Tagged Questions
2
votes
1answer
91 views
How Browsers prevents Malware and Phishing attacks
I want to know how phishing and malware protection features are implemented in modern browsers like Chrome, Firefox, IE etc. Are these features heuristic based, or do browsers maintain a list of ...
16
votes
4answers
912 views
IMG tag vulnerability
Is it safe to display images from arbitrary domains? I.e. let's say I have an image on my page:
<img src="http://badguy.com/image.gif" />
What if image.gif will return some js attack vector, ...
3
votes
1answer
188 views
How dangerous is a virus introduced to a malicious website in chrome?
I am using Google's Chrome browser under Linux (Ubuntu) 64 bit for web browsing.
If I a virus uses for example a leak in the flash player, the virus will get the privileges of the user who started ...
0
votes
1answer
53 views
Can IE be made to imitate the behavior of Chrome's KeyGen element?
Is there any way I can repurpose existing ActiveX controls or functionality to get IE to work with the KeyGen element?
Assistance getting Safari to work with this optional HTML5 spec would be ...
2
votes
4answers
854 views
What XSS attacks doesn't “Reflective XSS Protection” defeat?
Its been quite a while since I have played with cross site scripting vulnerabilities but today I came across a website today that was crying out to be tested for a basic XSS vulnerability.
So ...
5
votes
1answer
437 views
When and Why does Chrome display malware detection warning?
Google Chrome contains malware detection feature. When user visits some site, browser may display warning that site contains malware.
What does it mean that site contains malware? Does it mean that ...
3
votes
2answers
1k views
Do most browsers handle mixed encrypted and unencrypted content correctly?
In Google Chrome, when I go to an encrypted page that contains unencrypted content, I get the following pop-down, which allows me to either load or not load the insecure content, making a clear ...
2
votes
1answer
2k views
Does Google Chrome protect against cross site scripting (XSS)?
In Firefox I've been using the NoScript extension to protect myself from certain malware attacks. NoScript is well known as it's a very powerful extension for Firefox and introduced protection from ...
8
votes
2answers
2k views
Worst case scenario, what can a Chrome extension do with “Your data on all websites” and “Your tabs and browsing activity”?
Chrome extensions, and just like other browsers, appear to often get quite some extensive access to your browser data. In fact, most extensions I've installed require access to:
Your data on all ...
4
votes
1answer
251 views
How do I check the code of a Chrome extension to make sure it's not stealing my info?
I've been reading more and more about just how much access browser extensions can have to your data. This is a little unsettling, so I'm curious if there is a way to Vet these extensions and make sure ...
2
votes
7answers
599 views
Chrome vs Explorer - how to explain in plain words that open-source is better?
Why open-source is better in plain words?
Yesterday I had a talk at a DIY bicycle workshop. There is a PC (running XP) that main application is checking emails (nothing really serious).
I found it ...
9
votes
2answers
676 views
Why do Chrome plugins need access to 'all my data' and 'browsing activity'?
Often I install simple add-ons for Google Chrome. However, they almost all need what appears to me as excessive access to my data. For instance, I install a plugin that allows me to click on any part ...
13
votes
5answers
786 views
Is Google Chrome a better secured browser?
I was amazed that IE 8, Safari, Firefox were hacked so fast. Is it really Chrome so good or it was not tested?
Has anyone other results of independent investigations about security of web browsers?
...
