The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
38 views

How can I run a script/subroutine on a webserver and have that subroutine remain private (eg. Key Generator)?

I am a third-year computing science student with an internship at a small software development company. My Problem: I have been tasked with re-implementing a software key generator routine on an ...
10
votes
1answer
143 views

Is there something like Creative Commons licenses for privacy policies?

I've recently read Reading the Privacy Policies You Encounter in a Year Would Take 76 Work Days and was pretty shocked that it was that bad. So I thought how this could be improved. Creative Commons ...
2
votes
1answer
36 views

Object pointer with privileged access?

Let's say you have class Car with Car->tune() and Car->drive() class CarDriver class CarMechanic Each CarDriver and CarMechanic object has a reference/pointer to a Car object. The CarDriver ...
-1
votes
3answers
139 views

Pair-programming and company privacy guidelines [closed]

At our office new privacy regulations are introduced requiring every employee to protect his or her computer with a personal password. The employees are required not to share these passwords. Prior to ...
28
votes
4answers
827 views

Zero-knowledge code hosting? [closed]

In light of recent revelations about widespread government monitoring of data stored by online service providers, zero-knowledge services are all the rage now. A zero-knowledge service is one where ...
1
vote
2answers
77 views

Collecting user information for debugging and support

I have a Java application that I need to support. I'd like it to collect user information, such as system information: OS and hardware for easier diagnostics and support. Are there any security ...
1
vote
1answer
62 views

Information protection when registering on web sites

Up until now it seems that when you register on a random web site you do so with blind trust. You assume that the site isn't harvesting information and passwords. You assume the site is reasonably ...
6
votes
2answers
216 views

Is tracking Android OS.Buid/Manufacturer info a privacy issue?

On the Android operating system details about the phone are available via the Android.OS.Build class. These details include things such as the phone manufacturer, model, version, etc. The customer may ...
0
votes
1answer
638 views

How do PGP and PEM differ?

Email messages are sent in plain text which means that the messages I send to Derpina are visible to anyone who somehow gets access to them while they are in transit. To overcome this, various ...
4
votes
2answers
110 views

Do privacy concerns prevent us from accessing location-based user data?

Every time my team begins to explore the scenarios that are possible with mobile device location data, location data that is part of user data, or even location data that may be retrieved or inferred ...
4
votes
1answer
822 views

How easy is it to alter a browser fingerprint?

I am researching this question for a possible paper. Given the exploitation of user identities for risk management and market tracking, how easy is it to alter a browser enough to throw off ...
2
votes
2answers
99 views

How long can I store the subscribe personal information? [closed]

In my subscription form I want to use a double opt-in method: First, the visitor subscribes Then a confirmation email is dispatched. If he replies... Then I add him to the system. In the case ...
3
votes
2answers
196 views

Google Analytics and customers privacy

I work in a company that sells SaaS web applications for HR and financial issues. Our customers are key accounts to which we guarantee the privacy of their data, for obvious reasons. We need to make ...
12
votes
4answers
4k views

Why do certain sites prevent spaces in passwords?

It seems less common with newer websites, but many websites I need an account on (like for paying bills, etc.) prevent me from creating a password with spaces in it. This only makes things more ...
3
votes
3answers
171 views

Is it a betrayal of user privacy to publish server logs with IP addresses in them? [closed]

I have a web application with server logs that are attractive to researchers. Is it ethical or not to release the logs publicly? They contain visitor IP addresses and the user-agent but no more ...
28
votes
3answers
2k views

Should MVC/REST return a 403 or 404 for resources belonging to other users?

When working with a resource-based site (such as an MVC application or REST service), we have two main options when a client tries to GET a resource that they don't have access to: 403, which says ...
2
votes
2answers
193 views

Crash and error report to developer [from user perspective]: Some questions

I have some questions regarding whether to crash or report errors to the user. We are developing a web site and mobile clients in which we allow our users to report any bugs and crashes through ...
16
votes
3answers
880 views

How do I comply with the EU Cookie Directive?

On 26 May 2011, a new EU directive comes into force that users accessing websites should now be asked for permission to allow the website to store cookies containing information about them and their ...
4
votes
2answers
273 views

Is there any risk of web browsers spying away localhost applications on an Internet-connected PC?

Despite what it might look like this is a serious question. After that story with Android OS and Chrome browser submitting to Google the details of the WiFi access points they see in the neighborhood ...
5
votes
3answers
1k views

Is there any legislation requiring how we store passwords?

Given the Sony data breach and other events recently, is there any actual laws or regulation regarding how to store passwords? I think there are with credit cards, you're not allowed to store the 3 ...
10
votes
2answers
162 views

Saving critical data in (third party) databases

How do you save important(privacy-wise) user data like SSN, Credit Card Numbers and Addresses in databases? Scenario: Only data which needs to be available is saved. For eg, SSN is saved because the ...
1
vote
2answers
186 views

Conditions for a traditional friends system vs. open following system

I'm just curious for everyone who is developing social sites out there. When you build a method for connecting users, do you prefer to use a following-style system (follow me, you can see all of my ...