Security Basics mailing list archives

web browser security/hardening


From: "sun sadm" <sunsadm () gmail com>
Date: Wed, 9 Aug 2006 16:23:06 +0200

Hi colleague

Because I visit dangerous and dirty pr0n sites (like every male
person) I locked down my Web Browser on Fedora Core 5

Information available from my local Web Browser (tested by
showmyip.com): User-Agent, wrong Time stamp, Languages
All other Information were filtered by Privoxy

I use a Mozilla Firefox (which is updated by Fedora's "yum") with the
plug in "noscript"
- don't allow Java (it means no program can bypass sandbox restrictions)
- allow JavaScripts very seldom from trusted sites
- delete all cookies with closing browser
- no auto download of file and no auto install of plug ins
- never us auto remember of passwords, I use always fake addresses
- disable ads

Because of low performance I don't use onion routing with TOR

Am I secure from common Web Attacks like Cross-Site Scripting,
malicious scripting, active content, Spoofing (called Phising)?
What would you improve in my setup?

Nico

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: