Questions tagged [caching]
Cache is a component that transparently stores data so that future requests for that data can be served faster. The data that is stored within a cache might be values that have been computed earlier or duplicates of original values that are stored elsewhere. If requested data is contained in the cache (cache hit), this request can be served by simply reading the cache, which is comparatively faster.
69
questions
0
votes
1
answer
102
views
Signed but Unencrypted HTTP Traffic
A lot of the web is moving to HTTPS, which to my understanding does two things: Making the data unreadable by third parties, and verifying it's coming from the expected sender.
The latter seems ...
- 101
0
votes
3
answers
608
views
Does the Time-To-Live (TTL) value of DNS records have any security implications?
I'm currently reading about resource record in the Domain Name System (DNS), in particular about the Time to live (TTL) aspect of start of authority records (SOA) records. It seems to me that the TTL ...
- 6,337
1
vote
0
answers
455
views
Does Safari's "Prevent cross-site tracking" option ACTUALLY prevent determined efforts at cross-site tracking? (By, e.g. Facebook)
In other words: Does Safari's "Prevent cross-site tracking" option effectively prevent cross-site tracking? (Is it for purpose?) I though it would work; are my expectations off?
Or, more ...
2
votes
2
answers
353
views
Is it bad practice or major security risk to cache decoded auth tokens in my backend?
I've set up a firebase passport strategy on a NestJS server which works fine, but I did not like the long load times it would incur on all requests that went through it. So I decided to cache decoded ...
- 121
0
votes
0
answers
28
views
Is Cache-control: no-store enough to prevent caching? [duplicate]
I have researched and understood that Cache-Control: no-cache is not sufficient alone to absolutely prevent caching, but what about Cache-Control: no-store alone? Since it will not allow storing of ...
- 1
1
vote
1
answer
247
views
How can I protect browser cached files to be accessed in a case of a stolen hard drive?
For the usual reasons we want to cache certain resources browser side, e.g. list of products bought in the past.
Context is a web application, accessed via the internet.
This list is confidential in ...
- 11
1
vote
2
answers
7k
views
Local IndexedDB in Browser - is it really a security risk?
We have a web application that stores cached information in browser (both is firefox and chrome).
When we subjected it to Penetration Testing, a finding was filed saying that "Senstive Data such ...
3
votes
2
answers
875
views
If Whatsapp media messages are e2e encrypted, what is the point of storing popular messages on the server?
There is something I don't understand about whatsapp's privacy policy.
Your Messages. We do not retain your messages in the ordinary course of providing our Services to you. Once your messages (...
- 217
0
votes
1
answer
494
views
Cacheable HTTPS Response CVSS
https://portswigger.net/kb/issues/00700100_cacheable-https-response
Applications should return caching directives instructing browsers not to store local copies of any sensitive data
Which CVSS ...
- 567
1
vote
1
answer
143
views
Web Cache Deception - exploitable without a cache server?
Is Web Cache Deception vulnerability exploitable if there is no cache server involved?
If we are not using a cache servers or a CDN to serve the application, then would the application still be ...
- 1,317
0
votes
2
answers
266
views
How is AMP-Same-Origin: true even remotely secure?
in the AMP Docs, the following snippet is given:
If the Origin header is set:
If the origin does not match one of the following values, stop and return an error response:
<publisher's domain>....
- 105
1
vote
0
answers
106
views
Can server-side caching misconfiguration lead to stolen logins?
If a webapp sends Cache-Control: private it shouldn't be cached for example with nginx proxy_cache. What could happen if it was cached anyhow? Could another visitor see the personalized login of ...
- 744
1
vote
1
answer
84
views
Why do CDNs allow arbitrary backend to be set, is it not a big security concern?
I found most CDNs allow the user to claim any domains to be the backend, I wonder why they do this instead of verifying if the user owns the backend domain. If I have myowndomain.com and set the ...
- 685
2
votes
1
answer
368
views
Websockets: Is it safe to allow tokens in url parameters?
For an API, I know that passing tokens in the url has the following security implications:
They get saved in browser history
They’re probably saved in your server’s logs and memory
Users might post ...
- 1,442
1
vote
0
answers
76
views
Can the cost factor be changed of Windows' credential cache?
I'm having a hard time finding relevant documentation from Microsoft (or any third party, for that matter) about any registry key that may change the cost factor of cached credentials.
One can ...
- 32.5k
0
votes
1
answer
152
views
Exposing a version number through the assets urls
I just received a blackbox pentesting report where the security company recommended to hide the version number from the page (be it returned to the user as a text or used as a cache-buster in the css/...
- 173
1
vote
2
answers
229
views
Can I alter the DNS cache on my Computer?
Can I alter the DNS cache of my computer.
When I search online it only shows result to flush DNS cache and not how to alter it.
The DNS cache saved on Windows consist of URL,serverIP and many other ...
2
votes
1
answer
4k
views
Smart cards and the behaviour of the browser. Is the PIN cached?
When using smart cards for certificate-based authentication, is the PIN entered by the user to authenticate his smart card to the browser is cached? OR does the certificate gets cached by the browser? ...
1
vote
0
answers
111
views
git credential cache and store
I just noticed we can use git credential in order to cache our username and password so we do not need to do it everytime especially if it's on server as usually for me I would add ssh for local ...
- 111
0
votes
1
answer
239
views
Suspicious Redirect to malicious website
While using a 3rd party platform my company is working with (e.g. platform.com) the following issue appeared.
I clicked on a button in order to locally download an excel sheet (report) that was ...
- 45
1
vote
0
answers
142
views
How does cache partitioning prevent covert/side-channel attacks? [closed]
In a report on an open-source separation kernel (Muen kernel) I was reading, in the future work section, it says that cache coloring can be implemented to prevent covert/side-channel attacks.
It is ...
- 111
5
votes
1
answer
211
views
What can stop a browser to cache data from ProtonMail conversations?
I think this question arises primarily from my insufficient understanding of browser caching. Let's log in to ProtonMail, and read a message. My understanding is that an encrypted 'blob' of data gets ...
1
vote
0
answers
94
views
Can cache attacks be executed on a single thread architecture?
Despite an extensive research on the subject, I'm wondering if there exists side channel attacks based on cache use which are conducted on single threaded architecture, smart cards for instance.
I'm ...
- 111
3
votes
1
answer
2k
views
Caching personal data: GDPR
There are requests in my web application that contain "personal data" (name, postal code, phone number, date of birth etc). I would like to know what caching controls are advisable. I am using HTTPS.
...
- 131
1
vote
0
answers
282
views
Recommended caching headers
I am testing web application where some requests returns private data, which shouldn't be save in cache. Response contains headers:
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
...
- 1,283
2
votes
1
answer
2k
views
Side channel attack with flush+reload
I have been reading about cache side channel attacks and the "Flush+Reload" method came up a decent amount. Before putting forth my question, this is what I understand about the Flush+reload technique....
- 1,427
12
votes
1
answer
666
views
Browser cache information disclosure
Observing the time needed by a browser to load external resources such as images potentially discloses information about whether those resources have been accessed before.
Explanation:
For example, ...
- 220
0
votes
1
answer
939
views
Does a RAM Disk Actually Help When Password Cracking a Small Hash
I've been reading up on RAM Disks and their roles in various uses. The role one no one talks much about is password cracking.
I pulled the below quote from here
"It's also important to know that hard ...
- 1
1
vote
0
answers
497
views
Is access token saved in Cache.db-wal bad for iOS app?
tested iOS application probably uses special Token directive for authentication to server. This token was found in file Cache.db-wal. I can't understand, why it's just in this one file and not in ...
- 11
7
votes
1
answer
285
views
What is the proper terminology and base CVSS score for the following cache related behaviour?
An interface (website/application) that requires authentication should have a proper HTTP caching mechanism. When it doesn't, it allows an attacker to browse back after logout or read the cache in ...
- 6,337
6
votes
1
answer
593
views
e-tags on sensitive information
Suppose we have a big JSON document that only certain users can see, but that rarely changes, but which, if it does change, users expect to see the change quite quickly. It makes sense to use etags ...
- 303
0
votes
1
answer
3k
views
POST request no-cache header
During security tests/assessments it is often said that you need to set the cache-control to no-cache (and some other things). But as I was looking at this I found that POST requests are not cached (...
- 879
28
votes
7
answers
9k
views
Why do we need HTTPS for static content? If we can have a checksum at the end signed by the private key, won't that prove the validity?
This method which I am talking about can improve caching of images, videos, and CSS by the ISP rather than just depending on the browser cache. And it also proves the validity of the sender. Is there ...
- 447
5
votes
1
answer
2k
views
Can I use CloudFlare if I want to avoid NSA and FISA secret orders?
We're running a web service in Europe, secured with TLS and we're using private keys generated on our private hardware.
We would like to use CloudFlare for DDoS protection and caching reverse proxy.
...
2
votes
1
answer
426
views
FTP session opened from an unknown IP
I have a website made in Magento and hosted on an Ubuntu server and since a few months have been registering FTP connections open from unknown IP trying to open the file lic.php. In the proftpd.log ...
3
votes
1
answer
1k
views
In-Memory Database Storage and Security (MemSQL, Spark, Redis, Geode, et al)
There is a growing trend to utilize more In-Memory Storage for a wide variety of use cases from big data analytics (Spark) to faster processing power (MemSQL) to caching (Redis) most frequently ...
- 31
12
votes
3
answers
4k
views
HTTP Content-Security-Policy Nonce and Caching
Is anyone here able to clarify how caching affects adding a nonce=value to all inline javascript?
If the nonce must be unique and unpredictable, then one would need to disable all server-side (i.e. ...
- 141
8
votes
2
answers
3k
views
Is it safe to use Memcached in a shared hosting environment?
The shared hosting I am using had Memcached enabled, I searched some forums that using Memcached in a shared hosting environment, can cause security problems like view the cache of the other user, ...
- 101
3
votes
2
answers
159
views
Is CacheBleed fixed in LibreSSL?
https://ts.data61.csiro.au/projects/TS/cachebleed/
Only thing I can find: http://undeadly.org/cgi?action=article&sid=20160301141941
Q: was CacheBleed fixed in LibreSSL?
- 101
4
votes
1
answer
2k
views
Is browser memory cache considered as security issue?
Came across an application that uses below header to prevent caching.
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
Expires: 0
Pragma: no-cache
As per standards, with this ...
- 189
19
votes
2
answers
2k
views
Principles of cache attacks
There are many scientific publications that deal with cache attacks. Most recently, the CacheBleed attack was published which exploits cache bank conflicts on the Intel Sandy Bridge architecture. Most ...
- 525
4
votes
1
answer
5k
views
How to detect mimikatz usage on LAN
My boss is has made it clear that we need better ways of detecting mimikatz usage on the network- and I would agree. In place already for detection is suricata/ET PRO rule set on a couple of taps. ...
- 258
1
vote
0
answers
498
views
Should I blur the cached snapshot of my app?
I recently ran a security scan on one of my iOS apps that suggested I modify my apps display as it enters the background so that the screenshot stored in the cache does not expose any sensitive data. ...
- 283
3
votes
1
answer
1k
views
Powershell and cached credentials
In my environment we have powershell remoting off- I get around this using 2 hop scripts, packages(exe -no creds are stored in code- local privs only), and iwmi. I never pass creds to the endpoint, ...
- 258
2
votes
1
answer
177
views
Is DNS caching a security vulnerability?
In FireFox, for example, there are network.dnsCacheExpiration and network.dnsCacheEntries preferences in about:config. Is increasing the length of time and number of cached DNS entries a security ...
- 1,676
5
votes
2
answers
1k
views
Why use MD4 for caching?
ccache is a popular tool for speeding recompilation with GCC and other compilers. It works by caching previous compilations and detecting when the same compilation is done again. The detection is ...
- 655
7
votes
2
answers
3k
views
Are webcache pages more secure?
Whenever I see a suspicious looking URL I want to go to, I usually just search it up on Google's webcache and browse the site that way. But I just realized that I never really had evidence to support ...
- 81
3
votes
1
answer
434
views
HTTP Response splitting - is it browser caching or server caching issue?
I am trying to wrap my head around HTTP Response splitting. Although using WebGoat etc. I was able to learn how to do it in practice, but I guess I am still confused with some very fundamental ...
- 1,512
1
vote
0
answers
103
views
Is there a "smart cache" device which provides cache if authorized?
Is there an implementation of a HTTP (or decoded HTTPS) optimization device which would allow for "smart caching" - i.e. the ability to release some cached content (initially transferred by someone ...
- 8,978
0
votes
1
answer
98
views
CDN information [closed]
If I have a website that is content based, and the web server accesses a CMS to determine what to display on the site for a particular page. This is not particularly fast and it requires computing ...
- 109