Questions tagged [privacy]
The privacy tag has no usage guidance.
67
questions
-1
votes
0answers
16 views
How to See Ad without being tracked by Google and others? [closed]
I want to know how Google,Facebook,etc.. know I viewed AD? Are they know it by pixels(like in emails) on ADS or any other way?
Let Me Clear What I want to Know Take
Example-
Here I Suppose UMatrix is ...
0
votes
0answers
70 views
How can I remove all cookies except session cookies from nginx responses?
I'm serving several WordPress sites via nginx & PHP-FPM. Sometimes plugins randomly set cookies that are unwanted, and that do not have consent. For those, and for privacy in general, I want to ...
0
votes
0answers
16 views
Mac OS: How to handle multiple systems under one Apple ID
The company I work for issues MacBooks to employees, and I come from the Linux world and I'm running in to a privacy issue with how my predecessor set up and issued the Macs.
Specifically, Each Mac is ...
0
votes
0answers
7 views
Cognitive Service show Fill words and hide personal data
We use the Azure Batch Transcription Service to get the Transcript of an Audio / Speech.
In here we noticed, that sometimes filler words like "uhm", "hm" or something similar are ...
-1
votes
2answers
123 views
Trying to erase disk content by filling all bits with “1”, not “0”
I have 2 old 160GB WD drives that do not have "Security-Delete" option when querying with hdparm.
I understand the current acceptance of the mechanism overwriting entire disks with zeros.
...
3
votes
1answer
137 views
On demand new IPv6 using privacy extension?
Enabling Privacy Extension (net.ipv6.conf.eth0.use_tempaddr=2 in /etc/sysctl.conf) for IPv6 gives me a new IP address for a fixed period of time, is there a way to get a new IPv6 on demand? i.e. ...
37
votes
7answers
10k views
Can Microsoft employees see my data in Azure?
I have sensitive data stored in both Azure DB and Azure SQL VM.
An authorised DBA can log on and query the database, but in theory could a random Microsoft employee do the same without asking ...
-4
votes
1answer
105 views
IPv6 NAT information leakage [closed]
Edit: Since I was asked to edit this, I'll ask about an awfully specific issue. The question was obviously never about information leakage on OSI layer 7, since that wouldn't be a network issue.
I'm ...
0
votes
1answer
82 views
Company access to enrolled iPhone / How to use Office 365 + IMAP + MFA + iPhone?
I'm an IT consultant and one of my clients is a large enterprise. They use Office 365 and have always required phones to be enrolled (giving their IT department full access) in order for email etc. to ...
3
votes
1answer
2k views
IPv6 Privacy Extensions use_tempaddr=1 vs use_tempaddr=2
I understand privacy extensions and that you enable them by setting use_tempaddr. Unfortunately I haven't found any explantion for the different settings. Every articel I read used either 1 or 2 or ...
1
vote
2answers
523 views
How can I use powershell (or Graph) to access the Azure MFA properties?
I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc).
How can I use powershell, or otherwise get the data associated ...
1
vote
1answer
79 views
ejabberd privacy lists (xep-0016) unexpected behavior
To fend off xmpp spam, I use xep-0016 privacy list, that allows messages from contacts with mutual subscriptions (plus from muc servers), and denies by default:
<!-- Outgoing Sun 15 Jul 2018 14:19:...
-1
votes
1answer
25 views
Disclosure of recipient’s forward email address when my email bounces
A few times I had a situation like this:
I sent an email to foobar@example.com.
For this email, I received a delivery failure report, giving reasons like "550 5.1.1" (user unknown) or "552-5.7.0" (...
-2
votes
2answers
155 views
Nginx - Redirect a bunch of domains to a single domain, with SSL [duplicate]
Nothing insidious going on but I've got a bunch of domains that we've bought for a service and I don't want to buy an SSL certificate for them all (there's about 11).
As an example, we've got:
...
0
votes
1answer
35 views
Safer as possible: opinions and tips with FTPS
a customer asked me to set up an automatic backup system in which a machine transfer some important data (.sql dumps) via FTP.
He doesn't want SFTP, only FTP.
So I ended up doing three things:
I ...
1
vote
0answers
30 views
Deprivatized email repository
I need to create a repository of some historical emails for employee training purpose. Sensitive information in those emails should be removed, such as customers' email address and their names. Is ...
0
votes
1answer
68 views
LDAP and privacy
I've setup a LDAP server on a small test cluster but I'm running into some privacy issues.
The first issue was that anybody that had a login to any of the servers in the cluster could retrieve all ...
3
votes
1answer
98 views
Privacy concerns with windows 10 Pro
I don't need any of the Windows 10 enterprise features but enterprise is the only one that (legitimately) allows me to turn off the CEIP (Customer Experience Improvement Program); this is the ...
-2
votes
1answer
439 views
Deep packet Inspection Stenography [closed]
I'm trying to develop something that can get around Deep Packet Inspection so that rather than looking like OpenVPN traffic etc, I could put all that into HTTP packets as extra information or some ...
0
votes
2answers
34 views
Wiping failed drives with sensitive business information
I have some failed drives that are about to be written off and sent for recycling. Some were members of a RAID 5 array, some I'm not too concerned about wiping information on them, but some of them ...
3
votes
1answer
1k views
Why does Google Apps Mail leak IP address? How do I disable it? [closed]
When sending via Google Apps Mail client the message will include a 'X-Originating-IP' header.
But when sending via Gmail and using the SMTP send-mail-as option it will not leak the ip address. (Yes ...
-1
votes
1answer
33 views
Hosting two domains on a VPS while preventing an attacker from finding domain A given domain B?
I would like to host two websites on a VPS. One of them is my portfolio. The other one is a gaming website. I don't want an attacker to find my portfolio domain name if they know my gaming domain name....
3
votes
3answers
101 views
For the .com TLD, is there any known change tracking for WhoIs information?
A client exposed information regarding what will become a controversial website in the domain WhoIs after she purchased it from auction.
Is there any whois cache that will detect, save, and share ...
2
votes
2answers
936 views
Managing server certificates for wildcard
I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain.
I am not willing to copy my ...
0
votes
2answers
77 views
How does a hosting company change a file on a vserver without logging in?
In my virtual server, ssh is not on port 22, I don't allow login with passwords, and I don't allow root logins.
Recently, the server was not responding. My hosting company told me that my Apache ...
33
votes
3answers
3k views
ISP broadcasting all IP-packets, so I can see traffic of other clients from ISP
Recently I wondered why my router shows a constant downstream of 5 MBit/s, while I am downloading almost no data. I discovered the "packet logging" function of my router, with which I was able to log ...
1
vote
2answers
199 views
My hosting provider allows me to see the names of all other databases on their servers, is this bad practice? [closed]
I've got MSSQL DB functionality set up with a hosting provider, and recently logged in for the first time. When I added the connection, it then listed (apparently) every single MSSQL database on ...
1
vote
2answers
3k views
Is there a way to deny access based on hostname or agent?
I am using owncloud and sometimes share links with people via Facebook.
I am concerned with automatic crawling, so I would like to deny facebook access to my owncloud.thomas-steinbrenner.net server (...
0
votes
1answer
1k views
How to route internet through VPN with Windows Server 2008 R2 on Amazon VPC?
I have a server on Amazon EC2-VPC. I want to connect through VPN to it AND have all my internet traffic routed THROUGH this server, to guarantee my privacy.
I have two network interfaces on the ...
-2
votes
2answers
860 views
How does The Pirate Bay mask itself from its VPS providers? [closed]
From https://torrentfreak.com/pirate-bay-moves-to-the-cloud-becomes-raid-proof-121017/
The hosting providers have no idea that they’re hosting The Pirate Bay, and even in the event they found out ...
3
votes
3answers
20k views
Windows: disable remote access of local drive, even by domain admin
We have a network of Windows 7 PCs that are managed as part of a domain. What we want is for the domain admin to be unable to view the PC's local drive (C:) unless he is physically at the PC. In ...
2
votes
2answers
3k views
Securing Exchange Mailboxes from Nosy Admins
This is admittedly a duplicate of this question:
Secure Exchange mailboxes
In short, how can Microsoft Exchange 2010 be configured such that email is only visible to the owner of that mailbox, ...
11
votes
3answers
2k views
Does SNI represent a privacy concern for my website visitors?
Firstly, I'm sorry for my bad English. I'm still learning it. Here it goes:
When I host a single website per IP address, I can use "pure" SSL (without SNI), and the key exchange occurs before the ...
2
votes
1answer
2k views
Host network injecting resets into my TCP connection?
I'm trying to figure out whether the host network I am on is injecting TCP Resets into my VPN connection.
I have a personal OpenVPN server, and recently my attempts to connect over TCP port 1194 have ...
2
votes
1answer
5k views
GPO - Block 3rd party cookies for IE 8
I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. ...
2
votes
2answers
405 views
SSL certificate fields and personal address
Is it possible to get the address of the business that a SSL certificate is registered to?
I know you can get the City and State directly from the certificate.
I ask because I'm thinking about ...
7
votes
3answers
4k views
How can I remove IP addresses from log files after some time
I have an apache/nginx/whatever web server which logs client IP addresses to the access logs. Now these log files are rotated via logrotate.
I want to keep the IP addresses for some days, then after ...
-1
votes
1answer
71 views
How important is customer support for just domain registration? [closed]
I'm looking at two companies to register a domain in, it's either going to be GoDaddy or 1and1.
I checked out some of the reviews and saw that 1&1 offers free private domain registration while ...
-2
votes
2answers
437 views
Privacy implications of a LAN-wide DNS server [closed]
My university department has a local DNS server that serves all of the computers in the department. I am concerned about the privacy and security implications of this. Posit that I am merely one of ...
2
votes
2answers
756 views
If I block users with a blank IP address, will that affect innocent, non-technical users?
I run a website with an anonymous commenting feature. Users can flag each other for abuse; flags are tied to an IP address (grabbed via PHP from $_SERVER['REMOTE_ADDR']).
I've noticed that 99% of the ...
3
votes
1answer
113 views
Windows 200x Server - User Group vs User privilege conflict
I have denied to a specific user to write on a file. Unfortunately this user is a member of a User Group which have the privilege to write on this file. So there is a conflict between User vs. User-...
1
vote
1answer
76 views
Exchange 2010: Job titles making it out of organization?
I was asked a question from one of my co-workers that I was pretty sure about, but not 100% on. Google didn't appear to help me out either, so here I am.
Do things like job titles and other such ...
51
votes
7answers
4k views
How to take full ownership of an IP address?
My business is... troublesome.
What I do is legal in every country on earth, but some people don't like it, and make it so tough on my poor ISPs that I am forced to go looking for new providers more ...
-1
votes
1answer
46 views
are new snapshots that are being created using elastifox are public ?
I use elastifox firefox plugin to create instances and snapshots of volumes that I created.
in 'volumes and snapshots' tab in the bottom table i can filter the snapshots that I see by 'My snapshots' ...
1
vote
1answer
872 views
Stop Postfix revealing final email forwarding address in bounce messages
I have a Postfix server that receives mail for virtual aliases and forwards them to the real destination addresses. When the final mail server returns an error the bounce message returned to the ...
24
votes
2answers
761 views
Isn't it a huge security issue to include the MAC address inside of an IPv6 address by default
Many times you don't want to be identified while surfing. For one thing your browsing history might be sold without your knowledge, and with no benefit to you.
2
votes
2answers
319 views
Personally identifiable information (PII) on shared web hosting
Hey folks, I am providing web hosting services (shared and dedicated) and have had one of my shared hosting clients mention needing an SSL cert for their site where they are collecting insurance ...
0
votes
1answer
252 views
Office 2010 Privacy Options Automation
How can I remotely disable all of the Privacy Options within the Microsoft Office Trust Center?
2
votes
3answers
227 views
WHOIS privacy help
How do I protect my identy from whois? If someone whois's my domain name, it reveals my name, address etc etc. How do I hide this?
2
votes
4answers
632 views
Which RAID format is best for data privacy during RMA?
So there are several RAID configurations to chose from, and I was wondering, eventually I expect some 25-45% of my drives may need to get swapped for a warranty repair. I know that there is no hope ...
