User Privacy Protection Cheat Sheet - Revision history

Dominique RIGHETTO: Point to the official site

2019-07-15T14:28:33Z

Point to the official site

Thunder-Son: Migration to GitHub

2019-02-14T14:51:26Z

Migration to GitHub

Show changes

Peter Mosmans: Replace TrueCrypt with its 'successor' VeraCrypt

2018-06-19T06:11:05Z

Replace TrueCrypt with its 'successor' VeraCrypt

Jmanico: /* Other Cheatsheets */

2017-09-11T06:14:24Z

‎Other Cheatsheets

Jmanico: moving nav to bottom for mobile friendliness

2015-07-18T23:15:13Z

moving nav to bottom for mobile friendliness

Jmanico at 03:32, 8 April 2014

2014-04-08T03:32:49Z

Jmanico at 13:01, 20 March 2014

2014-03-20T13:01:48Z

Mohammed ALDOUB at 23:18, 14 February 2013

2013-02-14T23:18:49Z

Show changes

Jmanico: /* Digital Certificate Pinning */

2013-02-13T21:04:59Z

‎Digital Certificate Pinning

Jmanico: /* Digital Certificate Pinning */

2013-02-13T21:04:22Z

‎Digital Certificate Pinning

← Older revision		Revision as of 14:28, 15 July 2019
Line 4:		Line 4:
	The Cheat Sheet Series project has been moved to [https://github.com/OWASP/CheatSheetSeries GitHub]!		The Cheat Sheet Series project has been moved to [https://github.com/OWASP/CheatSheetSeries GitHub]!

−	Please visit [https://~~github~~.~~com/OWASP/CheatSheetSeries/blob/master~~/cheatsheets/User_Privacy_Protection_Cheat_Sheet.md User Privacy Protection Cheat Sheet] to see the latest version of the cheat sheet.	+	Please visit [https://cheatsheetseries.owasp.org/cheatsheets/User_Privacy_Protection_Cheat_Sheet.html User Privacy Protection Cheat Sheet] to see the latest version of the cheat sheet.

@@ Line 67: / Line 67: @@
 Examples of panic modes are modes where distressed users can delete their data upon threat, log into fake inboxes/accounts/systems, or invoke triggers to backup/upload/hide sensitive data.
-The appropriate panic mode to implement differs depending on the application type. A disk encryption software such as TrueCrypt might implement a panic mode that starts up a fake system partition if the user entered his/her distressed password.
+The appropriate panic mode to implement differs depending on the application type. A disk encryption software such as VeraCrypt might implement a panic mode that starts up a fake system partition if the user entered his/her distressed password.
 E-mail providers might implement a panic mode that hides predefined sensitive emails or contacts, allowing reading innocent e-mail messages only, usually as defined by the user, while preventing the panic mode from overtaking the actual account.
@@ Line 76: / Line 76: @@
 The implementation of a panic mode must always aim to confuse adversaries and prevent them from reaching the actual accounts/sensitive data of the victim, as well as prevent the discovery of any existing panic modes for a particular account.
-For more details regarding TrueCrypt's hidden operating system mode, please refer to:
+For more details regarding VeraCrypt's hidden operating system mode, please refer to:
-# [http://www.truecrypt.org/docs/?s=hidden-operating-system TrueCrypt Hidden Operating System]
+# [https://www.veracrypt.fr/en/Hidden%20Operating%20System.html VeraCrypt Hidden Operating System]
 == Remote Session Invalidation ==

@@ Line 128: / Line 128: @@
 Mohammed ALDOUB - OWASP Kuwait chapter leader
-== Other Cheatsheets ==
+= Other Cheatsheets =
 {{Cheatsheet_Navigation_Body}}

← Older revision		Revision as of 23:15, 18 July 2015
Line 127:		Line 127:

	Mohammed ALDOUB - OWASP Kuwait chapter leader		Mohammed ALDOUB - OWASP Kuwait chapter leader
−	~~\| valign="top" style="padding-left:25px;width:300px;border-right: 1px dotted gray;padding-right:25px;" \|~~

	== Other Cheatsheets ==		== Other Cheatsheets ==

@@ Line 1: / Line 1: @@
   __NOTOC__
-<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>
+<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:Cheatsheets-header.jpg|link=]]</div>
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 | valign="top"  style="border-right: 1px dotted gray;padding-right:25px;" |
-= Introduction =
+Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''
 This OWASP Cheat Sheet introduces mitigation methods that web developers may utilize in order to protect their users from a vast array of
 potential threats and aggressions that might try to undermine their privacy and anonymity. This cheat sheet focuses on privacy and anonymity threats that users might face by using online services, especially in contexts such as social networking and communication platforms.

@@ Line 46: / Line 46: @@
 For details regarding certificate pinning, please refer to the following:
-# [[Pinning_Cheat_Sheet OWASP Certificate Pinning Cheat Sheet]]
+# [https://www.owasp.org/index.php/Pinning_Cheat_Sheet OWASP Certificate Pinning Cheat Sheet]
 # [https://www.ietf.org/id/draft-ietf-websec-key-pinning-02.txt Public Key Pinning Extension for HTTP draft-ietf-websec-key-pinning-02]