The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

1
vote
2answers
79 views

Why use the UUID method over traditional ID?

The following quote came from one of my Teachers not to long ago, along with an exercise to build an application: To follow guidelines, you are to use UUID's instead of ID's. Of course, the ...
4
votes
1answer
90 views

New EU Data protection Law and small businesses

I'm aware of the new EU law changes regarding data protection. As a security consultant for an IT company who manages multiple other companies systems, i was hoping someone might be able to clarify a ...
11
votes
8answers
3k views

Can a website identify me if I go in privacy mode with a different IP ? Or should I use a different computer?

Assume I am a regular user of website A that forbids multiple accounts. I assume it can identify me with cookies and IP. So if I use a VPN, then open a private tab in my browser, can it still identify ...
9
votes
1answer
121 views

In VMs, do shared folders reduce security effectiveness?

VirtualBox offers the option of using shared folders, others probably offer the same thing. I am not sure whether the host is directly accessing the memory of the guest, or if there some process which ...
3
votes
1answer
249 views

Can it be dangerous to use not popular(unknown) dns servers?

There is a service called tunlr, which let's you browse the web with no restrictions(Pandora, Hulu etc.). You just have to use their dns server. But now I'm concerned whether the owners of the dns ...
3
votes
0answers
105 views

How far should I go in protecting a user's SMBIOS UUID?

My server will be receiving data from several hundreds of computers. As part of keeping track of which computer sent what, I will be fingerprinting the hardware and keeping the results in my database. ...
2
votes
1answer
181 views

Privacy issues when mobile app has access to phone number and contacts

It seems that when it comes to mobile apps convenience defeats security - always. In particular all messaging/communication apps seem to require to have access to your contacts on the phone and your ...
4
votes
1answer
143 views

Way to keep Google from knowing the SIM card I am using on Android

We see that the the details of the Telecom operator along with other details are available to Google for the SIM card that we are using on an Android Phone. Is there any way that can be applied or ...
2
votes
1answer
151 views

Is it possible to feed Firefox Flash plugin with controlled data for privacy reasons?

For privacy and security reasons, it would be strongly recommended to deactivate the Flash plugin in the browser. But I don't want to deactivate it, I want to fake privacy relevant information. ...
0
votes
2answers
31 views

Is there a service that will auto scan a 'Terms if Service' to assess privacy issues? [closed]

Terms of Service agreements are very tedious and extensive, I am wondering if there exists yet in the privacy tools that are evolving a tool that will scan a TOS for common issues to privacy.
4
votes
1answer
219 views

Why do web services keep asking me about my phone number?

They say it's for my own safety and that somehow my account is more "secure" if I link it with my phone number, but I don't understand why - they already have my e-mail address through which I can ...
2
votes
2answers
63 views

Are there trackers that work even for people who are using extensions like Privacy Badger? [closed]

If so, what are they and how do they work? (This is within the context of a blog. I do not have access to the server).
2
votes
3answers
175 views

Spoofing random browser information to defend against fingerprinting

Tor goes the way of trying to make everyone look the same to defend against browser fingerprinting. Wouldn't a simple addon that changes/adds as much information as possible randomly in short time ...
24
votes
7answers
10k views

Can a WiFi access point operator tell that I'm streaming video to my phone?

I work at an office typing numbers into a computer. It gets quite boring sometimes, so I go on Netflix while using their WiFi on my phone. Can they tell what apps I'm using, based on network traffic? ...
2
votes
1answer
49 views

Can spambots access pages available to only registered, authenticated users?

I have a web application where users register and are activated via an email sent to the email address they supplied. Then there are pages that are only visible to registered users (non-user access ...
54
votes
5answers
8k views

How can you be tracked using screen resolution/monitor size in Tor?

Whenever I maximize the Tor browser, it shows a warning: Maximizing Tor Browser can allow websites to determine you monitor size, which can be used to track you... How can screen resolution or ...
0
votes
1answer
130 views

Commercial VPN for privacy: Which country servers to connect to?

I live in North America and I use a commercially-provided VPN. I use it to encrypt my connection to the Internet, so that my ISP cannot store logs of my DNS requests or browsing activity. I also use ...
1
vote
0answers
114 views

How do ad networks and analytics providers encrypt/hash their traffic?

I am trying to observe what types of information android apps are sending to ad networks that are integrated into apps. I used Fiddler to decrypt the https traffic. However, some ad networks seem to ...
34
votes
6answers
4k views

How do I purge Windows of my private data when formatting the drive is not an option?

I'm changing my employer, and I'm about to leave my office computer. Due to internal regulations and my supervisor's orders, I'm unable to format the disk drive. I was hoping I would be able to do ...
-7
votes
2answers
102 views

What does it mean by Big Brother? [closed]

While searching some sites, I came across this advt, looks like this: They specifically mention Big Brother is watching you, so is he referring to our own government is spying on me?
2
votes
1answer
96 views

Can we determine how securely files are stored on a cloud storage service?

After asking two questions about the security of online cloud storage, it seems to me that we can only at best speculate as to the security practices of the hosting company, and believe what they tell ...
1
vote
2answers
198 views

A secure alternative for e-mail

I am looking for an alternative for my current e-mail provider (gmail). I would like to gain back a little bit more "privacy" on the internet. I would like the following things: The e-mails I send ...
2
votes
2answers
345 views

From an infosec expert perspective, how secure is using Windows 10 as a daily os? [closed]

I have a Windows 10 pro license and i wanted to use Windows 10. But seeing how it treats the user's privacy and all, I am having second thoughts. I've read a lot about how Windows 10 is a disaster and ...
1
vote
2answers
168 views

How can a seamless cloud storage service be Zero-knowledge?

Cloud based storage services like Dropbox and Google Drive are a cause for concern when it comes to privacy. They store encryption keys for your files on their servers. Therefore, anyone who manage to ...
1
vote
3answers
96 views

Google Public DNS- private enough?

Google claims that they do not keep any personally identifiable information but they do keep a user's ISP and geo-location information including the geocode, as shown here. To keep the question ...
-1
votes
1answer
67 views

robots.txt and risk associated [closed]

robots.txt is a file that contains path which cannot be crawled by bot most of time search-engine bots like Google bot, etc. It tells search-engine that this directory is private and cannot be crawled ...
6
votes
1answer
2k views

How does a website detect proxy? [duplicate]

How can a specific website detect that I'm surfing via proxy? Is there a way to use proxy and not get detected? If so, how?
4
votes
3answers
244 views

3G, 4G How does my provider know i am using facebook?

I have a mobile subscription with 1 GB of data every month. But my provider has a promotion where facebook and twitter traffic is free, so I can use facebook and twitter and not use up my 1 gb of ...
5
votes
1answer
186 views

Can I redact by converting PDF to TIFF and back?

Background My boss asked me to come up with a way ordinary users can redact information from PDF files using free software. We get a lot of scanned documents and our client requires that sensitive ...
5
votes
1answer
104 views

Dragnet TEMPEST Surveillance?

Just something I considered recently -- TEMPEST attacks are pretty well known; basically you intercept EM leaks from a computer to discover compromising information (i.e. encryption keys, what's being ...
0
votes
1answer
760 views

I want to encrypt my SSD, should I still use TrueCrypt or Is there a better open source alternative? [duplicate]

Before anything I have say that I have no experience with cryptography, at all. Anyway, I have a laptop with Windows 10 and an SSD. I don't want to use BitLocker since I don't trust Microsoft in this ...
2
votes
3answers
105 views

What does my iPhone see/track when connected to my macbook PC?

Recently hooked up my work iPhone to my personal MacBook to charge the phone. I viewed some websites that would be questionable on the MacBook using the hotel WiFi. What does the iPhone track when ...
1
vote
4answers
630 views

Find out if someone copied a file from my external hard disk

I want to find out if someone has copied my personal details from my external hard disk. I don't care whether they read it, but it should not be copied to their system. So is there any method to find ...
-1
votes
1answer
54 views

Measuring privacy policy [closed]

I want to measure if the user's data which is collected by the system is mentioned in the privacy policy. What is the best measure that I can use it in such case?
1
vote
0answers
123 views

What information can be gained given only a phone number? [closed]

What personal information can be obtained given only a phone number? What information is your phone number publicly (or privately, but with easy access) linked to? Here is the way I am looking at ...
5
votes
3answers
4k views

CV to a Suspicious Professor [closed]

Here's the situation: we have this professor this semester who is an excellent teacher and is very friendly, but he has some ego issues. He promised a few of us internships at Princeton, Stanford, ...
22
votes
1answer
2k views

What are the privacy and security implications of Windows Telemetry

There have been quite a few news stories relating to the use of "Telemetry" in Windows 10 (and also now Windows 7/8) with suggestions that users would want to disable or remove these updates due to ...
-1
votes
1answer
51 views

Tracking a specific computer from an online enquiry form

The optical fiber cable that supplies a business is used for clients and staff. The business has an online enquiry form for bookings on its web page. It also provides free WiFi access to clients and ...
4
votes
2answers
144 views

What is a “roving” backdoor?

What is a "roving" backdoor? I understand the general concept of a backdoor. Emphasis on keyword qualifier: "roving"...
1
vote
2answers
116 views

How much information a Flash program (Flash app) can gather about computer when running?

Does anyone know if a Flash web application has access to local hard drive? What about OS information or hardware information? If I allow webcam and microphone access, how much information can it get ...
2
votes
3answers
4k views

Does WhatsApp disclose the sender's IP address?

Does WhatsApp disclose the sender's IP address? Is it possible to get it by running netstat -a or via Wireshark?
3
votes
1answer
210 views

Webrtc privacy issues?

I've been reading about WebRTC, and I'm interested in using it for a drawing web application that uses real-time collaboration. However, as I understand, WebRTC communication requires all parties ...
2
votes
2answers
93 views

Confidentiality and privacy

I understand that the confidentiality aimed at protecting access to the system data, while privacy aimed at protecting access to the person data. Now, could we consider anonymity as a ...
3
votes
2answers
188 views

Should I regularly erase cookies?

Cookies really do make for a better experience on the web but do they also create a vulnerability? How often should I clean them out and what benefits are gained by doing so?
3
votes
3answers
159 views

Is there any point to opting out of interest-based ads?

There are various browser extensions for opting out of interest-based ads, e.g.: https://chrome.google.com/webstore/detail/iba-opt-out-by-google/gbiekjoijknlhijdjbaadobpkdhmoebb ...
1
vote
0answers
32 views

What is the new searchdefaulthash in the Firefox profile search metadata?

During a recent review of changes to the Firefox profile (I'm version controlling it) there turned out to be a new property searchdefaulthash in search-metadata.json: "[global]":{ [...] ...
5
votes
2answers
119 views

Should I be worried if somebody uses my email to sign up for accounts?

I recently received e-mails from two services: Paytm and Uber. They both seem like legitimate services. However I have no idea why I received these e-mails or why somebody would want to create an ...
1
vote
0answers
135 views

Windows 10 privacy concerns for other accounts on same computer [closed]

What are the privacy concerns for a local account on a Windows 10 computer, which has all settings set to "private", if an additional "Microsoft" account is being used on the same computer with ...
-1
votes
1answer
326 views

Twitter phone verification while on Tor [closed]

Twitter locked me out of my account. I can log in but I can't do anything with it until I give them a phone number. I've had the account for years but they've decided now there's "suspicious ...
22
votes
2answers
3k views

How is Skype showing ads from my Google search history?

I can understand when I see the same ads across websites, and ads similar to my search history. Some tracking magic through cookies - fine. But Skype has been showing me ads for exact terms I ...