Basic Auth exposed to ISP/DNS?
Would someone using basic authentication in a URL such as
https://username:password@example.com
have their credentials be visible to their ISP or DNS?
Category Archives: isp
Is it safe to whitelist my public ip to a server, even I am behind CGNAT?
I have a few VPS and Databases in GCP, I can access them by whitelisting my IP, but just few months ago my ISP rollout their CGNAT and I was affected. As far as I know CGNAT, allow multiple subscriber to have a single public IP.
Is still … Continue reading Is it safe to whitelist my public ip to a server, even I am behind CGNAT?
Can my isp see the (non-https) websites I visit if I use browser VPN extension?
Can my isp see the (non-https) websites I visit if I use browser VPN extension?
Chrome notices non-secure connection for them but I use browser based VPN extension and different country (VPN server).
Continue reading Can my isp see the (non-https) websites I visit if I use browser VPN extension?
News Wrap: PoC Exploits, Cable Haunt and Joker Malware
Are publicly-released PoC exploits good or bad? Why is the Joker malware giving Google a headache? The Threatpost team discusses all this and more in this week’s news wrap. Continue reading News Wrap: PoC Exploits, Cable Haunt and Joker Malware
The top telco conferences and trends shaping our future
For those of you that may not know about Allot, we’re a leading provider of cybersecurity solutions for communication service providers and innovative network intelligence for both service providers and enterprises all over the world. We help top… Continue reading The top telco conferences and trends shaping our future
DHS Cyber Agency Seeks Subpoena Authority to Obtain Cyber ‘Victim’ Info
On Dec. 12, senators Ron Johnson (R. Wis.) and Maggie Hassan (D. N.H.) introduced legislation that would grant DHS’ Cybersecurity and Infrastructure Security Agency (CISA) the authority to issue subpoenas to force ISPs to tell them the true identities… Continue reading DHS Cyber Agency Seeks Subpoena Authority to Obtain Cyber ‘Victim’ Info
Can a customer request their own ISP traffic logs? [closed]
A friend of mine’s wife claims she caught him browsing less than upstanding websites when she came home unexpectedly from work. Due to a sitcom-worthy series of events he cannot prove it using the machine. Question is is it… Continue reading Can a customer request their own ISP traffic logs? [closed]
Bypassing ISP firewalls to get free internet
I have been curious on how one get free internet from an ISP. I have been digging around. I figured isps allow access to their websites free of charge.
I was asking if it is possible to run some kind of local proxy server tha… Continue reading Bypassing ISP firewalls to get free internet
Is it possible? Probing IPv4 IP with IPv6 [closed]
I recently came across with a strange finding, while I was doing a nmap scan
ISP-1: One IPv4 IP on the scanning computer. I conducted the nmap scan and I was not able to find any open ports.
ISP-2: An IPv6 and IPv4 IP on th… Continue reading Is it possible? Probing IPv4 IP with IPv6 [closed]
Is it possible to mac-spoof Xfinity Wireless?
Background
Comcast/Xfinity operates various wireless hotspots across the US, accessed via the SSID xfinitywifi through the many wireless access points shown on https://hotspots.wifi.xfinity.com/
xfinitywifi hotspots are all open/unsecure… Continue reading Is it possible to mac-spoof Xfinity Wireless?