Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all.

1
vote
2answers
55 views

public WiFi hotspot-What is leaking at that tiny moment before connecting to a VPN?

When you sign up for a VPN account you also download the service's client,be it for Android, Windows etc but this question is specifically for Android or portable devices connecting through public ...
-1
votes
1answer
24 views

Cheap privacy oriented cell phones [on hold]

What are cheap (<200 USD) and privacy oriented cell phones ? I am looking for the phones just for calling and sms messaging. I consider phones with and without operating system, or I can buy one ...
2
votes
1answer
57 views

Is there evidence to proof that Windows is spying us ? Are the anti-spy programs works and are they trustable?

Are there any evidences that Windows is spying the users ? Let's focus on Windows 10. I am almost sure it does. The things like telemetry and Cortana... However I never saw a proof like university ...
0
votes
3answers
53 views

Can Windows take data from other OS running on same hardware?

I am looking for the way how to set up the my environments as I need more than one OS at once. I care about privacy and securities the most, that is my priority. But I can't refuse Windows in full. ...
33
votes
10answers
11k views

Can someone get my home address if I click on a link to a IP logger?

So I was going through my email and accidentally clicked on a suspicious link. It was a quickmessage.io link, which I had no clue what it was. When I clicked on it, my anti-virus came up and blocked ...
0
votes
1answer
94 views

How to check if my PC's HTTPS/TLS connection is monitored or a key-logger is installed?

A few days ago, in the office, we were asked by our bosses to install a program. This was supposed to be an Antivirus program. But after installing this program many of our colleagues have been ...
2
votes
1answer
75 views

White screen popped up. All of sudden not able to do anything. Scam or something else?

I have been using this laptop for the last 6 months and never had any issue, but last Friday I was watching a movie and then all of sudden my PC restarted and a white screen (see figure below) showed ...
7
votes
1answer
2k views

Can personal VPN help protecting my behavior on the company laptop?

Update: I don't care if the company knows I'm using a private VPN (this is allowed and confirmed with the IT department). My only concern is if the company knows I visited nba.com (for example). On ...
0
votes
1answer
60 views

Can my company view my PAST browsing history of what I've done at home with *my personal* computer and *my personal* network?

This is if I later on connect my personal computer to the company network? I don't browse anything non-work related using the computer network on my personal computer at work, and I am aware that ...
14
votes
7answers
4k views

Password entropy varies between different checks

I'm massively under-informed when it comes to in-depth security, however my understanding was that password entropy should be somewhat similar between different algorithms. I gave a couple of ...
0
votes
1answer
56 views

Any privacy reasons to not allow software to update automatically?

When installing new software and it gives the option to allow automatic updates, is there any security or privacy reason that it might be preferable not to allow this?
1
vote
1answer
146 views

Bad medical security

I reside in Michigan, U.S.A and just recently took over the IT of a small medical practice. There is no real security in place and I am still undoing the horrific damage and lockouts put in place by ...
4
votes
3answers
74 views

Using a simple 5-character pass for event vs. QR/barcode

I plan on doing a "ticketing" system, where a user would buy a "tour ticket" online. The part that I'm puzzled about is: After they buy, what mechanism to use to verify the ticket? I've been looking ...
1
vote
1answer
66 views

What specific assurances exist about StartPage privacy?

What specific, technical and verifiable information exists to support StartPage’s claims about privacy? For example, they claim in the “Privacy” section of their iPhone app: StartPage does not ...
1
vote
2answers
140 views

Can your cell phone transmissions reveal your identity?

Is it feasible for hackers sitting near you to have some sort of RF listening device that uses your phone's transmissions to identify your name or other information that could be used to determine who ...
-3
votes
2answers
129 views

Do cookies violate privacy and should not be used? [duplicate]

Cookies are just a simple text file or DB (some parts encrypted). There is no way to execute them and they cannot access other user data store. Normally cookies keep some data like session ID or ...
0
votes
0answers
50 views

How to make screensavers secure?

For years I've been aware of screensaver bugs on some 3rd-party Android ROMs such that the screenlock can reveal the desktop (wallpapers, possibly with some app icons) even if the user doesn't mean to ...
285
votes
25answers
40k views

Should I let my child's school have access to my kid's personal laptop?

My kid is starting 6th grade and the school requires him to get a laptop and bring it to school. Now the school IT department wants to install some software on the laptop and is asking for ...
0
votes
2answers
124 views

I used a work VPN on my personal computer at home while doing…“non-work” things…am I in trouble/can they see me?

I was using my own home personal computer on a weekend while connected to my work's VPN (it's called pulse secure), and was bored so I decided to look at some "non-work" related websites (possibly/...
1
vote
0answers
60 views

How to make sure your API key cannot just be copied and used

One thing I often struggle with when developing my API's is authentication. I didn't have much trouble with this when I was making them for just a single website and was able to implement the ...
0
votes
0answers
88 views

Why is Firefox trying to connect to an advertising company

My firewall blocked Firefox from connecting to a site with an invalid security certificate, but why would it want to connect to an advertising site in the first place. Isn't Mozzilla and Firefox all ...
0
votes
0answers
46 views

Is Windows known to collect hardware information?

As part of the normal behavior of Windows, telemetry, Windows Error Reporting or any other procedures; do any version of Windows send information about the machine hardware to the vendor? Like the ...
-1
votes
2answers
58 views

VPN Split Tunneling with VM safer?

I want to privately surf in a Virtual machine. I am questioning if it would be better/more private to use the Split Tunneling feature of my VPN Program (on the Host installed) and only allow my VM to ...
0
votes
0answers
38 views

Authenticity and confidentiality of a broadcasted message

I need to broadcast a message (i.e. post it publicly) from device X, and have it understood by an unknown number of other devices (so the ciphertext is visible to all devices, and a subset of all ...
1
vote
1answer
63 views

Understanding ANSI/AAMVA encoded data (pdf417 data matrix) on back of NYS ID card

Background I am developing an Android application for work which runs on a Zebra TC51 bar code scanner, which I have been playing around with.. I scanned my NYS drivers license and inspected the ...
1
vote
2answers
53 views

At What Point Does A Device Correspond/Link to its Owner?

I am aware that governments, organizations and hackers can do a plethora of things to your device (i.e. track your location, tap calls, etc.), but I can only assume that they can only do these things ...
2
votes
2answers
102 views

Is it possible to come close to complete anonymity for bittorrent traffic?

Some ways I can think of is to use a VPN, disable DHT, PEX and local discovery of peers options in the BitTorrent client and to route torrent traffic through the Tor network (people say that it's not ...
7
votes
1answer
197 views

Does the ANeko app demonstrate vulnerabilities in the Android architecture?

There is an Android app called ANeko, which lets a cute cat run around your screen. The app doesn't require any special permissions. When I first started it, I was frightened for several reasons: It ...
0
votes
2answers
57 views

File carving JPG exif data files

So I'm very new to info sec overall but I would say I am least experienced in Digital forensics, anyway I recently had the opportunity to work with professionals and we did manual file carving. This ...
0
votes
1answer
31 views

Enforce a secured protocol over public api

I have implemented my product's HTTP(REST) API as a public API. Although my server only allows HTTPS, I don't have any control over the clients. I have vendors implementing clients to my API, and I am ...
1
vote
1answer
196 views

VoIP service requires a scanned copy of my passport

In the process of registering to Callcentric, they asked me a scanned copy of my passport. I already gave them my mobile number, where they could possibly make an interview, and of course they have ...
2
votes
1answer
67 views

Can Apple Devices Give Away Location to Hackers?

In a hypothetical scenario, I am travelling with my iPhone to, let's say, New Zealand. I stop at some random hotel and simply stay there doing nothing but staring at a wall for days with no ...
3
votes
1answer
59 views

How can I ensure higher levels of privacy when hosting others' emails?

I can set up my own email server, and quite happy with it, using standard open source components - postfix, roundcube, etc on top of HardenedBSD or OpenBSD. I'd like to offer the use of my email ...
2
votes
1answer
72 views

What to never log to Android logcat?

Android apps write their logs to a file (usually referred to as "logcat") which is very useful not only for developers but also for users who want to investigate problems. You can easily see that ...
0
votes
1answer
112 views

Does Google identify me from my 'phone?

As per my previous question I would like to escape Google as much as possible. Since I realize that I can’t do this completely, I will do what I can, although some might find it pointless. I have ...
2
votes
2answers
208 views

By using reCAPTCHA which information is Google collecting?

Wanting to avoid bots registering on a website, I might use reCAPTCHA by Google. Since the algorithm behind reCAPTCHA is not open source, I'm wondering what user information they actually collect ...
1
vote
1answer
41 views

How to prevent a docker container to be attach by multiple users?

When you run docker containers you can list running containers by using docker ps Then you can attach them by docker attach <container id> The trouble is that all people that can attach the ...
1
vote
0answers
67 views

Will disabling WebGL make me more or less unique on the internet?

I have wondered whether disabling WebGL will make me more or less unique, I fiddled around with https://panopticlick.eff.org/ to see what would happen. If I keep it enabled I am 1/205.66, with me ...
0
votes
2answers
75 views

Privacy of client's virtual machine in cloud computing

As we know clients can create and run their virtual machines (VM)in the cloud computing. My question is about the confidentiality of data stored in the client's VM. Question 1: Does data stored in a ...
0
votes
3answers
190 views

1.1.1.1 Cloudflare encrypted DNS.Does it still leak IP addresses?

1.1.1.1 might be encrypting the DNS request but then between my ISP and the website I'm accessing, IP addresses are exchanged.Does my ISP see the IP address of the website I'm accessing but not its ...
1
vote
2answers
78 views

Can my company see the contents on my iPhone if I used my work email on it?

I'm temporarily employed at a company and I needed to send a quick email to one of my coworkers yesterday explaining that I was going to be late for my shift. I couldn't reach them by phone and didn’...
-1
votes
1answer
97 views

Is this good privacy? [closed]

I would love to protect my privacy online. I thought of a setup when I connect through a VPN, get a Linux VM and use VPN on that, then use just a proxy on the browser in the VM. My computer > VPN &...
0
votes
0answers
172 views

Android Messages Web and Privacy

Recently Google rolled out the feature to send SMS/Chat messages over Web via their Android Messages app. The approach seems similar to the WhatsApp Web Client. What I didn't find however are ...
0
votes
0answers
74 views

Encryption on an LXC container?

I have the following scenario. I'm hosting some services on a VPS. Each service is running inside an LXC container. Some services like email contain information that I would like to be stored ...
1
vote
2answers
144 views

Frequent flyer number security risk or not?

Many booking websites or tickets "re-sellers" expose in plain view for the current authenticated user the commonly used "Frequent flyer number". Should this be considered a security risk? Can this ...
0
votes
0answers
138 views

Nord VPN DNS Privacy

I use Nord and have it set up on my Netgear R7000 using tomato firmware and I have port 53 blocked so it doesnt get my ISP DNS from my modem. Instead of putting in the nord dns servers I just leave it ...
3
votes
1answer
132 views

How anonymous is it to use Facebook's Tor-site?

How anonymous, with respect to Facebook, not the rest of the world, is it to use Facebook via https://www.facebookcorewwwi.onion/ rather than the usual site? That is, if two different Facebook users ...
1
vote
1answer
61 views

How to compare contents of encrypted files on decentralized system?

I have three people: Alice, Bob, and Eva. Lets say Alice and Bob both want to share the same information with Eva, but we don't want Eva to know what the information is, and Alice and Bob don't want ...
21
votes
3answers
4k views

How to check if a Wi-Fi network is safe to connect to?

I always feel scared to connect to hotel, airport Wi-Fi etc. I feel that if the Wi-Fi router is hacked, my personal information can be collected by a hacker. How can I determine if a Wi-Fi network is ...
1
vote
0answers
27 views

Do S3/Azure/GCS bucket names/keys represent personally identifiable information

We have an event-sourced system that uses a forward-only immutable event store. If we store personally identifiable information in this store, we'll be in trouble with regards to GDPR, as deletion ...