Questions tagged [web-browser]

A web browser is an application which uses HTTP and related protocols to retrieve HTML and XML data from servers. As the web has become a critical source of information and communication, web browsers have become a critical component in information request, transfer and management.

Filter by
Sorted by
Tagged with
5
votes
1answer
130 views

What can stop a browser to cache data from ProtonMail conversations?

I think this question arises primarily from my insufficient understanding of browser caching. Let's log in to ProtonMail, and read a message. My understanding is that an encrypted 'blob' of data gets ...
0
votes
1answer
81 views

If the browser enforces a Sandox, then why the infections by malware?

By design the browser enforces a Sandbox, but we know that Javascript which runs inside this sandbox can be used to do malware damage etc.Isn't the sandbox supposed to protect against it as well as ...
1
vote
2answers
136 views

Why are third party cookies sent to second party websites?

When I visit this website, Google Analytics cookies are being sent to it from my browser along with the request. This goes against my whole understanding of cookies which is that cookies are only ...
-2
votes
1answer
416 views

Authentication process between the server and the browser [duplicate]

How the browser ensures that it is communicating to the right server?
0
votes
1answer
60 views

Possible Security threats and mitigations while accessing `/root` through any browser?

I asked this question on Unix Stackexchange. How to access /root directory from a browser? I got an answer (in a comment by @dsstorefile) that It can be accessed either way : By running chmod 0777 ...
0
votes
1answer
109 views

Has my browser been hacked, there was a tab I didn’t open editing my LinkedIn profile [duplicate]

Is it possible that somebody could have access to my web browser through wifi hacking and edited my LinkedIn profile (or any other social media if it’s open)? There was a tab that mysteriously opened ...
8
votes
1answer
1k views

Can browser cookies be “physically” stolen?

Can someone with physical access to a target computer steal the web browser cookies in that and setup a rogue authenticated session later?
1
vote
3answers
305 views

Identifying malicious scripts on a website

We currently have a specific situation on our website. We are a portal which serves ads, mostly via google network. Some of our users have started to complain that they are experiencing popups and ...
1
vote
2answers
116 views

Browser doesn't recognize HTTPS

I am having a strange issue reported from a client: This browser doesn't show HTTPS secured and accredited connection, although my site has HTTPS. Normally, on other browsers they show. For example:...
44
votes
3answers
9k views

Why don't browsers block cross-site POSTs by default?

Same-origin policy (SOP) makes browsers block scripting from one origin to mess with another, unless explicitly being told not to do so. But cross-site POSTs are still allowed, creating the vector for ...
3
votes
1answer
173 views

How to Send Decoded URI?

I'm working in Burp and received an interesting response when sending a decoded string as a GET request. Copying/pasting the same string into a browser, the string is automatically encoded by the ...
4
votes
1answer
118 views

How to see (EC)DHE length in a browser?

If you check a site's TLS encryption in a browser, you'll see somethng like TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256. You can see there AES and SHA length. You can see RSA/EC length if you inspect the ...
5
votes
2answers
451 views

What “timing attacks” could websites perform using last modified dates of files?

https://developer.mozilla.org/en-US/docs/Web/API/File/lastModified describes the .lastModified property of a File object in JavaScript (usually created when a user selects a file via a HTML <input ...
4
votes
1answer
236 views

Are browsers still vulnerable to IDN homograph attacks?

Is it not possible for Chrome and Firefox to protect against this > https://www.аррӏе.com/ Navigating to that above (fake) apple website using Firefox 59.0.2 doesn't actually take me to the apple ...
1
vote
1answer
40 views

Must all ssl certificates for a domain be trusted?

I've read that it's possible to have multiple certificates on one domain. My question is whether all these certificates should be trusted and valid or whether one valid trusted certificate is enough ...
1
vote
1answer
636 views

Is HSTS header any useful without a recognized certificate?

The application I'm working on is accessible only via IP address, so HTTPS connection is provided via a custom-signed certificate. I explained to my client that (from MDN docs) [...] when your ...
-4
votes
1answer
78 views

Is the true IP revealed when we simply view a web-page and the vpn connection drops?

When someone surfs the internet, the ISP can see the webpages he/she is viewing only when a web page is loaded or refreshed? For example, if I am in this page typing my question and suddenly the vpn ...
2
votes
2answers
81 views

Why return successfully to non-allowed origins

As I understand it, with CORS, on cross-origin requests, the browser will send an Origin header, and if the origin isn't allowed, the server will still send back a 200 response with a non-matching ...
-3
votes
2answers
103 views

is my internet activity hidden by private browsing if there is no network at work? [closed]

Small business. Computers not on a network. Does Firefox Private browsing keep my boss from seeing my internet activity?
1
vote
1answer
119 views

How to prevent information leak from a Javascript app?

I want to use a client-side JS app, but I want to prevent it from leaking sensitive data. For example, I want to check if my password is compromised using the haveibeenpwned service, which accepts ...
5
votes
2answers
2k views

Why/how does Firefox bypass my employer's SSL decryption?

My employer has set up what they're calling "SSL decryption" for Internet access from within the company. I believe this is provided by an f5 device. They have installed a trusted root certificate on ...
0
votes
1answer
150 views

Bridging TLS handshake to leave private key in browser

Situation We have a single page web app that allows user to Drag'n'Drop their certificate and private key into it. These are then used to authenticate at the web service. While browsers are able to ...
2
votes
2answers
306 views

Malware techiques via Linux Chrome and its effects, non-root

Is it possible to visit a website with Chrome on Ubuntu and have that site execute shell code on my machine without explicitly downloading anything nor click on some Chrome execute question/popup? If ...
2
votes
1answer
772 views

Caching personal data: GDPR

There are requests in my web application that contain "personal data" (name, postal code, phone number, date of birth etc). I would like to know what caching controls are advisable. I am using HTTPS. ...
29
votes
1answer
4k views

Conflicting security messages about “chrome://settings” page; is it secure or not?

Accessing the chrome://settings page, I see two things contradicting each other: The ribbon below the address bar shows "You're viewing a secure Chromium Page." On the other hand, the security ...
2
votes
1answer
87 views

Odd PHP error referring to Fallaga Priv8 404 Shell when visiting a web site

I visited a website (belonging to a large company in northern Europe) yesterday. One of their pages in the "about us" section gave me a long error with a message that started with <?PhP /* FALLAGA ...
3
votes
0answers
51 views

Is it possible to “polyfill” a vulnerable Flash player to a users machine when they visit a web page?

This is about the concept of adding "necessary code" to a webpage to ensure that any client can view the "content" provided through that page. This sort of code is sometimes referred to as a polyfill. ...
12
votes
5answers
4k views

How do you prevent sending cookie data over HTTP the first time? [duplicate]

You could use HSTS to tell browser to always use HTTPS in future requests. You could use Cookie Secure flag that from now on only send cookies over HTTPS. You could use DNS based redirect but only ...
2
votes
1answer
167 views

Can too restrictive Linux MAC policy decrease security?

Can too restrictive MAC profile (e.x. AppArmor profile) decrease application security? For example: could it be that too restrictive environment for web browser will protect host system very well ...
7
votes
1answer
276 views

Can an attacker force a browser to use quirks mode to render a page?

During a pentest, I've found a potential vulnerability on a web page, but it can only be exploited in quirks mode. The page starts with <!doctype html>, which triggers standards mode so at ...
2
votes
1answer
95 views

What are the ways in which open proxies are risky? What precautions should I take?

This question at Workplace and its top-voted answers state that using proxies to access filtered web content is extremely risky for individuals and companies, using pretty strong wording. There are ...
4
votes
0answers
1k views

Is Cross Site History Manipulation (XSHM) still relevant?

XSHM is a vulnerability which exploits the fact that the browser history object does not follow the Same Origin Policy and hence by tracking the changes made to this object we may be able to track a ...
23
votes
3answers
2k views

Why are developers using embedded user agents for 3rd party auth? What are the alternatives?

I've noticed a trend in mobile and desktop apps in recent years with the advent of OAuth (and it may also affect other frameworks) to request a user to sign up or log in using 3rd party authentication ...
0
votes
2answers
105 views

Is there any ways to track which certificate is used for https connection in browsers?

I encounter a strange SSL error messages in Mac laptop with https connections. It only happens on some websites such as facebook, twitter with Firefox and Chrome and only happens at work. It is ...
3
votes
1answer
7k views

Is downloading Windows ISOs from TechBench downloaders safe?

How safe are TechBench downloaders? Is it safe to download an iso from TechBench downloading service for example: https://tb.rg-adguard.net/public.php I have no idea how it works but it supposedly ...
-1
votes
1answer
79 views

Is it possible for first party cookies set by a.com to somehow know that the user also visited b.com (i.e. able to read the url)?

Is it possible for some malicious website (a.com) to set a first party cookie in my desktop browser when I visit a.com and use it to read other URLs I'm browsing? Any hints will be appreciated!
0
votes
2answers
499 views

Find out Browser's AES generated key on SSL/TLS [duplicate]

When it comes to TLS handshakes. first of all I'm wondering how the AES keys which are responsible for encrypting data is generated? is it generated randomly on the browser and it's securely sent to ...
1
vote
1answer
204 views

What's going on with this URL? Has the honda website been hacked?

Here's a URL that you may not want to open (should be fine with a modern browser though): http://www.primavera.honda.com/ga01/fwsg8.php?teu=boat-puns-captions It seems to redirect through a bunch of ...
1
vote
1answer
58 views

HTTPS flow clarification [duplicate]

I have done a small test and result is as expected, but I am trying to understand more. I have configured a fake DNS server to resolve all names to the IP of my VPS. On my VPS, I installed a web ...
2
votes
2answers
128 views

Is there a way to find the SSL certificate used for one specific browser-server SSL communication?

Chrome has a history of HTTPS sites I have accessed, I would like to know if there is somewhere Chrome would have stored details about the SSL certificate used to establish the connections to the ...
3
votes
0answers
207 views

Saved password store on Android Edge browser

Does anyone have knowledge, or better yet, a reference document showing how and where passwords are stored when using the Edge browser on Android? I'm assuming it's going to be SQLite, as I ...
1
vote
1answer
90 views

Website login desktop program instead of sharing passwords

Brainstorming ways to share passwords without the users being able to see the passwords. In Windows we can watch/control when/what users do on corporate computers. There are some web services multiple ...
4
votes
1answer
330 views

Security implications of allowing websites to open TCP sockets

I was reading a post about tcp sockets in the browser here and one of the mentioned reasons for not allowing it is that allowing websites to open TCP sockets would be a security risk but doesn't ...
12
votes
1answer
413 views

Browser cache information disclosure

Observing the time needed by a browser to load external resources such as images potentially discloses information about whether those resources have been accessed before. Explanation: For example, ...
1
vote
1answer
203 views

What is the value of an XHR blocker?

My question is not specific to uMatrix, but is framed from that PoV: background info: uMatrix is a browser extension whose main interface offers a rectangular grid of permissions (allow/inherit/block)...
88
votes
4answers
11k views

Is browser history an important factor when considering security?

I discovered something I consider a major vulnerability in a SaaS product that includes the username and password in the query string of the URL on registration and every login attempt. The technical ...
1
vote
0answers
144 views

xhost si:localuser:foo security

With my current setup, I have two user accounts: internet and secure. For the user "secure", all networking is disabled with the iptables rule: -A OUTPUT -m owner --gid-owner 1000 -j DROP The user "...
5
votes
3answers
3k views

Is IP whitelisting for webpage access secure enough?

My organization utilizes Salesforce and Marketing Cloud. Very few people have access to MC, so I'm in the process of building MC hosted landing pages that will pull and display information such as ...
-1
votes
1answer
88 views

What is the best way for scanning possibly infected external drive in Debian?

First of all I am really sorry for my English. It is not so perfect at all. Please feel free to refer to that in your future comments if you like too or, if you could be so kind as to, just ignore ...
1
vote
1answer
130 views

Are Chrome file system API not supercookies? Why are people not worried about them?

Chrome has a file system API that seems to persist through normal clearing of the cache, etc. (In fact, I'm not sure if there's any built-in way to clear this data globally.) Isn't this a security ...