Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [privacy]

The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all.

Filter by
Sorted by
Tagged with
5
votes
3answers
134 views

Could a desktop application disclose location even if a VPN is used?

When using a proper VPN to access a remote server, the server should not be able to resolve your country of origin using your IP address because the IP provided in the request will be the one of the ...
1
vote
1answer
68 views

Does the HTML password field include any protection against XHR/AJAX exfiltration?

In HTML when we describe a certain field as a password field is it somehow secured against sending out the data via XHR/AJAX/similar technologies? This is relevant in case we have to deal with script ...
2
votes
1answer
50 views

What identifiable variables can be collected via server/client connection logs( wireless AP's) to uniquely identify a device across networks?

For instance, the MAC address is one variable that stays the same across networks, along with Hostname, Operating System, and the combination of open ports/services. Ignoring browser specific ...
0
votes
0answers
44 views

Is it a good idea from a security standpoint to disable Referer headers in the browser? What discomforts will you have to deal with?

So what kind of discomfort will you have to deal with? Will it break websites? Or is it just a win for privacy? You can disable the Referer headers in Firefox like this: Open Firefox and type “...
2
votes
1answer
44 views

How good are Angular Route Guards from a security standpoint?

For an enterprise setting, how secure are Route Guards against script kiddies, hackers, and advanced threats? If I understand correctly, the route guards are all available in .js files to the ...
0
votes
0answers
171 views

How are Googles auto-complete suggestions so alarmingly predictive? [closed]

A few days ago, during programming, a strange error message was showed in my IDE, which I didn't know how to handle. Of course, the first reflex as a programmer was to enter that error message into ...
1
vote
0answers
72 views

Can I trust Cloudflare's Privacy Pass extension? Does it brings risks and side effects regarding privacy?

Quote from Challenge Bypass Extension The Privacy Pass extension implements the Privacy Pass protocol for providing a private authentication mechanism during web browsing. Privacy Pass is ...
78
votes
5answers
14k views

How does Facebook track your browsing without third party cookies?

Facebook has served me an ad for a website I visited earlier in the day. I have third party cookies disabled and have not followed any links between the website and Facebook (links which could contain ...
1
vote
1answer
40 views

Why should relatively-public personal identifying information be kept secret online if at all?

I don't want to get hung up on technical terms, just laying out basics for this question: I understand personal identifying information (PII) as that info which is not apparent to people who cross ...
1
vote
0answers
38 views

What relative functionality needs to be implemented when users click an “Accept Cookies” button? [closed]

As of 2018, a recent security measure was passed, called 'The Cookie Law'. It states that; if you have a website or blog with visitors from the EU (which is likely to happen), "you need a cookie ...
7
votes
2answers
256 views

I can pay by my credit card under fake name: who's responsible to check?

I am customer of a large European bank, but I have found the following happening consistently with multiple past banks. Basically, I have always been able to pay using my legitimate card(s), credit ...
0
votes
1answer
53 views

Preventing data remanence at filesystem / OS level

We all know that deleting a file from your computer does not really erase it, but only marks as free the memory where the file was written, so that, until such memory is not overwritten, the file can ...
0
votes
1answer
82 views

Why do I see Network Traffic without any User Activity?

Why does my computer send any network data, even if I am not doing anything? Is it possible that this network traffic includes private data (text documents, images,...), to which I did not consent?
2
votes
0answers
48 views

Does photo fingerprinting (using metadata) allow to search all photos on internet made by the same user (privacy issue)?

Browser fingerprinting is well-known: since a client gives many HTTP attributes/Javascript attributes during a website visit, the probability that two users have the same exact values for all this ...
0
votes
0answers
23 views

Prevent tor use without vpn app open or on?

Is there a setting or app or any way that i can prevent or block my tor application from loading any page when opened unless my nord vpn app is open and/or connected as well? i am using mac software ...
1
vote
0answers
94 views

Good ways to secure yourself on Reddit and other social media sites? [duplicate]

I would like to prevent websites like Reddit from having access to information about my devices, my IP, personal information, etc. I have began using Nord VPN and cleared my cache on both safari and ...
6
votes
1answer
88 views

Printing document on usb drive with confidential information on multi user computer

I have a pdf file with confidential information on a usb flash drive. This document needs to be printed on a multi user Ubuntu system. I want to prevent other users from seeing the content of the ...
-1
votes
2answers
100 views

Do browser notifications threaten privacy/anonymity when using a VPN? [closed]

These: Do they threaten privacy/anonymity on a VPN? In this particular case, I'm using Opera VPN, which I thought might bear mentioning because it's a browser-based VPN, but I am asking about ...
2
votes
1answer
110 views

How to change the browser canvas html hash for fingerprinting?

building on this previous post Can canvas hash be used to track me and ruin my anonymity? I want to ask: Is there any way a user can affect this canvas html hash generation, a way to make the hash ...
3
votes
1answer
188 views

Can canvas hash be used to track me and ruin my anonymity?

I have heard there is a fingerprinting method that traces internet users based on browser data. I believe it is called "canvas HTML hash". This hash is unique, as I understand? Or does it change ...
4
votes
3answers
142 views

How do we cross-verify if the device is doing exactly what it is supposed to do?

How do we know any device is doing what it is supposed to do? For example, Android is an open-source OS (ignore google libraries for now) and they do claim that all passwords will only be stored on ...
0
votes
0answers
47 views

What is a fast and solid way to configure V2Ray in order to bypass China's GFW?

I do realize that the question can open a gate for discussion, but I am really looking after something concrete that would be working within the V2Ray toolkit, based on peoples experiences. I would ...
1
vote
0answers
119 views

Bizarre request being made from Chrome

I've been seeing a very weird request being made from my Chrome browser (haven't noticed it on Brave). It does not run on all websites, and not all the time (it can appear on a website, then after a ...
0
votes
0answers
26 views

Apps removing their permissions in OAuth

We are designing a web application for a customer and the main use case is that users will be using the system for anywhere between a few days and a few months. The customer would like to offer users ...
0
votes
1answer
93 views

How does DoH protect against ISP tracking?

Seems like a modern ISP would already be equipped with some basic level of packet inspection to identify outgoing TCP connections even if just for doing traffic shaping or carrier-grade NAT, and ...
3
votes
3answers
254 views

Can my employer monitor personal device use on my home network?

I occasionally work from home. I have a work laptop that I bring home and connect to my company's network using my home WiFi (I assume it has its own direct connection). I also have my personal ...
1
vote
1answer
65 views

Could we create a rating system for privacy?

I don't know whether something like this exists but I think it would be really useful if a privacy rating system would be established across all websites and apps. An example would be something like ...
0
votes
1answer
35 views

How to encrypt user data in app using Google Sign-In

I am currently writing an application which needs to store user data encrypted in the database. One of the requirements is that some of the data stored in the database needs to be encrypted in a way ...
1
vote
4answers
161 views

How can Facial Recognition surveilance be misused by police? [closed]

There has been a lot of news lately about facial recognition use by police forces being banned or that it should be banned. The obvious example is that a police officer who is motivated by personal ...
5
votes
1answer
229 views

How can WhatsApp be listed on the EFF secure application toolset when it's not opensource? [closed]

I see this EFF tool guide, proposing WhatsApp as one of "our pick of the best, most secure applications" source. How can WhatsApp be trusted as a secure application when it is not open-source (...
3
votes
3answers
162 views

Is it possible to track someone by sharing a youtube link with timestamp?

Is it possible to track someone by sharing a youtube link with them with a timestamp such as &t=1s if they click on it on their end? I've recently have been told not to use timestamps because of ...
0
votes
1answer
53 views

response when sent emailed links to personal information

I'm filling out tax information. The accountants out-source the survey collecting the tax info to another company. Seems fair enough - I'd rather have computer experts handle the technical ...
1
vote
0answers
71 views

I'm looking for an email provider like this [closed]

I am looking for email providers with the following conditions for privacy. email providers that: Are free. Do not require JavaScript or other credentials for registration. Provide an onion service. ...
2
votes
2answers
87 views

How can we avoid the Facebook SDK? General: Trusted forge for Android apps?

I know that privacy is dead etc, but I saw a presentation (Link: https://www.youtube.com/watch?v=OTt1AVRQyx0 )about developers of Android apps using the Facebook SDK for whatever reason in their ...
0
votes
0answers
33 views

Company CAs, what are the privacy risks for the employees? [duplicate]

The company I work in as an intern is using CA spoofing. When I check the certificate I have : Issued to : security.stackexchange.com Issued by : name of my company CA So here I'm sure that this is ...
2
votes
2answers
97 views

Is there any way to alter a caller's voice just enough to make voice recognition impossible?

I did search and found this post: Is it possible to identify mobile phone user with voice recognition It does not answer my question, however. Is there any way to alter a person's voice just enough ...
4
votes
0answers
83 views

Privacy implications of GCM on MicroG

GCM (now FCM after a change of ownership to a Google subsidiary) is a push notification framework which is commonly used on Android phones. MicroG is an open source reimplementation of Google ...
0
votes
1answer
65 views

How do XMPP servers process messages?

I'm trying to understand how XMPP works and I'm much concerned about how do both the protocol and existing implementations ensure privacy. More specifically, I want to understand how do XMPP servers ...
0
votes
0answers
28 views

Secure Peer-to-Peer Multicast Communication?

The problem: A single broadcaster needs to send a series of messages through a peer-to-peer mesh network such that only specific other pre-approved nodes can read them. The set of authorized receivers ...
0
votes
0answers
48 views

Received Google calendar invite but no organizer?

Whenever my wife and I invite each-other to an event which we create we always see the organizer above the guest but this spam invite does not have one. How is this possible? Can I achieve this?
1
vote
0answers
54 views

Is there any privacy- or security-relevant difference between FIDO2 and SQRL

I just learned about FIDO2 (WebAuthn) and try to make a comparison to the lesser-known novel SQRL authentication scheme. Both seem to use the same key elements: a private, user-resident "master key" ...
0
votes
1answer
87 views

Firefox Account - Export user data (GDPR)

Is there a way of exporting all user data associated with a Firefox Account? Yes? where can I request/download it? No? isn't right of access a legal requirement under the current GDPR ...
0
votes
0answers
99 views

Chrome extension screenshots- privacy risk?

Is it possible for Chrome extensions to monitor users without them knowing by taking screenshots and/or video? There's an extension called Screencastify that allows you to record your screen. This ...
1
vote
0answers
120 views

Stop smartphone microphone from listening in background [duplicate]

Recently it has come to light that tech companies such as Facebook and Microsoft use humans to listen and transcribe audio conversations on Facebook messenger and Skype to improve their AI. However ...
3
votes
1answer
93 views

How safe is your data when it passes from your laptop to your 4G wifi hotspot?

I would like to create a private mobile hotspot on my smartphone that I will connect to with my laptop to do online banking. My laptop will connect to my smartphone wirelessly, then my smart phone ...
1
vote
1answer
146 views

Facebook Knows About my Search History in Other Browsers

I use a private IE window to browse facebook (theoretically no data stored locally). I log in to facebook maybe once every 6 months. Two months ago, I used Chrome on the same machine to search for ...
1
vote
4answers
183 views

Collecting banking, credit-card statements from users

I want to build a service that collects user spending history with their permission. Users would send over (banking, credit card) account statements and I would extract, store the following ...
0
votes
1answer
50 views

If one user sees an email of another user, is it DSGVO conform?

I want to give a logged in user the ability to search for other users by their exact email. The search input is passed asynchronously by Javascript so the email would remain in server logs and so on. ...
0
votes
1answer
68 views

What additional methods for user tracking are there? [duplicate]

I was getting interested in data privacy and looked up how users are tracked on the internet to connect the different traces to a single user. I found this: In addition to regular cookies, pixel ...
2
votes
2answers
238 views

Do we have to be concerned about FaceApp?

After that FaceApp got viral, so many articles have been writing about privacy issues of FaceApp. They argue that FaceApp sends user pictures to their servers and store. As the company is based in ...