Skip to main content
Share Your Experience: Take the 2024 Developer Survey
135 votes
Accepted

Tell browser my site has no scripts

A good option is to harden your Content Security Policy. It allows you to fine-tune which resources the browser will load/run, and is supported by most browsers. Consider the following header: ...
grc's user avatar
  • 1,845
104 votes
Accepted

What is torrent encryption and does it make my traffic anonymous?

Think of it like an underground fight club. Encrypting the traffic means nobody on the outside can see you enter or leave, but once you're inside, everybody there knows who you are and can monitor ...
Ivan's user avatar
  • 6,328
95 votes
Accepted

Is changing pitch enough for anonymizing a person's voice?

A simple pitch change is insufficient to mask a voice, as an adversary could simply pitch the audio back to recover the original audio. Most voice modulators use a vocoder, not a simple pitch change. ...
Polynomial's user avatar
  • 135k
93 votes
Accepted

VPN + HTTPS = 100% anonymous?

Twitter doesn't know the user If you have ever used that browser to connect to Twitter outside of the VPN then it is possible that twitter have used cookies or (even in the case of a complete browser ...
Hector's user avatar
  • 10.9k
60 votes
Accepted

How can I make payments on the Internet without leaving a money trail?

To protect your privacy and avoid tracking, nothing beats cash. There are various services that let you purchase credits in cash at a brick and mortar store, which you can then later use to purchase ...
tim's user avatar
  • 29.6k
58 votes

VPN + HTTPS = 100% anonymous?

As Steffen points out, you are perhaps more anonymous that you would be without the VPN, however you are far from 100% anonymous. Your web browser itself can reveal a tremendous amount of information ...
DKNUCKLES's user avatar
  • 9,217
45 votes

Best Practice: ”separate ssh-key per host and user“ vs. ”one ssh-key for all hosts“

I think this question can be considered from two different angles: security and convenience. When we create a SSH key pair, we are asked for providing a passphrase to add a more layer to protect the ...
YaOzI's user avatar
  • 551
42 votes
Accepted

How did the FBI compromise Tor users?

The article you link says that the FBI obtained "the MAC address" for the user computers. MAC addresses are specific to each ethernet hardware, and they don't travel beyond the first hop -- meaning ...
Thomas Pornin's user avatar
41 votes

Could logless VPNs be traced?

Obviously, a VPN's claim that it doesn't log should be met with extreme skepticism. There are real cases where use of a VPN that claimed to be logless directly led to arrests and lifetime sentences: ...
forest's user avatar
  • 66.8k
38 votes
Accepted

How would two people with burner phones communicate?

Burner phone numbers as an OTP 'equivalent' You can think of the "identities" of those phones (phone number, SIM, phone itself/IMEI) as an equivalent of one-time pad encryption - you exchange the ...
Peteris's user avatar
  • 8,429
38 votes
Accepted

Hashing email addresses for GDPR compliance

MD5 or SHA is not the concern. Hashes can be used for pseudonymization. The problem is that the hash would need to be salted (or peppered) so that data from other sources could not be used to identify ...
schroeder's user avatar
  • 131k
33 votes

Assuming I'm using Starbucks Wifi, is there a point of using a VPN if I want to remain anonymous?

Your scenario falls under one of the major use cases of a VPN, which is to protect yourself from untrustworthy public Wi-Fi hotspots. Other use cases being, overcoming geographic restrictions when it ...
mallocation's user avatar
  • 1,676
31 votes

What is torrent encryption and does it make my traffic anonymous?

The "encryption" hides the content of the torrent data traffic from a casual observer and makes it harder to determine that the traffic is in fact torrent data traffic. It was designed to make it ...
Peter Green's user avatar
  • 5,300
30 votes
Accepted

What are the advantages of paying for a VPN service as opposed to hosting your own?

VPNs are designed around the concept of trust between 2 or more parties, and were intended for corporate/enterprise use. The popularity of offering "Free VPN" or "Hosted VPN" solutions to the ...
dark_st3alth's user avatar
  • 3,022
29 votes

How would two people with burner phones communicate?

If you know Jack A few weeks or months before the call, you could create a simple web page with a login wall and a signup page. In order to sign up, you need to write your phone number. By using ...
A. Darwin's user avatar
  • 3,567
29 votes

How did the FBI compromise Tor users?

The article you posted states how they did it. But the author doesn't seem to be knowledgeable on the subject and it got lost in the article. They didn't crack Tor and more so found a way to collect ...
Bacon Brad's user avatar
  • 3,392
27 votes

How can I make payments on the Internet without leaving a money trail?

Using a VPN won't make you anonymous. The owner of the VPN service will still knows who you are from the origin IP address. In the past several VPN providers that stated that everything was ...
Hugo's user avatar
  • 1,701
21 votes
Accepted

Nmap through proxy

TL;DR: proxy support is limited right now but there are also theoretical limits of what you could do when using a proxy. nmap can do only CONNECT and SOCKS4 and these protocols can do only TCP. ...
Steffen Ullrich's user avatar
19 votes

Is Tor over VPN a security risk?

TOR connection to a VPN OK, VPN connection to TOR go to jail. This assessment, in general, is not accurate. Though it's true that there's always something that can go wrong with any security system. ...
aiootp's user avatar
  • 339
17 votes

Can VPN provider see my data?

Yes, the VPN provider is able to see your data. If the data are not encrypted (i.e. HTTPS) the provider will be able to get to the clear text and will also be able to manipulate the data. The usual ...
Steffen Ullrich's user avatar
17 votes

How can I make payments on the Internet without leaving a money trail?

You could use xmr.to for that. According to them: XMR.TO allows you to make a Bitcoin payment with the strong privacy provided by Monero. This means that using Monero together with XMR.TO, you can ...
ThoriumBR's user avatar
  • 54.5k
16 votes

VPN + HTTPS = 100% anonymous?

Use of an VPN only means that Twitter can not determine details about the user from the IP address. It might though have other ways to get enough details about the user, for example from cross-domain ...
Steffen Ullrich's user avatar
15 votes

How would two people with burner phones communicate?

Burner phones may not typically be used like that, although they could be. To answer your little scenario, you can try area code tricks with hidden messages stored somewhere that's accessible to each ...
Mark Buffalo's user avatar
  • 22.5k
13 votes

Is it dangerous to use Tor?

It is difficult to say what nationstate intelligence agencies will do with people who use tor, since they don't generally reveal their procedures. However, there are approximately 2 million connected ...
Xiong Chiamiov's user avatar
13 votes

Assuming I'm using Starbucks Wifi, is there a point of using a VPN if I want to remain anonymous?

"mallocation" gave a good answer. I would add a few words about anonymity. VPN will hide your real IP. But from the point of view of anonymity that's all. Unfortunately, browsers reveal way ...
mentallurg's user avatar
  • 12.4k
12 votes
Accepted

How to handle emails as usernames under GDPR?

IANAL, but GDPR does not make encryption mandatory for personal data. Read this article to understand the complexity around encryption and GDPR better. In the GDPR encryption is explicitly ...
Niels van Reijmersdal's user avatar
11 votes

Nmap through proxy

For now, use an external tool like proxychains. The nmap documentation for --proxies states, that the feature is not fully implemented yet: Warning: this feature is still under development and has ...
Arminius's user avatar
  • 44.8k
11 votes

What is torrent encryption and does it make my traffic anonymous?

what does this feature encrypt? It encrypts the entire communication stream with other BT peers. Name of the file, it's contents, size? All of the above. Note that it is completely and utterly ...
DepressedDaniel's user avatar
11 votes

VPN + HTTPS = 100% anonymous?

HTTPS is about confidentiality and integrity of content, not anonymity of parties. It may provide end-to-end encryption between your browser and the server but it doesn't hide the source and ...
zakinster's user avatar
  • 614
11 votes

How can I make payments on the Internet without leaving a money trail?

You could buy gift cards with cash then sell them for bitcoin on r/GiftCardExchange
Alex Palumbo's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible