Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I've been performing lots of speed tests lately due to, among some other random things, an Internet programming class and getting Google Fiber hooked up.

Then I realized that SpeedTest.net uses a Flash app; it kind of bothered me that I can't monitor the transmission contents in my browser's inspector tools like regular downloads. What is being downloaded and uploaded for such speed tests? What are the risks with speed tests? (Doesn't have to be SpeedTest.net-specific; maybe speed tests in general if they're not all so different.)

share|improve this question
    
A note on Speedtest.Net specifically, they use a test file that they download and then upload part of it back up I believe. The servers it connects to are also volunteered and often not hosted by SpeedTest.Net themselves. –  AJ Henderson Feb 19 at 0:06

1 Answer 1

Internet speed test is not an attack vector per se.

Flash vulnerabilities might be an attack vector. If Speed test is downloading data from untrusted source - that might be attack vector as well.

XSS, SQLi, other web app vulnerabilities, that can be used on the speed test website, could also be further used to attack it's users.

share|improve this answer
    
Thanks. What is being transmitted to facilitate the speed test? –  Matt Feb 19 at 0:06
    
Probably just some dummy data with a known size. It could be real or random data. –  Jervelund Feb 19 at 0:14
2  
I'm pretty sure they just use old credit card data from Target™ –  BrianAdkins Feb 20 at 0:59

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.