Questions tagged [privacy]
The privacy tag has no usage guidance.
70
questions
0
votes
0
answers
20
views
Can port forwarding reveal destination IP?
I am forwarding incoming TCP connections to a different host in the local network using firewalld / iptables.
Is there a scenario where the remote connections are able to determine the IP of the ...
- 243
0
votes
1
answer
31
views
One domain name, two locations, depending on login information
We have 2 identical websites located in 2 different countries on two different subdomains in the same domain name, i.e. "us.site.com" and "ca.site.com". It is setup this way due to ...
-4
votes
1
answer
32
views
Do DNS queries reveal full URLs? [closed]
I use my ISP's DNS, which means that if I access "example.com" they will know, but will they know the exact page? (eg. "example.com/something.html"). As far as I know, if I access &...
- 3
0
votes
1
answer
192
views
What are the IP ranges of Apple's privacy protection proxies?
Apple introduced privacy protection measures in macOS Monterey and iOS 15 which use a network of randomly assigned IPs to act as proxies when loading (amongst other things) email content. Does anyone ...
- 2,988
0
votes
1
answer
128
views
Google Chrome incognito (private/anonymous browsing) not available in Google Workspace (GSuite) account
Recently, incognito mode disappeared in Chrome while signed-in as Google Workspace account (signed-in as regular gmail account has been working just fine).
So I did an obvious check on policies (...
- 141
-2
votes
1
answer
118
views
Does connecting to a work VPN via Cisco AnyConnect give the domain administrator access to your computer? [closed]
I've been connecting to my work computer via Cisco AnyConnect for the duration of the pandemic and I'm now concerned about privacy.
Can a domain admin on the company network access my files or my PC ...
0
votes
1
answer
39
views
GitLab self-hosted instances data sharing
I'm working on a personal project with some friends and it is becoming quite large, so I'm considering to self-host a GitLab instance to help preventing the development to go to complete chaos.
...
- 101
-1
votes
2
answers
134
views
Trying to erase disk content by filling all bits with "1", not "0"
I have 2 old 160GB WD drives that do not have "Security-Delete" option when querying with hdparm.
I understand the current acceptance of the mechanism overwriting entire disks with zeros.
...
- 1
3
votes
1
answer
199
views
On demand new IPv6 using privacy extension?
Enabling Privacy Extension (net.ipv6.conf.eth0.use_tempaddr=2 in /etc/sysctl.conf) for IPv6 gives me a new IP address for a fixed period of time, is there a way to get a new IPv6 on demand? i.e. ...
- 33
37
votes
7
answers
11k
views
Can Microsoft employees see my data in Azure?
I have sensitive data stored in both Azure DB and Azure SQL VM.
An authorised DBA can log on and query the database, but in theory could a random Microsoft employee do the same without asking ...
- 1,463
-4
votes
1
answer
121
views
IPv6 NAT information leakage [closed]
Edit: Since I was asked to edit this, I'll ask about an awfully specific issue. The question was obviously never about information leakage on OSI layer 7, since that wouldn't be a network issue.
I'm ...
- 1
0
votes
1
answer
108
views
Company access to enrolled iPhone / How to use Office 365 + IMAP + MFA + iPhone?
I'm an IT consultant and one of my clients is a large enterprise. They use Office 365 and have always required phones to be enrolled (giving their IT department full access) in order for email etc. to ...
- 101
7
votes
1
answer
3k
views
IPv6 Privacy Extensions use_tempaddr=1 vs use_tempaddr=2
I understand privacy extensions and that you enable them by setting use_tempaddr. Unfortunately I haven't found any explantion for the different settings. Every articel I read used either 1 or 2 or ...
- 318
1
vote
2
answers
703
views
How can I use powershell (or Graph) to access the Azure MFA properties?
I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc).
How can I use powershell, or otherwise get the data associated ...
- 91
1
vote
1
answer
124
views
ejabberd privacy lists (xep-0016) unexpected behavior
To fend off xmpp spam, I use xep-0016 privacy list, that allows messages from contacts with mutual subscriptions (plus from muc servers), and denies by default:
<!-- Outgoing Sun 15 Jul 2018 14:19:...
- 113
-1
votes
1
answer
34
views
Disclosure of recipient’s forward email address when my email bounces
A few times I had a situation like this:
I sent an email to foobar@example.com.
For this email, I received a delivery failure report, giving reasons like "550 5.1.1" (user unknown) or "552-5.7.0" (...
- 246
-2
votes
2
answers
176
views
Nginx - Redirect a bunch of domains to a single domain, with SSL [duplicate]
Nothing insidious going on but I've got a bunch of domains that we've bought for a service and I don't want to buy an SSL certificate for them all (there's about 11).
As an example, we've got:
...
- 115
0
votes
1
answer
39
views
Safer as possible: opinions and tips with FTPS
a customer asked me to set up an automatic backup system in which a machine transfer some important data (.sql dumps) via FTP.
He doesn't want SFTP, only FTP.
So I ended up doing three things:
I ...
1
vote
0
answers
31
views
Deprivatized email repository
I need to create a repository of some historical emails for employee training purpose. Sensitive information in those emails should be removed, such as customers' email address and their names. Is ...
- 167
0
votes
1
answer
76
views
LDAP and privacy
I've setup a LDAP server on a small test cluster but I'm running into some privacy issues.
The first issue was that anybody that had a login to any of the servers in the cluster could retrieve all ...
- 301
3
votes
1
answer
105
views
Privacy concerns with windows 10 Pro
I don't need any of the Windows 10 enterprise features but enterprise is the only one that (legitimately) allows me to turn off the CEIP (Customer Experience Improvement Program); this is the ...
- 237
-2
votes
1
answer
453
views
Deep packet Inspection Stenography [closed]
I'm trying to develop something that can get around Deep Packet Inspection so that rather than looking like OpenVPN traffic etc, I could put all that into HTTP packets as extra information or some ...
- 11
0
votes
2
answers
36
views
Wiping failed drives with sensitive business information
I have some failed drives that are about to be written off and sent for recycling. Some were members of a RAID 5 array, some I'm not too concerned about wiping information on them, but some of them ...
- 211
3
votes
1
answer
1k
views
Why does Google Apps Mail leak IP address? How do I disable it? [closed]
When sending via Google Apps Mail client the message will include a 'X-Originating-IP' header.
But when sending via Gmail and using the SMTP send-mail-as option it will not leak the ip address. (Yes ...
- 49
-1
votes
1
answer
50
views
Hosting two domains on a VPS while preventing an attacker from finding domain A given domain B?
I would like to host two websites on a VPS. One of them is my portfolio. The other one is a gaming website. I don't want an attacker to find my portfolio domain name if they know my gaming domain name....
3
votes
3
answers
130
views
For the .com TLD, is there any known change tracking for WhoIs information?
A client exposed information regarding what will become a controversial website in the domain WhoIs after she purchased it from auction.
Is there any whois cache that will detect, save, and share ...
- 8,791
2
votes
2
answers
1k
views
Managing server certificates for wildcard
I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain.
I am not willing to copy my ...
- 10.7k
1
vote
2
answers
80
views
How does a hosting company change a file on a vserver without logging in?
In my virtual server, ssh is not on port 22, I don't allow login with passwords, and I don't allow root logins.
Recently, the server was not responding. My hosting company told me that my Apache ...
- 113
33
votes
3
answers
3k
views
ISP broadcasting all IP-packets, so I can see traffic of other clients from ISP
Recently I wondered why my router shows a constant downstream of 5 MBit/s, while I am downloading almost no data. I discovered the "packet logging" function of my router, with which I was able to log ...
- 443
1
vote
2
answers
200
views
My hosting provider allows me to see the names of all other databases on their servers, is this bad practice? [closed]
I've got MSSQL DB functionality set up with a hosting provider, and recently logged in for the first time. When I added the connection, it then listed (apparently) every single MSSQL database on ...
- 151
1
vote
2
answers
3k
views
Is there a way to deny access based on hostname or agent?
I am using owncloud and sometimes share links with people via Facebook.
I am concerned with automatic crawling, so I would like to deny facebook access to my owncloud.thomas-steinbrenner.net server (...
- 741
0
votes
1
answer
1k
views
How to route internet through VPN with Windows Server 2008 R2 on Amazon VPC?
I have a server on Amazon EC2-VPC. I want to connect through VPN to it AND have all my internet traffic routed THROUGH this server, to guarantee my privacy.
I have two network interfaces on the ...
-2
votes
2
answers
938
views
How does The Pirate Bay mask itself from its VPS providers? [closed]
From https://torrentfreak.com/pirate-bay-moves-to-the-cloud-becomes-raid-proof-121017/
The hosting providers have no idea that they’re hosting The Pirate Bay, and even in the event they found out ...
- 175
3
votes
3
answers
20k
views
Windows: disable remote access of local drive, even by domain admin
We have a network of Windows 7 PCs that are managed as part of a domain. What we want is for the domain admin to be unable to view the PC's local drive (C:) unless he is physically at the PC. In ...
- 1,027
2
votes
2
answers
3k
views
Securing Exchange Mailboxes from Nosy Admins
This is admittedly a duplicate of this question:
Secure Exchange mailboxes
In short, how can Microsoft Exchange 2010 be configured such that email is only visible to the owner of that mailbox, ...
- 1,027
11
votes
3
answers
2k
views
Does SNI represent a privacy concern for my website visitors?
Firstly, I'm sorry for my bad English. I'm still learning it. Here it goes:
When I host a single website per IP address, I can use "pure" SSL (without SNI), and the key exchange occurs before the ...
- 243
2
votes
1
answer
2k
views
Host network injecting resets into my TCP connection?
I'm trying to figure out whether the host network I am on is injecting TCP Resets into my VPN connection.
I have a personal OpenVPN server, and recently my attempts to connect over TCP port 1194 have ...
- 603
2
votes
1
answer
5k
views
GPO - Block 3rd party cookies for IE 8
I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. ...
- 1,660
2
votes
2
answers
553
views
SSL certificate fields and personal address
Is it possible to get the address of the business that a SSL certificate is registered to?
I know you can get the City and State directly from the certificate.
I ask because I'm thinking about ...
- 224
7
votes
3
answers
4k
views
How can I remove IP addresses from log files after some time
I have an apache/nginx/whatever web server which logs client IP addresses to the access logs. Now these log files are rotated via logrotate.
I want to keep the IP addresses for some days, then after ...
- 213
-1
votes
1
answer
73
views
How important is customer support for just domain registration? [closed]
I'm looking at two companies to register a domain in, it's either going to be GoDaddy or 1and1.
I checked out some of the reviews and saw that 1&1 offers free private domain registration while ...
- 99
-2
votes
2
answers
440
views
Privacy implications of a LAN-wide DNS server [closed]
My university department has a local DNS server that serves all of the computers in the department. I am concerned about the privacy and security implications of this. Posit that I am merely one of ...
- 3
2
votes
2
answers
765
views
If I block users with a blank IP address, will that affect innocent, non-technical users?
I run a website with an anonymous commenting feature. Users can flag each other for abuse; flags are tied to an IP address (grabbed via PHP from $_SERVER['REMOTE_ADDR']).
I've noticed that 99% of the ...
- 449
3
votes
1
answer
119
views
Windows 200x Server - User Group vs User privilege conflict
I have denied to a specific user to write on a file. Unfortunately this user is a member of a User Group which have the privilege to write on this file. So there is a conflict between User vs. User-...
LePhleg
1
vote
1
answer
77
views
Exchange 2010: Job titles making it out of organization?
I was asked a question from one of my co-workers that I was pretty sure about, but not 100% on. Google didn't appear to help me out either, so here I am.
Do things like job titles and other such ...
- 21
51
votes
7
answers
4k
views
How to take full ownership of an IP address?
My business is... troublesome.
What I do is legal in every country on earth, but some people don't like it, and make it so tough on my poor ISPs that I am forced to go looking for new providers more ...
- 1,861
-1
votes
1
answer
50
views
are new snapshots that are being created using elastifox are public ?
I use elastifox firefox plugin to create instances and snapshots of volumes that I created.
in 'volumes and snapshots' tab in the bottom table i can filter the snapshots that I see by 'My snapshots' ...
- 323
1
vote
1
answer
930
views
Stop Postfix revealing final email forwarding address in bounce messages
I have a Postfix server that receives mail for virtual aliases and forwards them to the real destination addresses. When the final mail server returns an error the bounce message returned to the ...
- 5,122
24
votes
2
answers
764
views
Isn't it a huge security issue to include the MAC address inside of an IPv6 address by default
Many times you don't want to be identified while surfing. For one thing your browsing history might be sold without your knowledge, and with no benefit to you.
- 241
2
votes
2
answers
345
views
Personally identifiable information (PII) on shared web hosting
Hey folks, I am providing web hosting services (shared and dedicated) and have had one of my shared hosting clients mention needing an SSL cert for their site where they are collecting insurance ...
- 267