Is this a security risk???

Hi,
Earlier today I was Googling dog breeds on Safari on my iPhone as we are thinking of getting a puppy.
I chose one particular site (that seems like a legitimate dog lovers website), but when I clicked the link instead of going straight to the site, a block of text about certain pills (it seems if I type the word my post if forbidden from loading and gets deleted).
The page with the paragraph only appears for a moment and the site loads.
It isn't a new tab or window, but it appears in the same page.
It only showed when the link was clicked, but not if I just clicked the back or forward button.
I've cleared the history and cookies.
It hasn't happened on any other site.
Does anybody know what this is?
Is this a security risk or just an invasive, but ultimately harmless, attempt at advertising?
Regards.

Hi Thomas,
Thanks for the input.
I think you mean sites where the advert appears and you are often given the option to skip.
However, the cheap layout, the speed with which it passed and, basically, the nature of the type of product are what put me on alert.
It may have been just a cheap advert (as it passes so quickly I only ever saw the first line) however that product it often associated with spam and the likes so I wanted to check.

Similar Messages

Is firefox Hello (v36.0) automatically opening a listening port when starting up? Is this a security risk?

After updating to firefox 36, windows firewall offered to block firefox. That usually happens when a program opens a port to accept INCOMING connections. Currently I have blocked it!
Is firefox opening a listening port and is that a security risk?
Have fun

Mozilla Firefox is very security conscious and privacy aware.
Some of the connections made are intended to increase security by ensuring everything is updated.
See
* https://www.mozilla.org/privacy/websites/ {and follow linked articles)
* [[How to stop Firefox from automatically making connections without my permission]]
I am not certain if the Hello & social button do anything, but you can experiment with the settings mentioned in the above article, although generally it would be best if after any experiments you returned to the default settings.

Ping Flood - is this a security risk?

In my Administration Security log file I have entries I do not understand. Can anyone tell me what they might mean?
SYN Flood - this is appearing one to three times a week for the last two months.
LAN-side Ping Flood
IP packet w/MC or BC SRC addr - this appears about as often as Flood

I see this happening on my WRV200 Firmware Version: 1.0.32.2.
I run a tcpdump from linux and I see the router ping flooding the network. I have copy a small dump from what I see. The routers last restart was between 24 -> 48. The longer the router has been running the more ID start repeating.
12:15:03.994218 IP gateway > 192.168.2.255: ICMP echo request, id 876, seq 41597, length 64
12:15:04.551532 IP gateway > 192.168.2.255: ICMP echo request, id 841, seq 43492, length 64
12:15:05.031502 IP gateway > 192.168.2.255: ICMP echo request, id 876, seq 41598, length 64
12:15:05.575543 IP gateway > 192.168.2.255: ICMP echo request, id 841, seq 43493, length 64
12:15:06.053295 IP gateway > 192.168.2.255: ICMP echo request, id 876, seq 41599, length 64
12:15:06.606406 IP gateway > 192.168.2.255: ICMP echo request, id 841, seq 43494, length 64
12:15:07.071786 IP gateway > 192.168.2.255: ICMP echo request, id 876, seq 41600, length 64
12:15:07.639247 IP gateway > 192.168.2.255: ICMP echo request, id 841, seq 43495, length 64
12:15:08.127192 IP gateway > 192.168.2.255: ICMP echo request, id 876, seq 41601, length 64
Message Edited by theghost on 07-02-2007 09:20 AM

I currently use CS Photoshop 5.1 on Mac. I have just upgraded to Yosemite 10.1.0. In order to run CS Photoshop 5.1 I need to downgrade to Java 6. Is this safe, or will I become exposed to security risks?

I currently use CS Photoshop 5.1 on Mac. I have just upgraded to Yosemite 10.1.0. In order to run CS Photoshop 5.1 I need to downgrade to Java 6. Is this safe, or will I become exposed to security risks?

Photoshop does not use any external java it has it own "ScriptingSupport" plug-in, Some thitd Party plug-in and perhaps Adobe installer may use an external Java. I don't use a Mac, The latest Java I have on Windows is version 8 there are security issues in prior versions.

Portable hard drive no longer requires password to decrypt it - security risk

I have a WD passport for Mac. It was previously encrypted and i would have to enter a password every time I wanted access to the drive - perfect. But then I had to decrypt it and when I had finished I re-encrypted the drive once again by right clicking and selecting encrypt drive. The drive is now encrypted again which is good, but the problem is that when I now plug it into my MBP the files are automatically accessible...the drive doesn't require a password to decrypt it anymore.
This is obviously a security risk so i want to go back to having to provide a password to unlock the drive. I've read some stuff about the password being saved in keychain but not had any luck looking for it and I'm a bit of a novice!
I'm using a 2012 MBP Retina with the latest OS
Can anyone help please?

This procedure is a diagnostic test. It makes no changes to your data.
Please triple-click anywhere in the line below on this page to select it:
{ diskutil list; echo; diskutil cs list; } | pbcopy
Copy the selected text to the Clipboard by pressing the key combination command-C.
Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad and start typing the name.
Paste into the Terminal window by pressing the key combination command-V. I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting.
Wait for a new line ending in a dollar sign ($) to appear below what you entered.
The output of the command will be automatically copied to the Clipboard. If the command produced no output, the Clipboard will be empty. Paste into a reply to this message.
The Terminal window doesn't show the output. Please don't copy anything from there.
If any personal information appears in the output, anonymize before posting, but don’t remove the context.

Are there any good tool for checking security risks, Code review, memory leakages for SharePoint projects?

Are there any good tool for checking security risks, Code review, memory leakages for SharePoint projects?
I found one such tool "Fortify" in the below link. Are there any such kind of tools available which supports SharePoint?
Reference: http://www.securityresearch.at/en/development/fortify/
Amalaraja Fernando,
SharePoint Architect
Please Mark As Answer if my post solves your problem or Vote As Helpful if a post has been helpful for you. This post is provided "AS IS" with no warrenties and confers no rights.

Hi Amalaraja Fernando,
I'm not sure that there is one more tool that combines all these features. But you may take a look at these solutions:
SharePoint diagnostic manager
SharePoint enterprise manager
What is SPCop SharePoint Code Analysis?
Dmitry
Lightning Tools Check
out our SharePoint tools and web parts |
Lightning Tools Blog | Мой Блог

Windows 8.1 Security Risk / Not able to log off a user

Hello Community,
First and foremost good morning, I hope everyone is having a good morning. I'm in dire need of a solution. The company I work for has four (4) standalone computers with Windows 8.1
which are located in a break room for, you guessed it, breaks! They are not on the domain but are on a workgroup. A former user from the company has one of these machines completely locked up. Here's what I mean:
When a user sits down at one of these computers they click on the account Breakroom1, Breakroom2, etc....up to 4 which lets them login. However, somehow a user has logged in with
an outlook account and there is absolutely no way for me to log this person out. I can't right click anywhere and get a logoff button. I can't right click on the red circle and get an option to log this person out. The only options I get
are restart, sleep, and shutdown. I've browsed through setup to see if there were any options to kick this person off. I'm completely stumped. I believe this to be a security risk because no one has been able to do anything about this.
I'm trying veryhard not to reimage this machine.
If anyone has any ideas I will gladly try them out and I thank everyone in advance for their time.
Respectfully,

Hi Ricky ,
“somehow a user has logged in with an outlook account and there is absolutely no way for me to log this person out.”
Do you mean someone connect the Microsoft account with the local account and then the machine is locked now. You can`t get into the machine unless you know the Microsoft account`s password, right?
To solve this problem ,I am afraid you have to contact the Microsoft account`s owner firstly to unlock the account. To avoid this tiresome issue in the future, I recommend you take the following steps:
1.Log on the computer as an administrator
2.Run the gpedit.msc and look for the following group policy and set “Users can`t add or log on with Microsoft accounts”,
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Accounts: Block Microsoft accounts
3.Run gpupdate /force
4.I recommend you take this solution to the others` pcs in the Breakrooms .
Best regards

Can not open multiple excel 2003 and excel 2007 files in excel 2010 - message says they may be a security risk and wants to do a scan

We use about 20 excel files to build a consolidated financial statement for our company. Some of the files were built when the computers were running 2003 and some when we had 2007. We are being upgraded to Windows 7 with Office 2010. In
2007, we would simply highlight all the files in a folder, right click, and open. Once they had all refreshed for new data, we would close them all. Now with Excel 2010, we've highlighted all the files, but when we right click, we get a message
that says some files may present an internet security risk. Then it ask if we want to open anyway. If we say yes, we get a box that asks us to scan the files. We've done a scan, but at the end it still doesn't open the files. If we
say no, it does nothing. Either way, we're not getting the files open except to open them 1 by 1. We're not sure how to get rid of this...any suggestions?

In Excel 2010 setting those documents as trusted documents, or adding the folder containing as a trusted location may do the trick for you. There's a full description of what it does here
http://blogs.technet.com/b/office2010/archive/2009/09/28/trusted-documents.aspx but if you go into File, Options, Trust Center, Trust Center Settings..., and then Trusted Locations, you'll see the list of currently configured file paths that are considered
trusted on your machine.
At the bottom of that window you can check the option to allow trusted locations on the network (so you can trust the files that I assume are stored on a network location) and then add the location of those files to the list.
Note, this setting is done per machine profile, so if it does the trick for you then each person needing these files would need to do this. Also, keep in mind that by doing this you're removing some of the protections added into Excel, so you should only
go adding locations you know you can trust (not just the root of a network path where anyone and everyone might go saving spreadsheets they've downloaded form the internet).

Firefox deleted a program and I need it back - where can I see a list of programs Firefox deemed a security risk?

Firefox reported a program as security risk and I hurriedly deleted. It is not a virus it is a very important program I need o work. How can I retrieve this program?

you're probably referring to the deactivation of the java plugin - go to [java.com] and download the latest version that has the security vulnerabilities already fixed.
also see [[Unblocking the Java plugin]]

Is Hulu a Security Risk for OS X?

I can't find an uninstaller, or a list of what their +Video Player+ installs. I went to stream an ABC show, and one of the fine-print clauses in the Agreement states:
+"Disney may configure The Software with certain tags that identify the version of The Software being used which permit Disney to *update this version without further notice* to you."+
Is Hulu a security risk, or spyware, or is it on the level?
Thanks.

After reading their Privacy statement & TOU, it looks like they can do whatever they want to your computer after signing up...
Hulu collects personally identifiable information in order to establish and enhance our relationship with you.
Enhanced? For who?
Downloads. In order to participate in certain Hulu Services, you may be notified that it is necessary to download software or other materials or agree to additional terms and conditions. Unless otherwise provided by these additional terms and conditions, they are hereby incorporated into these Terms.
All pretty standard fare for today's world though, so unless you've ever heard of a Corporation taking unfair advantages of people... I wouldn't worry!

Web form and database security risk

I'd like to develop an Oracle Form or APEX Form where people don't have to login to use it. Like a registration form on our website, where anyone can fill it out. Ideally, the information entered into the form would be saved to an Oracle table (could use a flat file if database security is an issue). I'm a developer and don't know a lot about the security side.
I'm thinking we would need a static IP address and an Oracle public password that doesn't expire, since the public doesn't have to login to use the form.
Is this possible and is it a database or network security risk ?

An APEX page can certainly be configured to not require authentication (that's pretty standard for the login/ registration page). There is no need for an "Oracle public password." There are accounts in the Oracle database that APEX uses but that no human needs to know the password for. If that's what you mean by "Oracle public password" then, yes, you do. But that would be the case no matter what authentication and authorization scheme you use in APEX.
A static IP address for your web server is likely a good idea. It's possible to have DNS work with dynamic IP addresses but that's probably not what you want.
Justin

On mozilla's OWN WEBSITE I get the message 'Your Firefox is out of date and may contain a security risk!" but I just download and installed the latest version?

I have the latest version of firefox to date (10/15/2014 v32) and I still get messages while on various websites (Youtube, Google, Gmail) telling me that Your Firefox is out of date and may contain a security risk.
I even get that message on the support pages of mozilla.org??
I've tried the about:config reset the useragent(s) fix but that doesn't work.
I've tried browsing in safe mode and still get the error.
Why is this False/Positive happening?
Thanks

hello your useragent (the information the browser sends to websites to identify its version) - apparently mistakenly - shows this:
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20140923 '''Firefox/4.0.0; xs-A30GTmfXR3o;CkHZPf;'''
probably some sort of unwanted software has overwritten it. please refer to this article in order to reset the user-agent settings in firefox:
[[Websites say that Firefox is outdated or incompatible even though it's the latest version]]
in case this does not help, please try to reset the whole browser:
[[Reset Firefox – easily fix most problems]]

Which security risks can be exploited bij opening a routed port on a windows network

Which security risks can be exploited by opening a routed port on a windows network
Our company is implementing a web application with potential security issues we have never dealt with before. The situation is
as follows:
Network
•A LAN with internet router and firewall with a port (f.e. 4589) open, which is routed to IIS server address.
•Network with IIS server, Windows clients and server(s)
•MSSQL application Database on a windows client or server
•IIS Server hosts a .NET 4.0 WCF Web service
Purpose of this config:
•Internet users can use IIS web service to read and write application database tables.
•IIS server has a certificate for authenticity, web services are configured to only use https.
•Application exposes 2 web services:
•1. without user authentication: can only read non-essential information from database
•2. with user auth., for reading and writing more essential information.
I have the following questions concerning security:
1.Can I Isolate external access to the IIS server only, and shield access to the rest of the physical (windows) machine ?
2.We have a lot of customers with only 1 windows 7 or 8 PC. What extra security risks arise in case of a combined MSSql Express
database, Windows integrated IIS 7 or 8, and a customer doing its daily business on the windows client on this PC. (Daily business involves: use of our application (with database), Email, Office, Internet)
3.Can you see any other security vulnerabilities in this scenario, assumed that all machines in the LAN are properly patched ,
shielded with antivirus product and maintained?
Since security is not really my field of expertise, I would be very happy to get some explanation on potential risks of this
configuration.
Thanx in advance, Oskar Stok
Thanks in advance. Sincerely, Robert Bakker Flexdata

Hi,
1.Can I Isolate external access to the IIS server only, and shield access to the rest of the physical (windows) machine ?
You can configure Windows Firewall rules based on ports.
2.We have a lot of customers with only 1 windows 7 or 8 PC. What extra security risks arise in case of a combined MSSql Express
3.Can you see any other security vulnerabilities in this scenario, assumed that all machines in the LAN are properly patched ,
Honestly, I don’t see vulnerabilities here, if you want to secure the server and clients, place them in a private network, you can also use NAT and hardware firewall.
In addition, you can install System Center Endpoint Protection to prevent virus and spyware.
More information for you:
Configuring Firewall Rules
http://technet.microsoft.com/en-us/library/dd448559(v=WS.10).aspx
Frequently asked questions about malicious software
http://technet.microsoft.com/en-us/library/ff823783.aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Is knowing a user's SID a security risk?

If a SID of a user was in plain text on a PC (say a text file), would that be a security risk?

This is kind of a complex question? But if you can pull the AD useraccount SID's with a simple WMIC command with "domain user" -security group rights. So I would say that If someone can access the machine with user rights and get this information
its not a huge risk?
Yeah, I just wanted to double check. I mean a user name is a friendly conversion from the SID (much like a DNS name is to an IP address), right?

Shockwave flash 16.0.0.235 installed, it is a security risk, cannot update it

There is an outdated page on the Adobe Flash web site being blocked by Firefox 35.0.1 on Windows 7. Version 16..0.0.235 of Flash is labeled a security risk, "Always activate" is greyed out. I was on the Plugins page, and there I clicked the update now linktext. I was advised that all older versions of Flash in the version 11 range are blocked. Nowhere to go from there. (My screenshot has a piece off the Plugins page above the resulting page when I clicked on the indicated link.)
The outdated page being blocked was allowed and I was able to run through the download procedure, but in the end I had an error.
I repeatedly tried downloading install_flashplayer16x32_mssd_aaa_aih.exe, which downloads OK, and when I run it it downloads and installs Adobe Flash, then says Finish and "There was an error."
Glary Utilities software updater updated Internet Explorer's Flash, said nothing of Firefox, now I know why. This is a mess.
I opened up firefox -p and went to the new blank profile I had created sometime back. It was happily running a fully-enabled version 11 of Flash (I bet that wouldn't last long as my browser bites me in the butt and disables it).
Firefox -p and I created a new profile today. It has this crippled version 16.0.0.235 of Flash.
It appears that Mozilla has an outdated page telling me that all old versions in the range of version 11 are blocked. No word there about the more recent versions.
From what else I've read, others are turning to other browsers and coming up with a bad Flash, too. I only have Firefox (well, Internet Exploder, which I discounted as a piece of rubbish ever since they came out with IE 7).
Any advice? Thank you.

I've been having some Internet issues following an inch of rain around here. That's hampered my ability to respond to this thread. Please accept my apology.
First I tried the msi version of adobe flash and it failed with an error. I have screen shots. Next I tried the exe installer, and it just didn't start when I hit the run dialog.
Further, it seems that I can't install anything on here, as I tried to install Ad Aware. It got so far and said it couldn't install the updater. Avast! told me my Java Runtime Environment 8 and Java Runtime Environment 7, and my Flash plugin are all due for updates. Avast! reported both Java updates failed.
I will try to install another browser, and see if that, too, hits this "can't install" routine. Just for the sake of trying something.
I have "no malware," according to Avast! and Glary Utilities.
In windows 7, what log would I look at to find reasons for these issues?
Screenshots: Left: I ran the msi; Middle: It got this far and failed; Right: it reported this error on the finish screen.
Thanks.

Is this a security risk???

Similar Messages

Maybe you are looking for