Say I'm a normal Internet user, I visit some well-known social networks like Facebook, twitter, play flash-based games in Facebook, visit some big websites that are known to be safe and trusted and check my emails through email provider's website like Gmail and Outlook. I scan USB pendrives immediately once inserted into Windows computer with an Internet security software like KIS. so what are the chances that I will get hacked or malware find a way into my PC? Browsers like Firefox are disabling Flash player by default but is it a problem if I use it only on trusted websites like Facebook?

2nd. And If I sometimes visit unknown websites too and click on unknown links (but don't download or install anything), will my browser or Internet security software (i.e KIS) protect me?

3rd. what are the chances of a PC, connected to the Internet but doesn't go to any websites and doesn't use CD/USB pendrives etc, to get infected? I mean do hackers look for open ports on the Internet (which takes too much time) or scan IP address in order to find a vulnerable computer, or people get hacked because of the things they do on the Internet? Thanks

closed as primarily opinion-based by user45139, Xander, Stephane, Steve, RoraΖ Aug 31 '15 at 14:22

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.


If you are careful as you say, the chances will be lower, but not 0.

Trusted websites can also contain malicious flash content. The games on Facebook are made by third parties and that means that you can never be sure if the game has some malicious code. Adds can also contain malicious flash.

Another problem is, if a website has an XSS vulnerability, an attacker could use it to totally change the code of the webpage. He could change where the login form is submitting the data, he could steal your cookies, or install a keylogger. Antivirus or KIS will not protect you against this.

And it also depends on what ports are open on your PC and what services you are running. Depending on that, someone could "hack" you even if you do not even open your browser.

And I won't even mention all the social engineering/phishing techniques.

That means, in some situations you can get hacked even if you did nothing wrong except of visiting a site (because there is either a vulnerability in the website you are using or in some browser plugin you are using).

  • 1
    Don't forget about ads that contain viruses – BadSkillz Jul 15 '15 at 8:23
  • Yes a website can steal and use the cookies made by itself but can a website for example google steal cookies of another website like facebook? KIS can detect keyloggers. – Stephan Jul 15 '15 at 8:28
  • No, the "Same Origin Policy" prevents one website stealing the cookies of another website. If a website has an XSS vulnerability, only the cookies of that website are in danger. – stanko Jul 15 '15 at 8:30

Not the answer you're looking for? Browse other questions tagged or ask your own question.