You could be unknowingly loading malicious content from 'trusted' sites

Discussion in 'other security issues & news' started by guest, May 27, 2019.

  1. guest

    guest Guest

    You could be unknowingly loading malicious content from 'trusted' sites
    MAy 27, 2019
    https://phys.org/news/2019-05-unknowingly-malicious-content-sites.html
    Data61: Research reveals you could be unknowingly loading malicious content from "trusted" sites

    The Chain of Implicit Trust: An Analysis of the Web Third-party Resources Loading (PDF - 3.02 MB): https://arxiv.org/pdf/1901.07699.pdf
     
  2. Beyonder

    Beyonder Registered Member

    Joined:
    Aug 26, 2011
    Posts:
    545
    Isn't this what strict site isolation is for?
     
  3. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    Isn't this what extensions like uBlock, Ghostery and Privacy Badger try to block? Seems like old news to me, but still not a bad idea to remind people about what a mess most websites have become.
     
  4. guest

    guest Guest

    Those block mostly ads not malicious contents, for that you need NoScript or similar, they may even not be enough and reduce conveniency when surfing.

    Sandboxed browser (either built-in or via 3rd party apps) will eventually save you without hampering your surfing experience.

    AV vendors implemented traffic monitoring but for that they had to act like MITM, which for some is a no-go.

    You dont need dozen of extensions to be safe online, but a couple, just not browsing like an idiot.
     
  5. shmu26

    shmu26 Registered Member

    Joined:
    Jul 9, 2015
    Posts:
    1,550
    "Strict site isolation is a new experimental feature of Google's Chrome web browser that ensures that processes are limited to pages from one site."
    https://www.ghacks.net/2017/12/08/how-to-enable-strict-site-isolation-mode-in-google-chrome/

    This feature is nice but it won't stop remote scripts from running on a webpage you visit. You need NoScript or uMatrix or something similar for that.

    Sandboxing your browser will not stop remote scripts from stealing your credit card when you make an online purchase, or stealing other sensitive info, and that is the bigger problem nowadays.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.