As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [privacy]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

Does google colaboratory save code in local computer when using local runtime

When running python code from google colab into local computer (local runtime), does the code is saved in the local computer or not ?
rocket's user avatar
  • 1
-1 votes
1 answer
36 views

Does ssh save the code in the remote computer?

When running python code using ssh on remote computer by a sudo user, does it save the code in the remote computer ? does the root user can see actual python code? ssh user@remotehost < python /...
rocket's user avatar
  • 1
-2 votes
1 answer
30 views

What can my ISP know about a website hosted at my house? [closed]

I am hosting a public website, say example.com, at my house using my home Internet (fyi, the contract allows it). My Internet plan also comes with a static IP. I use CloudFlare to hide the server's ...
Risky Ricky's user avatar
0 votes
1 answer
200 views

how to SSH to Wireguard server from Windows client with active VPN connection?

I have Wireguard server on Rocky 8.7, when I connect to the server I route all client traffic through Wireguard this is quotes from setup script, of course all variables is set (and all works good) ...
it_buddha's user avatar
0 votes
0 answers
30 views

Is it valuable to do DNS Leak Testing directly from a firewall and not just from the client side?

I've been writing a tool that can be added as a package for pfSense, and essentially the tool allows you to perform a DNS leak test on any of the interfaces on the firewall appliance. One developer I ...
Luis Moraguez's user avatar
0 votes
0 answers
26 views

Can port forwarding reveal destination IP?

I am forwarding incoming TCP connections to a different host in the local network using firewalld / iptables. Is there a scenario where the remote connections are able to determine the IP of the ...
Maestro's user avatar
  • 265
0 votes
1 answer
204 views

One domain name, two locations, depending on login information

We have 2 identical websites located in 2 different countries on two different subdomains in the same domain name, i.e. "us.site.com" and "ca.site.com". It is setup this way due to ...
Michael Bernardo's user avatar
0 votes
1 answer
603 views

What are the IP ranges of Apple's privacy protection proxies?

Apple introduced privacy protection measures in macOS Monterey and iOS 15 which use a network of randomly assigned IPs to act as proxies when loading (amongst other things) email content. Does anyone ...
Synchro's user avatar
  • 3,128
0 votes
1 answer
320 views

Google Chrome incognito (private/anonymous browsing) not available in Google Workspace (GSuite) account

Recently, incognito mode disappeared in Chrome while signed-in as Google Workspace account (signed-in as regular gmail account has been working just fine). So I did an obvious check on policies (...
crysman's user avatar
  • 141
-2 votes
1 answer
409 views

Does connecting to a work VPN via Cisco AnyConnect give the domain administrator access to your computer? [closed]

I've been connecting to my work computer via Cisco AnyConnect for the duration of the pandemic and I'm now concerned about privacy. Can a domain admin on the company network access my files or my PC ...
George I.'s user avatar
0 votes
1 answer
94 views

GitLab self-hosted instances data sharing

I'm working on a personal project with some friends and it is becoming quite large, so I'm considering to self-host a GitLab instance to help preventing the development to go to complete chaos. ...
Ntakwetet's user avatar
  • 101
-1 votes
2 answers
205 views

Trying to erase disk content by filling all bits with "1", not "0"

I have 2 old 160GB WD drives that do not have "Security-Delete" option when querying with hdparm. I understand the current acceptance of the mechanism overwriting entire disks with zeros. ...
Eric Marceau's user avatar
3 votes
1 answer
372 views

On demand new IPv6 using privacy extension?

Enabling Privacy Extension (net.ipv6.conf.eth0.use_tempaddr=2 in /etc/sysctl.conf) for IPv6 gives me a new IP address for a fixed period of time, is there a way to get a new IPv6 on demand? i.e. ...
WannabeCoder's user avatar
37 votes
7 answers
11k views

Can Microsoft employees see my data in Azure?

I have sensitive data stored in both Azure DB and Azure SQL VM. An authorised DBA can log on and query the database, but in theory could a random Microsoft employee do the same without asking ...
userSteve's user avatar
  • 1,543
-4 votes
1 answer
126 views

IPv6 NAT information leakage [closed]

Edit: Since I was asked to edit this, I'll ask about an awfully specific issue. The question was obviously never about information leakage on OSI layer 7, since that wouldn't be a network issue. I'm ...
f384's user avatar
  • 1
0 votes
1 answer
117 views

Company access to enrolled iPhone / How to use Office 365 + IMAP + MFA + iPhone?

I'm an IT consultant and one of my clients is a large enterprise. They use Office 365 and have always required phones to be enrolled (giving their IT department full access) in order for email etc. to ...
TravelingFox's user avatar
8 votes
1 answer
5k views

IPv6 Privacy Extensions use_tempaddr=1 vs use_tempaddr=2

I understand privacy extensions and that you enable them by setting use_tempaddr. Unfortunately I haven't found any explantion for the different settings. Every articel I read used either 1 or 2 or ...
wedi's user avatar
  • 338
1 vote
2 answers
769 views

How can I use powershell (or Graph) to access the Azure MFA properties?

I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc). How can I use powershell, or otherwise get the data associated ...
Ran Dom's user avatar
  • 191
1 vote
1 answer
154 views

ejabberd privacy lists (xep-0016) unexpected behavior

To fend off xmpp spam, I use xep-0016 privacy list, that allows messages from contacts with mutual subscriptions (plus from muc servers), and denies by default: <!-- Outgoing Sun 15 Jul 2018 14:19:...
crosser's user avatar
  • 113
-1 votes
1 answer
47 views

Disclosure of recipient’s forward email address when my email bounces

A few times I had a situation like this: I sent an email to foobar@example.com. For this email, I received a delivery failure report, giving reasons like "550 5.1.1" (user unknown) or "552-5.7.0" (...
unor's user avatar
  • 246
-2 votes
2 answers
193 views

Nginx - Redirect a bunch of domains to a single domain, with SSL [duplicate]

Nothing insidious going on but I've got a bunch of domains that we've bought for a service and I don't want to buy an SSL certificate for them all (there's about 11). As an example, we've got: ...
MattBoothDev's user avatar
0 votes
1 answer
44 views

Safer as possible: opinions and tips with FTPS

a customer asked me to set up an automatic backup system in which a machine transfer some important data (.sql dumps) via FTP. He doesn't want SFTP, only FTP. So I ended up doing three things: I ...
Wyatt Gillette's user avatar
1 vote
0 answers
31 views

Deprivatized email repository

I need to create a repository of some historical emails for employee training purpose. Sensitive information in those emails should be removed, such as customers' email address and their names. Is ...
Ryan's user avatar
  • 187
0 votes
1 answer
79 views

LDAP and privacy

I've setup a LDAP server on a small test cluster but I'm running into some privacy issues. The first issue was that anybody that had a login to any of the servers in the cluster could retrieve all ...
Maran's user avatar
  • 311
3 votes
1 answer
109 views

Privacy concerns with windows 10 Pro

I don't need any of the Windows 10 enterprise features but enterprise is the only one that (legitimately) allows me to turn off the CEIP (Customer Experience Improvement Program); this is the ...
Paddy Carroll's user avatar
-2 votes
1 answer
471 views

Deep packet Inspection Stenography [closed]

I'm trying to develop something that can get around Deep Packet Inspection so that rather than looking like OpenVPN traffic etc, I could put all that into HTTP packets as extra information or some ...
Kim Ly's user avatar
  • 11
0 votes
2 answers
38 views

Wiping failed drives with sensitive business information

I have some failed drives that are about to be written off and sent for recycling. Some were members of a RAID 5 array, some I'm not too concerned about wiping information on them, but some of them ...
sirlark's user avatar
  • 211
3 votes
1 answer
1k views

Why does Google Apps Mail leak IP address? How do I disable it? [closed]

When sending via Google Apps Mail client the message will include a 'X-Originating-IP' header. But when sending via Gmail and using the SMTP send-mail-as option it will not leak the ip address. (Yes ...
Ricard's user avatar
  • 49
-1 votes
1 answer
53 views

Hosting two domains on a VPS while preventing an attacker from finding domain A given domain B?

I would like to host two websites on a VPS. One of them is my portfolio. The other one is a gaming website. I don't want an attacker to find my portfolio domain name if they know my gaming domain name....
JohnHowardTheConcept's user avatar
3 votes
3 answers
183 views

For the .com TLD, is there any known change tracking for WhoIs information?

A client exposed information regarding what will become a controversial website in the domain WhoIs after she purchased it from auction. Is there any whois cache that will detect, save, and share ...
makerofthings7's user avatar
2 votes
2 answers
1k views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
kolypto's user avatar
  • 11k
1 vote
2 answers
81 views

How does a hosting company change a file on a vserver without logging in?

In my virtual server, ssh is not on port 22, I don't allow login with passwords, and I don't allow root logins. Recently, the server was not responding. My hosting company told me that my Apache ...
aBe's user avatar
  • 113
33 votes
3 answers
3k views

ISP broadcasting all IP-packets, so I can see traffic of other clients from ISP

Recently I wondered why my router shows a constant downstream of 5 MBit/s, while I am downloading almost no data. I discovered the "packet logging" function of my router, with which I was able to log ...
user3297416's user avatar
1 vote
2 answers
200 views

My hosting provider allows me to see the names of all other databases on their servers, is this bad practice? [closed]

I've got MSSQL DB functionality set up with a hosting provider, and recently logged in for the first time. When I added the connection, it then listed (apparently) every single MSSQL database on ...
andrewb's user avatar
  • 151
1 vote
2 answers
3k views

Is there a way to deny access based on hostname or agent?

I am using owncloud and sometimes share links with people via Facebook. I am concerned with automatic crawling, so I would like to deny facebook access to my owncloud.thomas-steinbrenner.net server (...
Tie-fighter's user avatar
0 votes
1 answer
1k views

How to route internet through VPN with Windows Server 2008 R2 on Amazon VPC?

I have a server on Amazon EC2-VPC. I want to connect through VPN to it AND have all my internet traffic routed THROUGH this server, to guarantee my privacy. I have two network interfaces on the ...
NothingsImpossible's user avatar
-2 votes
2 answers
960 views

How does The Pirate Bay mask itself from its VPS providers? [closed]

From https://torrentfreak.com/pirate-bay-moves-to-the-cloud-becomes-raid-proof-121017/ The hosting providers have no idea that they’re hosting The Pirate Bay, and even in the event they found out ...
Ansis Māliņš's user avatar
3 votes
3 answers
21k views

Windows: disable remote access of local drive, even by domain admin

We have a network of Windows 7 PCs that are managed as part of a domain. What we want is for the domain admin to be unable to view the PC's local drive (C:) unless he is physically at the PC. In ...
Matt's user avatar
  • 1,047
2 votes
2 answers
3k views

Securing Exchange Mailboxes from Nosy Admins

This is admittedly a duplicate of this question: Secure Exchange mailboxes In short, how can Microsoft Exchange 2010 be configured such that email is only visible to the owner of that mailbox, ...
Matt's user avatar
  • 1,047
11 votes
3 answers
2k views

Does SNI represent a privacy concern for my website visitors?

Firstly, I'm sorry for my bad English. I'm still learning it. Here it goes: When I host a single website per IP address, I can use "pure" SSL (without SNI), and the key exchange occurs before the ...
pagliuca's user avatar
  • 243
2 votes
1 answer
2k views

Host network injecting resets into my TCP connection?

I'm trying to figure out whether the host network I am on is injecting TCP Resets into my VPN connection. I have a personal OpenVPN server, and recently my attempts to connect over TCP port 1194 have ...
Bill's user avatar
  • 603
2 votes
1 answer
5k views

GPO - Block 3rd party cookies for IE 8

I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. ...
Chadddada's user avatar
  • 1,680
2 votes
2 answers
694 views

SSL certificate fields and personal address

Is it possible to get the address of the business that a SSL certificate is registered to? I know you can get the City and State directly from the certificate. I ask because I'm thinking about ...
James T's user avatar
  • 224
7 votes
3 answers
5k views

How can I remove IP addresses from log files after some time

I have an apache/nginx/whatever web server which logs client IP addresses to the access logs. Now these log files are rotated via logrotate. I want to keep the IP addresses for some days, then after ...
Michael Siebert's user avatar
-1 votes
1 answer
74 views

How important is customer support for just domain registration? [closed]

I'm looking at two companies to register a domain in, it's either going to be GoDaddy or 1and1. I checked out some of the reviews and saw that 1&1 offers free private domain registration while ...
qwertymk's user avatar
-2 votes
2 answers
440 views

Privacy implications of a LAN-wide DNS server [closed]

My university department has a local DNS server that serves all of the computers in the department. I am concerned about the privacy and security implications of this. Posit that I am merely one of ...
kuchiku's user avatar
2 votes
2 answers
789 views

If I block users with a blank IP address, will that affect innocent, non-technical users?

I run a website with an anonymous commenting feature. Users can flag each other for abuse; flags are tied to an IP address (grabbed via PHP from $_SERVER['REMOTE_ADDR']). I've noticed that 99% of the ...
andrewtweber's user avatar
3 votes
1 answer
119 views

Windows 200x Server - User Group vs User privilege conflict

I have denied to a specific user to write on a file. Unfortunately this user is a member of a User Group which have the privilege to write on this file. So there is a conflict between User vs. User-...
user avatar
1 vote
1 answer
77 views

Exchange 2010: Job titles making it out of organization?

I was asked a question from one of my co-workers that I was pretty sure about, but not 100% on. Google didn't appear to help me out either, so here I am. Do things like job titles and other such ...
danthehat's user avatar
51 votes
7 answers
4k views

How to take full ownership of an IP address?

My business is... troublesome. What I do is legal in every country on earth, but some people don't like it, and make it so tough on my poor ISPs that I am forced to go looking for new providers more ...
darkAsPitch's user avatar
  • 1,911