New answers tagged

2

The decisive factors here are isolation and the principle of least privilege. If the account used for the website has access to the database containing the customer records, any compromise on the website is automatically a compromise on the customer records, too. Furthermore, the data could be isolated on a separate server or even a separate network, and ...


0

As you may be aware, that line in /etc/sudoers allows user2 to run any arbitrary rsync command as root. This could be used to read or write any system file, including your password hashes and modifying the sudoers configuration to grant more access. rsync alone could even be used to run commands as root. So it becomes clear that user2 can easily become root ...


-1

It is advisable to use public-key security to protect the account. See: https://unix.stackexchange.com/questions/111526/how-can-i-rsync-without-prompt-for-password-without-using-public-key-authentica Ignore all answers that recommend no password. You are not running the user account with a password-less login. In fact I would disable password login. You ...


1

I this happened to me by an Ebay scammer. UPS is very difficult to work with and it is almost impossible to speak to a person. The scammers know that you have limited ability to solve the problem because of privacy policies at the shipping companies. Since you are not the addressee, they will not give out information about the shipment. With enough ...


8

The only useful thing about your routine is cleaning the cookies. It's not useful in itself, it is just that, this way, you delete your login session and so a new login (which requires inputting a secret like a password) is required to interact with the shopping site. A better alternative (in terms of your user experience and security) would be logging out ...


23

So if I wish to open "any" site on a new tab while doing my online shopping, is it safe The same origin policy should prevent other sites from accessing your data in the online shopping site. That is assuming that the shopping site has no vulnerabilities that leak data (CSRF, XSS, XSSI, broken CORS, broken messaging, etc.). Having only one tab ...


2

I do this to ensure any other websites that I open on new tab does not sneak into my credit card information. Is this even possible or just a myth? That is simply not possible, because the browser doesn't allow such a request due to the same origin policy without the website explicitly stating it in their CORS headers; apart from that, credit card info isn'...


Top 50 recent answers are included