31
votes
Accepted
Smart-Screen filter still complains, despite I signed the executable, why?
Applications that are signed with a standard code signing certificates need to have a positive reputation in order to pass the Smart Screen filter. Microsoft establishes the reputation of an ...
- 5,591
25
votes
How does Internet Explorer know what text files I have viewed?
Internet Explorer is tied directly to the Windows operating system. It is essentially an extension of normal File window. Many of the operations performed by Internet Explorer call directly into ...
- 12.4k
8
votes
Smart-Screen filter still complains, despite I signed the executable, why?
If you have a standard code signing certificate, some time will be needed for your application to build trust. Microsoft affirms that an Extended Validation (EV) Code Signing Certificate allows to ...
- 182
8
votes
Accepted
Can I Prevent Internet Explorer from Storing Login Requests in Memory?
On a Windows machine, inspecting the memory of the IE process is limited to the owner user, and administrators. If an attacker can inspect the memory of your IE process, then that attacker has taken ...
- 172k
8
votes
What is the implication of HSTS on unsupported browsers?
A website implements HSTS by sending a Strict-Transport-Security header. A browser that doesn't understand the header will simply ignore it, just like any other custom or malformed header.
Will ...
- 44.7k
6
votes
Accepted
Are Heap addresses randomized by ASLR?
According to the Windows Internals 5th Edition book, the 5-bit ASLR bias for heaps is "multiplied by 64KB to generate the final base address, starting at 0, giving a possible range of 0x00000000 to ...
- 135k
6
votes
How does Internet Explorer know what text files I have viewed?
Is this a known feature?
Yes.
How IE can know my file browsing history?
As mentioned in the answer by RoraZ, Internet Explorer is (or at least, was originally designed as) largely an ...
- 3,407
6
votes
Accepted
What's the alternative of content security policy (CSP) header in Internet Explorer IE?
MDN - Content Security Policy (CSP) - Browser Compatibility shows what is supported in MSIE and what not. To summarize:
MSIE only supports the sandbox flag
MSIE only supports the old X-Content-...
- 198k
4
votes
Accepted
Does Microsoft Edge (Spartan) share Cookies, Cache, Passwords, or TLS Certificates with Internet Explorer?
As I guess you know, "Spartan" was developed in parallel to Internet Explorer 11. On April 29, 2015, during the Build Conference keynote, it was announced that "Spartan" would officially be known as ...
- 5,245
4
votes
Why does tls_version "TLS 1.2" from howsmyssl rate "Probably Okay" in Chrome on Windows 10 but "Bad" in IE11 on Windows 7?
Well, from the error message you posted, your IE11 is willing to use some really out of date and broken crypto, but the Chrome does not. That tool even gives you a helpful description of why each one ...
- 58.8k
3
votes
Why does tls_version "TLS 1.2" from howsmyssl rate "Probably Okay" in Chrome on Windows 10 but "Bad" in IE11 on Windows 7?
Is it just the fact that IE11 supports "insecure_cipher_suites"?
To cite from the sites documentation:
Insecure Cipher Suites
...
Any client supporting an insecure cipher suite will be marked ...
- 198k
3
votes
Accepted
Is the windows root trust store used by IE?
IE uses the Windows root trust list. It's not compiled into the kernel, per se, but it's installed into the SYSTEM registry hive.
It also does not have any means of updating the stored trust list ...
- 166
2
votes
Custom browser based on Internet Explorer - Uniqueness questions
In answer to question 1, the difference is the browser itself. The IE basis for your custom desktop browser is designed to be more interactive with other Microsoft products thus all the .NET details. ...
- 3,397
2
votes
Custom browser based on Internet Explorer - Uniqueness questions
Clearly panopticlick is not showing the user-agent string you think you are sending to it.
I'm confused by your description of what happenned. The page at https://panopticlick.eff.org does not ...
- 18.6k
2
votes
Why does IE11 refuse to enable back navigation caching for HTTPS?
The primary reason for not caching pages is if the page contains sensitive information, and that information might then be accessible to anyone using the computer. Good examples include banking ...
- 21.6k
1
vote
Telling the difference between firewall block or external problem with Page Cannot be Displayed (IE)
There are sites that can help you check if it is a problem with the user connection or the server:
https://isup.me
https://downforeveryoneorjustme.com
Other options would involve connecting to a VPN ...
- 125
1
vote
Strange jagged lines and dissapearing browsing history in Internet Explorer 6
Taking in to account that you would have to manually install IE6(not sure you could, not going to try) , this is your only question I can see in Stack Exchange, and that jagged dancing lines are ...
- 126
1
vote
Accepted
How do websites track users for flow control
There's many ways to enforce request rate limit, so I'll mostly focus here on what appears to be going on in your case;
It's highly unlikely, considering it's a commerce site, that you're dealing ...
- 10.8k
1
vote
Is it possible to execute xss when response is of content type:application/json in latest IE?
XSS is still possible even in newer versions. But it depends how the JSON is used. The article you reference cares only about executing JSON by itself, i.e. accessing a JSON document via a link.
It ...
- 198k
1
vote
Mixed Content error in IE11 - HTTPS resource on HTTP page
In the case of an HTTPS iFrame from a different domain, two distinct information sources are accessed. The purpose of Microsoft's error message in the developer console may just be to remind ...
- 1,107
1
vote
When and how will Internet Explorer refuse sha-1 certificates?
Update January 2017: Here's a website with a SHA1 certificate expiring 2018. https://www.belshe.com/
Google Chrome shows 'not secure' with red warning triangle and 'https' crossed out. If you click ...
- 2,144
1
vote
When and how will Internet Explorer refuse sha-1 certificates?
Microsoft announced a SHA-1 notice for their browsers starting in June 2016. The wording of the notice is still "under consideration".
December, 2015 update: Microsoft is aware of recent advances ...
- 11
Only top scored, non community-wiki answers of a minimum length are eligible