Tagged Questions

0
votes
2answers
32 views

Can XSS and phising type attacks jump across browsers?

If I had two different browsers and separated their use such that I was only ever using browser A for things such as on-line banking and credit card purchases etc. And used browser B for everything ...
0
votes
2answers
53 views

Is it possible to know what is exactly doing javascript when is running?

I know a little about security risks and know that Javascript could be dangerous and compromise my computer, everything was just fine but suddenly reading one article of OWASP that says XSS ...
0
votes
1answer
608 views

Can javascript be used to extract ones IP if they're using a VPN?

If you're using a vpn, is it possible for a 3rd party website to use javascript or any other means to extract your real IP address? Or is there no way for them to know your real IP as long as you're ...
0
votes
1answer
118 views

Does javascript have access to my bookmarks and history?

I'm using RefControl addon for firefox, to avoid sending the referer in the headers. But now I'm wondering if the previous page or even my full history can be viewed by websites with javascript. And ...
3
votes
2answers
923 views

How to hide Browser Plugin Details in firefox for more privacy?

I'm trying to trick the results in this page to have more privacy/anonymity: https://panopticlick.eff.org/index.php?action=log&js=yes So far the best I could do is change the user agent, with the ...
0
votes
2answers
16 views

Is it safe to use an untrusted bookmarklet on a web page with sensitive data?

Is it safe to use an untrusted bookmarklet on a web page containing sensitive data, for example internet banking page? In particular, can a bookmarklet send the data anywhere or execute some actions ...
2
votes
1answer
377 views

What Is All Of This Stuff In My Sent Email From Hotmail? [closed]

I sent an email from my Hotmail account to myself and viewed the source. I did this from www.Hotmail.com and sent only the text 'Test'. When I received the email, I viewed the source in Outlook and ...
0
votes
1answer
194 views

How to adapt a proxy auto-config file to a specific LAN?

I would like my Mac to use specific proxy auto-config settings when inside the office LAN but not use a proxy when connected to any other network. How can I configure it in such a way? I suspect ...
5
votes
5answers
1k views

How dangerous can JavaScript be?

I have recently started using NoScript (in addition to ABP). It took a little while to get used to it and can occasionally require some clicking when visiting a new site to investigate why the site's ...
2
votes
4answers
192 views

What browser feature is this exploiting and how to stop it?

http://raffa991[dot]ra[dot]funpic[dot]de/lol/ Warning: It is some kind of an annoying "you are an idiot" sign combined with a lot of popup message boxes. Open with care! In any case, it crashed my ...
1
vote
3answers
113 views

Is “Just close popup windows” an adequate security instruction for users?

My security officer came to me yesterday, and said the CEO had clicked a "viruses detected, click yes to scan" popup, after which of course his laptop was crawling with viruses. So the SO wants to ...