Questions tagged [safari]

Safari is a web-browser developed by Apple for Mac OS X, iOS and previously Windows. First released in 2003, it is based on the WebKit engine.

Filter by
Sorted by
Tagged with
0 votes
0 answers
1k views

Site "Not Secure" warning on Safari iOS, only on one device

Summary We are running a web site (https only) and have a single bug report from a user that says the site gets warned as "Not secure". The user gets this warning only when accessing it from ...
Stan Portland's user avatar
1 vote
1 answer
660 views

Can you get virus just by visiting a website in Safari using cache?

A few days ago I was searching for information to do an essay and I opened a page using the "in cache" option on Google. But then I realised that the page was not what I was expecting. My question is ...
user178965's user avatar
0 votes
2 answers
205 views

Is it safe to browse the internet with unpatched iPhone with iOS 13.1.3?

I am using unpatched iPhone that has IOS 13.1.3 installed. Apple released IOS 13.1.3 15 Oct 2019. Are there any vulnerabilities for IOS 13.1.3's safari that are currently being exploited in the wild?...
Npxkytzv's user avatar
1 vote
1 answer
376 views

Is using a third party browser in iOS more secure than Safari?

I have read that many iOS exploits target the Safari browser. Would using another browser on my iOS device be safer? Does Safari being a system app give it more access to the OS than a third party ...
Ken's user avatar
  • 13
1 vote
0 answers
272 views

Are iCloud Tabs for Safari end to end encrypted?

I see that iCloud bookmarks are not covered under end-to-end-encryption on the iCloud security overview, but no mention is made of iCloud Tabs, which seems even more important. Are Tabs stored merely ...
Boris Shilov's user avatar
0 votes
5 answers
413 views

Is my Google Drive still secure if Chrome was heavily compromised?

I use an Apple eMac desktop computer. I formerly used Safari as my main browser. I migrated to Chrome as it is integrated with Google products. I use Google Drive very extensively as my main ...
Sympa's user avatar
  • 103
3 votes
0 answers
120 views

Does Apple have access to the cryptographic keys to decrypt Safari Sync Data?

I was reading over iOS's security guide, and it is unclear to me whether Apple can accessed synced Safari data. For example, if Apple received a FISA Order for all information on iCloud on all ...
user avatar
1 vote
2 answers
2k views

Can a webpage track that I have downloaded the page source/webarchive?

Can a webpage track that I have downloaded the page source/webarchive? Specifically on Safari. I understand that accessing a webpage via GET is already traceable back to the requester (me), but if I ...
isopach's user avatar
  • 481
-1 votes
1 answer
243 views

XSS - Suspicious email from Itunes - GF opened accidently

My GF received a random email from iTunes saying that she had started a new subscription, its a very convincing email until closer inspection. Anyway she clicked the link at the bottom to cancel it ...
Matt B's user avatar
  • 3
1 vote
0 answers
1k views

How is the Apple FairPlay Server Playback Context (SPC) message generated?

I'm researching encryption tools that use OS-verified hardware such as a TPM or Secure Element. Given that FairPlay only works on iOS and certain Mac hardware, I suspect there is some interaction ...
makerofthings7's user avatar
7 votes
1 answer
1k views

Pegasus iOS exploit & Kernel Memory Corruption

I'm currently reading about Pegasus, the malware on iOS that uses 3 zero-days, in the Lookout Blogpost. Blog Post about Pegasus I'm a cs student in the first year and I understand that the malware ...
Seen's user avatar
  • 73
0 votes
1 answer
594 views

Security issues with concurrent sessions in iOS app and Safari browser

We have two ways a user can buy products on our e-store. We have a mobile native app for iPhones and a mobile optimized browser experience from an iPhone default browser (i.e. Safari). The iOS (...
DesignPill's user avatar
2 votes
2 answers
7k views

Google thinks I am a robot when using proxy, but only in Safari

Google greeted me with this message while being behind a private proxy: Our systems have detected unusual traffic from your computer network. This page checks to see if it's really you sending ...
sanjihan's user avatar
  • 639
2 votes
2 answers
684 views

Why does Safari still support SSL 3?

The "POODLE" attack was made public in October, 2014. Why does Safari still support SSL 3.0 after POODLE showed it to be insecure?
Fernando's user avatar
  • 715
1 vote
1 answer
2k views

Safari not showing GREEN lettering for EV SSL

I've recently installed an EV SSL cert on my server, Chrome and Firefox show a green banner and padlock denoting the EV cert is installed, but in Safari, it just shows a gray padlock... is there ...
CJT3's user avatar
  • 111
0 votes
1 answer
607 views

How might my browser session be hijacked on iOS Safari?

I'm currently on iOS using Safari, and my browser session was just hijacked. Ive never seen any hint of malware on iOS, so I'm going to assume the hijacking occured (consistently happens when visiting ...
J.Todd's user avatar
  • 1,300
4 votes
0 answers
2k views

Security flaw in iOS, Safari weird behavior or what else?

some months ago I was travelling and flew from Frankfurt airport and, while there, I probably connected to some Telekom.de free hotspot. I have an iPhone 6 with iOS 9.02 (at that time it was 8.1.x). ...
int 2Eh's user avatar
  • 153
3 votes
1 answer
326 views

POODLE vulnerability in Safari

I have been trying to mitigate POODLE on client side in my organization. I disabled SSL3 in most browsers but couldn't disable it in Safari. Apple released a Security Update 2014-005, which, ...
user61520's user avatar
6 votes
2 answers
6k views

Password management in Firefox, Chrome and Safari

I just read a couple of very interesting discussions on Chrome password security strategy. Chrome’s insane password security strategy Showing stored passwords - Tim Berners-Lee The following is how ...
Rohit Agarwal's user avatar