Questions tagged [privacy]

The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all.

Filter by
Sorted by
Tagged with
129 votes
11 answers

Can my employer see what I do on the internet when I am connected to the company network?

This is an attempt at a canonical question following this discussion on Meta. The aim is to produce basic answers that can be understood by the general audience. Let's say I browse the web and use ...
INV3NT3D's user avatar
  • 3,987
79 votes
3 answers

Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?

For example, say the following are HTTPS URLs to two websites by one IP over 5 mins: "", "", "", "", "". Would monitoring of packets reveal: nothing, reveal only ...
blunders's user avatar
  • 5,062
83 votes
7 answers

Are random URLs a safe way to protect profile photos?

I would like to move from sequential to random user IDs, so I can host profile photos publicly, i.e. How long must user IDs be to keep anyone from ...
owenfi's user avatar
  • 933
66 votes
6 answers

If someone hacks my wi-fi password, what can they see and how?

If someone knows my wifi password (be it WEP or WPA) what can they see? Do they just see URLs I visit, or can they see everything in my browser, or even everything I do on my computer? Does using ...
user20378's user avatar
  • 663
84 votes
9 answers

How to fight browser fingerprinting? , aka "How unique and trackable is your browser". For example it usually gives me a unique score. The biggest entropy values come from navigator.plugins and fonts via ...
n611x007's user avatar
  • 2,285
43 votes
5 answers

How to be completely anonymous online?

I recently saw this post on reddit: How to be completely Anonymous online (June 2012). But the majority argument, both on reddit and on comments on that post seems to be that it is not possible to be ...
wannabe-anon's user avatar
71 votes
12 answers

Can I prevent my neighbors, whom I pay for shared internet (WiFi), from seeing the sites I've visited?

I pay my neighbors to use their WiFi. They have listed me as Guest with a separate password from theirs. Is there any way to prevent them from seeing the sites I've visited? My browser history clears ...
Pat's user avatar
  • 701
44 votes
6 answers

Is there a difference between GET and POST for web application security?

I have 2 choices in sending data between 2 web applications. I encode the data in Base64 and append to the URL and retrieve these parameters at my destination application and decode the parameters. ...
Vikas V's user avatar
  • 683
23 votes
3 answers

Anonymous web browser. Is it real?

Do anonymous browsers work? What principles do they use? Can I use them to test access to my web site? Can I detect if a visitor is using one? What is the different between traditional and anonymous ...
garik's user avatar
  • 1,292
120 votes
9 answers

Is it dangerous to post my MAC address publicly?

When posting questions, it is often quite useful to include debug output. However, it sometimes include the MAC address of my laptop, router, or both. What are the possible dangers of releasing these ...
Shelvacu's user avatar
  • 2,373
12 votes
2 answers

What happens if an attacker steals my phone's IMEI number?

I have some questions regarding IMEI numbers and data and identity theft. While searching online I have found many conflicting answers regarding this topic and would like some clarification if ...
Bluebear's user avatar
  • 129
84 votes
2 answers

Best practices for Tor use, in light of released NSA slides

It has been known in the security community that a tool as versatile as Tor is likely the target of intense interest from intelligence agencies. While the FBI has admitted responsibility for a Tor ...
nitrl's user avatar
  • 3,003
66 votes
7 answers

Can web sites detect whether you are using private browsing mode?

Most modern browsers support "private browsing mode" (also known in Chrome as "Incognito mode"), where the browser does not save any information to disk about your browsing while ...
D.W.'s user avatar
  • 99.4k
47 votes
8 answers

How can you be caught using Private VPN when there's no logs about who you are?

I know there are 2 services of VPN (free and paid). Normally, free VPNs need money from somewhere and sometimes they can sell your information to any agency that needs it. Now, if we are talking about ...
jcho360's user avatar
  • 813
42 votes
3 answers

What is an SSL certificate intended to prove, and how does it do it?

If I get an SSL certificate from a well-known provider, what does that prove about my site and how? Here's what I know: Assume Alice and Bob both have public and private keys If Alice encrypts ...
Nathan Long's user avatar
  • 2,724
22 votes
4 answers

What is the risk of leaking IMEI / IMSI numbers over a network

Should I worry if a developer programmed an app to send IMEI / IMSI number of the phone where the app is installed back to him? What can an attacker do with such information?
DaTaBomB's user avatar
  • 655
20 votes
5 answers

Different strategies for online anonymity and their +/-s?

I saw this question about anonymous web browser, but I wanted to go a little bit more in depth. I prefer answers that take into account how a connection would be traced back, time it would take to ...
mrnap's user avatar
  • 1,308
45 votes
3 answers

What is the difference between ATA Secure Erase and Security Erase? How can I ensure they worked?

I'd like to wipe a stack of drives (spinning and SSD) securely. I'm familiar with the ATA Secure Erase (SE) command via hdparm, but I'm not sure if I should use the Security Erase (SE+) command ...
Sophit's user avatar
  • 573
18 votes
2 answers

How to handle security issues of someone else's website

A few weeks ago I found that someone has posted admin account details for a certain website on a public wiki by mistake. As I found that data to be real (i.e. I could log into their website run by ...
selfthinker's user avatar
238 votes
13 answers

Where do you store your personal private GPG key?

So, I want to start using pass, but I need a GPG key for this. This application will store all of my passwords, which means it's very important that I don't lose my private key, once generated. Hard ...
Florian Margaine's user avatar
229 votes
9 answers

Best Practice: ”separate ssh-key per host and user“ vs. ”one ssh-key for all hosts“

Is it better to create a separate SSH key for each host and user or just using the id_rsa key for all hosts to authenticate? Could one id_rsa be malpractice for the privacy/anonymity policies? having ...
static's user avatar
  • 2,389
198 votes
10 answers

Search for military installed backdoors on laptop

My laptop was confiscated by the military institute of my country and they made me to give them all my passwords (I cannot tell you the name of my country). They did not give it back to me for one ...
Posse's user avatar
  • 1,801
26 votes
5 answers

What are the pros and cons of a VPN for privacy

Recently I have been getting more and more interested in the security (privacy and anonymity) issues of my online life. Not that I have anything to hide, or that what I do online is so interesting to ...
user avatar
16 votes
1 answer

How was the Apple Hacker caught? How can meta data be used to identify users through chained VPNs?

Online privacy is a big issue for many people nowadays. Using VPNs is the usual suggestion as a means to stay anonymous. More often than not, somebody comes up with the point "just chain multiple VPNs ...
SEJPM's user avatar
  • 9,720
10 votes
1 answer

What unique fingerprinting information can an iOS7 app collect?

I'm interested in unique information that is beyond typical user knowledge or control. As of iOS 7, users can easily protect local physical tracking by controlling radios (cell, WiFi, Bluetooth) in ...
pseudon's user avatar
  • 1,430
9 votes
1 answer

What unique device fingerprinting information can an iOS9 app collect?

As a follow-on to these questions: What unique fingerprinting information can an iOS7 app collect? What unique device fingerprinting information can an iOS8 app collect? Apple has apparently ...
pseudon's user avatar
  • 1,430
135 votes
9 answers

Is Google spying on all of us?

I am curious because, I experienced something bizarre recently. About a month ago, someone asked me to find out a price for a T-shirt printing machine, and probably for the first time, I pressed these ...
samayo's user avatar
  • 929
127 votes
7 answers

My ISP uses deep packet inspection; what can they observe?

I found out that my ISP does deep packet inspection. Can they see the contents of HTTPS connections? Wouldn't having HTTPS ensure that they can't see the contents being transferred? And can having a ...
cppanonhelp666's user avatar
32 votes
20 answers

How can I prevent my kids from bypassing my computer restrictions?

My son has a downloaded copy of Ubuntu that he uses to "break" into my computer, bypassing Vista. I have two questions: Can this damage my computer or corrupt my files? (I have lots of pictures) Is ...
user avatar
24 votes
6 answers

Why is Tor safer than a proxy?

If I use a Tor router to browse the regular internet, my traffic must leave the Tor network through an exit node. Apparently the exit node can see the data originally sent. Is this true? If an ...
TestinginProd's user avatar
19 votes
1 answer

What unique device fingerprinting information can an iOS8 app collect?

As an addition to this question: What unique fingerprinting information can an iOS7 app collect? What remaining device fingerprinting privacy/security vulnerabilities still exist as of iOS 8? Can ...
pseudon's user avatar
  • 1,430
17 votes
2 answers

What are the privacy and security risks associated with Intel's Management Engine and AMD's Platform Security Processor?

And also as an everyday user who mostly just surfs the web, are these risks a huge concern for me? Edit: Also on the similar note, are there any substantial evidences of Intel or AMD purposely ...
14 votes
1 answer

What would happen if some random webpage made an Ajax request for

I run a localhost-only webserver (PHP's built-in one) for all my admin panels and whatnot on my machine. I'm worried that, if any random webpage has a JavaScript snippet which makes an Ajax call to ...
ParanoidAndroid's user avatar
5 votes
3 answers

Signal protocol implementations: pub key authentication and inspectability? (Allo, WhatsApp, FB messenger, Signal)

A critical part of the Signal protocol, used by Google Allo, WhatsApp, Facebook Messenger and Signal, among others) is a public key infrastructure. Public keys are needed to set up sessions. As far as ...
Evert Lammerts's user avatar
4 votes
5 answers

Can teleworking let my boss to sniff my network traffic? What else could he do?

My boss proposed me to code from home on the their machines via internet, in two possible ways: I would connect to their computer and work on their machine, as if I was in front of the computer(from ...
webose's user avatar
  • 271
3 votes
3 answers

Can my employer monitor personal device use on my home network?

I occasionally work from home. I have a work laptop that I bring home and connect to my company's network using my home WiFi (I assume it has its own direct connection). I also have my personal ...
Kalikori101's user avatar
449 votes
13 answers

Is it bad practice to use your real name online?

On some accounts I use my real name on-line (Google+/Facebook/Wikipedia/personal blog), others (Q&A/Gaming) I use an alias. My question is: Security and privacy wise, what can people do with my ...
blade19899's user avatar
  • 3,611
100 votes
12 answers

Landlord will be watching my data traffic, as mentioned in the lease agreement

I am moving to Germany, and in the contract I signed I had to accept that all my data traffic can/will be checked by the apartment owner. The contract states: Flatrate, aber hinter 30GB Tarif ...
Olba12's user avatar
  • 1,069
99 votes
8 answers

How can I protect my internet-connected devices from discovery by Shodan?

There's been a lot of buzz around this recent CNN article about Shodan, a search engine that can find and allow access to unsecured internet-connected devices. Shodan runs 24/7 and collects ...
Aarthi's user avatar
  • 921
56 votes
2 answers

In CitizenFour, what was Edward Snowden mitigating with a head blanket?

A scene in the documentary CitizenFour showed Snowden using a blanket to cover his head and the laptop screen. When asked by Greenwald about this, he answered affirmatively, but I couldn't really ...
Mars's user avatar
  • 1,843
19 votes
11 answers

I'm leaving my job and want to erase as many personal details etc. as possible; any tips?

Obviously this is very open-ended. But, I'm just paranoid about people going through everything on my laptop after I leave my job. Here are the things I'm planning to do: Completely wipe all browser ...
Tedderz's user avatar
  • 291
17 votes
3 answers

Is it secure to have an "email no longer available" feature on your registration form?

I was just implementing a new feature on the registration form of my site that checks if an email address is still available to register an account with. I am wondering if it is secure to show a user ...
xxdriesxx's user avatar
  • 173
13 votes
11 answers

Besides IP addresses, how else could one be identified? [closed]

OP: I'm curious how else an actor seeking to identify someone online could accomplish this task besides just using an IP address. What methods would they employ? What knowledge must they have of the ...
Charles Hoskinson's user avatar
11 votes
3 answers

Does a VPN hide what URLs I visit?

It's clear that someone listening on a network could still find out what website I visit over HTTPS (as discussed here) but what about when surfing in a VPN? What exactly can the underlying network (...
vpn-curious's user avatar
11 votes
1 answer

Can VPN provider see my data?

I have a 2 questions: If I use a VPN and I go to any websites via HTTP - does VPN provider will be able to see the traffic? Those. logins, passwords, all the texts that pass through the channel (in ...
ideloxew's user avatar
  • 507
10 votes
8 answers

Company computer use from home - how much can they see on the desktop?

I have a company supplied computer that I use from home. I log into VPN (cisco AnyConnect) when i need to access company email or internal company sites. In the past the company has been able to "...
John's user avatar
  • 101
10 votes
3 answers

Does WhatsApp disclose the sender's IP address?

Does WhatsApp disclose the sender's IP address? Is it possible to get it by running netstat -a or via Wireshark?
user avatar
7 votes
5 answers

How to detect self destructing emails? How to prevent from self destruction?

Recently I came across a gmail extension for Chrome browsers which claims to send self destructive emails. I tested by sending self destructive emails to my email account and it works fine Now my ...
BlueBerry - Vignesh4303's user avatar
5 votes
2 answers

Can we determine how securely files are stored on a cloud storage service?

After asking two questions about the security of online cloud storage, it seems to me that we can only at best speculate as to the security practices of the hosting company, and believe what they tell ...
Zsw's user avatar
  • 757
5 votes
6 answers

Is it possible for someone to see under the "blacked out" part of this image (see below)?

Ok, so I sent some pictures to a journalist to report something I thought was noteworthy. However, one of the images contained my date of birth and other personal information so I blacked it out ...
Poloni Ijulo's user avatar

2 3 4 5 6