Skip to main content
135 votes
Accepted

Tell browser my site has no scripts

A good option is to harden your Content Security Policy. It allows you to fine-tune which resources the browser will load/run, and is supported by most browsers. Consider the following header: ...
grc's user avatar
  • 1,845
104 votes
Accepted

What is torrent encryption and does it make my traffic anonymous?

Think of it like an underground fight club. Encrypting the traffic means nobody on the outside can see you enter or leave, but once you're inside, everybody there knows who you are and can monitor ...
Ivan's user avatar
  • 6,338
95 votes
Accepted

Is changing pitch enough for anonymizing a person's voice?

A simple pitch change is insufficient to mask a voice, as an adversary could simply pitch the audio back to recover the original audio. Most voice modulators use a vocoder, not a simple pitch change. ...
Polynomial's user avatar
  • 135k
93 votes
Accepted

VPN + HTTPS = 100% anonymous?

Twitter doesn't know the user If you have ever used that browser to connect to Twitter outside of the VPN then it is possible that twitter have used cookies or (even in the case of a complete browser ...
Hector's user avatar
  • 11k
60 votes
Accepted

How can I make payments on the Internet without leaving a money trail?

To protect your privacy and avoid tracking, nothing beats cash. There are various services that let you purchase credits in cash at a brick and mortar store, which you can then later use to purchase ...
tim's user avatar
  • 29.7k
58 votes

VPN + HTTPS = 100% anonymous?

As Steffen points out, you are perhaps more anonymous that you would be without the VPN, however you are far from 100% anonymous. Your web browser itself can reveal a tremendous amount of information ...
DKNUCKLES's user avatar
  • 9,217
45 votes

Best Practice: ”separate ssh-key per host and user“ vs. ”one ssh-key for all hosts“

This question can be considered from two different angles: security and convenience. When we create a SSH key pair, we are asked for providing a passphrase to add a more layer to protect the private-...
YaOzI's user avatar
  • 551
41 votes

Could logless VPNs be traced?

Obviously, a VPN's claim that it doesn't log should be met with extreme skepticism. There are real cases where use of a VPN that claimed to be logless directly led to arrests and lifetime sentences: ...
forest's user avatar
  • 67k
38 votes
Accepted

Hashing email addresses for GDPR compliance

MD5 or SHA is not the concern. Hashes can be used for pseudonymization. The problem is that the hash would need to be salted (or peppered) so that data from other sources could not be used to identify ...
schroeder's user avatar
  • 131k
33 votes

Assuming I'm using Starbucks Wifi, is there a point of using a VPN if I want to remain anonymous?

Your scenario falls under one of the major use cases of a VPN, which is to protect yourself from untrustworthy public Wi-Fi hotspots. Other use cases being, overcoming geographic restrictions when it ...
mallocation's user avatar
  • 1,676
31 votes

What is torrent encryption and does it make my traffic anonymous?

The "encryption" hides the content of the torrent data traffic from a casual observer and makes it harder to determine that the traffic is in fact torrent data traffic. It was designed to make it ...
Peter Green's user avatar
  • 5,300
30 votes
Accepted

What are the advantages of paying for a VPN service as opposed to hosting your own?

VPNs are designed around the concept of trust between 2 or more parties, and were intended for corporate/enterprise use. The popularity of offering "Free VPN" or "Hosted VPN" solutions to the ...
dark_st3alth's user avatar
  • 3,032
27 votes

How can I make payments on the Internet without leaving a money trail?

Using a VPN won't make you anonymous. The owner of the VPN service will still knows who you are from the origin IP address. In the past several VPN providers that stated that everything was ...
Hugo's user avatar
  • 1,711
19 votes

Is Tor over VPN a security risk?

TOR connection to a VPN OK, VPN connection to TOR go to jail. This assessment, in general, is not accurate. Though it's true that there's always something that can go wrong with any security system. ...
aiootp's user avatar
  • 387
17 votes

Can VPN provider see my data?

Yes, the VPN provider is able to see your data. If the data are not encrypted (i.e. HTTPS) the provider will be able to get to the clear text and will also be able to manipulate the data. The usual ...
Steffen Ullrich's user avatar
17 votes

How can I make payments on the Internet without leaving a money trail?

You could use xmr.to for that. According to them: XMR.TO allows you to make a Bitcoin payment with the strong privacy provided by Monero. This means that using Monero together with XMR.TO, you can ...
ThoriumBR's user avatar
  • 54.6k
16 votes

VPN + HTTPS = 100% anonymous?

Use of an VPN only means that Twitter can not determine details about the user from the IP address. It might though have other ways to get enough details about the user, for example from cross-domain ...
Steffen Ullrich's user avatar
13 votes

Is it dangerous to use Tor?

It is difficult to say what nationstate intelligence agencies will do with people who use tor, since they don't generally reveal their procedures. However, there are approximately 2 million connected ...
Xiong Chiamiov's user avatar
13 votes

Assuming I'm using Starbucks Wifi, is there a point of using a VPN if I want to remain anonymous?

"mallocation" gave a good answer. I would add a few words about anonymity. VPN will hide your real IP. But from the point of view of anonymity that's all. Unfortunately, browsers reveal way ...
mentallurg's user avatar
  • 12.5k
12 votes
Accepted

How to handle emails as usernames under GDPR?

IANAL, but GDPR does not make encryption mandatory for personal data. Read this article to understand the complexity around encryption and GDPR better. In the GDPR encryption is explicitly ...
Niels van Reijmersdal's user avatar
11 votes

What is torrent encryption and does it make my traffic anonymous?

what does this feature encrypt? It encrypts the entire communication stream with other BT peers. Name of the file, it's contents, size? All of the above. Note that it is completely and utterly ...
DepressedDaniel's user avatar
11 votes

VPN + HTTPS = 100% anonymous?

HTTPS is about confidentiality and integrity of content, not anonymity of parties. It may provide end-to-end encryption between your browser and the server but it doesn't hide the source and ...
zakinster's user avatar
  • 614
11 votes

How can I make payments on the Internet without leaving a money trail?

You could buy gift cards with cash then sell them for bitcoin on r/GiftCardExchange
Alex Palumbo's user avatar
11 votes

Assuming I'm using Starbucks Wifi, is there a point of using a VPN if I want to remain anonymous?

Depending on what you are talking about when you say VPN, you may very well have less anonymity if you use it. The only thing that changes is the IP address (fingerprinting is unaffected, cookies and ...
Damon's user avatar
  • 5,221
10 votes

Best Practice: ”separate ssh-key per host and user“ vs. ”one ssh-key for all hosts“

As a rule of thumb, I agree with the other answers - a single key per user is often the most practical way to go. It is not, however, good as a one-size-fits-all approach. Here are a few additional ...
Kevin Keane's user avatar
  • 1,117
10 votes

What are the advantages of paying for a VPN service as opposed to hosting your own?

Anonymity If you use the VPN to hide your activity, this is less than ideal. To use it as a proxy, someone else clearly needs to host the exit point. Using a machine registered to you personally ...
J.A.K.'s user avatar
  • 4,853
10 votes

What is torrent encryption and does it make my traffic anonymous?

The DMCA notice was sent through Microsoft. Azure is not an anonymous service and makes no effort to conceal the fact that you're the owner of your IP. To protect your identity you need a VPN ...
mgjk's user avatar
  • 7,555
10 votes
Accepted

How DNS is leaked?

I think you are a bit confused about what DNS leakage is and isn't. The problem with DNS leakage isn't that the website knows what DNS server you are using. The issue is that the DNS server knows ...
B00TK1D's user avatar
  • 301
10 votes
Accepted

How does DNS over TLS prevent your ISP from seeing the websites you visit?

It doesn't. DNS over TLS is not designed to keep your privacy from ISP. Like HTTP, DNS is vulnerable to MITM. DNS over TLS provides the same level of security as HTTPS. As DNS over TLS is encrypted, ...
defalt's user avatar
  • 6,911
10 votes

How does Tor maintain anonymity when a source and destination are required at the end?

The trick is that it's the payload of the packet that's encapsulated, not the whole TCP packet. Therefore, when the packet leaves the tor exit node unencrypted, it is sent with the return address of ...
TopherIsSwell's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible