136 votes
Accepted

Tell browser my site has no scripts

A good option is to harden your Content Security Policy. It allows you to fine-tune which resources the browser will load/run, and is supported by most browsers. Consider the following header: ...
user avatar
  • 1,845
113 votes
Accepted

Anonymity on Facebook - how do they suggest people I should know?

So, yes, they appear to have a deal with the Telecommunication Providers in different Countries. Well that's ONE explanation. Another one that I like better is simply that they have all their ...
user avatar
  • 4,762
102 votes
Accepted

What is torrent encryption and does it make my traffic anonymous?

Think of it like an underground fight club. Encrypting the traffic means nobody on the outside can see you enter or leave, but once you're inside, everybody there knows who you are and can monitor ...
user avatar
  • 6,278
95 votes
Accepted

Is changing pitch enough for anonymizing a person's voice?

A simple pitch change is insufficient to mask a voice, as an adversary could simply pitch the audio back to recover the original audio. Most voice modulators use a vocoder, not a simple pitch change. ...
user avatar
  • 132k
94 votes
Accepted

VPN + HTTPS = 100% anonymous?

Twitter doesn't know the user If you have ever used that browser to connect to Twitter outside of the VPN then it is possible that twitter have used cookies or (even in the case of a complete browser ...
user avatar
  • 10.9k
63 votes
Accepted

How to publish scanned documents anonymously?

Publishing scans without being identified is a tough proposition. There are multiple risks of information leak, and mitigation is technically complex. However, anyone determined to do so can learn ...
user avatar
  • 5,298
60 votes
Accepted

Differences between using Tor browser and VPN

TL;DR Tor provides anonymous web browsing but does not provide security. VPN Services provides security (sort of) and anonymity, but the anonymity might be more in question depending on the service. ...
user avatar
  • 12.3k
60 votes
Accepted

How can I make payments on the Internet without leaving a money trail?

To protect your privacy and avoid tracking, nothing beats cash. There are various services that let you purchase credits in cash at a brick and mortar store, which you can then later use to purchase ...
user avatar
  • 29k
59 votes

VPN + HTTPS = 100% anonymous?

As Steffen points out, you are perhaps more anonymous that you would be without the VPN, however you are far from 100% anonymous. Your web browser itself can reveal a tremendous amount of information ...
user avatar
  • 9,217
47 votes
Accepted

Why hasn't anyone taken over Tor yet?

They might do it already, there is a known technique to dedicate malicious and powerful nodes to the network to be able to take control of some of the traffic. Tor does not advertise itself to be able ...
user avatar
  • 3,369
44 votes

Is it possible to secretly monitor/backdoor hardware?

Yes, if an attacker has physical access to your computer it is no longer your computer. While it's theoretically possible to implement spying directly in silicon on a modern CPU, a modern x86-based ...
user avatar
42 votes
Accepted

How did the FBI compromise Tor users?

The article you link says that the FBI obtained "the MAC address" for the user computers. MAC addresses are specific to each ethernet hardware, and they don't travel beyond the first hop -- meaning ...
user avatar
40 votes

When do honest people need privacy or anonymity? (e.g. they have nothing to hide)

There's a great short essay written by Bruce Schneier on the right of privacy: The most common retort against privacy advocates -- by those in favor of ID checks, cameras, databases, data mining ...
user avatar
  • 5,040
40 votes

Could logless VPNs be traced?

It is absolutely possible. Traffic analysis attacks Even if a VPN is honest about their claim that they do not log, their upstream ISP certainly logs. It would be unheard of for them not to. For a VPN ...
user avatar
  • 63.8k
38 votes
Accepted

How would two people with burner phones communicate?

Burner phone numbers as an OTP 'equivalent' You can think of the "identities" of those phones (phone number, SIM, phone itself/IMEI) as an equivalent of one-time pad encryption - you exchange the ...
user avatar
  • 8,370
37 votes

Best Practice: ”separate ssh-key per host and user“ vs. ”one ssh-key for all hosts“

I think this question can be considered from two different angles: security and convenience. When we create a SSH key pair, we are asked for providing a passphrase to add a more layer to protect the ...
user avatar
  • 471
37 votes
Accepted

Hashing email addresses for GDPR compliance

MD5 or SHA is not the concern. Hashes can be used for pseudonymization. The problem is that the hash would need to be salted (or peppered) so that data from other sources could not be used to identify ...
user avatar
  • 123k
33 votes

Assuming I'm using Starbucks Wifi, is there a point of using a VPN if I want to remain anonymous?

Your scenario falls under one of the major use cases of a VPN, which is to protect yourself from untrustworthy public Wi-Fi hotspots. Other use cases being, overcoming geographic restrictions when it ...
user avatar
  • 1,668
31 votes
Accepted

What are the advantages of paying for a VPN service as opposed to hosting your own?

VPNs are designed around the concept of trust between 2 or more parties, and were intended for corporate/enterprise use. The popularity of offering "Free VPN" or "Hosted VPN" solutions to the ...
user avatar
  • 3,052
31 votes

What is torrent encryption and does it make my traffic anonymous?

The "encryption" hides the content of the torrent data traffic from a casual observer and makes it harder to determine that the traffic is in fact torrent data traffic. It was designed to make it ...
user avatar
  • 4,899
30 votes

Relationship between Anonymity and Untraceability

The two notions are actually different. Anonymous systems usually are untraceable as a side effect but the reverse isn't true. Consider, for instance, voting. The process is usually not anonymous: ...
user avatar
  • 18.5k
30 votes

When do honest people need privacy or anonymity? (e.g. they have nothing to hide)

Positive reasons Instead of a beach holiday, we joined a Christian Mission this summer in Malawi. We're keeping quiet about it in case the children are teased at school. I leapt into the road and ...
user avatar
  • 32.6k
30 votes

How would two people with burner phones communicate?

If you know Jack A few weeks or months before the call, you could create a simple web page with a login wall and a signup page. In order to sign up, you need to write your phone number. By using ...
user avatar
  • 3,552
29 votes

How did the FBI compromise Tor users?

The article you posted states how they did it. But the author doesn't seem to be knowledgeable on the subject and it got lost in the article. They didn't crack Tor and more so found a way to collect ...
user avatar
  • 3,340
27 votes

How can I make payments on the Internet without leaving a money trail?

Using a VPN won't make you anonymous. The owner of the VPN service will still knows who you are from the origin IP address. In the past several VPN providers that stated that everything was ...
user avatar
  • 1,701
25 votes

Anonymity on Facebook - how do they suggest people I should know?

Repeat the same process, but use a new prepaid phone number. If they can still guess who you are then it is freaky. If not, then it is probably your friends' contact lists which have been sucked up ...
user avatar
  • 1,298
23 votes

Is it possible to secretly monitor/backdoor hardware?

Of course, the hardware/firmware also plays as role in keeping/compromising your security. The point is at the end of day, firmware also runs programs, and some controllers even provide full computing ...
user avatar
21 votes

Differences between using Tor browser and VPN

A VPN means your connections pass through one other server. The administrator of your network can't see anything but the fact that you're talking to that VPN server; the administrator of the computer ...
user avatar
  • 7,183
19 votes
Accepted

How does a website detect proxy?

A proxy will by default tell the destination the IP address of the original requester by adding a X-Forwarded-For HTTP header to the original HTTP request. This make it obviously easy for the server, ...
user avatar
18 votes
Accepted

What makes twitter different than other sites regarding users anonymity

It's not about your anonymity, but about your audience. As @darkf mentioned, Twitter doesn't have the same level of privacy settings that Facebook does. A user's tweets are either all protected or all ...
user avatar
  • 11.3k

Only top scored, non community-wiki answers of a minimum length are eligible