The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

3
votes
2answers
98 views

Reading mail from GMail with secure access

I recently implemented PHP code with IMAP for reading mails from a GMail account and further executing some command depending on the mail body. I got this to work after consulting the first answer ...
3
votes
0answers
67 views

Allowing WhatsApp data through specific bundle

My mobile network provider recently released a new GPRS bundle, it consist of 50 MB per month for WhatsApp data only! First, how do they identify WhatsApp data, and more important to me, isn't that ...
0
votes
2answers
2k views

Can a random person find me if my location services are turned off?

I was recently asked by a friend if it's possible for someone to find someone else's location if they didn't have the location services on, on their phone. I told him I'm not sure but I didn't think ...
2
votes
1answer
47 views

Security requirements of storing ID numbers in database EU/USA?

I am dealing with a client (an official organization in one EU country) who is storing all clients' ID numbers in an Excel spreadsheet. They need those numbers to present their clients once per year ...
3
votes
1answer
52 views

OCSP responder servers and malicious site blocking

So I've been looking for an answer to this one but no one seemed to have asked this before. As far as I understand, when connecting to a website. The browser sends a query to an OCSP server to verify ...
0
votes
3answers
155 views

If I connect to a website using a cellular network, and change the sim card and connect again with the same phone, will they find its the same phone?

I read on a blog that when you connect to a website with your phone they track the model number id of the device, or something like it. I don't remember what its called. Even if you change your sim ...
3
votes
1answer
45 views

Prevent snapshots of VPS

Pretend I have a server. Is there anyway to prevent (or make more difficult) the administrator from taking snapshots? Feel free to give me a software way, or suggest if I should change server types; ...
1
vote
3answers
70 views

How should we store & share documents with restricted access

Up till now we have handled restricting access to documents by having a share on our server that only the 2 accounting people could access and another that only the 2 HR people could access. And ...
5
votes
1answer
257 views

Government/ISP tracking of internet activity trivial to evade?

The recently announced Investigatory Powers Bill in the United Kingdom will mean that ISPs must store the internet activity of everyone for one year. Anyone who wishes to evade such tracking can use ...
1
vote
0answers
113 views

How to get computer name and ip address when someone logs in to my gmail account? [closed]

Is it possible to get ip address and computer name into my secondary/recovery email when someone logs into my gmail account? Now what happens, when I log in to my gmail account, I receive email with ...
1
vote
1answer
172 views

MUST Share Personal Info with Windows 10?

Just upgraded to windows 10. Had window open in Firefox when I upgraded. Should point out that for some reason Windows 10 would not upgrade on it's own, I went to Microsoft and they used remote ...
1
vote
1answer
128 views

What browsing history exactly would police have under proposed UK law change? Plain english

It's very unclear what '12 months' browsing history being kept by network provider' actually means to an uninformed person. Thunderbird? VPN? Startpage searches? Bit-torrent downloads? Epic browser ...
3
votes
1answer
107 views

How long is the information on Facebook stored? [closed]

I was wondering how long Facebook stores our photos and posts? I hear two theories, one saying it is around half a year, after which all the data centers are going to erase our data. The other one ...
1
vote
1answer
40 views

Is it possible to log all file reads performed by an application in Windows 7?

I have a piece of software I'm supposed to be running on my computer. The only thing I'm slightly worried about is the files it reads, as it's closed-source and slightly fishy. I know it's not ...
1
vote
2answers
602 views

How exactly does Google Account decide my device or location is “familiar”?

In Chrome, I delete all cookies and site data. I close the browser and re-open it. I double check that All Cookies and Site Data is a blank list. I type https://mail.google.com/ into the address ...
3
votes
1answer
60 views

Privacy of U2F keys

If I use the same U2F key for two accounts on some service, could the service detect that and match the accounts? Equivalently, if I used the same U2F key for two different services, could the ...
1
vote
2answers
88 views

Why use the UUID method over traditional ID?

The following quote came from one of my Teachers not to long ago, along with an exercise to build an application: To follow guidelines, you are to use UUID's instead of ID's. Of course, the ...
4
votes
1answer
92 views

New EU Data protection Law and small businesses

I'm aware of the new EU law changes regarding data protection. As a security consultant for an IT company who manages multiple other companies systems, i was hoping someone might be able to clarify a ...
11
votes
8answers
3k views

Can a website identify me if I go in privacy mode with a different IP ? Or should I use a different computer?

Assume I am a regular user of website A that forbids multiple accounts. I assume it can identify me with cookies and IP. So if I use a VPN, then open a private tab in my browser, can it still identify ...
9
votes
1answer
123 views

In VMs, do shared folders reduce security effectiveness?

VirtualBox offers the option of using shared folders, others probably offer the same thing. I am not sure whether the host is directly accessing the memory of the guest, or if there some process which ...
3
votes
1answer
257 views

Can it be dangerous to use not popular(unknown) dns servers?

There is a service called tunlr, which let's you browse the web with no restrictions(Pandora, Hulu etc.). You just have to use their dns server. But now I'm concerned whether the owners of the dns ...
3
votes
0answers
112 views

How far should I go in protecting a user's SMBIOS UUID?

My server will be receiving data from several hundreds of computers. As part of keeping track of which computer sent what, I will be fingerprinting the hardware and keeping the results in my database. ...
3
votes
1answer
205 views

Privacy issues when mobile app has access to phone number and contacts

It seems that when it comes to mobile apps convenience defeats security - always. In particular all messaging/communication apps seem to require to have access to your contacts on the phone and your ...
4
votes
1answer
143 views

Way to keep Google from knowing the SIM card I am using on Android

We see that the the details of the Telecom operator along with other details are available to Google for the SIM card that we are using on an Android Phone. Is there any way that can be applied or ...
2
votes
1answer
161 views

Is it possible to feed Firefox Flash plugin with controlled data for privacy reasons?

For privacy and security reasons, it would be strongly recommended to deactivate the Flash plugin in the browser. But I don't want to deactivate it, I want to fake privacy relevant information. ...
0
votes
2answers
31 views

Is there a service that will auto scan a 'Terms if Service' to assess privacy issues? [closed]

Terms of Service agreements are very tedious and extensive, I am wondering if there exists yet in the privacy tools that are evolving a tool that will scan a TOS for common issues to privacy.
4
votes
2answers
328 views

Why do web services keep asking me about my phone number?

They say it's for my own safety and that somehow my account is more "secure" if I link it with my phone number, but I don't understand why - they already have my e-mail address through which I can ...
2
votes
2answers
63 views

Are there trackers that work even for people who are using extensions like Privacy Badger? [closed]

If so, what are they and how do they work? (This is within the context of a blog. I do not have access to the server).
2
votes
3answers
189 views

Spoofing random browser information to defend against fingerprinting

Tor goes the way of trying to make everyone look the same to defend against browser fingerprinting. Wouldn't a simple addon that changes/adds as much information as possible randomly in short time ...
24
votes
7answers
11k views

Can a WiFi access point operator tell that I'm streaming video to my phone?

I work at an office typing numbers into a computer. It gets quite boring sometimes, so I go on Netflix while using their WiFi on my phone. Can they tell what apps I'm using, based on network traffic? ...
2
votes
1answer
49 views

Can spambots access pages available to only registered, authenticated users?

I have a web application where users register and are activated via an email sent to the email address they supplied. Then there are pages that are only visible to registered users (non-user access ...
54
votes
5answers
8k views

How can you be tracked using screen resolution/monitor size in Tor?

Whenever I maximize the Tor browser, it shows a warning: Maximizing Tor Browser can allow websites to determine you monitor size, which can be used to track you... How can screen resolution or ...
0
votes
1answer
136 views

Commercial VPN for privacy: Which country servers to connect to?

I live in North America and I use a commercially-provided VPN. I use it to encrypt my connection to the Internet, so that my ISP cannot store logs of my DNS requests or browsing activity. I also use ...
1
vote
0answers
116 views

How do ad networks and analytics providers encrypt/hash their traffic?

I am trying to observe what types of information android apps are sending to ad networks that are integrated into apps. I used Fiddler to decrypt the https traffic. However, some ad networks seem to ...
34
votes
6answers
4k views

How do I purge Windows of my private data when formatting the drive is not an option?

I'm changing my employer, and I'm about to leave my office computer. Due to internal regulations and my supervisor's orders, I'm unable to format the disk drive. I was hoping I would be able to do ...
-7
votes
2answers
107 views

What does it mean by Big Brother? [closed]

While searching some sites, I came across this advt, looks like this: They specifically mention Big Brother is watching you, so is he referring to our own government is spying on me?
2
votes
1answer
101 views

Can we determine how securely files are stored on a cloud storage service?

After asking two questions about the security of online cloud storage, it seems to me that we can only at best speculate as to the security practices of the hosting company, and believe what they tell ...
1
vote
2answers
205 views

A secure alternative for e-mail

I am looking for an alternative for my current e-mail provider (gmail). I would like to gain back a little bit more "privacy" on the internet. I would like the following things: The e-mails I send ...
2
votes
2answers
356 views

From an infosec expert perspective, how secure is using Windows 10 as a daily os? [closed]

I have a Windows 10 pro license and i wanted to use Windows 10. But seeing how it treats the user's privacy and all, I am having second thoughts. I've read a lot about how Windows 10 is a disaster and ...
1
vote
2answers
177 views

How can a seamless cloud storage service be Zero-knowledge?

Cloud based storage services like Dropbox and Google Drive are a cause for concern when it comes to privacy. They store encryption keys for your files on their servers. Therefore, anyone who manage to ...
1
vote
3answers
97 views

Google Public DNS- private enough?

Google claims that they do not keep any personally identifiable information but they do keep a user's ISP and geo-location information including the geocode, as shown here. To keep the question ...
-1
votes
1answer
67 views

robots.txt and risk associated [closed]

robots.txt is a file that contains path which cannot be crawled by bot most of time search-engine bots like Google bot, etc. It tells search-engine that this directory is private and cannot be crawled ...
6
votes
1answer
2k views

How does a website detect proxy? [duplicate]

How can a specific website detect that I'm surfing via proxy? Is there a way to use proxy and not get detected? If so, how?
4
votes
3answers
250 views

3G, 4G How does my provider know i am using facebook?

I have a mobile subscription with 1 GB of data every month. But my provider has a promotion where facebook and twitter traffic is free, so I can use facebook and twitter and not use up my 1 gb of ...
5
votes
1answer
206 views

Can I redact by converting PDF to TIFF and back?

Background My boss asked me to come up with a way ordinary users can redact information from PDF files using free software. We get a lot of scanned documents and our client requires that sensitive ...
5
votes
1answer
104 views

Dragnet TEMPEST Surveillance?

Just something I considered recently -- TEMPEST attacks are pretty well known; basically you intercept EM leaks from a computer to discover compromising information (i.e. encryption keys, what's being ...
0
votes
1answer
817 views

I want to encrypt my SSD, should I still use TrueCrypt or Is there a better open source alternative? [duplicate]

Before anything I have say that I have no experience with cryptography, at all. Anyway, I have a laptop with Windows 10 and an SSD. I don't want to use BitLocker since I don't trust Microsoft in this ...
2
votes
3answers
108 views

What does my iPhone see/track when connected to my macbook PC?

Recently hooked up my work iPhone to my personal MacBook to charge the phone. I viewed some websites that would be questionable on the MacBook using the hotel WiFi. What does the iPhone track when ...
1
vote
4answers
722 views

Find out if someone copied a file from my external hard disk

I want to find out if someone has copied my personal details from my external hard disk. I don't care whether they read it, but it should not be copied to their system. So is there any method to find ...
-1
votes
1answer
55 views

Measuring privacy policy [closed]

I want to measure if the user's data which is collected by the system is mentioned in the privacy policy. What is the best measure that I can use it in such case?