Security Affairs

APRIL 3, 2020

file:///path/to/file/index.html) to fool the browser into changing the domain name using JavaScript. blob://skype.com) to run arbitrary JavaScript code, for example, to access the victim’s webcam without permission. Technical details about the hack demonstrated by the researchers are included in his post.

Passwords 136

Passwords Access Security IT 136

Troy Hunt

NOVEMBER 19, 2020

The hard bit for me is figuring out whether it's pwn-worthy enough to justify loading it into Have I Been Pwned (HIBP) or if it's just more noise that ultimately doesn't really help people make informed decisions about their security posture. Let's take the example above which allegedly came from chordie.com , a guitar forum.

Passwords 145

Passwords Archiving Risk File names 145

Troy Hunt

MARCH 9, 2022

Last month as part of my blog post on How Everything We're Told About Website Identity Assurance is Wrong , I spun up a Cloudflare Pages website for the first time and hosted digicert-secured.com there (the page has a seal on it so you know you can trust it).

Passwords 139

Passwords Access IT Cybersecurity 139