Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've been performing lots of speed tests lately due to, among some other random things, an Internet programming class and getting Google Fiber hooked up.

Then I realized that uses a Flash app; it kind of bothered me that I can't monitor the transmission contents in my browser's inspector tools like regular downloads. What is being downloaded and uploaded for such speed tests? What are the risks with speed tests? (Doesn't have to be; maybe speed tests in general if they're not all so different.)

share|improve this question
A note on Speedtest.Net specifically, they use a test file that they download and then upload part of it back up I believe. The servers it connects to are also volunteered and often not hosted by SpeedTest.Net themselves. – AJ Henderson Feb 19 '14 at 0:06

Internet speed test is not an attack vector per se.

Flash vulnerabilities might be an attack vector. If Speed test is downloading data from untrusted source - that might be attack vector as well.

XSS, SQLi, other web app vulnerabilities, that can be used on the speed test website, could also be further used to attack it's users.

share|improve this answer
Thanks. What is being transmitted to facilitate the speed test? – Matt Feb 19 '14 at 0:06
Probably just some dummy data with a known size. It could be real or random data. – Jervelund Feb 19 '14 at 0:14
I'm pretty sure they just use old credit card data from Target™ – BrianAdkins Feb 20 '14 at 0:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.