Questions tagged [information-exposure]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
17 views

How to secure container to prevent sensitive information leak? [duplicate]

So I have to deploy a container containing the backend into the clients network, (they have policies about data not leaving premise). But how do i secure my container to prevent the client from ...
31
votes
3answers
5k views

Is it safe to share .git folder of a public repo?

Say I cloned a repo, then maybe worked on it a bit. Then I reverted/pushed all changes, so my friend has all the repo files. Is it safe for me to send him the .git folder? Is there any private ...
0
votes
1answer
30 views

How do mobile apps share details with each other to show customized ads

My question is more towards how this is implemented. I mean do they expose apis to each other or store data at a common place to be accessed by others. Please excuse me if it seems too naive.
7
votes
1answer
565 views

Does WhatsApp's link preview on the link messages leak information?

When we want to send a message that contains only a link - such as a question from the Stack Exchange network - WhatsApp displays information from the website as below: Does this leak information ...
0
votes
0answers
37 views

iPhone clicked a message on messenger, made me verify my account. Friend's account was hacked. What is my exposure?

I opened up a message from messenger FB and then It made me verify my account. I was unable to see the attachment and my friend notified me that they were hacked. Since then I changed my FB password ...
2
votes
2answers
113 views

Getting real machine information from a virtual machine

If a malicious software gets into a virtual machine, what is the most information of the actual machine it can obtain?
3
votes
0answers
144 views

What is the Meow Attack and how can I guard my databases against it?

Recently, there has been some news articles about unsolicited attacks on unsecured public facing Elastic and Mongo databases. These are commonly being called "Meow" attacks, resulting in ...
1
vote
1answer
46 views

Autofilling sensitive information for publicly available form

We are in the process of designing an app which, simply put, will allow people to accept payments easily. The customer won't need an account and we'll be linking customer data (name, address, and ...
0
votes
0answers
168 views

Does Asp.Net Core exposes too much information for required enums that were not supplied?

I have a simple code for an input model: public class MyClass { [Required] public MyEnum? Type { get; set; } } Now if I do not send Type as a part of json to the request, I get this error ...