Can a work Google account affect personal searches on my laptop?
I was using my personal laptop and home Wi‑Fi while signed in to my work email and Google Drive. After switching to Google Search, it looked like I…
browser security
Can Users Tamper With WebAssembly Code Running in Their Browser?
I'm building a browser-based application with Rust and WebAssembly. The idea is that users' browsers connect to one another and exchange data, then verify it using hashes or…
Can Users Tamper With WebAssembly Code Running in Their Browser?
I'm building a website with Rust and WebAssembly where browsers connect to one another and exchange data. For example, a browser might receive data A from several peers,…
Why Are Chrome and Edge Releasing Security Updates So Frequently?
Has something changed with browser security? Chrome and Edge seem to receive updates every few days, and Microsoft 365 Defender warnings are often followed by NinjaOne reporting that…
How Have Browsers Stored Cookies Over Time?
I'm researching how web cookies are physically stored by browsers. Modern Chrome appears to keep them in an SQLite database, possibly with encryption. Do other browsers use similar…
A Command Prompt Window Flashes Briefly After Visiting Suspicious Websites—Should I Be Worried?
A Command Prompt window appeared for about a millisecond after I visited some suspicious websites yesterday. When I started my PC today, I also saw a Windows notification…
An Unknown File Downloaded While I Was Browsing—Should I Be Worried?
I was watching a video and playing a browser game I've used for months when my computer suddenly notified me that a file had downloaded. It was around…
A Strange File Downloaded While I Was Browsing—Should I Be Worried?
While watching YouTube and playing a browser game I've used for months, I suddenly got a notification that a file had downloaded. It was around 67 KB, had…
Was my computer infected after a strange website redirect?
I searched for a "Low Tier God wiki" page and clicked what appeared to be an official Know Your Meme result. Instead of opening the expected page, it…
I Visited a Misspelled Domain and Was Redirected—Could My PC Be Infected?
I was trying to visit indianasheriffs.org but mistyped the address and landed on a misspelled version of the domain. That site automatically redirected me to yfdabv11.com with a…
I Visited a Misspelled Domain and Got Redirected—Could My PC Be Infected?
I meant to visit indianasheriffs.org but accidentally typed a misspelled version of the domain. That site automatically redirected me to yfdabv11.com with a long query string in the…
Why Does My Website Show NET::ERR_CERT_AUTHORITY_INVALID for One Company?
I recently created a website to meet a supplier's requirements for a secure HTTPS site. However, their contact receives NET::ERR_CERT_AUTHORITY_INVALID in two different browsers, while my hosting provider,…
How can a browser app protect private keys both at runtime and at rest?
I'm building a personal end-to-end encrypted chat application and I'm stuck between two imperfect browser storage options. Data in localStorage or IndexedDB may be readable from the browser…
How can a browser securely store a private key both at rest and during use?
I'm building a personal end-to-end encrypted chat application and have run into a secure-storage paradox. Data in localStorage or IndexedDB is generally available as plaintext on disk, while…
Can Users Really Be Trained Not to Click Suspicious Links?
I had one of those exceptionally bad IT days. An executive handed me a laptop with every major browser hijacked, plus a couple of questionable extra browsers and…
Why don’t browsers enforce safer security defaults by now?
I've been reviewing CSRF and CSP and noticed that many web security protections are still opt-in. They often exist to patch weaknesses or unsafe assumptions built into older…
Why don’t browsers enforce safer defaults more aggressively?
I've been reviewing CSRF and Content Security Policy guidance and noticed that many important protections are still opt-in. Often, newer security features are added to patch weaknesses in…
Why Should We Choose a Dedicated Password Manager Over Google Credential Manager?
I'm working with Entra ID and most of our team uses Chrome for their web browsing. I suggested hosting a password manager like Vaultwarden, but it was quickly…
How are you handling browser security within your organization?
I'm curious about how everyone here is managing browser security in their organizations. We've got solid endpoint protection, firewalls, and email filters in place, but I feel like…
Am I Safe After a Suspicious Malware Notification?
Hey everyone! So, I was on my desktop downloading music (probably not the smartest move) and got curious about Piratebay. While I was fiddling around in the audio…