What can browsers see? - General Topics

We use web browsers often to login to our accounts, instead of using native apps if they are available.
Examples would be emails, cloud accounts, WhatsApp Web, shipment tracking, travel bookings, etc.
Can the browsers (and it's makers) access these personal information?

Can anyone answer this question?

Web browsers may save login credentials and account settings to help you log in faster, but reputable browser makers have strict privacy policies in place to protect personal information. Modern web browsers use encryption and secure communication protocols to safeguard data when it is transmitted over the internet. However, there is always a risk of data breaches and cyberattacks, so it's important to use strong passwords, enable two-factor authentication, and keep software up to date to minimize this risk.

nancymary101 said:
Web browsers may save login credentials and account settings to help you log in faster, but reputable browser makers have strict privacy policies in place to protect personal information. Modern web browsers use encryption and secure communication protocols to safeguard data when it is transmitted over the internet. However, there is always a risk of data breaches and cyberattacks, so it's important to use strong passwords, enable two-factor authentication, and keep software up to date to minimize this risk.
Click to expand...
Click to collapse
Does it mean that all browsers can see the data that we type in on websites, as well as data that the site has?
For example, if I log in to my email account on a web browser, can the browser see the password of my email account as well as read all my emails?

Related

Backup & secure your phone data for free

Google Sync
Features
Synchronize your contacts. Get your Google contacts quickly and easily to your phone. With Sync, you can have access to your address book at anytime and place that you need it.
Get calendar alerts. Using your phone's native calendar, you can now access your Google calendar, and be alerted for upcoming appointments with sound or vibration.
Always in sync. Your contacts stay synchronized whether you access them from your phone or from your computer. Add or edit contact information right on your device or on your Google account on the web.
Read more
http://www.google.com/mobile/default/sync.html
Microsoft MyPhone
Features
Back up and restore your phone's information to a password-protected web site
Access and update your contacts and appointments through your web account
Share photos on your phone with family and friends.
Find out more
https://sn1-p3.myphone.microsoft.com/mkweb/MoreInfo.po?tsid=1239913529744&mkt=en-US
Dashwire
Features
Dashwire automatically mirrors the content on your phone to the web, helping you access and share your mobile experiences. Easy.
You control which items sync and when it happens. Dashwire connects across wireless data, Wi-Fi, Bluetooth, and USB.
Read more
http://dashwire.com/tour/backup
Flexilis Mobile Security
Features
Flexilis Mobile Security makes it easy to prevent data loss, block malware, hackers, viruses and more:
Block viruses and malware - Flexilis anti-virus automatically checks for malicious files so you can download the latest apps without worry. It also updates automatically. Run a virus scan on your system to quickly find any hidden malware. With a small footprint and lightweight engine it will keep you protected without slowing you down.
Stop hackers in their tracks - Flexilis firewall and attack protection blocks scans and exploit attempts so you can freely use WiFi, bluetooth, or any public network connection and stay invisible to the bad guys.
Securely backup your data to the cloud – Backup and access your data: pictures, contacts, SMS, mp3s and music files, videos, and more from any web browser and restore them to a your device without any hassles.
Read more
http://blog.flexilis.com/

APN confusion regarding GPRS services

I'm having a hard time understanding why European GPRS vendors make a distinction between email, internet, and WAP services, and consequently I don't know what service to ask for when I purchase a PAYG SIM when I travel.
My primary GPRS interest is
SMTP for the handset's email client for IMAP (both google and exchange server accounts)
ActiveSync for contacts/calendar synchronization.
RSS reading, resulting in some cases some podcast downloading
Tethering via WMWiFiRouter
as you can see, i'm not a big HTML user, if at all.
What key terms and phrases should I look out for in the service descriptions in order to get the right internet service I need?
A specific example would be the ambiguity Vodafone Romania has between the email mobile vs internet mobile descriptions and the related APN differences "live.vodafone.com" and "internet.vodafone.com".
Also, for some reason T-Mobile UK is not included in the excellent list given over in the thread GPRS/Internet Connection Settings for the whole world thread. seems like it should be on page 4 but it's not. any reason for that, and does anyone know the APN settings for TMO/UK?
Lastly, what is an example of a WAP service?
Thanks in advance.
there is no universal answer to this
they made a big mess of it indeed. want to trick customers
wap service:
in most cases it won't let you out of vendor's special web page. there you have access to services to check your credit, payments, company info, some ringtone, music shops... mostly useless stuff.
ah and with windows mobile, there is no official way of setting it up. you can use 'work' and set some rules for wap.* ....anyway, you don't want that.
email:
in most cases this service will allow you to access only email on vendor's server.
e.g. [email protected]
in another case you'll have POP, IMAP, SMTP and maybe activesync allowed and web browsing limited to vendor's address.
yet another case is your data plan is small, means you'll pay for 1MB more
for rss you would need full internet anyway.
in general, if you have "internet" service, it have everything in it.

[Q] Remember passwords IE in WP7.5?

Is there some way to rememember passwords when browsing in IE9 under Mango?
Thanks!
Kositch said:
Is there some way to rememember passwords when browsing in IE9 under Mango?
Thanks!
Click to expand...
Click to collapse
I was hoping for the same thing, or is there a mango app for storing, and inputting passwords??
Lots of views, but no answers or suggestions. Can anyone help??
There is no method for remembering passwords in IE9.
That being said, if you choose to remember login information and you allow cookies in your browser, you shouldn't have too much hassle staying logged into places that you have done so. For example, I log in to Google, have the webpage save my login info, and next time I use Google, i am still logged in. Same for Facebook, Hotmail, Windows Live, Twitter, Foursquare, or whatever else. As long as you have cookies enabled, you should stay logged into the sites (unless of course the site doesn't permit such things).

[Completed] Does TypeApp (BlueMail) have security problems- secure email apps?

Question: Both Aquamail and TypeApp use Auth 2 token approach with gmail and hotmail/Outlook accounts added to their apps HOWEVER unlike AquaMail (or so Aquamail says on its privacy policy) it is not clear if TypeApp is secure because it uses third party servers (Amazon's) to temporarily store email and maybe passwords (TypeApp a little vague on this point in its privacy policy/Android tips sections). Aquamail was created by one Russian individual - so not thirlled to use - what if he tires of it, gets sick or unfortunately dies - I have two businesses and seems crazy to relay on precious email on it. TypeApp seems to be a small group as well and unclear who they really are. YET only email choices are anemic ones that come with phones, in my case Samsung's, or Outlook which is not very good, or gmail which has limits how far back emails cnan be from and no auto bb, although I think I found a work around/method to have auto bcc for all email accounts put in gmail app, but gmail is missing a lot of features TypeApp offers and Yahoo can't handle Exchange and that is it folks for major company email apps. For something so crucial as email, which doubled in use in last two years, and MOST critical feature for phone for business users, its kind of shocking. What are small companies to do who can't afford their own Exchange servers? World of VPN still not clear to me - unclear if can handle my small business hosted on Aabaco (that company bought out Yahoo Small Business), my small business hosted on GoDaddy's Office 365 (so has "piece" of Exchange server), and my gmail accounts.
If there are any SECURITY EXPERTS who might respond with their thoughts would appreciate it. (Yes I know no email is fully secure unless through end-to-end encrypted but looking for next best since can even that can have problems -- swiss one that was crowdfunded was hit by ransomware). Trying to get on Android phone the security of Blackberry and ability to get all email through one email app. As noted, have two small companies one re Yahoo Small Business now Aabaco and and other on GoDaddy 365 (so Exchange mail) plus gmail accounts. Wanted to use TypeApp but after reading its privacy policy and reading in TypeApp's own Android Tips section about re auth2 security, I did more research and found two articles with opposite view.
One says TypeApp not at all secure since keeps emails temporarily on third party servers possibly with passwords and even though uses tokens for gmail and hotmail/outlook accounts, it can only use SSL for other types of accounts, so passwords in an "extra" place (Amazon's servers) making it open to additional place to be hacked. androidforums.com/threads/email-which-apps-keep-it-private.935578/; and (2) other article says it is very secure as is Aquamail reddit.com/r/androidapps/comments/2xvs8m/whats_the_best_free_email_app_without/ (see the reply from Julianoniem that discusses Autu 2 and ranks the emails based on Auth).
TypeApp says has to store users' emails temporarily on third party servers (instead of like Aquamail in which users emails go directly from email provider to users' account) in order to offer push rather than fetch and so that user can use feature offered to delay responding. Want to use TypeApp since it offers key things need including: (1) auto bcc for a workaround for the GoDaddy Account (too long to explain the workaround here) ; and, (2) ability to "show" all emails as far back in time as want.
So what do you think about security of TypeApp after you read its privacy Policy and based on its use of third party servers in the structure I described?
tomaxwellsmart said:
Question: Both Aquamail and TypeApp use Auth 2 token approach with gmail and hotmail/Outlook accounts added to their apps HOWEVER unlike AquaMail (or so Aquamail says on its privacy policy) it is not clear if TypeApp is secure because it uses third party servers (Amazon's) to temporarily store email and maybe passwords (TypeApp a little vague on this point in its privacy policy/Android tips sections). Aquamail was created by one Russian individual - so not thirlled to use - what if he tires of it, gets sick or unfortunately dies - I have two businesses and seems crazy to relay on precious email on it. TypeApp seems to be a small group as well and unclear who they really are. YET only email choices are anemic ones that come with phones, in my case Samsung's, or Outlook which is not very good, or gmail which has limits how far back emails cnan be from and no auto bb, although I think I found a work around/method to have auto bcc for all email accounts put in gmail app, but gmail is missing a lot of features TypeApp offers and Yahoo can't handle Exchange and that is it folks for major company email apps. For something so crucial as email, which doubled in use in last two years, and MOST critical feature for phone for business users, its kind of shocking. What are small companies to do who can't afford their own Exchange servers? World of VPN still not clear to me - unclear if can handle my small business hosted on Aabaco (that company bought out Yahoo Small Business), my small business hosted on GoDaddy's Office 365 (so has "piece" of Exchange server), and my gmail accounts.
If there are any SECURITY EXPERTS who might respond with their thoughts would appreciate it. (Yes I know no email is fully secure unless through end-to-end encrypted but looking for next best since can even that can have problems -- swiss one that was crowdfunded was hit by ransomware). Trying to get on Android phone the security of Blackberry and ability to get all email through one email app. As noted, have two small companies one re Yahoo Small Business now Aabaco and and other on GoDaddy 365 (so Exchange mail) plus gmail accounts. Wanted to use TypeApp but after reading its privacy policy and reading in TypeApp's own Android Tips section about re auth2 security, I did more research and found two articles with opposite view.
One says TypeApp not at all secure since keeps emails temporarily on third party servers possibly with passwords and even though uses tokens for gmail and hotmail/outlook accounts, it can only use SSL for other types of accounts, so passwords in an "extra" place (Amazon's servers) making it open to additional place to be hacked. androidforums.com/threads/email-which-apps-keep-it-private.935578/; and (2) other article says it is very secure as is Aquamail reddit.com/r/androidapps/comments/2xvs8m/whats_the_best_free_email_app_without/ (see the reply from Julianoniem that discusses Autu 2 and ranks the emails based on Auth).
TypeApp says has to store users' emails temporarily on third party servers (instead of like Aquamail in which users emails go directly from email provider to users' account) in order to offer push rather than fetch and so that user can use feature offered to delay responding. Want to use TypeApp since it offers key things need including: (1) auto bcc for a workaround for the GoDaddy Account (too long to explain the workaround here) ; and, (2) ability to "show" all emails as far back in time as want.
So what do you think about security of TypeApp after you read its privacy Policy and based on its use of third party servers in the structure I described?
Click to expand...
Click to collapse
Hello,
Thanks for using XDA Assist.
Try posting your query in Android Q&A,Help and Troubleshooting or in one of the noob friendly Q&A thread here->[Ask Any Question][Newbie Friendly] .Experts there may be able to help you!
Good Luck
__
v7
XDA Assist

Can't get corporate email after upgrade to Nougat (insists on full disk encryption)

I have a personal Honor 8 device I use to access my company email. They use Duo Mobile software to authenticate before allowing this.
After upgrading to Nougat 7.0, I am unable to access email (using the Outlook app). I get a message saying that I need full disk encryption turned on. I don't see this as an option anywhere in my Settings. I do have a strong password set to be used.
Do I need to enable File Based encryption at this stage? I am trying to do this and do not see the option to convert to File Based encryption even after turning on Developer Options by the way.
Has anybody else run into this issue? Any guidance - I am dead in the water without being able to access my email.
Thx
AK
I remember I had a problem with my e-mail but I'm not 100% certain that it was the same issue. But try to remove all your screen locks including finger print and try again.
Ihaveatattoo said:
I remember I had a problem with my e-mail but I'm not 100% certain that it was the same issue. But try to remove all your screen locks including finger print and try again.
Click to expand...
Click to collapse
Thanks for the response. However in order to enable Corporate Email, Outlook asks for a password to be in place. Therefore I cannot remove all screen locks.
The problem seems to be that the authenticating software (Duo Mobile) is looking for two things on the device. One is that full disk encryption is explicitly enabled. The other is that the setting to "Require password at Startup" is enabled. Neither of these options are availalble on the Honor 8. Their support says that encryption is on by default and therefore there is no setting for it.
akatti said:
Thanks for the response. However in order to enable Corporate Email, Outlook asks for a password to be in place. Therefore I cannot remove all screen locks.
The problem seems to be that the authenticating software (Duo Mobile) is looking for two things on the device. One is that full disk encryption is explicitly enabled. The other is that the setting to "Require password at Startup" is enabled. Neither of these options are availalble on the Honor 8. Their support says that encryption is on by default and therefore there is no setting for it.
Click to expand...
Click to collapse
Further, I looked at turning on the new File Based Encryption that is part of Nougat. There are how-to's that discuss this, where you have to turn on Developer Options to do so. However, on the Honor 8, even after turnin on Developer Options, there is no option to "Convert to File Based encryption" available. If you search in Settings, it shows this option, but upon clicking on that option from the Settings Search results, it just takes you into Developer Options and there is no setting to enable File Based encryption.
Nvm this, poor reading comprehension on my part
I have no issues using Gmail's Exchange client to connect to my corporate email. It sounds like it's not a Nougat or Android problem, it's a Duo Mobile problem
I had the same problem.
Switched to the app Nine. It is a one-time purchase and its security model is app-wide instead of device-wide.
Have you tried it yet?
Telperion said:
I have no issues using Gmail's Exchange client to connect to my corporate email. It sounds like it's not a Nougat or Android problem, it's a Duo Mobile problem
Click to expand...
Click to collapse
The company whose email I need to get to has only enabled Outlook as a client - therefore using other email clients (such as the Gmail app) is not an option unfortunately.
akatti said:
The company whose email I need to get to has only enabled Outlook as a client - therefore using other email clients (such as the Gmail app) is not an option unfortunately.
Click to expand...
Click to collapse
To the best of my knowledge as long as you have the correct server credentials, you can use any client. For example, my credentials:
Server: subdomain.website.com
Domain\Username: test\Telperion
Port: 443
Security type: SSL/TLS
I can connect using Gmail's Exchange client, Outlook for Android, Nine, native Huawei email client, etc. While everyone's setup is different, if you're able to log in using the Outlook client, theoretically there's nothing to prevent you from using the same credentials in a different client.
That was my not my experience.
My company's Outlook server is configured to require device-level encryption for mobile devices with complex passwords. On my Nexus 6p, Outlook for Android did not work, with the error that it "did not support the encryption required". Also, I could not use fingerprint authentication on the device, and required a 8-digit unlock code. Not just for Outlook, mind you -- any time I wanted to unlock the phone.
OWA (Outlook Web App) for Android worked fine, but it supports neither push nor notifications, rendering it utterly useless. OWA is, as far as I can tell, just a shell containing an HTML rendering engine that reflows the web app.
The only reason CloudMagic (and potentially Nine) worked for me is that CloudMagic (and I think Nine) have device-level encryption on their server (?). The end-user provides credentials for their server to log in, download the email, and act as an intermediary.
Telperion said:
To the best of my knowledge as long as you have the correct server credentials, you can use any client. For example, my credentials:
Server: webmail.website.com
Domain\Username: test\Telperion
Port: 443
Security type: SSL/TLS
I can connect using Gmail's Exchange client, Outlook for Android, Nine, native Huawei email client, etc. While everyone's setup is different, if you're able to log in using the Outlook client, theoretically there's nothing to prevent you from using the same credentials in a different client.
Click to expand...
Click to collapse
biogon said:
That was my not my experience.
My company's Outlook server is configured to require device-level encryption for mobile devices with complex passwords. On my Nexus 6p, Outlook for Android did not work, with the error that it "did not support the encryption required". Also, I could not use fingerprint authentication on the device, and required a 8-digit unlock code. Not just for Outlook, mind you -- any time I wanted to unlock the phone.
OWA (Outlook Web App) for Android worked fine, but it supports neither push nor notifications, rendering it utterly useless. OWA is, as far as I can tell, just a shell containing an HTML rendering engine that reflows the web app.
The only reason CloudMagic (and potentially Nine) worked for me is that CloudMagic (and I think Nine) have device-level encryption on their server (?). The end-user provides credentials for their server to log in, download the email, and act as an intermediary.
Click to expand...
Click to collapse
When adding my corporate exchange email to Gmail, Gmail is activated as a device administrator with permissions to:
Erase all data
Set password rules
Monitor screen-unlock attempts
Lock the screen
Set lock-screen password expiration
Set storage encryption
Disable cameras
I'm not using webmail, I'm using Exchange ActiveSync. Device policy forces me to have a lock screen pin or password, but I can still fingerprint unlock it. It sounds as if your respective Exchange servers aren't configured properly, because all of the security that they're requiring can be mandated through ActiveSync and Gmail's device administration service.
t
Telperion said:
It sounds as if your respective Exchange servers aren't configured properly, because all of the security that they're requiring can be mandated through ActiveSync and Gmail's device administration service.
Click to expand...
Click to collapse
Is Exchange ActiveSync different from Office 365's Exchange?
When I asked IT about local ActiveSync, they said that they don't support it, just Office 365 on Shibboleth.
Then again, I couldn't get a Chromebook to connect to the WiFi network here due to some misconfiguration in their Cisco router's PEAP setup, so I wouldn't be surprised.
biogon said:
Is Exchange ActiveSync different from Office 365's Exchange?
When I asked IT about local ActiveSync, they said that they don't support it, just Office 365 on Shibboleth.
Click to expand...
Click to collapse
Different back end, same capabilities. Exchange ActiveSync is a site-hosted server, Office 365 is a cloud-hosted version. On a local Exchange server, your IT department will have set up a local domain and you will have a user account in Active Directory (domain\Telperion). In Office 365, your user account is your email address ([email protected]) and there is no domain mapped that you have to configure. Once you know this, you can piece together the way to configure it.
The biggest challenge is that IT typically won't mess around with supporting mobile device configuration ("I don't know Android"), and Microsoft tutorials don't give clear instructions ("I don't know Android"). Android tutorials say "I don't know Microsoft" so you end up having to piece things together from multiple sources online.
See attached tutorial, it's very easy once you know what to do.
Add new account from device Accounts menu
Choose 'Exchange' with the Gmail logo
Enter your corporate email address, don't hit next, hit "Manual Setup"
Choose 'Exchange' as the account type
Make sure your email is entered in "domain\username" field
Enter password
Server for Office 365 is "outlook.office365.com"
Port 443
Set security to "SSL/TLS"
From there it should handle all the rest of the configuration.
biogon said:
I had the same problem.
Switched to the app Nine. It is a one-time purchase and its security model is app-wide instead of device-wide.
Have you tried it yet?
Click to expand...
Click to collapse
Thanks. Tried Nine. Works the same way as Outlook so far. In other words, setting its policy to only apply to the app doesn't make a difference in how Duo Mobile (the two factor authentication checker) continues to insist the device be encrypted and have the setting "Require password on startup" be turned on.
Telperion said:
Different back end, same capabilities. Exchange ActiveSync is a site-hosted server, Office 365 is a cloud-hosted version. On a local Exchange server, your IT department will have set up a local domain and you will have a user account in Active Directory (domain\Telperion). In Office 365, your user account is your email address ([email protected]) and there is no domain mapped that you have to configure. Once you know this, you can piece together the way to configure it.
The biggest challenge is that IT typically won't mess around with supporting mobile device configuration ("I don't know Android"), and Microsoft tutorials don't give clear instructions ("I don't know Android"). Android tutorials say "I don't know Microsoft" so you end up having to piece things together from multiple sources online.
See attached tutorial, it's very easy once you know what to do.
Add new account from device Accounts menu
Choose 'Exchange' with the Gmail logo
Enter your corporate email address, don't hit next, hit "Manual Setup"
Choose 'Exchange' as the account type
Make sure your email is entered in "domain\username" field
Enter password
Server for Office 365 is "outlook.office365.com"
Port 443
Set security to "SSL/TLS"
From there it should handle all the rest of the configuration.
Click to expand...
Click to collapse
Thanks for the detailed message. Tried the above.
When I left the server be the default server name (derived from my email address), I got a "Certificate is not valid" error. I had "None" as the certificate.
After I changed the server name to be outlook.office365.com as mentioned in your instructions above, I now get a "Can't connect to server" message.
I did recheck my steps. Not sure why Gmail fails to connect. Any suggestions on where to look?
akatti said:
Thanks for the detailed message. Tried the above.
When I left the server be the default server name (derived from my email address), I got a "Certificate is not valid" error. I had "None" as the certificate.
After I changed the server name to be outlook.office365.com as mentioned in your instructions above, I now get a "Can't connect to server" message.
I did recheck my steps. Not sure why Gmail fails to connect. Any suggestions on where to look?
Click to expand...
Click to collapse
Those instructions are for Office 365, it sounds like yours is hosted.
Telperion said:
Those instructions are for Office 365, it sounds like yours is hosted.
Click to expand...
Click to collapse
I checked the settings for Outlook Web on my PC and it is an Office 365 account. I updated by Gmail settings to match (Server: outlook.office365.com, Port: 993 and Security: SSL/TLS although on the PC it was just TLS). Get a message saying "Couldn't open connection to server".

Categories

Resources