Questions tagged [information-exposure]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
31
votes
3answers
5k views

Is it safe to share .git folder of a public repo?

Say I cloned a repo, then maybe worked on it a bit. Then I reverted/pushed all changes, so my friend has all the repo files. Is it safe for me to send him the .git folder? Is there any private ...
0
votes
1answer
29 views

How do mobile apps share details with each other to show customized ads

My question is more towards how this is implemented. I mean do they expose apis to each other or store data at a common place to be accessed by others. Please excuse me if it seems too naive.
7
votes
1answer
391 views

Does WhatsApp's link preview on the link messages leak information?

When we want to send a message that contains only a link - such as a question from the Stack Exchange network - WhatsApp displays information from the website as below: Does this leak information ...
0
votes
0answers
35 views

iPhone clicked a message on messenger, made me verify my account. Friend's account was hacked. What is my exposure?

I opened up a message from messenger FB and then It made me verify my account. I was unable to see the attachment and my friend notified me that they were hacked. Since then I changed my FB password ...
0
votes
0answers
50 views

Information exposure through query strings in url of a POST request [duplicate]

I can't seem to find any information online for when there is information exposure through query strings in URL of a POST request. I understand it is an issue for when it's sent in HTTP GET. Wondering ...
2
votes
2answers
110 views

Getting real machine information from a virtual machine

If a malicious software gets into a virtual machine, what is the most information of the actual machine it can obtain?
3
votes
0answers
140 views

What is the Meow Attack and how can I guard my databases against it?

Recently, there has been some news articles about unsolicited attacks on unsecured public facing Elastic and Mongo databases. These are commonly being called "Meow" attacks, resulting in ...
1
vote
1answer
45 views

Autofilling sensitive information for publicly available form

We are in the process of designing an app which, simply put, will allow people to accept payments easily. The customer won't need an account and we'll be linking customer data (name, address, and ...
0
votes
0answers
130 views

Does Asp.Net Core exposes too much information for required enums that were not supplied?

I have a simple code for an input model: public class MyClass { [Required] public MyEnum? Type { get; set; } } Now if I do not send Type as a part of json to the request, I get this error ...