Arminius
  • Member for 6 years
  • Last seen this week
What stops Google from saving all the information on my computer through Google Chrome?
Accepted answer
227 votes

What processes and systems are in place so that Google is not able to copy the data on my computer? None. Google Chrome usually runs with the permissions of your user account. The application can ...

View answer
How did "tech-supportcenter" phishers trick Google?
Accepted answer
203 votes

If displaying the wrong URL in the tooltip requires Javascript, how did tech-supportcenter get their Javascript onto the Google search results page? The scammers did not manage to inject JS into the ...

View answer
Is it theoretically possible to deploy backdoors on ports higher than 65535?
Accepted answer
198 votes

No, the port number field in a TCP header is technically limited to 2 bytes. (giving you 2^16=65536 possible ports) If you alter the protocol by reserving more bits for higher ports, you're violating ...

View answer
How can I protect my website against bitsquatting?
Accepted answer
132 votes

Is there any standard defense technique against it? As outlined in the other answers, bit errors when querying domain names may not be a realistic threat to your web application. But assuming they ...

View answer
Which security measures make sense for a static web site?
131 votes

The common web application attack vectors don't apply to a strictly static website. Without interactive elements there are no accounts to hijack or cookies to steal. Nonetheless, you should provide ...

View answer
Did I just get DNS Hijacked?
Accepted answer
125 votes

Yes, your router's primary DNS entry was pointed to a rogue DNS server to make devices in your network resolve apple.com and other domains to phishing sites instead. The router possibly got ...

View answer
Why are files that are not assigned to a user considered a security risk?
Accepted answer
119 votes

On a Linux system you can easily delete a user without having to delete any files owned by that user. Such a file will stay in place and the file owner's user ID (which is stored as an attribute of ...

View answer
Is it possible to "fake" being connected to a router?
Accepted answer
118 votes

Well, obviously it's not "foolproof". Depending on your capabilities, there are plenty of ways to cheat. Your professor has a point in that your standard wireless network card won't simply support a ...

View answer
Is it normal for auditors to require all company passwords?
113 votes

How should I proceed? Don't proceed with them. The way they act is unprofessional. Pentests carry risks for both parties, and it doesn't seem they did anything to address them. First, you should ...

View answer
HTTPS web service switched to HTTP. What can go wrong?
Accepted answer
94 votes

You are right, the regression to HTTP is pointless. Note that all your points apply to one particular kind of attack, where the adversary is able to access the data transport between client and ...

View answer
Why do we trust US Certificate Authorities?
91 votes

Why do big companies (...) not fully use CAs from countries with strict privacy laws like Switzerland or Sweden? Because any CA can issue a certificate for any domain anyway (with some caveats). If ...

View answer
Could bug bounty hunting accidentally cause real damage?
85 votes

Can bounty hunting cause real damage? Sure. As you pointed out, some SQL injection vectors may inadvertently cause data deletion. Similarly, a persistent XSS attack may trigger in the browser of a ...

View answer
Google account verification request
Accepted answer
85 votes

Google says it's not a security problem and that you don't have to worry. After investigation they issued a statement in the Google product forums: What happened? During routine maintenance [from 1pm ...

View answer
Security implication of telling the user they can't login because of too many attempts from IP
Accepted answer
79 votes

Absolutely do not message end user telling them why login failed. You are giving a potential attacker critical information to aid them in attacking you application. On the other hand, not telling a ...

View answer
How does my browser inherently trust a CA?
Accepted answer
78 votes

How my browser can inherently trust a CA? Does in contain hard coded public key of the CA? Your browser (and possibly your OS) ships with a list of trusted CAs. These pre-installed certificates serve ...

View answer
Why do XSS strings often start with ">?
Accepted answer
76 votes

This way you escape from a double-quoted attribute (") and close the previous tag (>) before opening a script tag that contains your payload. It's one of the most basic XSS patterns. Example: <...

View answer
How can I prove that a certain email was not sent to my account?
73 votes

The SMTP logs of Hotmail, their provider or any trusted third-party involved in delivering the email could confirm if their servers did or did not process it. (There is no guarantee that logs are ...

View answer
Is it a coincidence that the first 4 bytes of a PGP/GPG file are ellipsis, smile, female sign and a heart?
Accepted answer
69 votes

Yes, it's a coincidence that the first bytes appear to you as these symbols. They are part of the OpenPGP message format specification (RFC 4880) and vary depending on the packet properties. Let's ...

View answer
Are CVE counts a good indicator of a software's security?
Accepted answer
67 votes

Can we say that a software is "more secure" than another, based on the number of CVEs these softwares have? No. CVE entries are not a good source to rank products by their "overall security". The ...

View answer
How long will it take to crack the passwords stolen in the Yahoo hack announced 14 Dec 2016?
Accepted answer
67 votes

Yes, they were likely able to crack many of the passwords in a short time. From the official Yahoo statement: For potentially affected accounts, the stolen user account information may have ...

View answer
Difference between XSS and CSRF?
Accepted answer
65 votes

In a cross-site request forgery attack, the attacker tries to force/trick you into making a request which you did not intend. This could be sending you a link that makes you involuntarily change your ...

View answer
Can you trace malware back to a specific keyboard?
Accepted answer
64 votes

A keyboard is not a typewriter. Keyboards produce scancodes that are interpreted by the software and mapped depending on your layout. When a key press produces a letter on your screen it's nothing ...

View answer
How might the Chinese government be blocking only specific types of WhatsApp traffic?
Accepted answer
63 votes

Given that Whatsapp traffic has end-to-end encryption, ... End-to-end encryption neither implies anonymity nor that the underlying protocol is unrecognizable to an eavesdropper and doesn't reveal any ...

View answer
More secure to use e.g. Whatsapp Web in Franz than in browser?
Accepted answer
62 votes

But I was wondering, is it actually more secure to use for example Whatsapp Web in Franz instead of the browser? No, Franz is not inherently more secure than a regular browser. Under the hood, ...

View answer
Why is "hovering over" a link in an email considered safe? Or is it harmful?
Accepted answer
53 votes

One of my employers told us that if we receive a suspicious email with links, we have to hover over the link (to check that it is not spoofed) before clicking it. When you mouseover a link, the ...

View answer
Is the unauthorized deletion of data considered a breach of integrity or availability?
Accepted answer
48 votes

However, one of my colleagues disagrees and considers such to be an attack on the Integrity principle, because data was modified by being destroyed without authorization. Your colleague has a point. ...

View answer
Is demanding a "donation" before disclosing vulnerabilities black hat behavior?
Accepted answer
47 votes

I'm a bug hunter and I have no idea why everybody here thinks it's perfectly fine of him to attack your website without permission, determine a bounty amount himself, and threaten to hold back ...

View answer
What do you call the entity seeking to be authenticated?
47 votes

In IEEE 802.1X terminology that would be the supplicant: Authenticator An Authenticator is an entity that requires authentication from the Supplicant. The Authenticator may be ...

View answer
What is the most secured SMTP authentication type?
Accepted answer
47 votes

With SSL/TLS it's okay to use LOGIN / PLAIN. You should provide SMTP on top of an SSL-encrypted connection. While some schemes from your list (e.g. DIGEST-MD5) can keep a password secure even over an ...

View answer
Should I activate HSTS with Let’s Encrypt Certificates?
Accepted answer
47 votes

Yes, you should activate HSTS. HTTPS without HSTS is significantly weaker since it makes your users vulnerable to downgrade attacks. Sending a HSTS header guarantees that users will directly connect ...

View answer
1
2 3 4 5
12