Skip to main content

Questions tagged [privacy]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
39 views

Is an ssh user activity (like processing data never saved to disk) secure from root eavesdropping?

Does a school, business, or friend with root access to a computer have access to currently active process data, like memory contents? How about access to an encrypted fuse mount (while mounted)? Can ...
Cygnuson's user avatar
0 votes
3 answers
898 views

Do i need to encrypt the OS drive with Bitlocker if i store data only on a second different drive in the same PC?

I have a PC with two drives in it. One is used for OS and programs only and the other one is used to store data. I want to encrypt my data to prevent the PC to be stolen and for the thieves to ...
tasty_tortilla's user avatar
-1 votes
1 answer
81 views

Does ssh save the code in the remote computer?

When running python code using ssh on remote computer by a sudo user, does it save the code in the remote computer ? does the root user can see actual python code? ssh user@remotehost < python /...
Yuqi's user avatar
  • 1
-2 votes
1 answer
60 views

What can my ISP know about a website hosted at my house? [closed]

I am hosting a public website, say example.com, at my house using my home Internet (fyi, the contract allows it). My Internet plan also comes with a static IP. I use CloudFlare to hide the server's ...
Risky Ricky's user avatar
0 votes
1 answer
811 views

how to SSH to Wireguard server from Windows client with active VPN connection?

I have Wireguard server on Rocky 8.7, when I connect to the server I route all client traffic through Wireguard this is quotes from setup script, of course all variables is set (and all works good) ...
it_buddha's user avatar
0 votes
0 answers
29 views

Can port forwarding reveal destination IP?

I am forwarding incoming TCP connections to a different host in the local network using firewalld / iptables. Is there a scenario where the remote connections are able to determine the IP of the ...
Maestro's user avatar
  • 325
0 votes
1 answer
595 views

One domain name, two locations, depending on login information

We have 2 identical websites located in 2 different countries on two different subdomains in the same domain name, i.e. "us.site.com" and "ca.site.com". It is setup this way due to ...
Michael Bernardo's user avatar
0 votes
1 answer
1k views

What are the IP ranges of Apple's privacy protection proxies?

Apple introduced privacy protection measures in macOS Monterey and iOS 15 which use a network of randomly assigned IPs to act as proxies when loading (amongst other things) email content. Does anyone ...
Synchro's user avatar
  • 3,270
0 votes
1 answer
752 views

Google Chrome incognito (private/anonymous browsing) not available in Google Workspace (GSuite) account

Recently, incognito mode disappeared in Chrome while signed-in as Google Workspace account (signed-in as regular gmail account has been working just fine). So I did an obvious check on policies (...
crysman's user avatar
  • 141
-2 votes
1 answer
724 views

Does connecting to a work VPN via Cisco AnyConnect give the domain administrator access to your computer? [closed]

I've been connecting to my work computer via Cisco AnyConnect for the duration of the pandemic and I'm now concerned about privacy. Can a domain admin on the company network access my files or my PC ...
George I.'s user avatar
0 votes
1 answer
199 views

GitLab self-hosted instances data sharing

I'm working on a personal project with some friends and it is becoming quite large, so I'm considering to self-host a GitLab instance to help preventing the development to go to complete chaos. ...
Ntakwetet's user avatar
  • 101
-1 votes
2 answers
324 views

Trying to erase disk content by filling all bits with "1", not "0"

I have 2 old 160GB WD drives that do not have "Security-Delete" option when querying with hdparm. I understand the current acceptance of the mechanism overwriting entire disks with zeros. ...
Eric Marceau's user avatar
3 votes
1 answer
664 views

On demand new IPv6 using privacy extension?

Enabling Privacy Extension (net.ipv6.conf.eth0.use_tempaddr=2 in /etc/sysctl.conf) for IPv6 gives me a new IP address for a fixed period of time, is there a way to get a new IPv6 on demand? i.e. ...
WannabeCoder's user avatar
38 votes
7 answers
12k views

Can Microsoft employees see my data in Azure?

I have sensitive data stored in both Azure DB and Azure SQL VM. An authorised DBA can log on and query the database, but in theory could a random Microsoft employee do the same without asking ...
userSteve's user avatar
  • 1,633
-4 votes
1 answer
132 views

IPv6 NAT information leakage [closed]

Edit: Since I was asked to edit this, I'll ask about an awfully specific issue. The question was obviously never about information leakage on OSI layer 7, since that wouldn't be a network issue. I'm ...
f384's user avatar
  • 1
0 votes
1 answer
136 views

Company access to enrolled iPhone / How to use Office 365 + IMAP + MFA + iPhone?

I'm an IT consultant and one of my clients is a large enterprise. They use Office 365 and have always required phones to be enrolled (giving their IT department full access) in order for email etc. to ...
TravelingFox's user avatar
9 votes
1 answer
6k views

IPv6 Privacy Extensions use_tempaddr=1 vs use_tempaddr=2

I understand privacy extensions and that you enable them by setting use_tempaddr. Unfortunately I haven't found any explantion for the different settings. Every articel I read used either 1 or 2 or ...
wedi's user avatar
  • 408
1 vote
2 answers
865 views

How can I use powershell (or Graph) to access the Azure MFA properties?

I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc). How can I use powershell, or otherwise get the data associated ...
Ran Dom's user avatar
  • 191
1 vote
1 answer
179 views

ejabberd privacy lists (xep-0016) unexpected behavior

To fend off xmpp spam, I use xep-0016 privacy list, that allows messages from contacts with mutual subscriptions (plus from muc servers), and denies by default: <!-- Outgoing Sun 15 Jul 2018 14:19:...
crosser's user avatar
  • 113
-1 votes
1 answer
52 views

Disclosure of recipient’s forward email address when my email bounces

A few times I had a situation like this: I sent an email to [email protected]. For this email, I received a delivery failure report, giving reasons like "550 5.1.1" (user unknown) or "552-5.7.0" (...
unor's user avatar
  • 246
-2 votes
2 answers
206 views

Nginx - Redirect a bunch of domains to a single domain, with SSL [duplicate]

Nothing insidious going on but I've got a bunch of domains that we've bought for a service and I don't want to buy an SSL certificate for them all (there's about 11). As an example, we've got: ...
MattBoothDev's user avatar
0 votes
1 answer
47 views

Safer as possible: opinions and tips with FTPS

a customer asked me to set up an automatic backup system in which a machine transfer some important data (.sql dumps) via FTP. He doesn't want SFTP, only FTP. So I ended up doing three things: I ...
Wyatt Gillette's user avatar
1 vote
0 answers
33 views

Deprivatized email repository

I need to create a repository of some historical emails for employee training purpose. Sensitive information in those emails should be removed, such as customers' email address and their names. Is ...
Ryan's user avatar
  • 197
0 votes
1 answer
82 views

LDAP and privacy

I've setup a LDAP server on a small test cluster but I'm running into some privacy issues. The first issue was that anybody that had a login to any of the servers in the cluster could retrieve all ...
Maran's user avatar
  • 321
3 votes
1 answer
113 views

Privacy concerns with windows 10 Pro

I don't need any of the Windows 10 enterprise features but enterprise is the only one that (legitimately) allows me to turn off the CEIP (Customer Experience Improvement Program); this is the ...
Paddy Carroll's user avatar
-2 votes
1 answer
486 views

Deep packet Inspection Stenography [closed]

I'm trying to develop something that can get around Deep Packet Inspection so that rather than looking like OpenVPN traffic etc, I could put all that into HTTP packets as extra information or some ...
Kim Ly's user avatar
  • 11
0 votes
2 answers
41 views

Wiping failed drives with sensitive business information

I have some failed drives that are about to be written off and sent for recycling. Some were members of a RAID 5 array, some I'm not too concerned about wiping information on them, but some of them ...
sirlark's user avatar
  • 221
3 votes
1 answer
1k views

Why does Google Apps Mail leak IP address? How do I disable it? [closed]

When sending via Google Apps Mail client the message will include a 'X-Originating-IP' header. But when sending via Gmail and using the SMTP send-mail-as option it will not leak the ip address. (Yes ...
Ricard's user avatar
  • 49
-1 votes
1 answer
61 views

Hosting two domains on a VPS while preventing an attacker from finding domain A given domain B?

I would like to host two websites on a VPS. One of them is my portfolio. The other one is a gaming website. I don't want an attacker to find my portfolio domain name if they know my gaming domain name....
JohnHowardTheConcept's user avatar
3 votes
3 answers
233 views

For the .com TLD, is there any known change tracking for WhoIs information?

A client exposed information regarding what will become a controversial website in the domain WhoIs after she purchased it from auction. Is there any whois cache that will detect, save, and share ...
makerofthings7's user avatar
2 votes
2 answers
1k views

Managing server certificates for wildcard

I have a wildcard certificate for *.example.com (signed by GeoTrust) and am going to host lots of application instances on different servers, each on my subdomain. I am not willing to copy my ...
kolypto's user avatar
  • 11.3k
1 vote
2 answers
83 views

How does a hosting company change a file on a vserver without logging in?

In my virtual server, ssh is not on port 22, I don't allow login with passwords, and I don't allow root logins. Recently, the server was not responding. My hosting company told me that my Apache ...
aBe's user avatar
  • 113
31 votes
3 answers
3k views

ISP broadcasting all IP-packets, so I can see traffic of other clients from ISP

Recently I wondered why my router shows a constant downstream of 5 MBit/s, while I am downloading almost no data. I discovered the "packet logging" function of my router, with which I was able to log ...
user3297416's user avatar
1 vote
2 answers
202 views

My hosting provider allows me to see the names of all other databases on their servers, is this bad practice? [closed]

I've got MSSQL DB functionality set up with a hosting provider, and recently logged in for the first time. When I added the connection, it then listed (apparently) every single MSSQL database on ...
andrewb's user avatar
  • 151
1 vote
2 answers
4k views

Is there a way to deny access based on hostname or agent?

I am using owncloud and sometimes share links with people via Facebook. I am concerned with automatic crawling, so I would like to deny facebook access to my owncloud.thomas-steinbrenner.net server (...
Tie-fighter's user avatar
0 votes
1 answer
1k views

How to route internet through VPN with Windows Server 2008 R2 on Amazon VPC?

I have a server on Amazon EC2-VPC. I want to connect through VPN to it AND have all my internet traffic routed THROUGH this server, to guarantee my privacy. I have two network interfaces on the ...
NothingsImpossible's user avatar
-2 votes
2 answers
989 views

How does The Pirate Bay mask itself from its VPS providers? [closed]

From https://torrentfreak.com/pirate-bay-moves-to-the-cloud-becomes-raid-proof-121017/ The hosting providers have no idea that they’re hosting The Pirate Bay, and even in the event they found out ...
Ansis Māliņš's user avatar
3 votes
3 answers
21k views

Windows: disable remote access of local drive, even by domain admin

We have a network of Windows 7 PCs that are managed as part of a domain. What we want is for the domain admin to be unable to view the PC's local drive (C:) unless he is physically at the PC. In ...
Matt's user avatar
  • 1,047
2 votes
2 answers
3k views

Securing Exchange Mailboxes from Nosy Admins

This is admittedly a duplicate of this question: Secure Exchange mailboxes In short, how can Microsoft Exchange 2010 be configured such that email is only visible to the owner of that mailbox, ...
Matt's user avatar
  • 1,047
11 votes
3 answers
2k views

Does SNI represent a privacy concern for my website visitors?

Firstly, I'm sorry for my bad English. I'm still learning it. Here it goes: When I host a single website per IP address, I can use "pure" SSL (without SNI), and the key exchange occurs before the ...
pagliuca's user avatar
  • 243
2 votes
1 answer
2k views

Host network injecting resets into my TCP connection?

I'm trying to figure out whether the host network I am on is injecting TCP Resets into my VPN connection. I have a personal OpenVPN server, and recently my attempts to connect over TCP port 1194 have ...
Bill's user avatar
  • 603
2 votes
1 answer
5k views

GPO - Block 3rd party cookies for IE 8

I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. ...
Chadddada's user avatar
  • 1,710
2 votes
2 answers
878 views

SSL certificate fields and personal address

Is it possible to get the address of the business that a SSL certificate is registered to? I know you can get the City and State directly from the certificate. I ask because I'm thinking about ...
James T's user avatar
  • 224
7 votes
3 answers
5k views

How can I remove IP addresses from log files after some time

I have an apache/nginx/whatever web server which logs client IP addresses to the access logs. Now these log files are rotated via logrotate. I want to keep the IP addresses for some days, then after ...
Michael Siebert's user avatar
-1 votes
1 answer
80 views

How important is customer support for just domain registration? [closed]

I'm looking at two companies to register a domain in, it's either going to be GoDaddy or 1and1. I checked out some of the reviews and saw that 1&1 offers free private domain registration while ...
qwertymk's user avatar
  • 109
-2 votes
2 answers
441 views

Privacy implications of a LAN-wide DNS server [closed]

My university department has a local DNS server that serves all of the computers in the department. I am concerned about the privacy and security implications of this. Posit that I am merely one of ...
kuchiku's user avatar
2 votes
2 answers
804 views

If I block users with a blank IP address, will that affect innocent, non-technical users?

I run a website with an anonymous commenting feature. Users can flag each other for abuse; flags are tied to an IP address (grabbed via PHP from $_SERVER['REMOTE_ADDR']). I've noticed that 99% of the ...
andrewtweber's user avatar
3 votes
1 answer
122 views

Windows 200x Server - User Group vs User privilege conflict

I have denied to a specific user to write on a file. Unfortunately this user is a member of a User Group which have the privilege to write on this file. So there is a conflict between User vs. User-...
user avatar
1 vote
1 answer
78 views

Exchange 2010: Job titles making it out of organization?

I was asked a question from one of my co-workers that I was pretty sure about, but not 100% on. Google didn't appear to help me out either, so here I am. Do things like job titles and other such ...
danthehat's user avatar
51 votes
7 answers
4k views

How to take full ownership of an IP address?

My business is... troublesome. What I do is legal in every country on earth, but some people don't like it, and make it so tough on my poor ISPs that I am forced to go looking for new providers more ...
darkAsPitch's user avatar
  • 1,941