Hot answers tagged web-browser
The user can modify and delete anything stored in their browser. Any malware installed in the user's system with the user's privilege can also do so. The system administrator can also modify and delete anything stored in any user's browser. Any malware with the administrator's privilege can do the same. Another non privileged user in the same system ...
The error message indicates that the server expected a HTTP request but got a HTTPS request: \x16\x03\x01\ is the start of an TLS record. This probably means that your server configuration is wrong, i.e. that the server expects HTTP on port 443 and not HTTPS.
You are basically correct with a couple bits of complexity. First, it is still possible that both wget or your text editor might have a vulnerability that the page could be designed to try and exploit. This is unlikely, and the malware author would have to predict that you would use this process and plant an ambush. Unlikely, but it still means that your ...
The --disable-web-security option applies to the entire Chrome application, not to a particular window. If you enable this option when starting Chrome, then any site you visit can access data from sites you visited earlier. For example if I was looking at my Online Banking account, and then closed that tab and navigated to a malicious site, that malicious ...
Change user agent in Tor Browser to mobile device. Open browser, type: about:config find general.useragent.override and replace it with mobile user agent, an example: Mozilla/5.0 (Linux; ; ) AppleWebKit/ (KHTML, like Gecko) Chrome/ Mobile Safari/ To see effect, try to visit any site:
All major browsers (Chrome, Firefox, Opera, Safari, IE 11 and Edge) use a HSTS preload list of Chromium. You can check the eligibility and register the website to be included in the HSTS preload list on the https://hstspreload.appspot.com page. As of today, the requirements are: Have a valid certificate. Redirect from HTTP to HTTPS on the same ...
Lee Brotherston spoke at DerbyCon 2015 on Stealthier Attacks and Smarter Defending with TLS Fingerprinting -- slides -- video. He also released code to go along with the talk -- https://github.com/LeeBrotherston/tls-fingerprinting/tree/master/fingerprintls The below is taken from his website -- http://blog.squarelemon.com/tls-fingerprinting/ Transport ...
BTW, there are also plenty of software libraries which would need scrutiny if someone is into that sorta thing. There's a pretty neat tool called TryTLS (shameless self promo) that is used to check whether a specific library checks TLS certificates properly.
Only top voted, non community-wiki answers of a minimum length are eligible