IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [web-browser]

A web browser is an application which uses HTTP and related protocols to retrieve HTML and XML data from servers. As the web has become a critical source of information and communication, web browsers have become a critical component in information request, transfer and management.

1657 questions
90
votes
4 answers

Is browser history an important factor when considering security?

I discovered something I consider a major vulnerability in a SaaS product that includes the username and password in the query string of the URL on registration and every login attempt. The technical support of the service has told me they consider…
Ivan T.
  • 1,063
  • 1
  • 7
  • 12
57
votes
8 answers

Is the Web browser status bar always trustable?

If I bring the mouse pointer to a link, but not click on it, I can see in the left/bottom corner that it displays the URL of it. Q: Could this URL (in the left/bottom) be different from the one that my Web browser will go? (don't count that server…
newuser999
  • 747
  • 5
  • 9
21
votes
6 answers

What protects users from fake web browsers?

Suppose a hacker creates a Windows application that looks and feels like a legitimate web browser. The user believes they are using, say, Google Chrome. If you simply watched the bits going to and from the computer over the network, it would look…
dshin
  • 337
  • 2
  • 5
18
votes
3 answers

Google Chrome Browser - Privacy Concerns

After i saw many people using Chrome i wanted to inform myself on this browser and everything concerning it as i am a Firefox user since it existed. However i am always afraid of Google being a "data kraken" collecting as much information as…
Christian Ivicevic
  • 313
  • 2
  • 5
13
votes
3 answers

What is the safest way to close a popup window?

The internet has many articles recommending ways to close a browser popup window without infecting your computer with malware. I've seen click the red X, use ALT-F4, go to the windows task bar, right click on your browser's icon and do a close…
Too Osborn
  • 133
  • 1
  • 1
  • 6
13
votes
6 answers

Can a website download documents, images, or other information onto my iMac without my consent or awareness?

I've heard that websites that download malicious data onto the user's computer without their consent do exist, but is this possible on an iMac as well as Windows and other operating systems? How about iPhones? Basically, can websites download…
George B
  • 241
  • 2
  • 5
10
votes
3 answers

Any browser that supports script-nonce?

I was trying to include script-nonce on my html file, but seems like none of the current browsers support it. Is anyone aware of any version of any browser that supports this functionality? I'm currently using Chrome version Version 26.0.1410.63 and…
Jagat
  • 213
  • 2
  • 6
9
votes
5 answers

Is finding vulnerabilities in the major browsers easy or not?

If young hackers can detect them, why can't security analysts get and patch them? Also, I dream of finding a vulnerability in a major software, like IE or Chrome. Is it easy? Is it systematic or is it random? What books do I need to read to detect…
jaja
  • 101
  • 1
  • 5
9
votes
1 answer

Problems with in Browser Crypto

There are lots of older articles1 on why in-browser crypto is a bad idea. Most are summed up via: http://bitwiseshiftleft.github.io/sjcl/ We believe that SJCL provides the best security which is practically available in Javascript.…
erik
  • 193
  • 6
8
votes
2 answers

Accessing keystrokes directed at iframe?

So I was making a virtual credit card from entropay.com and when I decided to Top up it up with my existing debit card. It opened up the 'Verified by Visa' page(A page in which you have to enter a password to authorize payment through your debit…
Kam
  • 89
  • 1
  • 2
7
votes
3 answers

Using Lynx on potentially malicious websites

After needing to refresh how to unpack an android ramdisk, the site I remember having good information comes up with something similar to this: Being cautious, but still wanting to get what was on the page, I turned to lynx. Finding that lynx…
Jim
  • 71
  • 1
  • 2
7
votes
3 answers

How can I protect my saved passwords in Chrome?

I'm currently using WIN+L, and sometimes Kid-Key-Lock, to prevent anyone from checking my storaged passwords but if I forget doing it only once, all of them are vulnerable of theft. How can I protect my passwords from this glitch or is it not…
Renan
  • 423
  • 2
  • 5
  • 9
7
votes
2 answers

Firefox Add-ons not using HTTPS? Security bug. (?)

If I add a rule in Privoxy: echo '{ +redirect{s@http://@https://@} } .mozilla.org' >> /etc/privoxy/user.action then I can't install Firefox Add-ons. Why? I though the Firefox Add-ons installed through only HTTPS! If it's ain't using only HTTPS then…
LanceBaynes
  • 6,279
  • 12
  • 63
  • 92
7
votes
2 answers

plugins to lengthen short urls for security purposes

Came across this question What browser plugins can help us to see the actual destination of such shortened URLs?
Kim Stacks
  • 905
  • 9
  • 21
6
votes
2 answers

Do the most used browsers have similar security?

I read that Pwn2Own stopped attacking Firefox, apparently because it didn't make "serious security improvements" since the last competition. Should I understand it as "Firefox is significantly more vulnerable than other browsers", or can I continue…
Hey
  • 1,955
  • 1
  • 18
  • 25
1
2 3 4 5