Questions tagged [privacy]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
20 views

Can port forwarding reveal destination IP?

I am forwarding incoming TCP connections to a different host in the local network using firewalld / iptables. Is there a scenario where the remote connections are able to determine the IP of the ...
user avatar
  • 243
0 votes
1 answer
31 views

One domain name, two locations, depending on login information

We have 2 identical websites located in 2 different countries on two different subdomains in the same domain name, i.e. "us.site.com" and "ca.site.com". It is setup this way due to ...
user avatar
-4 votes
1 answer
32 views

Do DNS queries reveal full URLs? [closed]

I use my ISP's DNS, which means that if I access "example.com" they will know, but will they know the exact page? (eg. "example.com/something.html"). As far as I know, if I access &...
user avatar
  • 3
0 votes
1 answer
192 views

What are the IP ranges of Apple's privacy protection proxies?

Apple introduced privacy protection measures in macOS Monterey and iOS 15 which use a network of randomly assigned IPs to act as proxies when loading (amongst other things) email content. Does anyone ...
user avatar
  • 2,988
0 votes
1 answer
128 views

Google Chrome incognito (private/anonymous browsing) not available in Google Workspace (GSuite) account

Recently, incognito mode disappeared in Chrome while signed-in as Google Workspace account (signed-in as regular gmail account has been working just fine). So I did an obvious check on policies (...
user avatar
  • 141
-2 votes
1 answer
118 views

Does connecting to a work VPN via Cisco AnyConnect give the domain administrator access to your computer? [closed]

I've been connecting to my work computer via Cisco AnyConnect for the duration of the pandemic and I'm now concerned about privacy. Can a domain admin on the company network access my files or my PC ...
user avatar
0 votes
1 answer
39 views

GitLab self-hosted instances data sharing

I'm working on a personal project with some friends and it is becoming quite large, so I'm considering to self-host a GitLab instance to help preventing the development to go to complete chaos. ...
user avatar
  • 101
-1 votes
2 answers
134 views

Trying to erase disk content by filling all bits with "1", not "0"

I have 2 old 160GB WD drives that do not have "Security-Delete" option when querying with hdparm. I understand the current acceptance of the mechanism overwriting entire disks with zeros. ...
user avatar
  • 1
3 votes
1 answer
199 views

On demand new IPv6 using privacy extension?

Enabling Privacy Extension (net.ipv6.conf.eth0.use_tempaddr=2 in /etc/sysctl.conf) for IPv6 gives me a new IP address for a fixed period of time, is there a way to get a new IPv6 on demand? i.e. ...
user avatar
37 votes
7 answers
11k views

Can Microsoft employees see my data in Azure?

I have sensitive data stored in both Azure DB and Azure SQL VM. An authorised DBA can log on and query the database, but in theory could a random Microsoft employee do the same without asking ...
user avatar
  • 1,463
-4 votes
1 answer
121 views

IPv6 NAT information leakage [closed]

Edit: Since I was asked to edit this, I'll ask about an awfully specific issue. The question was obviously never about information leakage on OSI layer 7, since that wouldn't be a network issue. I'm ...
user avatar
  • 1
0 votes
1 answer
108 views

Company access to enrolled iPhone / How to use Office 365 + IMAP + MFA + iPhone?

I'm an IT consultant and one of my clients is a large enterprise. They use Office 365 and have always required phones to be enrolled (giving their IT department full access) in order for email etc. to ...
user avatar
7 votes
1 answer
3k views

IPv6 Privacy Extensions use_tempaddr=1 vs use_tempaddr=2

I understand privacy extensions and that you enable them by setting use_tempaddr. Unfortunately I haven't found any explantion for the different settings. Every articel I read used either 1 or 2 or ...
user avatar
  • 318
1 vote
2 answers
703 views

How can I use powershell (or Graph) to access the Azure MFA properties?

I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc). How can I use powershell, or otherwise get the data associated ...
user avatar
  • 91
1 vote
1 answer
124 views

ejabberd privacy lists (xep-0016) unexpected behavior

To fend off xmpp spam, I use xep-0016 privacy list, that allows messages from contacts with mutual subscriptions (plus from muc servers), and denies by default: <!-- Outgoing Sun 15 Jul 2018 14:19:...
user avatar
  • 113
-1 votes
1 answer
34 views

Disclosure of recipient’s forward email address when my email bounces

A few times I had a situation like this: I sent an email to foobar@example.com. For this email, I received a delivery failure report, giving reasons like "550 5.1.1" (user unknown) or "552-5.7.0" (...
user avatar
  • 246
-2 votes
2 answers
176 views

Nginx - Redirect a bunch of domains to a single domain, with SSL [duplicate]

Nothing insidious going on but I've got a bunch of domains that we've bought for a service and I don't want to buy an SSL certificate for them all (there's about 11). As an example, we've got: ...
user avatar
0 votes
1 answer
39 views

Safer as possible: opinions and tips with FTPS

a customer asked me to set up an automatic backup system in which a machine transfer some important data (.sql dumps) via FTP. He doesn't want SFTP, only FTP. So I ended up doing three things: I ...
user avatar
1 vote
0 answers
31 views

Deprivatized email repository

I need to create a repository of some historical emails for employee training purpose. Sensitive information in those emails should be removed, such as customers' email address and their names. Is ...
user avatar
  • 167
0 votes
1 answer
76 views

LDAP and privacy

I've setup a LDAP server on a small test cluster but I'm running into some privacy issues. The first issue was that anybody that had a login to any of the servers in the cluster could retrieve all ...
user avatar
  • 301
3 votes
1 answer
105 views

Privacy concerns with windows 10 Pro

I don't need any of the Windows 10 enterprise features but enterprise is the only one that (legitimately) allows me to turn off the CEIP (Customer Experience Improvement Program); this is the ...
user avatar
-2 votes
1 answer
453 views

Deep packet Inspection Stenography [closed]

I'm trying to develop something that can get around Deep Packet Inspection so that rather than looking like OpenVPN traffic etc, I could put all that into HTTP packets as extra information or some ...
user avatar
  • 11
0 votes
2 answers
36 views

Wiping failed drives with sensitive business information

I have some failed drives that are about to be written off and sent for recycling. Some were members of a RAID 5 array, some I'm not too concerned about wiping information on them, but some of them ...
user avatar
  • 211
3 votes
1 answer
1k views

Why does Google Apps Mail leak IP address? How do I disable it? [closed]

When sending via Google Apps Mail client the message will include a 'X-Originating-IP' header. But when sending via Gmail and using the SMTP send-mail-as option it will not leak the ip address. (Yes ...
user avatar
  • 49
-1 votes
1 answer
50 views

Hosting two domains on a VPS while preventing an attacker from finding domain A given domain B?

I would like to host two websites on a VPS. One of them is my portfolio. The other one is a gaming website. I don't want an attacker to find my portfolio domain name if they know my gaming domain name....
user avatar
3 votes
3 answers
130 views

For the .com TLD, is there any known change tracking for WhoIs information?

A client exposed information regarding what will become a controversial website in the domain WhoIs after she purchased it from auction. Is there any whois cache that will detect, save, and share ...
user avatar
2 votes
2 answers
1k views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
user avatar
  • 10.7k
1 vote
2 answers
80 views

How does a hosting company change a file on a vserver without logging in?

In my virtual server, ssh is not on port 22, I don't allow login with passwords, and I don't allow root logins. Recently, the server was not responding. My hosting company told me that my Apache ...
user avatar
  • 113
33 votes
3 answers
3k views

ISP broadcasting all IP-packets, so I can see traffic of other clients from ISP

Recently I wondered why my router shows a constant downstream of 5 MBit/s, while I am downloading almost no data. I discovered the "packet logging" function of my router, with which I was able to log ...
user avatar
1 vote
2 answers
200 views

My hosting provider allows me to see the names of all other databases on their servers, is this bad practice? [closed]

I've got MSSQL DB functionality set up with a hosting provider, and recently logged in for the first time. When I added the connection, it then listed (apparently) every single MSSQL database on ...
user avatar
  • 151
1 vote
2 answers
3k views

Is there a way to deny access based on hostname or agent?

I am using owncloud and sometimes share links with people via Facebook. I am concerned with automatic crawling, so I would like to deny facebook access to my owncloud.thomas-steinbrenner.net server (...
user avatar
0 votes
1 answer
1k views

How to route internet through VPN with Windows Server 2008 R2 on Amazon VPC?

I have a server on Amazon EC2-VPC. I want to connect through VPN to it AND have all my internet traffic routed THROUGH this server, to guarantee my privacy. I have two network interfaces on the ...
user avatar
-2 votes
2 answers
938 views

How does The Pirate Bay mask itself from its VPS providers? [closed]

From https://torrentfreak.com/pirate-bay-moves-to-the-cloud-becomes-raid-proof-121017/ The hosting providers have no idea that they’re hosting The Pirate Bay, and even in the event they found out ...
user avatar
3 votes
3 answers
20k views

Windows: disable remote access of local drive, even by domain admin

We have a network of Windows 7 PCs that are managed as part of a domain. What we want is for the domain admin to be unable to view the PC's local drive (C:) unless he is physically at the PC. In ...
user avatar
  • 1,027
2 votes
2 answers
3k views

Securing Exchange Mailboxes from Nosy Admins

This is admittedly a duplicate of this question: Secure Exchange mailboxes In short, how can Microsoft Exchange 2010 be configured such that email is only visible to the owner of that mailbox, ...
user avatar
  • 1,027
11 votes
3 answers
2k views

Does SNI represent a privacy concern for my website visitors?

Firstly, I'm sorry for my bad English. I'm still learning it. Here it goes: When I host a single website per IP address, I can use "pure" SSL (without SNI), and the key exchange occurs before the ...
user avatar
  • 243
2 votes
1 answer
2k views

Host network injecting resets into my TCP connection?

I'm trying to figure out whether the host network I am on is injecting TCP Resets into my VPN connection. I have a personal OpenVPN server, and recently my attempts to connect over TCP port 1194 have ...
user avatar
  • 603
2 votes
1 answer
5k views

GPO - Block 3rd party cookies for IE 8

I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. ...
user avatar
  • 1,660
2 votes
2 answers
553 views

SSL certificate fields and personal address

Is it possible to get the address of the business that a SSL certificate is registered to? I know you can get the City and State directly from the certificate. I ask because I'm thinking about ...
user avatar
  • 224
7 votes
3 answers
4k views

How can I remove IP addresses from log files after some time

I have an apache/nginx/whatever web server which logs client IP addresses to the access logs. Now these log files are rotated via logrotate. I want to keep the IP addresses for some days, then after ...
user avatar
-1 votes
1 answer
73 views

How important is customer support for just domain registration? [closed]

I'm looking at two companies to register a domain in, it's either going to be GoDaddy or 1and1. I checked out some of the reviews and saw that 1&1 offers free private domain registration while ...
user avatar
-2 votes
2 answers
440 views

Privacy implications of a LAN-wide DNS server [closed]

My university department has a local DNS server that serves all of the computers in the department. I am concerned about the privacy and security implications of this. Posit that I am merely one of ...
user avatar
2 votes
2 answers
765 views

If I block users with a blank IP address, will that affect innocent, non-technical users?

I run a website with an anonymous commenting feature. Users can flag each other for abuse; flags are tied to an IP address (grabbed via PHP from $_SERVER['REMOTE_ADDR']). I've noticed that 99% of the ...
user avatar
3 votes
1 answer
119 views

Windows 200x Server - User Group vs User privilege conflict

I have denied to a specific user to write on a file. Unfortunately this user is a member of a User Group which have the privilege to write on this file. So there is a conflict between User vs. User-...
user avatar
1 vote
1 answer
77 views

Exchange 2010: Job titles making it out of organization?

I was asked a question from one of my co-workers that I was pretty sure about, but not 100% on. Google didn't appear to help me out either, so here I am. Do things like job titles and other such ...
user avatar
51 votes
7 answers
4k views

How to take full ownership of an IP address?

My business is... troublesome. What I do is legal in every country on earth, but some people don't like it, and make it so tough on my poor ISPs that I am forced to go looking for new providers more ...
user avatar
  • 1,861
-1 votes
1 answer
50 views

are new snapshots that are being created using elastifox are public ?

I use elastifox firefox plugin to create instances and snapshots of volumes that I created. in 'volumes and snapshots' tab in the bottom table i can filter the snapshots that I see by 'My snapshots' ...
user avatar
  • 323
1 vote
1 answer
930 views

Stop Postfix revealing final email forwarding address in bounce messages

I have a Postfix server that receives mail for virtual aliases and forwards them to the real destination addresses. When the final mail server returns an error the bounce message returned to the ...
user avatar
  • 5,122
24 votes
2 answers
764 views

Isn't it a huge security issue to include the MAC address inside of an IPv6 address by default

Many times you don't want to be identified while surfing. For one thing your browsing history might be sold without your knowledge, and with no benefit to you.
user avatar
  • 241
2 votes
2 answers
345 views

Personally identifiable information (PII) on shared web hosting

Hey folks, I am providing web hosting services (shared and dedicated) and have had one of my shared hosting clients mention needing an SSL cert for their site where they are collecting insurance ...
user avatar
  • 267