The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

0
votes
0answers
28 views

Are Images/Videos sent through WhatsApp stoed on the server for too long? If yes, are they secure [on hold]

The WhatsApp privacy policy states that messages once delivered are deleted from the server forever. But in case of "files"(I'm assuming them to be attachments like images and videos) it says and I ...
3
votes
3answers
5k views

Can a website still detect my real MAC address even if I use different virtual machine each time I visit the website?

Suppose I use a proxy and a different virtual machine each time I visit a particular website, will a website still be able to detect my MAC address and/or uniquely identify me? Assume that the website ...
2
votes
0answers
72 views

Imei and phone number given to unknown sources. What are the risks?

The facts: A friend put his phone number (and possibly the IMEI) for his android device into some kind of hacking PC software that promised to (and actually did) extend its Whatsapp account that was ...
2
votes
2answers
122 views

How to know what personal information companies know about myself

I've been learning about Cyber Security and how to protect myself online after reading some books on the subject and I want to know how much Information i've handed out to companies.
5
votes
2answers
144 views

Can Heartbleed expose a TOR user's IP address?

It is interesting to observe, that TOR exit nodes with out-of-date OpenSSL implementations can themselves be affected by the Heartbleed bug. Can Heartbleed expose a TOR user's IP address merely by ...
8
votes
4answers
2k views

Tor and regular browser side by side. Does that make sense?

Can I use a Tor browser session and a regular Firefox session side by side without corrupting the security of the Tor session? E.g. when I download a new Eclipse version or when I'm searching for ...
5
votes
1answer
111 views

Can an iOS 7 app access either device camera without user knowledge?

This statement in the iOS 7 release notes implies that non-China devices do not need user consent: iOS now requests user consent for apps to use audio input on all iOS 7 devices. For devices ...
-1
votes
2answers
67 views

Can you listen to your last GSM call recorded when calling back a user?

My wife called a GSM/3G number abroad and the call was dropped. She called again and she could hear the whole conversation repeated with the other party but with blank period from her side of the ...
3
votes
4answers
182 views

Anonymized Votes

Background Looking to create an anonymous voting system. The system must track whether or not a user voted on an item (public information), but only that user is ever allowed to know whether they ...
1
vote
1answer
109 views

Skype Audio / Video Session over VPN?

Basically I'm wondering if a Skype video session along with audio could be logged (or recorded) over a virtual private network? I know whoever hosts the VPN server can log which websites you visit (or ...
40
votes
9answers
6k views

Why am I allowed to access protected Windows files when I boot Ubuntu from USB?

How come I'm allowed to reboot a computer that I don't own, put in a USB, boot ubuntu from it and then access all files stored on the drives available (even critical files such as system files on C ...
43
votes
5answers
3k views

How does a country block its citizens from accessing a site?

Following Turkey's recent social site blocks, I am wondering how can you efficiently accomplish that as a country. Similar for a big company. Blocking IPs → easy to circumvent, (proxys, tunnels, ...
29
votes
6answers
2k views

Is there a difference between GET and POST for web application security?

I have 2 choices in sending data between 2 web applications. I encode the data in Base64 and append to the URL and retrieve these parameters at my destination application and decode the parameters. ...
1
vote
3answers
71 views

OpenPGP Master Key Size

I want to start using OpenPGP, so I read about it. I have a question about key size. Currently the default maximum key size is 4096. I know this can be changed by recompiling the software, and I ...
75
votes
2answers
37k views

What is the difference between https://google.com and https://encrypted.google.com?

Is it there any difference between the encrypted Google search (at https://encrypted.google.com) and the ordinary HTTPS Google search (at https://google.com)? In terms of security what were the ...
132
votes
7answers
24k views

What are the implications of NSA surveillance on the average internet user?

It would appear as though the tinfoil hat-wearing were vindicated today, as news broke of the true scale of the U.S. government's surveillance of its citizens' online activities, conducted primarily ...
9
votes
4answers
2k views

SSL Inspection and privacy

I know my company is testing something called "SSL Inspection" based on Websense, which is our proxy. I can not provide more detail about this, but does this mean that in principle all my SSL traffic, ...
21
votes
6answers
4k views

How to be completely anonymous online?

I recently saw this post on reddit: http://www.slashgeek.net/2012/06/15/how-to-be-completely-anonymous-online/ But the majority argument, both on reddit and on comments on that post seems to be that ...
0
votes
2answers
133 views

If someone knows my wi-fi password, will he know what I am doing? [duplicate]

I just told my friend my Wi-Fi password, will he know what I am doing even though he does not connect to my home internet?
2
votes
2answers
386 views

Is it possible to completely wipe a flash memory? [duplicate]

i have a 64 gb micro SDXC memory card that has sensitive files on it and i want to completely erase it but i heard it was impossible to be sure that your data was erased because of wear leveling ? The ...
2
votes
3answers
869 views

Is there an alternative to TCP/IP that encrypts end-to-end?

If there was a communication protocol that encrypts at the very low-level, this would solve the problem of wiretapping entirely and for all.
0
votes
1answer
19 views

Safely creating and communicating within a fully decentralized p2p network

I'm not entirely sure if this is the right place to ask this, and I'm also slightly fuzzy on how the p2p system works, so correct me if I'm wrong. I've been looking into the practical implications of ...
0
votes
3answers
122 views

Any alternative available for RSA? Is the web still visible to NSA?

After the Snowden revelations, is there any mass change being carried out to HTTPS protocol? As far as I understood, any HTTPS communication is still visible to NSA as they can compromise the RSA ...
2
votes
3answers
378 views

Repudiation in Copyright Infringement (BitTorrent)

Seeing this question : How can alleged illegal downloading be detected? sparked a question I have had for a long time. How does repudiation/non-repudiation work in such cases ? Argument: It is known ...
0
votes
1answer
47 views

what information can be accessed with just the bank account number? [duplicate]

one of my friends wants to deposit money into my other friends bank account. obviously she needs the bank account number to do this. Can she access any other information in with just the bank account ...
100
votes
4answers
29k views

How does the authentication in the new UK £1 coin work?

The UK is getting a new £1 coin. Its designers, the Royal Mint, claim that unlike current coins, it includes built in technology for high speed authentication and verification everywhere from ATMs to ...
0
votes
2answers
43 views

Anonymizing data for applications

I try to design a system which reads events comming from devices, stores them and exposes API to various applications. Originally I wanted to introduce a module Id translator, so I would store only ...
2
votes
3answers
86 views

Fingerprints of my computer

I'm recently interested in having an paranoid level of privacy but there is little question in my mind for which I cannot find an answer. I know there is fingerprint of my browser which it gives away ...
1
vote
2answers
70 views

Is it safe to rely on UUIDs for privacy?

I'm uploading files on S3, where the filename is a UUID. All files uploaded are publicly read/write, however these files are considered private to users. Is it possible for someone to guess a UUID, ...
2
votes
2answers
136 views

Data protection laws and regulation for storing IP addresses for registered users [closed]

I have a website, large amounts of this site can only be accessed if the user logs in. I would like to use the users IP addresses as a means to determine where they are when they access certain pages. ...
0
votes
2answers
32 views

How likely would /var/mail be encrypted in a paid host? [closed]

I pay for a very basic web hosting plan, which includes a personal email address. Would the sysadmin of said host be able to read the content of my messages? How likely would my personal mail folder ...
1
vote
4answers
2k views

Open VPN has DNS leak

Since using www.dnsleaktest.com I have found that any VPN service using Open VPN will leak my DNS through the tunnel. I have tried and tested several VPN providers, even those who say that they have ...
0
votes
1answer
107 views

Employee Snooping [closed]

I just got hired at this SW tech company with a few IT gurus in it. There is a clever genius that is suspect. He obtained my personal home email address I use. It was obtained from company ...
-1
votes
1answer
89 views

How bad is to buy domain name with .ext from another country even if they allow non citizens to own one?

I'd like to purchase a domain name from a country that does not require citizenship, since they can make nice urls, they are more available and sometimes not too expensive too! But few things annoys ...
1
vote
1answer
76 views

How could a third-party know the contents of an email I sent to someone?

Apparently, a third party knew the contents of an email I sent to someone within an hour after I sent it. The following possibilities come into mind: The recipient forwarded the email to the third ...
4
votes
3answers
478 views

How to protect against a determined harasser

My girlfriend is an admin on a German speaking site that for some time has been harassed by what we presume is a disgruntled user. At first it was merely an annoyance but a couple of days ago the ...
0
votes
1answer
34 views

What are the strengths and weaknesses of using a single 'burner' computer vs. many public access computers over a sustained period? [closed]

Assuming that the user is accessing/publishing related sensitive information over this period, and also assuming that they would take additional precautions in both scenarios, such as a Tails live ...
2
votes
2answers
160 views

Can cookies reveal my email address?

When I visit livescore.com, ten seconds later I receive marketing emails from gambling companies. If I don't visit this site, I don't receive these emails. Similar things happen when I visit Twitter ...
1
vote
0answers
67 views

Store which parts of an IP address, for user to remain anonymous?

I'm thinking about building a very anonymous forum, where people can comment and upvote each other's comments anonymously. People are supposed to remain anonymous even if the forum's database contents ...
2
votes
4answers
701 views

Does using Google DNS make extensions like AdBlock Plus useless?

As many of you probably do, I am not using my ISP DNS because of very low performance, and I am using Google's primary and secondary DNS (8.8.8.8 and 8.8.4.4) which are good speed-wise but, knowing ...
1
vote
1answer
181 views

Are WhatsApp or Telegram secure enough to use for office communication?

We are thinking about switching from e-mail to instant messaging. Do you think, Apps like WhatsApp or Telegram provide enough security for that?
51
votes
10answers
5k views

Where do you store your personal private GPG key?

So, I want to start using pass, but I need a GPG key for this. This application will store all of my passwords, which means it's very important that I don't lose my private key, once generated. Hard ...
4
votes
4answers
206 views

Secure file sharing, instead of attaching files to emails?

Allow me to give some background information, so you may understand my situation better. We have been prone to sending emails to unintended recipients, many of which contained confidential data. ...
4
votes
1answer
99 views

Security Consequences of compromised passport data

In light of the recent hack of the EC-Council site, where the hacker makes the point that he has access to passport data a general question arises. What, if any, are the security/privacy consequences ...
0
votes
1answer
119 views

WireShark and Facebook [closed]

Some time ago i try Wireshark at my home local network just for see how it works. I scan the connection of my mac to the router and also to other external ips. The flow of connections were high when i ...
1
vote
1answer
94 views

How can I be sure that my browser does not exfiltrate my passwords to some server?

This is my first question and I dont even know if it is the right place. If this is an off-topic just mark it as off-topic, don't go crazy and downvote. :P But how can I detect if my browser is not ...
1
vote
0answers
580 views

Is Threema secure? [closed]

Threema is the new hyped secure alternative to WhatsApp and such. But is it really secure? As far as i know it is not open source, so no one knows how good the sheme is implementet and whether or not ...
1
vote
2answers
239 views

Why is my browsing history visible outside my network?

Whatever I and my family members do at 'Home PC' is visible in the history in Google chrome in my 'Office PC'. The two networks are entirely different! I saw all websites visited on our home PC by my ...
0
votes
3answers
118 views

Gmail, Google, and privacy

I am not sure whether this is the best place to get my concerns addressed, but I hope it is. I went through some earlier questions posted on this site about Gmail and privacy but they don't seem to ...
0
votes
0answers
23 views

Why is it not advisable to have the database and web server on the same machine? [duplicate]

I'm bringing this across from a question on stackoverflow, but I'd like to focus specifically on the security aspects of it (and not the performance, etc..). My hypothesis is that the cost of ...