Skip to main content
Share Your Experience: Take the 2024 Developer Survey
101 votes

Is there a way to hide HTML source code yet keeping it effective?

Well, IMHO the only reliable way to prevent the user to know the mail address it to have the mail sent server side instead of client side. Said differently the client only gives their own mail address ...
Serge Ballesta's user avatar
81 votes
Accepted

Computer name naming convention for security

You have identified only one risk, that of an attacker identifying machine roles on the network by using predictable host names. I think you missed the competing risk, that of increased operator ...
HBruijn's user avatar
  • 1,345
54 votes
Accepted

Is there a way to hide HTML source code yet keeping it effective?

You can't. The question doesn't even make sense on a conceptual level. A mailto: link is simply a convenient way to communicate to an end user where they can send email to. If your mailto link works, ...
Cubic's user avatar
  • 626
51 votes
Accepted

Does the destruction of sensitive information limit the choice of hard drives to non-flash based devices?

Data destruction is a technique of last resort. If you are planning to use a new storage device, you should use full disk encryption. This allows you to either destroy the encrypted master key or ...
forest's user avatar
  • 66.8k
39 votes

As a contractor how do I work on multiple client networks without data leakage?

You could use a very small VM for each one, but keep the IDE on the host, not on the guests. Share a folder from the VM to the host, so you use the host and its resources to develop, and use the VM ...
ThoriumBR's user avatar
  • 54.4k
36 votes
Accepted

Pwned by a website I never subscribed to - How do they have my e-mail address?

Web scraping is indeed a possibility, as mentioned in this Wired article: As Apollo noted in its letter to customers, it draws a lot of its information from public sources around the web, including ...
Glorfindel's user avatar
  • 2,265
32 votes

Do my Windows system binaries contain sensitive information?

Everybody's (me included) reflex answer to such a question will normally be: Huh huh huh (falls off chair). No! How would you think this could even work? Executables are signed nowadays, which ...
Damon's user avatar
  • 5,221
21 votes

How do I investigate where personal information in a fraudulent email was leaked from?

This could be related to almost anything, personal information are sold just like any other "things" on the darkweb and even on the "web" by relatively legal entities, Databrokers are selling personal ...
Soufiane Tahiri's user avatar
19 votes

Do my Windows system binaries contain sensitive information?

Windows system executables do not contain any sensitive information. They may reveal the version of the operating system you are using, but personal information is not stored in executables. Instead, ...
forest's user avatar
  • 66.8k
19 votes

Computer name naming convention for security

The fact that there is no readily available information to support your conclusion, should give you some idea about its validity. The point is, that if your attacker is already in, he will need to do ...
Ljm Dullaart's user avatar
  • 2,125
19 votes
Accepted

Hash as filename to protect data

I don't really see what problem hashing the filename is trying to solve. If the filename is provided by the user, then it's unlikely to be unique, and the user is unlikely to remember exactly what ...
Gh0stFish's user avatar
  • 11.7k
18 votes

Hash as filename to protect data

The approach has several major issues. If anybody ever accidentally enables directory listing in the webserver configuration, all sensitive files immediately become public. That alone is sufficient ...
Ja1024's user avatar
  • 7,476
16 votes

As a contractor how do I work on multiple client networks without data leakage?

If you use a operating system that has support for separate networking namespaces, use that feature to start each VPN client and all applications in a distinct client-namespace. There are a lot of ...
Josef's user avatar
  • 5,953
15 votes

Computer name naming convention for security

What you're advocating for is called "security though obscurity". While in theory obscurity does provide some extra protection while not making things worse, it usually does make things worse in ...
Dmitry Grigoryev's user avatar
15 votes

Is there a way to hide HTML source code yet keeping it effective?

You can't. And neither can Javascript. You have three options, and they all depend on a backend language. You have two options, one right way and two lunatic ways if you have no server: The right way:...
The Anathema's user avatar
13 votes

Does the destruction of sensitive information limit the choice of hard drives to non-flash based devices?

Tl;dr: Because you can never trust all storage drives to securely wipe themselves, you must plan as if none of your drives can be securely wiped. Placing a dependency on the type of media is not the ...
John Deters's user avatar
  • 34.2k
12 votes
Accepted

How to deal with a company that doesn't fix (potential) security vulnerabilities in their web app?

Should I give them a second chance Yes. It is typical to wait several months and communicate several times with the developing company before taking any further action. If the company has shown ...
Sjoerd's user avatar
  • 30.8k
11 votes

Is there a way to hide HTML source code yet keeping it effective?

You can HTML-encode it, like this: <form action="&#x6d;&#x61;&#x69;&#x6c;&#x74;&#x6f;&#x3a;&#x73;&#x6f;&#x6d;&#x65;&#x6f;&#x6e;&#x65;&#...
Sjoerd's user avatar
  • 30.8k
10 votes
Accepted

What are good methods of visual security?

This kind of attack is called shoulder surfing and it is a real problem. Hardly a day goes by where I do not see someone putting themselves at risk of this either on the train, a cafe or in various ...
TheJulyPlot's user avatar
  • 7,809
9 votes

Do my Windows system binaries contain sensitive information?

They can contain file paths from the system they were compiled on, which may be sensitive if these are programs you compiled on your own system.
user541686's user avatar
  • 2,562
9 votes
Accepted

Does WhatsApp's link preview on the link messages leak information?

WhatsApp client makes http GET request to the site sender types in, in order to fetch site's meta properties that show up in preview. <meta property="og:title" content="Information ...
defalt's user avatar
  • 6,861
8 votes

Which is a safe way to transfer a copy of a sensitive document?

if you can contact the recipient by other means besides email, one easy way to send securely content over email is putting the content (images,documents,etc) into a encrypted container (a zip, 7zip, ....
Jorge Alvarenga's user avatar
8 votes
Accepted

Employer stores plain text personal data in a 'data warehouse'

When your organization is subject to the GDPR, then it should have a designated Data Protection Officer. This person is responsible for ensuring that data protection laws are applied within the ...
Philipp's user avatar
  • 49.4k
7 votes

How do I investigate where personal information in a fraudulent email was leaked from?

One way to check for personal information is by using google. Just insert the string you want to search for and surround it with ". Like "NAME SURNAME". This will display some sites where exactly this ...
anon's user avatar
  • 376
7 votes

How does full disk encryption cater for overprovisoned disk space in flash devices and can this result in data leakage?

FDE does not need to know anything about overprovisioning. If the partition is encrypted, no plain-text will ever be written anywhere. Blocks reserved for wear leveling will either have un-initialized ...
ThoriumBR's user avatar
  • 54.4k
7 votes
Accepted

How does full disk encryption cater for overprovisoned disk space in flash devices and can this result in data leakage?

If you encrypt the disk from the start, when you first start using it, then this isn't a problem. All data you write is encrypted and remapped sectors just lead to encrypted data being remanent on the ...
Polynomial's user avatar
  • 135k
7 votes

Is there a way to hide HTML source code yet keeping it effective?

TL;DR: No. If I understand your problem correctly, you do not want to hide the e-mail address from the users, but from bots which parse the source code to collect e-mail addresses for spamming. Sure,...
rexkogitans's user avatar
7 votes

As a contractor how do I work on multiple client networks without data leakage?

Enable split tunneling, so the only traffic that goes across the VPN to Client X is traffic bound for their servers.
Joseph Sible-Reinstate Monica's user avatar
7 votes
Accepted

Website showing entered credit card number as valid or invalid

I suspect that the site is simply checking that the card number passes the Luhn test. This is a simple test, based on a checksum, that many sites do to check for typos when entering the card number. ...
mti2935's user avatar
  • 23.6k

Only top scored, non community-wiki answers of a minimum length are eligible