Skip to main content
159 votes

Should I be worried of tracking domains on a banking website?

It looks like the main site is embedding script from Adobe Marketing Cloud directly into the page. While these scripts are loaded from the same server as the main site it looks like that these scripts ...
Steffen Ullrich's user avatar
85 votes

Why are ransomware attackers not tracked down via bitcoin transactions?

There is a chance that once the bitcoins have been converted into ‘real money’ or ‘real assets’ the ledger could leak information on the owners of those bit coins. But even then tracking and ...
TheJulyPlot's user avatar
  • 7,829
80 votes

Are images in the FROM name a risk in emails?

The pictograms you are seeing in the name portion are Unicode emojis. They can be used anywhere there is an updated version of Unicode. To see a full list of the supported emojis for each version of ...
Yevhen Stasiv's user avatar
63 votes

Tracing the location of a mobile IP from an email

The problem with this scenario is that emails are typically not sent from the device itself, but from a central service. In order to do what you want, the investigators would have to make a few hops:...
schroeder's user avatar
  • 131k
56 votes

Are images in the FROM name a risk in emails?

Those are not images. Email "From:" headers can contain text and only text. Unless your mail web/app-client has a glaring security hole, there will never be any images in this field. The ...
Oleg V. Volkov's user avatar
44 votes

Tracing the location of a mobile IP from an email

If the police have an email, sent by a suspect over a 3G or 4G network, could they use the IP address (since they know when it was sent) to find out - from the service provider - the precise location ...
Mark Buffalo's user avatar
  • 22.6k
30 votes
Accepted

Workarounds for sites that are broken without cookies?

If you're concerned about trackers, you're probably looking for First Party Isolation. First Party Isolation is a feature that Firefox adopted from the Tor browser's Cross-Origin Identifier ...
Arminius's user avatar
  • 45k
25 votes
Accepted

What does the android device name reveal?

The device name is constructed as follows on first use: // setup our unique device name if (TextUtils.isEmpty(SystemProperties.get("net.hostname"))) { String id = Settings.Secure....
Hacktiker's user avatar
  • 934
24 votes

Tracing the location of a mobile IP from an email

There's another common way that email leaks location information. If the email includes a photograph that was taken on a smartphone, the photo will usually have location information embedded. Since ...
John Deters's user avatar
  • 34.3k
19 votes

Tracing the location of a mobile IP from an email

In addition to what @schroeder wrote, I would like to point out a few things about geolocation. Among other things, a CDR (Call Detail Record) contains information about the cell tower used by the ...
A. Darwin's user avatar
  • 3,567
17 votes

Why are ransomware attackers not tracked down via bitcoin transactions?

Bitcoins carry with them a complete log of their entire transaction history. So the bitcoins used to pay that ransom can forever be found. Whomever has them in their possession can be tracked down, ...
Yakk's user avatar
  • 584
16 votes

Should I be worried of tracking domains on a banking website?

Banking sites are hardly monolithic. A bank usually relies on dozens or even hundreds of third party systems in their overall solution. You might have a banking host provided by one vendor, a credit ...
John Wu's user avatar
  • 9,331
15 votes

Are images in the FROM name a risk in emails?

One thing to note is that while these image characters (emojis) aren't generally considered a security risk in terms of vulnerabilities or bugs, they still have indirect security implications. The ...
Nzall's user avatar
  • 7,563
13 votes
Accepted

What's the difference between using duckduckgo with !google bangs and using google directly?

There's no difference: DuckDuckGo doesn't offer any privacy protection when redirecting the search to another result page with a !bang. E.g. !google foo (https://duckduckgo.com/?q=!google+foo) just ...
Esa Jokinen's user avatar
  • 19.1k
11 votes

Tracing the location of a mobile IP from an email

Earlier answers already describe the process of using triangulation to pinpoint the location of a specific phone better than I could describe it. However there is very little said about whether the ...
kasperd's user avatar
  • 5,472
10 votes

Does Mozilla's new "Facebook Container" have any advantages over uBlock Origin?

To understand the differences, we have to look at the different goals of the two. Or in other words: What do they want to do? What do they do? And how does it affect you as an end user? In this answer ...
Tom K.'s user avatar
  • 7,991
8 votes

Tracing the location of a mobile IP from an email

Speaking as a wireless telecom professional, the answer to your question depends on how precise you expect the location to be. With minimal effort (and a legal obligation to do so), I can tell ...
psubsee2003's user avatar
7 votes
Accepted

Is the dark web server actually part of surface web?

The dark web is like a lair for hackers/criminals/etc. That's an oversimplification, but we'll go with it. But has anyone, like FBI or CIA ever found the main server of the dark web? Where is the ...
Xiong Chiamiov's user avatar
7 votes
Accepted

MAC randomization for Bluetooth?

For bluetooth low energy (BLE), this site mostly explains the problem: https://blog.bluetooth.com/bluetooth-technology-protecting-your-privacy To safeguard user privacy, manufacturers can make use ...
maze's user avatar
  • 301
6 votes

Can the police track my phone even if I remove the SIM card?

It depends on the method you are being tracked. If we are talking about a "wiretap," then the tracking is being done at the telco and as long as you maintain the same phone number, regardless of SIM ...
Shackledtodesk's user avatar
6 votes
Accepted

How does the Random Hardware Access function work on a smartphone?

This feature randomly changes the MAC address reported by the phone. Nothing else. The MAC address is available to the Wi-Fi network but also, potentially, to software running on the device. E.g. a ...
Julian Knight's user avatar
6 votes

Why are ransomware attackers not tracked down via bitcoin transactions?

Bitcoin can combine several transactions' outputs as a new transaction's input, and it can also split a single transaction's output among many recipients. This is because only balances are ...
not22's user avatar
  • 181
6 votes
Accepted

Why arent all hackers traced ? ( network based attackers or malware which communicate with CNC servers)

By claiming that it should be possible to find the original hacker simply by tracing back all connections this question implicitly assumes multiple things which are not true: All countries would need ...
Steffen Ullrich's user avatar
6 votes
Accepted

What Are the Algorithm and techniques of IP Traceback?

You, as an individual, can't find who's behind an IP address. Well, you can grab an IP address via social-engineering tricks if you suspect someone, but if you have no idea who to suspect, then you'...
Benoit Esnard's user avatar
6 votes
Accepted

Can government track VPN traffic if it has control on both ISP and website server?

Do typical VPN providers use the same IP address to receive data from ISP and send data to the destination server (example.com)? This does not matter much. VPN have a severely limited number of entry ...
Steffen Ullrich's user avatar
6 votes

Can a pill be used to track a person's location?

If you are asking if it is possible to create a device that can be swallowed that can transmit and receive on WiFi/5G networks, then the answer is, "sure, why not?" That's not a security ...
schroeder's user avatar
  • 131k
5 votes

Use WiFi tracking to identify burglars

This can be done (see other answers) but the better question is-- even if you spent $1000 on all-new networking equipment, routers, wifi pineapples and whatnot, and you successfully captured the ...
Ivan's user avatar
  • 6,338
5 votes

Is the dark web server actually part of surface web?

This question is interesting in that it reveals some assumptions people have about the internet as whole. First of all, the basic premise of this question is, for lack of a better term, wrong. The ...
baldPrussian's user avatar
  • 2,778
5 votes

Workarounds for sites that are broken without cookies?

Fire up an incognito browser window (or VM instance if you are really paranoid) to view WaPo, then only use it for that site, or close it and open a new one each time you visit.
JesseM's user avatar
  • 1,962
5 votes
Accepted

Untraceable software development

I don't think that the development itself is so much of a problem if done alone, offline and with proper disc encryption and if the software never gets distributed. But, if you need help in ...
Steffen Ullrich's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible