Consent-O-Matic: Extensión de navegador que rellena automáticamente las ventanas emergentes de cookies en función de tus preferencias

Browser extension that automatically fills out cookie popups based on your preferences - cavi-au/Consent-O-Matic » GitHub | github.com

7 de mayo de 2023 · 1 min · 18 palabras · Nacho Cano

Today's rabbit hole: securing JWTs for authentication, httpOnly cookies, CSRF tokens, secrets & more

Note: this is first and foremost the tale of a journey. It acts as a how-to, but I also want to share… » DEV Community | dev.to

25 de agosto de 2020 · 1 min · 27 palabras · Nacho Cano

11 Ways To Track Your Moves When Using a Web Browser

some tracking methods do attempt to track the user over a long time, and in particular attempt to make it difficult to evade the tracking. This is sometimes done for advertisement purposes, but can also be done to stop certain attacks like brute forcing or to identify attackers that return to a site. In its worst case, from a private perspective, the tracking is done to follow a user across various web sites. Over the years, browsers and plugins have provided a number of ways to restrict this tracking. Here are some of the more common techniques how tracking is done and how the user can prevent (some of) it ...

15 de marzo de 2015 · 1 min · 116 palabras · Nacho Cano

Unsafe cookies leave WordPress accounts open to hijacking, 2-factor bypass

Yan Zhu, a staff technologist at the Electronic Frontier Foundation, came to that determination after noticing that WordPress servers send a key browser cookie in plain text, rather than encrypting it, as long mandated by widely accepted security practices. The cookie, which carries the tag ”wordpress_logged_in,” is set once an end user has entered a valid WordPress user name and password. It’s the website equivalent of a plastic bracelets used by nightclubs. Once a browser presents the cookie, WordPress servers will usher the user behind a velvet rope to highly privileged sections that reveal private messages, update some user settings, publish blog posts, and more. The move by WordPress engineers to allow the cookie to be transmitted unencrypted makes them susceptible to interception in many cases. ...

26 de mayo de 2014 · 1 min · 131 palabras · Nacho Cano