Questions tagged [privacy]
The privacy tag has no usage guidance.
74
questions
0
votes
0
answers
17
views
Does google colaboratory save code in local computer when using local runtime
When running python code from google colab into local computer (local runtime), does the code is saved in the local computer or not ?
- 1
-1
votes
1
answer
36
views
Does ssh save the code in the remote computer?
When running python code using ssh on remote computer by a sudo user, does it save the code in the remote computer ? does the root user can see actual python code?
ssh user@remotehost < python /...
- 1
-2
votes
1
answer
30
views
What can my ISP know about a website hosted at my house? [closed]
I am hosting a public website, say example.com, at my house using my home Internet (fyi, the contract allows it). My Internet plan also comes with a static IP. I use CloudFlare to hide the server's ...
0
votes
1
answer
200
views
how to SSH to Wireguard server from Windows client with active VPN connection?
I have Wireguard server on Rocky 8.7, when I connect to the server I route all client traffic through Wireguard
this is quotes from setup script, of course all variables is set (and all works good)
...
0
votes
0
answers
30
views
Is it valuable to do DNS Leak Testing directly from a firewall and not just from the client side?
I've been writing a tool that can be added as a package for pfSense, and essentially the tool allows you to perform a DNS leak test on any of the interfaces on the firewall appliance.
One developer I ...
0
votes
0
answers
26
views
Can port forwarding reveal destination IP?
I am forwarding incoming TCP connections to a different host in the local network using firewalld / iptables.
Is there a scenario where the remote connections are able to determine the IP of the ...
- 265
0
votes
1
answer
204
views
One domain name, two locations, depending on login information
We have 2 identical websites located in 2 different countries on two different subdomains in the same domain name, i.e. "us.site.com" and "ca.site.com". It is setup this way due to ...
0
votes
1
answer
603
views
What are the IP ranges of Apple's privacy protection proxies?
Apple introduced privacy protection measures in macOS Monterey and iOS 15 which use a network of randomly assigned IPs to act as proxies when loading (amongst other things) email content. Does anyone ...
- 3,128
0
votes
1
answer
320
views
Google Chrome incognito (private/anonymous browsing) not available in Google Workspace (GSuite) account
Recently, incognito mode disappeared in Chrome while signed-in as Google Workspace account (signed-in as regular gmail account has been working just fine).
So I did an obvious check on policies (...
- 141
-2
votes
1
answer
409
views
Does connecting to a work VPN via Cisco AnyConnect give the domain administrator access to your computer? [closed]
I've been connecting to my work computer via Cisco AnyConnect for the duration of the pandemic and I'm now concerned about privacy.
Can a domain admin on the company network access my files or my PC ...
0
votes
1
answer
94
views
GitLab self-hosted instances data sharing
I'm working on a personal project with some friends and it is becoming quite large, so I'm considering to self-host a GitLab instance to help preventing the development to go to complete chaos.
...
- 101
-1
votes
2
answers
205
views
Trying to erase disk content by filling all bits with "1", not "0"
I have 2 old 160GB WD drives that do not have "Security-Delete" option when querying with hdparm.
I understand the current acceptance of the mechanism overwriting entire disks with zeros.
...
- 101
3
votes
1
answer
372
views
On demand new IPv6 using privacy extension?
Enabling Privacy Extension (net.ipv6.conf.eth0.use_tempaddr=2 in /etc/sysctl.conf) for IPv6 gives me a new IP address for a fixed period of time, is there a way to get a new IPv6 on demand? i.e. ...
- 33
37
votes
7
answers
11k
views
Can Microsoft employees see my data in Azure?
I have sensitive data stored in both Azure DB and Azure SQL VM.
An authorised DBA can log on and query the database, but in theory could a random Microsoft employee do the same without asking ...
- 1,543
-4
votes
1
answer
126
views
IPv6 NAT information leakage [closed]
Edit: Since I was asked to edit this, I'll ask about an awfully specific issue. The question was obviously never about information leakage on OSI layer 7, since that wouldn't be a network issue.
I'm ...
- 1
0
votes
1
answer
117
views
Company access to enrolled iPhone / How to use Office 365 + IMAP + MFA + iPhone?
I'm an IT consultant and one of my clients is a large enterprise. They use Office 365 and have always required phones to be enrolled (giving their IT department full access) in order for email etc. to ...
- 101
8
votes
1
answer
5k
views
IPv6 Privacy Extensions use_tempaddr=1 vs use_tempaddr=2
I understand privacy extensions and that you enable them by setting use_tempaddr. Unfortunately I haven't found any explantion for the different settings. Every articel I read used either 1 or 2 or ...
- 338
1
vote
2
answers
769
views
How can I use powershell (or Graph) to access the Azure MFA properties?
I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc).
How can I use powershell, or otherwise get the data associated ...
- 191
1
vote
1
answer
154
views
ejabberd privacy lists (xep-0016) unexpected behavior
To fend off xmpp spam, I use xep-0016 privacy list, that allows messages from contacts with mutual subscriptions (plus from muc servers), and denies by default:
<!-- Outgoing Sun 15 Jul 2018 14:19:...
- 113
-1
votes
1
answer
47
views
Disclosure of recipient’s forward email address when my email bounces
A few times I had a situation like this:
I sent an email to foobar@example.com.
For this email, I received a delivery failure report, giving reasons like "550 5.1.1" (user unknown) or "552-5.7.0" (...
- 246
-2
votes
2
answers
193
views
Nginx - Redirect a bunch of domains to a single domain, with SSL [duplicate]
Nothing insidious going on but I've got a bunch of domains that we've bought for a service and I don't want to buy an SSL certificate for them all (there's about 11).
As an example, we've got:
...
- 115
0
votes
1
answer
44
views
Safer as possible: opinions and tips with FTPS
a customer asked me to set up an automatic backup system in which a machine transfer some important data (.sql dumps) via FTP.
He doesn't want SFTP, only FTP.
So I ended up doing three things:
I ...
- 105
1
vote
0
answers
31
views
Deprivatized email repository
I need to create a repository of some historical emails for employee training purpose. Sensitive information in those emails should be removed, such as customers' email address and their names. Is ...
- 187
0
votes
1
answer
79
views
LDAP and privacy
I've setup a LDAP server on a small test cluster but I'm running into some privacy issues.
The first issue was that anybody that had a login to any of the servers in the cluster could retrieve all ...
- 311
3
votes
1
answer
109
views
Privacy concerns with windows 10 Pro
I don't need any of the Windows 10 enterprise features but enterprise is the only one that (legitimately) allows me to turn off the CEIP (Customer Experience Improvement Program); this is the ...
- 237
-2
votes
1
answer
471
views
Deep packet Inspection Stenography [closed]
I'm trying to develop something that can get around Deep Packet Inspection so that rather than looking like OpenVPN traffic etc, I could put all that into HTTP packets as extra information or some ...
- 11
0
votes
2
answers
38
views
Wiping failed drives with sensitive business information
I have some failed drives that are about to be written off and sent for recycling. Some were members of a RAID 5 array, some I'm not too concerned about wiping information on them, but some of them ...
- 211
3
votes
1
answer
1k
views
Why does Google Apps Mail leak IP address? How do I disable it? [closed]
When sending via Google Apps Mail client the message will include a 'X-Originating-IP' header.
But when sending via Gmail and using the SMTP send-mail-as option it will not leak the ip address. (Yes ...
- 49
-1
votes
1
answer
53
views
Hosting two domains on a VPS while preventing an attacker from finding domain A given domain B?
I would like to host two websites on a VPS. One of them is my portfolio. The other one is a gaming website. I don't want an attacker to find my portfolio domain name if they know my gaming domain name....
3
votes
3
answers
183
views
For the .com TLD, is there any known change tracking for WhoIs information?
A client exposed information regarding what will become a controversial website in the domain WhoIs after she purchased it from auction.
Is there any whois cache that will detect, save, and share ...
- 8,881
2
votes
2
answers
1k
views
Managing server certificates for wildcard
I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain.
I am not willing to copy my ...
- 11k
1
vote
2
answers
81
views
How does a hosting company change a file on a vserver without logging in?
In my virtual server, ssh is not on port 22, I don't allow login with passwords, and I don't allow root logins.
Recently, the server was not responding. My hosting company told me that my Apache ...
- 113
33
votes
3
answers
3k
views
ISP broadcasting all IP-packets, so I can see traffic of other clients from ISP
Recently I wondered why my router shows a constant downstream of 5 MBit/s, while I am downloading almost no data. I discovered the "packet logging" function of my router, with which I was able to log ...
- 443
1
vote
2
answers
200
views
My hosting provider allows me to see the names of all other databases on their servers, is this bad practice? [closed]
I've got MSSQL DB functionality set up with a hosting provider, and recently logged in for the first time. When I added the connection, it then listed (apparently) every single MSSQL database on ...
- 151
1
vote
2
answers
3k
views
Is there a way to deny access based on hostname or agent?
I am using owncloud and sometimes share links with people via Facebook.
I am concerned with automatic crawling, so I would like to deny facebook access to my owncloud.thomas-steinbrenner.net server (...
- 751
0
votes
1
answer
1k
views
How to route internet through VPN with Windows Server 2008 R2 on Amazon VPC?
I have a server on Amazon EC2-VPC. I want to connect through VPN to it AND have all my internet traffic routed THROUGH this server, to guarantee my privacy.
I have two network interfaces on the ...
-2
votes
2
answers
960
views
How does The Pirate Bay mask itself from its VPS providers? [closed]
From https://torrentfreak.com/pirate-bay-moves-to-the-cloud-becomes-raid-proof-121017/
The hosting providers have no idea that they’re hosting The Pirate Bay, and even in the event they found out ...
- 175
3
votes
3
answers
21k
views
Windows: disable remote access of local drive, even by domain admin
We have a network of Windows 7 PCs that are managed as part of a domain. What we want is for the domain admin to be unable to view the PC's local drive (C:) unless he is physically at the PC. In ...
- 1,047
2
votes
2
answers
3k
views
Securing Exchange Mailboxes from Nosy Admins
This is admittedly a duplicate of this question:
Secure Exchange mailboxes
In short, how can Microsoft Exchange 2010 be configured such that email is only visible to the owner of that mailbox, ...
- 1,047
11
votes
3
answers
2k
views
Does SNI represent a privacy concern for my website visitors?
Firstly, I'm sorry for my bad English. I'm still learning it. Here it goes:
When I host a single website per IP address, I can use "pure" SSL (without SNI), and the key exchange occurs before the ...
- 243
2
votes
1
answer
2k
views
Host network injecting resets into my TCP connection?
I'm trying to figure out whether the host network I am on is injecting TCP Resets into my VPN connection.
I have a personal OpenVPN server, and recently my attempts to connect over TCP port 1194 have ...
- 603
2
votes
1
answer
5k
views
GPO - Block 3rd party cookies for IE 8
I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. ...
- 1,680
2
votes
2
answers
694
views
SSL certificate fields and personal address
Is it possible to get the address of the business that a SSL certificate is registered to?
I know you can get the City and State directly from the certificate.
I ask because I'm thinking about ...
- 224
7
votes
3
answers
5k
views
How can I remove IP addresses from log files after some time
I have an apache/nginx/whatever web server which logs client IP addresses to the access logs. Now these log files are rotated via logrotate.
I want to keep the IP addresses for some days, then after ...
- 213
-1
votes
1
answer
74
views
How important is customer support for just domain registration? [closed]
I'm looking at two companies to register a domain in, it's either going to be GoDaddy or 1and1.
I checked out some of the reviews and saw that 1&1 offers free private domain registration while ...
- 99
-2
votes
2
answers
440
views
Privacy implications of a LAN-wide DNS server [closed]
My university department has a local DNS server that serves all of the computers in the department. I am concerned about the privacy and security implications of this. Posit that I am merely one of ...
- 3
2
votes
2
answers
789
views
If I block users with a blank IP address, will that affect innocent, non-technical users?
I run a website with an anonymous commenting feature. Users can flag each other for abuse; flags are tied to an IP address (grabbed via PHP from $_SERVER['REMOTE_ADDR']).
I've noticed that 99% of the ...
- 449
3
votes
1
answer
119
views
Windows 200x Server - User Group vs User privilege conflict
I have denied to a specific user to write on a file. Unfortunately this user is a member of a User Group which have the privilege to write on this file. So there is a conflict between User vs. User-...
LePhleg
1
vote
1
answer
77
views
Exchange 2010: Job titles making it out of organization?
I was asked a question from one of my co-workers that I was pretty sure about, but not 100% on. Google didn't appear to help me out either, so here I am.
Do things like job titles and other such ...
- 21
51
votes
7
answers
4k
views
How to take full ownership of an IP address?
My business is... troublesome.
What I do is legal in every country on earth, but some people don't like it, and make it so tough on my poor ISPs that I am forced to go looking for new providers more ...
- 1,911