Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [privacy]

The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all.

0
votes
0answers
52 views

I was able to recover data from an HDD after a 7- pass erase, what did I wrong? (MAC)

I have an external hard drive which I was going to give away to a relative and hence decided to safely wipe all of the data from it using Disk Utilities 7 - pass erase option. I have this habit of ...
0
votes
0answers
51 views

Confidential phone recording ended up in my voicemail - how?

I received a voicemail on my iPhone of a recording from an organization I am not in any way affiliated with. The voicemail is a recording of the organization's representative and another party with ...
-2
votes
0answers
51 views

is your school allowed to monitor your laptop and social media [on hold]

so I have to buy a laptop from my school and I did, but the school monitors us AT HOME 24/7 they can scan our laptops check emails,social media anything and EVERYTHING is it legal to monitor us at ...
1
vote
1answer
40 views

How can I ensure consistent privacy policy of my DNS server to that of the TLD's privacy policy?

Whenever I query example.com, one of the TLD root servers for .com will be queried for example.com. This query includes my IP address, and in theory could be used to identify my browser session. ...
0
votes
0answers
20 views

How secure will it be to use “Google Docs long url” like authentication scheme for orders in my online shop? [duplicate]

For the sake of simplicity, instead of full-fledged authentication with login and password, I want to create "Google Docs long url" authentication scheme for my internet shop for the users. To let ...
0
votes
0answers
28 views

What is my ip address? [migrated]

Previously I was with Bell Canada, and the public IP address they provided me is your standard xxx.xxx.xxx.xxx. It was something like 172.16.254.1 which is what google told me, and also what running ...
1
vote
1answer
41 views

Understanding which privacy tools provide very similar functionality

https://amiunique.org/tools has a list of recommended privacy tools. uBlock Ghostery HTTPS Everywhere Lightbeam AdBlock Plus Disconnect Privacy Badger NoScript Self-destructing cookies However, aren'...
4
votes
1answer
85 views

How to Best Minimize Damage After Loss of Computer

Myself and the rest of my coworkers on my (former) employer’s dev team were all just laid off from our jobs, and the employer took our MacBook Pros without letting us clear of our personal information ...
1
vote
2answers
65 views

Is it legal to store users searches [closed]

Im developing a webshop and i got a task asking for storing users searches. Is it legal? It will be stored in a db with the fields Date, Search text, userId
0
votes
1answer
78 views

How to analyze and track what data a software sends?

How can i track which program sends data over my network and can i see the contents of it? If we have a AV software installed in a VM , can we see what it's sending from your pc when doing a scan?
2
votes
1answer
48 views

What information can antivirus software collect?

If you take Dr web for example, it lists personal data and statistics, what do those mean? https://free.drweb.com/cureit/send_statistics/
0
votes
1answer
36 views

What privacy considerations are needed when choosing a payment processor?

I'm looking for a payment processor to integrate with my app or website and want to reduce the risk of my purchases being logged, analyzed by artificial intelligence, or have copies of that ...
0
votes
2answers
88 views

Sensitive data transmission over Internet

I was wondering how we should transfer our sensitive data (identity card softcopy, plaintext-password, secret documents, etc) over the internet securely, the following are a few related questions: Is ...
0
votes
0answers
10 views

What data associated with my payment card does a merchant or a payment processor get when I purchase something with it? [duplicate]

If I use a debit or credit card to purchase something online, what data does the party that charges my card get? I understand that there are payment processors like Stripe or PayPal that act as a ...
1
vote
0answers
33 views

Is perceptual hashing feasible to identify users [closed]

I have been shadow-banned on an app (Tinder) and I cannot get around it. I have been doing some background research into how they are able to identify me and have come across device fingerprinting (I ...
1
vote
1answer
59 views

How long do ISPs retain data? [closed]

I recently came across an article informing people about how long major ISP’s store user data such as IP assignments and other user data. On average, companies supposedly stored this data for 6 months ...
0
votes
1answer
60 views

What is going on with my VPN and is it anything to worry about?

When I connect my VPN to certain servers in Europe and go to ping.pe I get an address that is in the UK, even if I am connected elsewhere. I believe this might be the address of the company that hosts ...
0
votes
0answers
14 views

Should I be concerned my vpn server provider is based in the U.K.? [migrated]

I understand in this age that there are several uses for vpns. As such I did some research and decided to use nord as they seemed popular and claimed to not log. However when I connect to certain ...
1
vote
1answer
91 views

How will social networks (like Facebook) prevent their facial recognition software being abused to render Witness Protection Programs useless?

We're now close to or already at a stage where large social networks can recognize people from photos with facial recognition even without any context such as mutual friends. Facebook announced ...
10
votes
2answers
324 views

What are the risks of installing a root certificate from Facebook on your phone?

I read a TechCrunch article today describing a program Facebook has been running since 2016 where they pay users $20 in exchange for installing a root certificate run by Facebook. This immediately ...
0
votes
1answer
59 views

Can my online activity be detected with this set up?

Here's my situation. In the past several months, I've had my credit card information stolen twice and Instagram account hacked into. I'm hoping this is just bad luck, but I'm a little paranoid now ...
-3
votes
2answers
114 views

Does VPN protect my personal identity?

When using email over VPN, can I use an alternate login and password to protect my identity when the email reaches its destination? Is the same true for Twitter and Instagram? Is it truly secure or ...
2
votes
1answer
45 views

Private contact discovery - calculating probability of false positive

I'm working on contact discovery for a service and want to do it in a way that maintains privacy as much as possible, without using Signal's Private Contact Discovery Service (https://signal.org/blog/...
28
votes
4answers
9k views

Is displaying email addresses in an application log file allowed under GDPR?

I'm working on an application that is completely built upon user interaction. In my application logs, I log each interaction and print the email address to uniquely identify which user did which ...
1
vote
3answers
136 views

Using a VPN for privacy?

Say I am only using a vpn for privacy (as is recommended by many people, especially on public wifi etc). How I understand it is that many people are using the same servers and have the same ip online. ...
1
vote
0answers
33 views

Privacy & tracking concerns regarding Service Workers

TL;DR Should I be concerned about sites I have visited start a service worker in my browser which happens to be listening for events "forever"? Can a dormant service worker track me? Longer ...
4
votes
5answers
288 views

Is it good practice to delete old accounts?

Is it a good idea to delete all old accounts you no longer use? This was asked specifically about email here, but what about your Stack Exchange account? Or your social media accounts, old forum ...
21
votes
2answers
5k views

Hashing email addresses for GDPR compliance

UPDATED We have a very unique scenario: We have several old databases of user accounts. We'd like a new system to be able to connect these old accounts to new accounts on the new system, if the user ...
2
votes
0answers
32 views

How does the “Control Frame Attack” bypass the MAC-Randomization on Smartphones?

In this Study regarding MAC-Randomization of different Smartphone Manufactures on page 15 the so called Control Frame Attack is described. I'm not sure whether I understand this correctly. Are they ...
6
votes
1answer
229 views

Will two smartphones (identical hardware and software) generate the same canvas fingerprint?

When using Canvas Fingerprint (like on this website) to distinguish users, does two smartphones (same model, same OS version, and no browser/plugin customization) will share the same fingerprint?
3
votes
3answers
204 views

How ethical is it to publish an (anonymous) password list from real sources

I'm currently doing security research on the dangers of using default or well known 'secrets' for applications. To test how big of an issue this actually is, I decided to download local copies of ...
4
votes
3answers
139 views

Drivers license required for online purchases

Problem I tried to buy a few things from a particular industry, and the sellers are independently all asking for a copy of my drivers license to verify that it matches the details on the card because ...
0
votes
2answers
26 views

media uploads and social sites group privacy etc

On sites like Facebook etc. you have the ability to create "private" photo albums that are only shared with selected friends, similarly in Messenger you can upload an image just to a specific chat. ...
1
vote
0answers
50 views

Compromise Google GSuite by buying expired domain

I saw a question a few days ago that talked about if a domain is bought by someone else then would the emails to that domain be compromised. And it got me thinking about google gsuite and specifically ...
0
votes
1answer
127 views

Do smartphones have built-in surveillance in certain countries?

I recently was in a third world country which is know as a police state with heavy cyber surveillance. I noticed that brand new smartphones came in a box that had a nice holographic seal showing the ...
1
vote
2answers
100 views

What is technically different from iPhone/iOS to Android phones when it comes to data privacy?

Historically Apple never shows up at CES, and this year they put up the following ad close to the convention center: There is always this argument that Apple has better privacy policies in it's ...
1
vote
0answers
51 views

Does Google Analytics maintain a database of IP addresses that visited a webpage? [closed]

I am attempting to balance my need for analytics with privacy concerns. I know that Google Analytics offers an IP anonymization feature to remove the last octet of visitors' IP addresses, should a ...
1
vote
0answers
29 views

How to protect data at rest in a small web application where it’s hard to protect keys

A small web application typically consists of a web server (e.g. Apache or nginx) and a database server (e.g. MySQL or PostgreSQL). Often, the two are hosted on a single physical server or on a ...
0
votes
0answers
14 views

Venmo Identity Confirmation

Venmo provides users a QR code to ensure the correct user is paid (the problem is that multiples users can have the same name (like Bob Smith). Is there any reason why I should not send my QR code to ...
2
votes
0answers
60 views

Can (the carrier of) a caller/callee see the position of the other ones mobile phone?

Someone came to me with the following request: He/She wants to drive somewhere without the employer knowing in his/her free time. If the employer will know about the drive, it will be bad for his/her ...
24
votes
4answers
4k views

How can WhatsApp do both targeted advertisement and end-to-end encryption?

Recently there have been a lot of news articles which say that Facebook will very soon add advertising to WhatsApp, yet will keep the end-to-end encryption (source): [M]essages will remain end-to-...
173
votes
11answers
29k views

Search for military installed backdoors on laptop

My laptop was confiscated by the military institute of my country and they made me to give them all my passwords (I cannot tell you the name of my country). They did not give it back to me for one ...
2
votes
1answer
127 views

Is Verizon Still Injecting Perma-Cookies into Customer Traffic?

This article was published in 2014. Is Verizon still doing this to customer data? It makes sense to assume they are, but I'm hoping for some kind of official news article or something to validate its ...
0
votes
1answer
52 views

I installed a windows app that stores cookies in a plain text un-encrypted database. Is this a problem?

I have recently installed an application that was developed with Electron that requires I authorize via Google to use the application. I did this at the same time as monitoring the application with ...
57
votes
1answer
4k views

Does a client certificate identify the owner to unrelated websites?

If I install a client certificate in my browser, which websites can see any information about this client certificate or the CA that issued it? I once visited an ssl diagnostic site that immediately ...
-2
votes
1answer
84 views

What is a Tor relay?

A tor relay is the same as a node inside the tor network? How many types of this relay exist? I found three types: middle relays, exit relays, and bridges. I don't know what they do and why exist this ...
3
votes
1answer
134 views

How to minimise personalised result skewing in search engines?

Quite often I see comments on this SE network in the form of: Given that this question is now the top Google hit… But sometimes that was a statement I couldn't confirm to be true. Recently I saw ...
0
votes
1answer
135 views

How to prevent my ISP or any third party from knowing my browsing history and such without VPN or DNS servers? [closed]

Is it possible to encrypt my data before sending it through my ISP so all they see is an encrypted stream of what I am doing? How will that be possible? This should be done without using VPN, Tor, i2p,...
1
vote
0answers
37 views

Are missing access logs for a non-production environment populated with over 5 million patient records a big deal?

LOL. I have no background in infosec, so I was hoping to get some input on a very strange thing that has come up involving my local health service provider. Any input would be swell! - A case ...
0
votes
1answer
52 views

Does Real-time typing view in chats invades privacy? Are there any detection and prevention methods?

When a customer talks with a representative of a company in a chat on a web-page, it is possible that they are actually sending every keystroke to their server before you hit the enter or click the ...