were told no & an ...
2
votes
0answers
22 views

How does the “Control Frame Attack” bypass the MAC-Randomization on Smartphones?

In this Study regarding MAC-Randomization of different Smartphone Manufactures on page 15 the so called Control Frame Attack is described. I'm not sure whether I understand this correctly. Are they ...
6
votes
1answer
191 views

Will two smartphones (identical hardware and software) generate the same canvas fingerprint?

When using Canvas Fingerprint (like on this website) to distinguish users, does two smartphones (same model, same OS version, and no browser/plugin customization) will share the same fingerprint?
3
votes
3answers
187 views

How ethical is it to publish an (anonymous) password list from real sources

I'm currently doing security research on the dangers of using default or well known 'secrets' for applications. To test how big of an issue this actually is, I decided to download local copies of ...
4
votes
3answers
136 views

Drivers license required for online purchases

Problem I tried to buy a few things from a particular industry, and the sellers are independently all asking for a copy of my drivers license to verify that it matches the details on the card because ...
0
votes
2answers
25 views

media uploads and social sites group privacy etc

On sites like Facebook etc. you have the ability to create "private" photo albums that are only shared with selected friends, similarly in Messenger you can upload an image just to a specific chat. ...
1
vote
0answers
48 views

Compromise Google GSuite by buying expired domain

I saw a question a few days ago that talked about if a domain is bought by someone else then would the emails to that domain be compromised. And it got me thinking about google gsuite and specifically ...
0
votes
1answer
119 views

Do smartphones have built-in surveillance in certain countries?

I recently was in a third world country which is know as a police state with heavy cyber surveillance. I noticed that brand new smartphones came in a box that had a nice holographic seal showing the ...
1
vote
2answers
90 views

What is technically different from iPhone/iOS to Android phones when it comes to data privacy?

Historically Apple never shows up at CES, and this year they put up the following ad close to the convention center: There is always this argument that Apple has better privacy policies in it's ...
1
vote
0answers
41 views

Does Google Analytics maintain a database of IP addresses that visited a webpage? [closed]

I am attempting to balance my need for analytics with privacy concerns. I know that Google Analytics offers an IP anonymization feature to remove the last octet of visitors' IP addresses, should a ...
0
votes
0answers
53 views

Where can I find a very long distance Wifi antenna with a range of 50-100 km? Or is it a DIY project? [migrated]

I'd like to increase personal security by receiving Wifi connections 50-100 km away from physical device location, with high decibel to milliwatts (dbm) reading to overcome path attenuation by foliage ...
1
vote
0answers
26 views

How to protect data at rest in a small web application where it’s hard to protect keys

A small web application typically consists of a web server (e.g. Apache or nginx) and a database server (e.g. MySQL or PostgreSQL). Often, the two are hosted on a single physical server or on a ...
0
votes
0answers
14 views

Venmo Identity Confirmation

Venmo provides users a QR code to ensure the correct user is paid (the problem is that multiples users can have the same name (like Bob Smith). Is there any reason why I should not send my QR code to ...
2
votes
0answers
56 views

Can (the carrier of) a caller/callee see the position of the other ones mobile phone?

Someone came to me with the following request: He/She wants to drive somewhere without the employer knowing in his/her free time. If the employer will know about the drive, it will be bad for his/her ...
24
votes
4answers
4k views

How can WhatsApp do both targeted advertisement and end-to-end encryption?

Recently there have been a lot of news articles which say that Facebook will very soon add advertising to WhatsApp, yet will keep the end-to-end encryption (source): [M]essages will remain end-to-...
170
votes
11answers
29k views

Search for military installed backdoors on laptop

My laptop was confiscated by the military institute of my country and they made me to give them all my passwords (I cannot tell you the name of my country). They did not give it back to me for one ...
2
votes
1answer
113 views

Is Verizon Still Injecting Perma-Cookies into Customer Traffic?

This article was published in 2014. Is Verizon still doing this to customer data? It makes sense to assume they are, but I'm hoping for some kind of official news article or something to validate its ...
0
votes
1answer
51 views

I installed a windows app that stores cookies in a plain text un-encrypted database. Is this a problem?

I have recently installed an application that was developed with Electron that requires I authorize via Google to use the application. I did this at the same time as monitoring the application with ...
57
votes
1answer
4k views

Does a client certificate identify the owner to unrelated websites?

If I install a client certificate in my browser, which websites can see any information about this client certificate or the CA that issued it? I once visited an ssl diagnostic site that immediately ...
-2
votes
1answer
80 views

What is a Tor relay?

A tor relay is the same as a node inside the tor network? How many types of this relay exist? I found three types: middle relays, exit relays, and bridges. I don't know what they do and why exist this ...
3
votes
1answer
133 views

How to minimise personalised result skewing in search engines?

Quite often I see comments on this SE network in the form of: Given that this question is now the top Google hit… But sometimes that was a statement I couldn't confirm to be true. Recently I saw ...
0
votes
1answer
134 views

How to prevent my ISP or any third party from knowing my browsing history and such without VPN or DNS servers? [closed]

Is it possible to encrypt my data before sending it through my ISP so all they see is an encrypted stream of what I am doing? How will that be possible? This should be done without using VPN, Tor, i2p,...
1
vote
0answers
37 views

Are missing access logs for a non-production environment populated with over 5 million patient records a big deal?

LOL. I have no background in infosec, so I was hoping to get some input on a very strange thing that has come up involving my local health service provider. Any input would be swell! - A case ...
0
votes
1answer
50 views

Does Real-time typing view in chats invades privacy? Are there any detection and prevention methods?

When a customer talks with a representative of a company in a chat on a web-page, it is possible that they are actually sending every keystroke to their server before you hit the enter or click the ...
2
votes
3answers
215 views

What tools to use when researching possibly illegal topics?

I am a web developer who has an assignment to make a web shop for something that is in a bit of a legal grey area for my country but not in the country where the client resides. I was wondering what ...
8
votes
1answer
459 views

Is Stylish safe to use again?

Stylish is/was a very popular extension for the Chrome and Firefox web browsers, which let users add custom styles to certain websites. I was using it myself, until a helpful fellow told me it was ...
0
votes
1answer
81 views

How os fingerprinting works and how to prevent it in browser? [duplicate]

For privacy I always changed my useragent of browser regularly and it used to work. But lately changing useragent alone in browser dosen't prevent os fingerprinting. Tools like https://browserleaks....
13
votes
1answer
658 views

Does Google capture microphone data to better target advertising?

Recently several ads which I had never seen before started popping up. Most were related to products I had been talking about and thinking about buying as Christmas Gifts. Some of the most specific ...
-3
votes
1answer
64 views

How can I choose the IP sites see from me?

I'm wondering how can I change and select the IP address sites see from me so I can create multiple accounts from the same device?
0
votes
1answer
71 views

How can i set an unbreakable password on py PC?

I want to set an unbreakable password for windows 7 on my personal computer because my friends mostly guess my password. When they are failed to guess my password they break it with an technique. I ...
0
votes
1answer
34 views

How to securely transmit data (user access info) from node server to react client

Just for a little background. We have a express based server and a React app which uses HTTPS connection with JWT tokens to authenticate user and send appropriate information over Authentication ...
1
vote
2answers
127 views

What are the security implications of losing a paper calendar?

Assuming I have a paper calendar (organizer) with the following information on it: dates/locations where I have been and where I'm planning to go phone numbers and e-mail addresses of a few people my ...
0
votes
1answer
77 views

Can a 3rd-party iOS 12 app use any of the cameras without the user being aware?

Now with iOS devices having Face ID, there are potentially 3 cameras. But there is only 1 access permission for "Camera" in the Privacy settings. Well-Behaved apps use the camera in conjunction with ...
2
votes
0answers
50 views

Risk that apps with access to your saved files and camera roll get a hold of all your saved files and photos [closed]

Since I made pictures of some documents that should never be released to the public I was wondering how high the risks actually are, that the pictures I made have been "saved" by some of my apps, or ...
1
vote
2answers
141 views

Can Facebook break the WhatsApp E2E encryption without the customers noticing?

I read a lot of reports from corporate media complaining that you can't censor "fake news" sent via WhatsApp. Mainstream media claims that because of "fake news" the wrong person got elected in Brazil....
0
votes
2answers
81 views

Allow a user to check if they are in a database, but reduce the risk of curious third parties checking

I have unregistered users on a site, I want them to be able to enter their name and date of birth (DoB) and see if they are in a database. The act of being present in the database is somewhat ...
1
vote
1answer
99 views

Am I traceable if the VPN I am using keeps turning on and off?

Let's say Bob is on network A and he decided to use a VPN service. Unfortunately he is using a poor VPN service which keeps turning on and off. But the Active downloads of packets are still ongoing ...
0
votes
1answer
40 views

Asymmetric Encryption on User Data to Allow Unauthenticated Input

Normally I would want to develop an app that encrypts user's data with symmetric encryption (AES 256) from a password based derived key (PBKDF2). For a new project, I would like the users to be able ...
54
votes
8answers
17k views

A stranger asks for my delivery address, how much information should I give?

There's this person online with whom I have only interacted a few times. They had asked me for a small favour, which I did. They then wanted to give me something in return as a thank you. They were ...
3
votes
1answer
78 views

Why does not Referer header use “same-origin” by default?

Same origin policy is an important part of the security model so it is "on" by default for most things, but for the referer it does not seem to be so. The default for browsers seem to be no-referrer-...
11
votes
1answer
463 views

How was Walmart able to pop up an unsolicited “Rate your visit” notification on my phone?

I was in Walmart this afternoon, and later this evening I noticed a strange icon in the upper left of the home screen on my android phone. On examination, I found a notification ostensibly from ...
12
votes
1answer
325 views

How private is the data I type in Chrome address bar?

Sometimes, I paste some data in a Chrome tab address bar as a temporary storage. It usually happens when I want to save more then one thing in the clipboard. It's handy because I am always with Chrome ...
3
votes
3answers
91 views

What is a simple and secure method to transfer virtual assets?

Consider a MMORPG where users own virtual assets like magical swords or rings that can be used by the player. This system needs a safe method for transferring assets from Alice to Bob. One ...
0
votes
2answers
96 views

Why do unverified restaurants accounts pose a threat to the privacy and safety of users? [closed]

We have an app to order food from restaurants but the app developers decided not to verify any of the information provided by the restaurants like the location and opening hours. Why this decision ...
0
votes
1answer
40 views

Whether cross cookie sharing between the android apps is potential threat to privacy?

Recently I wanted to buy the particular product from an online website and was just searching that product during my leisure time. after some time suddenly I saw the ad of that product on Instagram ...
2
votes
2answers
57 views

does vBulletin and similar discussion forum CMS store previous email address and password hash in database?

I am in the process of De-Googling myself and use complex passwords. I change my registered Gmail to an alternative mail provider I change my password to a complex one I use mostly vbulletin and ...
4
votes
1answer
122 views

Is information still being sent from a discarded tab in my browser?

I was connected to my workplace wifi via my personal phone for 10 minutes. I did not open anything strange that could get me into trouble. I was doing some work. However, when I finished looking up ...
3
votes
1answer
142 views

Company VPN and privacy. (Cisco Anyconnect) [duplicate]

Straight to the point. Is my employer able to see what websites I visited while I was connected to the VPN of the company? I'm pretty sure that all web internet traffic is routed on my private ISP ...