Author Topic: Tests and other Media topics (Read 631136 times)

Para-Noid · « **Reply #300 on:** August 19, 2015, 04:02:26 PM »

Ask Sucuri: How does SiteCheck work?

https://blog.sucuri.net/2012/10/ask-sucuri-how-does-sitecheck-work.html?utm_campaign=Ask%20Sucuri%3A%20How%20does%20SiteCheck%20work%3F%20Blogpost&utm_medium=social&utm_source=googleplus

Para-Noid · « **Reply #301 on:** August 19, 2015, 04:03:19 PM »

10 Tips to Improve Your Website Security

https://blog.sucuri.net/2015/06/10-tips-to-improve-your-website-security.html?utm_campaign=10%20Tips%20to%20Improve%20Your%20Website%20Security%20Blogpost&utm_medium=social&utm_source=googleplus

polonus · « **Reply #302 on:** August 19, 2015, 04:09:03 PM »

Two fine new test links: http://oscarotero.com/embed/demo/index.php?url=
and
http://iframely.com/debug also avail;able as extension.
and Low Level Site Explorer: http://1col.ru/www.investigue-me.tumblr.com

enjoy, my good friends, enjoy.

polonus · « **Reply #303 on:** September 18, 2015, 10:01:11 PM »

Test for the WbRTC IP Leak VPN/Tor IP Test: http://www.japanweb.info/browse.php/GBWhw2bzXIaDEN9sFiADKd5_2FtKHD9Lg_2F4G2TUJ3BpxHczbg_3D/b29/fnorefer/
Nothing showed up.
http://www.japanweb.info/browse.php/UQChm3nl/X8GAD89z/ByIeOcN1/q6HD_2Fr/h9uA_3D_/3D/b29/
Only the IP of the proxy is shown: 108.59.11.116
But we see this proxy could also be abused: https://www.stopforumspam.com/ipcheck/108.59.11.116
abuse on hosted-by.leaseweb.com in Delaware
commonName=server.bind2.com - OpenSSH 5.3 (protocol 2.0)
0/tcp open http Apache httpd 2.4.12 ((Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4)
| http-methods: Potentially risky methods: TRACE
ssl/http Apache httpd 2.4.12 ((Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
with a defect in delegation handling
Found mail servers with inconsistent reverse DNS entries -> mailfilter2.ocom.com. 2001:1af8:4100:a064::20
Primary nameserver: dns01001.ams1.lswcdn.com.
Concluding the proxy scan result.

polonus

polonus · « **Reply #304 on:** September 19, 2015, 01:03:06 PM »

I tested this code here:

Code: [Select]

 <HTML>
<HEAD>
<TITLE>My First Script</TITLE>
</HEAD>

<BODY>
<H1>Let's Script...</H1>
<HR>
<SCRIPT LANGUAGR="JavaScript">
<!--hide from old browsers
document.write("This browser is version "+chrome.appVersion)
document.write("of <B> + chrome.appName +</B>.")
//end script hiding -->
</SCRIPT>
</BODY>
</HTML>

here: http://caja.appspot.com/ Rendered result Eval Result Time 361 ms = Let's Script...

(source adopted from Javascript Bible)

polonus

polonus · « **Reply #305 on:** September 19, 2015, 07:28:38 PM »

DNS router checker: https://campaigns.f-secure.com/router-checker/
NO ISSUES WERE FOUND
All is well. Have a nice day!

polonus

bob3160 · « **Reply #306 on:** September 19, 2015, 10:02:33 PM »

Quote from: polonus on September 19, 2015, 07:28:38 PM

DNS router checker: https://campaigns.f-secure.com/router-checker/
NO ISSUES WERE FOUND
All is well. Have a nice day!

polonus

No issues found here either but I already knew that from my Avast Network Scan.

polonus · « **Reply #307 on:** September 22, 2015, 01:58:39 AM »

Test for Canvas Fingerprinting here: http://www.browserleaks.com/canvas
Detect it on sites? Re: https://chrome.google.com/webstore/detail/canvasfingerprintblock/ipmjngkmngdcdpmgmiebdmfbkcecdndc
Who is into this: CanvasFingerprintBlock
Blocked 2 potential HTML canvas fingerprinting attempts on this page
Prevented a script on https://hackertarget.com from capturing the point (16, 16) on the following 300px × 150px canvas:
Prevented a script on https://hackertarget.com from capturing the following 300px × 150px canvas:
300px × 150px

polonus

Simion · « **Reply #308 on:** September 22, 2015, 04:34:04 AM »

Quote from: polonus on September 22, 2015, 01:58:39 AM

Test for Canvas Fingerprinting here: http://www.browserleaks.com/canvas
Detect it on sites? Re: https://chrome.google.com/webstore/detail/canvasfingerprintblock/ipmjngkmngdcdpmgmiebdmfbkcecdndc
Who is into this: CanvasFingerprintBlock
Blocked 2 potential HTML canvas fingerprinting attempts on this page
Prevented a script on https://hackertarget.com from capturing the point (16, 16) on the following 300px × 150px canvas:
Prevented a script on https://hackertarget.com from capturing the following 300px × 150px canvas:
300px × 150px

polonus

Greetings Damien:

I have tested this on a linux platform with chromium browser. I have installed the add-on which seems to work properly. But despite reading "How Does It Work" and "Further Reading", I don't understand why being unique and not in their database is a bad thing (red X). Any thoughts?

polonus · « **Reply #309 on:** October 01, 2015, 12:27:57 AM »

Examples of SQL and a checker:
http://www.itl.nist.gov/div897/ctg/dm/sql_examples.htm
Mysqli Prepare Statement Checker

This tool is to help debug SQL statements used in mysqli prepare statements. Enter your SQL, flags and variable that you would use in constructing your prepare statement below to see the SQL generated as well as any issues.

SQL:
INSERT INTO STATION VALUES (13, \'Phoenix\', \'AZ\', 33, 112); INSERT INTO STATION VALUES (44, \'Denver\', \'CO\', 40, 105); INSERT INTO STATION VALUES (66, \'Caribou\', \'ME\', 47, 68);
Issues:
More flags than variables. Less placeholders (?) than flags
SQL Query:
INSERT INTO STATION VALUES (13, \'Phoenix\', \'AZ\', 33, 112);
INSERT INTO STATION VALUES (44, \'Denver\', \'CO\', 40, 105);
INSERT INTO STATION VALUES (66, \'Caribou\', \'ME\', 47, 68);

Flags:
isd
Only use i, s, d or b. Check tool: http://www.mustbebuilt.co.uk/apps/mysql-prepare-checker/

enjoy, my good friends, enjoy,

polonus

polonus · « **Reply #310 on:** October 14, 2015, 07:48:13 PM »

Test to see if they’re tracking you, visit request.urih.com. Go to: http://request.urih.com/
40% of the trackers on this site could be protecting you from NSA snooping. Tell urih.com to fix it.

Identifiers | All Trackers
Insecure Identifiers
Unique IDs about your web browsing habits have been insecurely sent to third parties.
Tracked e.g. by levelity.com (non-secure ID tracking).

To get likewise reports, install Tracker SSL extension in Google Chrome: chrome://extensions/?id=hgoabgkpjcbliklekfgepfdlmcnkjnao

polonus

polonus · « **Reply #311 on:** October 15, 2015, 03:46:18 PM »

Coming to a place near you soon copyright on JPEG images?
Next step copyright on sharing txt's? Read: http://www.engadget.com/2015/10/14/jpeg-copy-protection/?ncid=txtlnkusaolp00000589
Whenever you wanna do this, have it visibly inside the picture, add watermark and eventually a CopyRight sign,
so folks know it has DRM protection, else we are in muddy waters sharing copyrighted material we don't even know was
copyrighted in the first place. Nice project for bounty hunters to gain some extra money....

And what about free jpeg that wanna be shared?

Good developent DRM on anything to protect new sacks with old wine and vested interests?

polonus

polonus · « **Reply #312 on:** October 20, 2015, 02:18:25 PM »

Dear Avast Community Friends,

Did you test here: https://en.internet.nl/
My test results could not be excellent because my provider here has not yet migrated to supporting IPv6 next to IPv4.
I have an IPv6 address starting with "fe" (same fc-fd) unable to work with the public IPv6 Internet.
The situation of many globally now. Good thing is they do not expect any issues for me after the launch!
DNSSEC is OK. Also test here: http://test-ipv6.com/ (translate with Google Translate).

polonus

Secondmineboy · « **Reply #313 on:** October 20, 2015, 02:33:33 PM »

Got a full 0/10, our routers do not support IPv6 and i bet they still run with the original firmware.

I dont want to know how old they are anyway......

midnight · « **Reply #314 on:** October 20, 2015, 03:22:28 PM »

Test shows