135 votes
Accepted

Tell browser my site has no scripts

A good option is to harden your Content Security Policy. It allows you to fine-tune which resources the browser will load/run, and is supported by most browsers. Consider the following header: ...
grc's user avatar
  • 1,855
104 votes
Accepted

What is torrent encryption and does it make my traffic anonymous?

Think of it like an underground fight club. Encrypting the traffic means nobody on the outside can see you enter or leave, but once you're inside, everybody there knows who you are and can monitor ...
Ivan's user avatar
  • 6,338
95 votes
Accepted

Is changing pitch enough for anonymizing a person's voice?

A simple pitch change is insufficient to mask a voice, as an adversary could simply pitch the audio back to recover the original audio. Most voice modulators use a vocoder, not a simple pitch change. ...
Polynomial's user avatar
  • 135k
94 votes
Accepted

VPN + HTTPS = 100% anonymous?

Twitter doesn't know the user If you have ever used that browser to connect to Twitter outside of the VPN then it is possible that twitter have used cookies or (even in the case of a complete browser ...
Hector's user avatar
  • 11k
60 votes
Accepted

How can I make payments on the Internet without leaving a money trail?

To protect your privacy and avoid tracking, nothing beats cash. There are various services that let you purchase credits in cash at a brick and mortar store, which you can then later use to purchase ...
tim's user avatar
  • 29.6k
59 votes

VPN + HTTPS = 100% anonymous?

As Steffen points out, you are perhaps more anonymous that you would be without the VPN, however you are far from 100% anonymous. Your web browser itself can reveal a tremendous amount of information ...
DKNUCKLES's user avatar
  • 9,227
47 votes
Accepted

Why hasn't anyone taken over Tor yet?

They might do it already, there is a known technique to dedicate malicious and powerful nodes to the network to be able to take control of some of the traffic. Tor does not advertise itself to be able ...
Silverfox's user avatar
  • 3,397
44 votes

Best Practice: ”separate ssh-key per host and user“ vs. ”one ssh-key for all hosts“

I think this question can be considered from two different angles: security and convenience. When we create a SSH key pair, we are asked for providing a passphrase to add a more layer to protect the ...
YaOzI's user avatar
  • 541
44 votes

Is it possible to secretly monitor/backdoor hardware?

Yes, if an attacker has physical access to your computer it is no longer your computer. While it's theoretically possible to implement spying directly in silicon on a modern CPU, a modern x86-based ...
David Freitag's user avatar
42 votes
Accepted

How did the FBI compromise Tor users?

The article you link says that the FBI obtained "the MAC address" for the user computers. MAC addresses are specific to each ethernet hardware, and they don't travel beyond the first hop -- meaning ...
Thomas Pornin's user avatar
41 votes

Could logless VPNs be traced?

Obviously, a VPN's claim that it doesn't log should be met with extreme skepticism. There are real cases where use of a VPN that claimed to be logless directly led to arrests and lifetime sentences: ...
forest's user avatar
  • 66.6k
39 votes
Accepted

Hashing email addresses for GDPR compliance

MD5 or SHA is not the concern. Hashes can be used for pseudonymization. The problem is that the hash would need to be salted (or peppered) so that data from other sources could not be used to identify ...
schroeder's user avatar
  • 129k
38 votes
Accepted

How would two people with burner phones communicate?

Burner phone numbers as an OTP 'equivalent' You can think of the "identities" of those phones (phone number, SIM, phone itself/IMEI) as an equivalent of one-time pad encryption - you exchange the ...
Peteris's user avatar
  • 8,419
33 votes

Assuming I'm using Starbucks Wifi, is there a point of using a VPN if I want to remain anonymous?

Your scenario falls under one of the major use cases of a VPN, which is to protect yourself from untrustworthy public Wi-Fi hotspots. Other use cases being, overcoming geographic restrictions when it ...
mallocation's user avatar
  • 1,676
31 votes

What is torrent encryption and does it make my traffic anonymous?

The "encryption" hides the content of the torrent data traffic from a casual observer and makes it harder to determine that the traffic is in fact torrent data traffic. It was designed to make it ...
Peter Green's user avatar
  • 5,200
30 votes
Accepted

What are the advantages of paying for a VPN service as opposed to hosting your own?

VPNs are designed around the concept of trust between 2 or more parties, and were intended for corporate/enterprise use. The popularity of offering "Free VPN" or "Hosted VPN" solutions to the ...
dark_st3alth's user avatar
  • 3,032
29 votes

How would two people with burner phones communicate?

If you know Jack A few weeks or months before the call, you could create a simple web page with a login wall and a signup page. In order to sign up, you need to write your phone number. By using ...
A. Darwin's user avatar
  • 3,602
29 votes

How did the FBI compromise Tor users?

The article you posted states how they did it. But the author doesn't seem to be knowledgeable on the subject and it got lost in the article. They didn't crack Tor and more so found a way to collect ...
Bacon Brad's user avatar
  • 3,382
27 votes

How can I make payments on the Internet without leaving a money trail?

Using a VPN won't make you anonymous. The owner of the VPN service will still knows who you are from the origin IP address. In the past several VPN providers that stated that everything was ...
Hugo's user avatar
  • 1,701
23 votes

Is it possible to secretly monitor/backdoor hardware?

Of course, the hardware/firmware also plays as role in keeping/compromising your security. The point is at the end of day, firmware also runs programs, and some controllers even provide full computing ...
Rui F Ribeiro's user avatar
21 votes
Accepted

Nmap through proxy

TL;DR: proxy support is limited right now but there are also theoretical limits of what you could do when using a proxy. nmap can do only CONNECT and SOCKS4 and these protocols can do only TCP. ...
Steffen Ullrich's user avatar
19 votes

Is Tor over VPN a security risk?

TOR connection to a VPN OK, VPN connection to TOR go to jail. This assessment, in general, is not accurate. Though it's true that there's always something that can go wrong with any security system. ...
aiootp's user avatar
  • 339
17 votes

Can VPN provider see my data?

Yes, the VPN provider is able to see your data. If the data are not encrypted (i.e. HTTPS) the provider will be able to get to the clear text and will also be able to manipulate the data. The usual ...
Steffen Ullrich's user avatar
17 votes

How can I make payments on the Internet without leaving a money trail?

You could use xmr.to for that. According to them: XMR.TO allows you to make a Bitcoin payment with the strong privacy provided by Monero. This means that using Monero together with XMR.TO, you can ...
ThoriumBR's user avatar
  • 53.9k
16 votes

VPN + HTTPS = 100% anonymous?

Use of an VPN only means that Twitter can not determine details about the user from the IP address. It might though have other ways to get enough details about the user, for example from cross-domain ...
Steffen Ullrich's user avatar
15 votes

How would two people with burner phones communicate?

Burner phones may not typically be used like that, although they could be. To answer your little scenario, you can try area code tricks with hidden messages stored somewhere that's accessible to each ...
Mark Buffalo's user avatar
  • 22.6k
13 votes

Is it dangerous to use Tor?

It is difficult to say what nationstate intelligence agencies will do with people who use tor, since they don't generally reveal their procedures. However, there are approximately 2 million connected ...
Xiong Chiamiov's user avatar
13 votes

Assuming I'm using Starbucks Wifi, is there a point of using a VPN if I want to remain anonymous?

"mallocation" gave a good answer. I would add a few words about anonymity. VPN will hide your real IP. But from the point of view of anonymity that's all. Unfortunately, browsers reveal way ...
mentallurg's user avatar
  • 12.3k
12 votes
Accepted

How to handle emails as usernames under GDPR?

IANAL, but GDPR does not make encryption mandatory for personal data. Read this article to understand the complexity around encryption and GDPR better. In the GDPR encryption is explicitly ...
Niels van Reijmersdal's user avatar
11 votes

Nmap through proxy

For now, use an external tool like proxychains. The nmap documentation for --proxies states, that the feature is not fully implemented yet: Warning: this feature is still under development and has ...
Arminius's user avatar
  • 44.7k

Only top scored, non community-wiki answers of a minimum length are eligible