0
votes
1answer
31 views

Is the guideline: don't open email attachments or execute downloads or run plug-ins (Flash, Java) from untrusted sites enough to avert infection? [closed]

I'd like to know if the following is enough to avert malware as I feel that the press and other advisory resources aren't always precisely clear on all the methods as to how PCs get infected. To my ...
0
votes
1answer
72 views

Change User-Agent as a security measurement

Imagine the following situation. I'm a Mac user, if I open a web site with some kind of malware(Platform specific). This site/malware will use my user agent to detect what system I am using. So, if I ...
5
votes
1answer
122 views

Am I safe from MS Advisory 2963983 by using a different application to host the MSIE rendering engine?

Microsoft Security Advisory 2963983 Vulnerability in Internet Explorer Could Allow Remote Code Execution Published: April 26, 2014 General Information Executive Summary Microsoft ...
1
vote
1answer
36 views

Web browser | Disabling the download of arbitrary scripts

I use firefox. Is there an addon or setting to stop my browser from downloading all the scripts that are linked on a webpage? I would like to only follow links which are at domains in my whitelist. I ...
0
votes
1answer
74 views

Is Chromium Wheel Smooth Scroller secure?

Chromium Wheel Smooth Scroller, which is an extension for Chrome browser really seems a nice product. But, on the security side, "it can access your data on all websites", this is the official ...
0
votes
1answer
394 views

Unable to add secure Java site

I need to add a secure site to allow Java apps to be run in my web browser. I use Windows 7 and the latest Java build, Java 7 update 17 build 1.7.0_17-b02. However, in the Security tab of the Java ...
1
vote
1answer
1k views

Every website is showing untrusted certificate warning on all browsers

I'm on windows 7. Every website is showing untrusted security warning. I tried every browser that I have. I tried using https. This is extremely odd, it never happened before, well it could happen ...
2
votes
2answers
599 views

Chrome - Why am I automatically authenticated to a web app even after clearing browser cookies?

I am accessing a web application using Chrome. If I sign out of the app and clear all Chrome history/cookies/etc (even Flash cookies which are now handled by Chrome in the same Clear History area) ...
8
votes
3answers
13k views

Malicious “confirm navigation” dialogs?

Some sites, like StackExchange, pop up an "Are you sure you want to leave this page?" dialog when you try to leave under certain conditions, such as if you have a post you haven't finished editing. ...
0
votes
1answer
587 views

My Java applets won't run in HTML

My Java applet runs fine when I open the HTML in AppletViewer, but when I open the html in like Chrome, it just says "Error, click for more details" and the details say that my security options ...
1
vote
1answer
68 views

Why does my browser ask me to confirm full screen?

I noticed that when I try to view a video or pdf file online in full screen, the browser ask me to confirm that I chose full screen. At least I saw this on chrome. Is there a security issue ...
0
votes
1answer
117 views

Checking security certificates in a browser

I have been given a laptop with pre-installed software and I am connecting to the internet on it via company wifi. When I am accessing a secure website using https, I want to ensure that the LAN ...
0
votes
0answers
61 views

Can one use SSL certificates for user authentication to websites?

I hear that it is possible to create SSL certificates and use them instead of password authentication. Is this true and how to do it? And do all SSL enabled sites allow this?
2
votes
2answers
542 views

Can I “Trust” non-SSL website for inclusion with SSL site?

Can I create exemptions in the major Windows browsers (IE, Firefox, Chrome, Safari) for the insecure content warnings you get when mixing https and http on the same page? WE have a site that needs to ...
-2
votes
1answer
81 views

How many “drive by” viruses were discovered in the last couple of years? [closed]

I mean those that infect by only viewing a website or clicking a link. Not those that you have to click "Download" in the Windows dialog. I want to know how important are virus definition updates in ...
0
votes
3answers
131 views

Is there a real possibility of “drive-by” getting malware? [closed]

I know malware can be gotten by downloading and running stuff, but is there a real possibility of just viewing a webpage and getting one? I'm not using IE. Please give some support to your answer. ...
1
vote
2answers
143 views

Our company claims that the DLP system can even monitor the contents of HTTPS traffic, how is this possible?

There is software installed on all client machines for DLP (Data Loss Prevention) and HIPAA compliance. Supposedly it can read HTTPS data clearly. I always thought that between the browser and the ...
0
votes
1answer
200 views

Does javascript have access to my bookmarks and history?

I'm using RefControl addon for firefox, to avoid sending the referer in the headers. But now I'm wondering if the previous page or even my full history can be viewed by websites with javascript. And ...
8
votes
3answers
3k views

How to hide Browser Plugin Details in firefox for more privacy?

I'm trying to trick the results in this page to have more privacy/anonymity: https://panopticlick.eff.org/index.php?action=log&js=yes So far the best I could do is change the user agent, with the ...
0
votes
2answers
4k views

Can we get a virus by allowing an External Protocol Request in Chrome?

Is it safe to click Launch Application upon clicking a bittorrent "magnet link"? : Could I get a virus by doing so? How safe is this compared to manually downloading the .torrent file to harddisk ...
0
votes
1answer
237 views

Gmail loses browser encryption after a while

I'm using the latest version of Firefox on the latest version of OS X for reference. I've noticed that sometimes when I go back to my email tab and look in the location bar, Firefox says gmail is no ...
6
votes
1answer
108 views

Does any browser or plugin have a 1 click means to surf securely?

I don't mean anonymously so much as I mean turn off JavaScript, Flash, and anything else that potentially has a virus. I recognize the UX goes way down, but that's one reason this has to be easy. ...
1
vote
2answers
30 views

From browser how to browse a link which needs priviledged IP address

From my local machine from home, I can not access this site. But I can ssh to my work machine and from there ssh to this machine hosting this site. Is there a way to do this ssh hopping to change IP ...
-1
votes
3answers
346 views

Why do some browsers ask for confirmation before following any HTTPS link?

I've seen many browsers, both mobile and desktop, show a warning dialog when I click on an HTTPS link. Just warning of the fact that this is an HTTPS link. For example, my Nokia E75 asks "Opening a ...
6
votes
2answers
198 views

Why might a browser sometimes ask for confirmation when going to an HTTPS page?

When I click on a link to an HTTPS link, the browser will sometimes ask for confirmation or channel me though a form before it will allow me to se the page. Why would it do this? (This question ...
1
vote
1answer
81 views

Is there a way to measure the level of security provided by a browser?

I am attempting to locate a lightweight browser that adheres to security standards when browsing the web and was wondering if I can measure the level of security provided by each browser so that I can ...
36
votes
8answers
17k views

How can I get a virus by just visiting a website? [duplicate]

Possible Duplicate: Can a computer be infected by malware through web browser? It is common knowledge that you can get a virus just by visiting a website. But how is this possible? Do ...
1
vote
1answer
62 views

Getting notified of Adobe Flash updates

I am using the latest version of Firefox with Adobe Flash plugin as a standard user on Windows 7. I notice that I do not get notified of a pending update unless I happen to close and reopen my ...
0
votes
1answer
92 views

Password-Sync (browser) with AUTH TLS support?

I'm looking for a addon/plugin or standalone software-solution to sync passwords with my own servers by using AUTH TLS. In fact, I do not trust projects like Firefox-Sync or LASTPASS and my superior ...
2
votes
2answers
99 views

How insecure is it to use an outdated web browser?

I'm not liking at all Firefox 4 (seriously... and for so many reasons) so I was thinking to downgrade to 3.X. In both Windows and Linux environments, would this imply security risks for my system?
0
votes
1answer
153 views

How does “Same Origin Policy” protect us?

Someone can please explain to me how does the "Same Origin Policy" feature protect us from web attacks (XSS,CSRF, etc)?
6
votes
3answers
1k views

Can a computer be infected by malware through web browser?

Can a computer be infected when it accesses a malicious web page? Why is not a web browser 100% safe? What web resources, such as Java Script, Flash or a HTTP connection, can infect a computer?
1
vote
3answers
800 views

How to ensure HTTPS is used to send credentials?

As a user, how do I know my user name and password sent to a server is encrypted with HTTPS? Let me preempt the answer of "look for the little lock" or "look for https in the URL" with the following ...
2
votes
3answers
3k views

What exactly does IE's InPrivate browsing do and how secure is it?

I recently started using InPrivate browsing with IE8 but not sure exactly how well it prevents websites I visit from extracting information from my computer or browsing sessions. Only reason I'm using ...
7
votes
5answers
1k views

Is it Possible for Hackers to steal password stored in your Browser

I was just wondering if XP passwords can be hacked then why cant a Hacker just hack my passwords stored in my browser. Is it possible for someone to know my browser saved password while I surf the ...
22
votes
8answers
13k views

Is there an HTTPS Everywhere add on for Chrome, MSIE or safari?

I really like this HTTPS Everywhere add-on for Firefox. But I tend to browser hop, so have similar HTTPS-preferring add-ons been released for the other major browsers?
0
votes
1answer
1k views

Chrome - SSL Security issue on Windows platforms?

Fortify.net is a service that displays what's the currently encryption key used by your browser in a https connection. If I browse this site with Chrome 4.1.249.1042 in WinXp SP3 the key used is ...
3
votes
7answers
2k views

Why not open a PDF file in the browser but first save it to the harddisk?

Question Is it correct that saving a PDF to the hard disk first, and then opening it from there with some PDF reader (not the browser) is safer than opening it directly with the browser plugin? My ...
5
votes
3answers
2k views

I'm using Firefox, configured to use a Squid proxy. Can the browser-proxy connection be HTTPS?

And what about Chrome, Opera, and Safari? (IE can go pound sand) Clarifying, I have the power to reconfigure Squid if necessary.
7
votes
8answers
279 views

Why do browsers have so many possible exploits?

When browsing I am ocassionally given warnings about pages that host malware "that could damage my computer". I am seriously perplexed as to why, in 2010, browsers still have possible exploits and can ...
2
votes
1answer
1k views

Internet Explorer security warning: want to view only the webpage content delivered securely?

Consider visiting a website using HTTPS. Internet Explorer (IE8 in this case) presents a warning: Do you want to view only the webpage content that was delivered securely? Clicking the More ...
1
vote
3answers
116 views

Is “Just close popup windows” an adequate security instruction for users?

My security officer came to me yesterday, and said the CEO had clicked a "viruses detected, click yes to scan" popup, after which of course his laptop was crawling with viruses. So the SO wants to ...
10
votes
7answers
1k views

Browser for paranoid people?

Is there a web browser out there that is more suited for paranoid people? Why would you choose it/ What feature would your ideal paranoia browser have? For instance i would want one which Sends NO ...
0
votes
3answers
77 views

Do alternate browsers/shells present a security risk?

So, there are lots and lots of less popular browsers out there that use a well known rendering engine. For example, IE7Pro or Epiphany. I've wondered about the safety of these browsers; sure, they ...
0
votes
2answers
1k views

Safari and IIS Windows Integrated Security

Is it possible to use Safari4 with an IIS hosted Intranet site that uses IntegratedSecurity (NTLM)? InternetExplorer and Firefox are capable of dealing with it. I couldn't find a way to get it working ...
2
votes
1answer
81 views

neohapsis “distcrack” applet : what does it do? Suspicious!

I went to this page on neohapsis about the latest Linux kernel bug. I kept this URL opened in a tab and I noticed that my CPU was at full load... Weird. Then after looking around for a while I notice ...
2
votes
1answer
639 views

Is there a standard meaning for _csuid/__qsa in cookies?

I was perusing my cookies, and discovered several cookies from various different sites, which all have the same value. They are all named "_csuid". I have another set, all from different sites, all ...
2
votes
4answers
1k views

Block user from opening IE

I have IE 6 on my family PC. Since I'm using Firefox, I don't intend to upgrade to IE 7. I'd like to block anyone using IE 6 as it is not secure. How to do this. I have seen my cousins typing ...
1
vote
5answers
2k views

How do I get my browser to remember passwords for secure sites?

I feel that my personal computers -- in my house -- are pretty safe. If someone has physical access to them then I am either okay with that or calling 911 with bigger problem. So I wonder: How do I ...
15
votes
6answers
4k views

How can visiting a webpage infect your computer?

My mother's computer recently became infected with some sort of rootkit. It began when she received an email from a close friend asking her to check out some sort of webpage. I never saw it, but my ...