Questions tagged [privacy]

The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all.

Filter by
Sorted by
Tagged with
0 votes
0 answers
112 views

Can the Android "Always-on" VPN setting be relied upon to route all traffic through VPN?

If a user sets up a stock Android device to use a VPN and uses the "Always-on" setting, can they be sure[1] that no traffic will leak outside of the VPN? [1] Assuming no malware is installed ...
user avatar
0 votes
2 answers
4k views

Will 1.1.1.1 hide my traffic from my landlord's router?

I've read different articles about https://1.1.1.1/ and am confused since they conflict. A couple examples: effectively making your traffic invisible to snoopers on your local network but not ...
user avatar
  • 315
56 votes
10 answers
15k views

Is it really safe to use Signal or Telegram on untrusted phone hardware?

How safe are we when we use phone hardware from untrusted manufacturers and use end-to-end encrypted communication like Signal and Telegram? Are our conversations really safe from keyloggers or ...
user avatar
  • 587
7 votes
2 answers
347 views

What impact does an installed extension have on the browser fingerprint (uniqueness)?

Motivation I want to develop a custom, local Firefox extension and investigate, if its installation has any impact on the browser fingerprint. Background Some time (years?) ago, there were articles ...
user avatar
  • 173
0 votes
1 answer
183 views

Can't Amazon see my files if I use s3cmd/gpg with a complex password?

Since the early days of s3cmd I use it in combination with random generated filenames (uuidgen loop) and a complex passphrase (pwgen -n1 -c 32 -y). On security.stackexchange.com search there is only 1 ...
user avatar
  • 1,409
3 votes
2 answers
841 views

How does Telegram's secret-splitting scheme work?

The Telegram FAQ's state that they are not able to comply with court orders from one country alone because they "split the encryption keys and spread them over multiple jurisdictions". To ...
user avatar
1 vote
2 answers
272 views

Is the most (theoretically-) secure OS/distro something minimalistic like Gentoo or something security-focused like Qubes?

Assuming you only use mainstream software like Firefox, Thunderbird and Libreoffice, and update/upgrade every day and use strong passwords and encryption. I know this is probably a very basic and ...
user avatar
  • 23
3 votes
1 answer
349 views

Does Kali installed through WSL respect my privacy?

When installing Kali from Microsoft Store, I wasn't prompted with a user agreement license. Is Microsoft able to monitor my applications? How safe is it to use WSL in that context? (From privacy ...
user avatar
0 votes
1 answer
142 views

'New vintage' Nokias privacy/anonymity

I have read that devices such as the old Nokia 8310 are used because the privacy/anonymity they provide (for instance for drug dealers) I have tried to find out if the 'new' vanilla Nokias, such as ...
user avatar
  • 121
1 vote
0 answers
987 views

Can someone impersonate you on WhatsApp?

Well I'm not a developer so I'm here to resolve a specific question. I have been investigating this subject for a while now and I need and opinion from experts or developers which really understand ...
user avatar
0 votes
0 answers
76 views

Visual Studio Code on Linux - Privacy risk? [duplicate]

I'm a fan of Visual Studio, and recently installed VSC on my Linux Mint. However recently I did a deep-dive on Richard Stallman's site reading about just how evil and depraved all the big tech ...
user avatar
1 vote
0 answers
100 views

Will my IP be used against me in this scenario? [closed]

I went in a public chatroom. I had a bitter fight with someone. The person blackmailed me. I looked for privacy policy of the chatroom and it said they store my IP, which is visible to the chatroom ...
user avatar
3 votes
2 answers
1k views

Analyzing Tor traffic through Deep Packet Inspection?

I've just read about the detecting and blocking of Tor traffic by DPI but now I'm curious about analyzing the data you send over Tor and matching it with your true identity by deep-inspecting the data ...
user avatar
1 vote
2 answers
407 views

Why are IMSI and IMEI still used?

While I understand their function, both IMSI and IMEI makes tracking and surveillance possible by virtue of being persistent idenfitiers for SIM and handset, respectively. Why aren't these replaced ...
user avatar
2 votes
1 answer
432 views

"Your connection is not private" for specific website, once when opening a new tab

Like many, since March, I've been working from home and using the company's VPN to do my work. Recently, if I open a new tab in Chrome, and navigate to "news.bbc.co.uk", I got the ...
user avatar
  • 1,132
0 votes
0 answers
71 views

How does Instagram know my location even if I use VPN and have no sim card? [duplicate]

I'm using this Instagram account only on my 2nd phone which has no sim card and airplane mode always on. I use VPN 100% of the time when connecting to the internet. The account isn't linked with any ...
user avatar
  • 1
0 votes
1 answer
3k views

Security and privacy concerns about "IMEI check" websites

I know there are few questions about the risk of IMEI with various answers from rare risk to none. But my question is regarding the kind of websites that provide IMEI check services for free with some ...
user avatar
  • 1
0 votes
1 answer
98 views

Booting 'live' form the hard disk

I use VeraCrypt for file-container level encryption for all of my files. But being very paranoid, I am always worried about the OS1, Primary applications and non-primary applications leaking the data....
user avatar
  • 275
0 votes
1 answer
273 views

What can people do about Tor's weaknesses?

I read Tor's Wikipedia page and found out it has 12 weaknesses. What can people or The Tor Project do about those weaknesses? If they don't anything about it, wouldn't it compromise Tor users' ...
user avatar
84 votes
8 answers
13k views

Do advertisers listen as we talk?

A person talks about a certain thing (product or service) with another person and a short time after the talk the person gets the advertising of the discussed thing on the mobile or desktop device. I ...
user avatar
  • 721
-1 votes
2 answers
666 views

Can a website track your browsing history on other websites?

I visited website B after visiting website A. Upon clicking the search bar on website B, a dropdown menu appeared containing the words I searched on website A. After clearing my browser history and ...
user avatar
  • 1
3 votes
2 answers
3k views

How does Google track users in Incognito mode?

There is a lawsuit claiming Google tracks users in private browsing mode. How exactly is Google achieving this?
user avatar
  • 131
31 votes
2 answers
9k views

If you SMS text someone, how much more information will they know about you?

If I send someone a text, how much information am I giving up? Could they add me to an app like Whatsapp and access my name and profile? Or does their number first have to be saved in my phone ...
user avatar
  • 413
0 votes
1 answer
842 views

How does openvpn work for only certain servers?

I got a *.openvpn from work and I monitored the traffic on wireshark. On my normal vpn every traffic is routed via the vpn (as expected). But with this work vpn only the traffic that uses the work ...
user avatar
  • 103
4 votes
1 answer
744 views

Effect of Firefox's "Responsive Design Mode" on the browser's fingerprint

Today I switched ON the "Responsive Design Mode" under the "Web Developer" Section of the Firefox menu, and from the dropdown menu selected "iPhone X/XS iOS 12". So now ...
user avatar
  • 275
0 votes
2 answers
970 views

Can Microsoft access the contents of my OneDrive Personal Vault?

I found the article to be quite informative that addresses the question "Can Microsoft access my private files?" (Can Microsoft access all private data if a user installs Windows 10?), which ...
user avatar
  • 101
-2 votes
3 answers
196 views

3rd party (employer's) app on android phone - what is the risk for an employee? [closed]

An employer (someone's employer) issued an android app and requests that all of the employees install it. During installation the app requests access to all of the phone's resources and it wouldn't ...
user avatar
  • 107
6 votes
1 answer
357 views

How to protect against unwanted photographs?

Problem Possible defenses against the attack vector of facial recognition via unwanted photographs. Background The advance of facial recognition technology has promoted unwarranted photographs from ...
user avatar
-6 votes
1 answer
259 views

How can Tutanota, ProtonMail and Hushmail all claim to provide privacy when they only allow privacy-incompatible payment options? [closed]

I'm attempting to register an e-mail account without destroying my privacy. The reason is simply that one is necessary to be able to register on a different service (web host for my new, very non-...
user avatar
2 votes
1 answer
164 views

How to contact Microsoft regarding security flaw? [closed]

Here I see: If you believe you have found a security vulnerability that meets Microsoft's definition of a security vulnerability, please submit the report to MSRC at https://msrc.microsoft.com/create-...
user avatar
  • 1,214
3 votes
0 answers
106 views

Can Apple and Google bypass the decentralised COVID-19 tracing approach (DP-3T)?

Many thoughts have been spent on creating the decentralised, minimum-knowledge contact tracing approach DP-3T. This has been implemented in contact tracing apps of several countries, e. g. the German ...
user avatar
  • 31
0 votes
1 answer
80 views

Personal computer + employer's WiFi [duplicate]

I decided to use my personal Macbook at work, so I'll be using my employer's network connection. But I'm really concerned about my privacy. I know I can do non-work stuff using Tor Browser or Brave's ...
user avatar
1 vote
4 answers
172 views

Untouchable local server

We have a software that needs a connection to our servers for license management purposes. Now we have a new customer who wants to use our software on systems that don't have access to internet. So I ...
user avatar
1 vote
0 answers
53 views

Abstract data access to user data in large-scale webservices

I am doing research on large-scale webservices and I am trying to understand what common techniques are to prevent user data being accidentally leaked to other logged in users. Especially where end-to-...
user avatar
0 votes
1 answer
316 views

Monitoring laptop activity while logged into school's Microsoft account [duplicate]

I logged into my school-based Microsoft account on my personal laptop. But is it possible that somehow my school is monitoring my Google searches and other browsing history through the school ...
user avatar
1 vote
0 answers
91 views

Are tracking cookies from facebook, google, etc sneaked into open source projects?

In my node.js project, I'm using a several open source libraries and frameworks like - express, express-session, bootstrap 4.x etc. I also have NGINX setup as reverse proxy. For this app's website, I ...
user avatar
1 vote
2 answers
290 views

What are the potential security risks of using a commercial VPN service?

Commercial VPN services are gaining a lot of popularity and some of them are heavily advertising their products on social media networks and technology magazines today. The advantages of using such ...
user avatar
1 vote
2 answers
308 views

Why certain sites don't send newsletters to "anonymous" mail addresses?

I use an "anonymous" mail address (cock.li provider in my case). I have found that mainstream news sites in particular don't send their newsletters to such an addresses. It looks like the domains ...
user avatar
  • 1,409
0 votes
1 answer
2k views

Re-use an old employer's laptop and avoid monitoring software

I still have an old good laptop from my ex employer that they never requested at the time I left (i assume it was old already by then) I would like to reuse this computer and not have the risk of ...
user avatar
5 votes
1 answer
866 views

Can a PDF embed a tracking image?

I know that PDFs can contain embedded images and Javascript. Can a PDF contain something that tracks you? For instance, can it contain a remote image that, when the PDF is opened, will fetch that ...
user avatar
  • 98.4k
0 votes
0 answers
110 views

How does android boot and shows notifications with full encryption but without pre-boot authentication

i have android 5.1 (motorola moto g xt1039). i encrypted the phone and set screen password. then after every password change i can choose one of an two options: 'require the password at startup' '...
user avatar
  • 259
2 votes
3 answers
2k views

Signal: contact people, or have people contact me, without revealing phone number?

Is it possible to use Signal without revealing my phone number to others? I'm personally using the Signal app on Android, but of course it applies to all versions, desktop and mobile. With Telegram ...
user avatar
0 votes
0 answers
39 views

Anonimity of Bluetooth tokens [duplicate]

In the context of contact tracing, I have a privacy question. I have read a few (and "few" is already a bad thing) articles about Bluetooth contact tracing, especially in the context of the Sars-Cov2 ...
user avatar
2 votes
1 answer
81 views

What additional privacy impact does using the COVIDsafe app have for people in Australia who are using their phones normally?

I've been trying to encourage some people I know to install and use the COVIDsafe app. Some people have raised privacy concerns as a reason to not install the app (there's other concerns, such as it ...
user avatar
  • 2,100
1 vote
1 answer
290 views

Can my school see the websites I've visited while on my home WiFi after I reconnect to the schools? [closed]

I know that they can't monitor me on my home WiFi, but can they see the websites I visited while on my home WiFi after I reconnect to the schools?
user avatar
1 vote
0 answers
101 views

Why is gmail (G Suite) bot visiting the links I click on?

We send to our staff notification emails with links to "private" pages on our website. These pages are password protected, we log the access and get notifications when accessed from new ip ranges. To ...
user avatar
  • 193
1 vote
0 answers
104 views

Is this reasonable privacy for storing sensitive information?

Outline I am writing a web app that will need to store some transaction data (amount, date, merchant...). Objective I want to keep this data reasonably private from unwelcome eyes. Threat Model ...
user avatar
0 votes
0 answers
17 views

Is it possible to delete all traces and files on a mac? [duplicate]

Is it possible to delete all traces and files on a mac, so no one can recover files and there will be no traces at all for this files or any activity?
user avatar
55 votes
10 answers
13k views

Does the saying "physical access = game over" apply to smartphones, too?

I was surprised to read in the responses to this popular question that it's considered nigh impossible to secure a computer system if intruders have physical access. Does this apply to smartphones ...
user avatar
  • 695
0 votes
1 answer
411 views

Hide real IP (and possibly location) while live streaming

Say I wanted to start live streaming on YouTube or Twitch, but I don't want those services to know my real IP or where I'm located. Commercial VPNs might not be a good option here since they reduce ...
user avatar
  • 1

1
3 4
5
6 7
39