ZDNet UK


Skip to Main Content

ZDNet.co.uk - Winner of Best Business Website 2007
  1. Home
  2. News
  3. Blogs
  4. Reviews
  5. Prices
  6. Resources
  7. Community
  8. My ZDNet

 

ZDNet UK RSS Feeds


IT Jobs

Security threats Toolkit

Browser features may pose hacking threat

Victoria Ho ZDNet Asia

Published: 14 Jan 2008 09:03 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Disabling the majority of features in a web browser may be your safest bet for keeping malicious hackers at bay, according to a US-based IT security watchdog.

The US Computer Emergency Readiness Team (US-CERT) said in a report released on Thursday: "Many web applications try to enhance your browsing experience by enabling different types of functionality, but this might be unnecessary and may leave you susceptible to being attacked." The IT security group is part of the US Department of Homeland Security.

"The safest policy is to disable the majority of those features unless you decide they are necessary," the report stated.

While exact browser settings differ from one browser to another, most platforms have settings and functions that are enabled by default.

US-CERT recommends that users set the highest security level possible, only enabling features when they are required and disabling them again after the user is finished with the website that required the functions.

These are the recommended features to be disabled in web browsers:

  • JavaScript: some sites rely on web scripts such as JavaScript to achieve a certain appearance or functionality but these may potentially be used in an attack
  • Java and ActiveX controls: these programs are used to develop or executive active content, but may also put you at risk
  • Plug-ins: additional software that extends the functionality of your browser; before installing them, make sure they are necessary and originate from a trustworthy site
  • Cookies: websites store these on your PC to remember data about you, so companies can use the information to identify you on subsequent visits to their sites. It is best to disable the cookies and enable them only if you visit a site that requires them
  • Pop-up windows: blocking pop-up windows will minimise the number of pop-up advertisements you receive, some of which may be infected with malicious spyware

Credit: Disable 'majority' of browser features from ZDNet Asia

  • Email
  • Trackback
  • Clip Link
  • Print friendly Print with HP

Did you find this article useful?
13 out of 18 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:








Related Jobs

Programme Manager

This high-impact, high-visibility role is ideal for a results-driven problem solver prepared to think outside the box and challenge existing ...

Test Specialist-Technical

Automated test tools, defect management processes, best practice testing practices to enable you to follow test scripts and report and suggestion on ...

Software Test Engineer Opportunity in Hampshire!!!

Implementing complex business logic functions in a telecoms environment Implementing system behaviour using mobile telecoms protocols (GSM / UMTS) ...

Sentry Posts Blog

How many headshots does one chairperso...

We got a strange request last week from the head of PR from Russian security experts Kaspersky. It seems although the company was very happy with the interview we recently carried with... More

Post a comment

Google sponsors open source security p...

Google has announced it is to sponsor oCERT, an open source computer emergency response team. In a blog post on Monday, Google security engineer Will Drewry said that one of the... More

Post a comment

Indian officials accuse China of cyber...

China is actively engaged in mapping India's computer networks, according to the Times of India. China is mounting "almost daily" attacks against Indian Government computer systems,... More

Post a comment

Featured Talkback

On the contrary, if vendors were forced to stand behind their products it should increase innovation. It would force more, and better , testing before hitting the sales floor, resulting in fewer updates and less downtime for the consumer. At present the EULA removes responsibility from the vendor, and moves it to the user, which is a step backward. Make the vendor responsibility for their code.

By: ator1940

Read full story:
RSA: Vendor liability may stifle innovation