Collaborate Disseminate
From Cross-Origin Resource Sharing (CORS) – HTTP | MDN:
CORS failures result in errors but for security reasons, specifics about the error are not available to JavaScript. All the code knows is that an error occurred. The only way to dete… Continue reading What are the reasons for CORS failure errors to not be available to JS?
What would be the reasons for why a GitHub repo suddenly get cloned by a huge amount of times in a short period of time? If that’s a bot then what can it do with it? Unlike a referral spam, GitHub doesn’t show anything about the cloners, s… Continue reading What would be the reasons for a GitHub repo suddenly get cloned by a huge amount of times in a short period of time? [closed]
I click a link with good content (this doesn’t guarantee the site isn’t compromised) and Firefox gives me this error:
Websites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is n… Continue reading How does a site use the wrong certificate?
Windows 7 support will end on January 14, 2020. Assuming that after that day I still use an updated browser, is it true that I’m still safe? Can it “patch” the OS-based security holes?
Minor question: typically, how long wou… Continue reading Is an up-to-date browser secure on an out-of-date OS?
I think many people will be insulted if they notice Google Analytics tracking code in the link you send to them, but I think if you announce it upfront then it would be fine. What is left is how to draft such a notice, so tha… Continue reading What to write in a notice about tracking method in links? [on hold]
From this answer about browser security:
time to update if you really care about security
So if every other software and functions I need can work on a 32-bit OS, I guess the only reason for upgrade is the browser’s security? Can you… Continue reading Why should browser security be prioritized?
I live in a country with little freedom on the Internet (not as strict as in China, but some sites, particularly anti-government sites are inaccessible without a VPN). Recently the government just went collecting the Wi-Fi na… Continue reading Why would the government collect Wi-Fi SSIDs via manual door-to-door questioning of citizens?