Questions tagged [safari]
Safari is a web-browser developed by Apple for Mac OS X, iOS and previously Windows. First released in 2003, it is based on the WebKit engine.
0
votes
0answers
21 views
Pegasus Stage 1 confusion
I am reading the analysis of pagasus-exploits report and on page 9 where it says after garbage collector deallocates the original arr and the program reallocates a number of uint32Array, it occurs ...
3
votes
0answers
63 views
Does Apple have access to the cryptographic keys to decrypt Safari Sync Data?
I was reading over iOS's security guide, and it is unclear to me whether Apple can accessed synced Safari data. For example, if Apple received a FISA Order for all information on iCloud on all ...
1
vote
2answers
100 views
Can a webpage track that I have downloaded the page source/webarchive?
Can a webpage track that I have downloaded the page source/webarchive?
Specifically on Safari. I understand that accessing a webpage via GET is already traceable back to the requester (me), but if I ...
0
votes
0answers
703 views
Safari logs on MacOS
How can I prove that a user accessed a specific Gmail account on Safari, assuming that he has deleted the browsing history?
-1
votes
1answer
161 views
XSS - Suspicious email from Itunes - GF opened accidently
My GF received a random email from iTunes saying that she had started a new subscription, its a very convincing email until closer inspection. Anyway she clicked the link at the bottom to cancel it ...
1
vote
0answers
510 views
How is the Apple FairPlay Server Playback Context (SPC) message generated?
I'm researching encryption tools that use OS-verified hardware such as a TPM or Secure Element.
Given that FairPlay only works on iOS and certain Mac hardware, I suspect there is some interaction ...
5
votes
1answer
598 views
Pegasus iOS exploit & Kernel Memory Corruption
I'm currently reading about Pegasus, the malware on iOS that uses 3 zero-days, in the Lookout Blogpost.
Blog Post about Pegasus
I'm a cs student in the first year and I understand that the malware ...
0
votes
1answer
375 views
Security issues with concurrent sessions in iOS app and Safari browser
We have two ways a user can buy products on our e-store. We have a mobile native app for iPhones and a mobile optimized browser experience from an iPhone default browser (i.e. Safari).
The iOS (...
2
votes
2answers
3k views
Google thinks I am a robot when using proxy, but only in Safari
Google greeted me with this message while being behind a private proxy:
Our systems have detected unusual traffic from your computer network.
This page checks to see if it's really you sending ...
2
votes
2answers
510 views
Why does Safari still support SSL 3?
The "POODLE" attack was made public in October, 2014. Why does Safari still support SSL 3.0 after POODLE showed it to be insecure?
1
vote
1answer
1k views
Safari not showing GREEN lettering for EV SSL
I've recently installed an EV SSL cert on my server, Chrome and Firefox show a green banner and padlock denoting the EV cert is installed, but in Safari, it just shows a gray padlock... is there ...
0
votes
1answer
406 views
How might my browser session be hijacked on iOS Safari?
I'm currently on iOS using Safari, and my browser session was just hijacked. Ive never seen any hint of malware on iOS, so I'm going to assume the hijacking occured (consistently happens when visiting ...
4
votes
0answers
2k views
Security flaw in iOS, Safari weird behavior or what else?
some months ago I was travelling and flew from Frankfurt airport and, while there, I probably connected to some Telekom.de free hotspot. I have an iPhone 6 with iOS 9.02 (at that time it was 8.1.x).
...
3
votes
1answer
272 views
POODLE vulnerability in Safari
I have been trying to mitigate POODLE on client side in my organization. I disabled SSL3 in most browsers but couldn't disable it in Safari. Apple released a Security Update 2014-005, which, ...
5
votes
2answers
6k views
Password management in Firefox, Chrome and Safari
I just read a couple of very interesting discussions on Chrome password security strategy.
Chrome’s insane password security strategy
Showing stored passwords - Tim Berners-Lee
The following is how ...
