Which of the following techniques can be bypass a user or computer's web browser privacy settings? (Choose two.)
Click on the arrows to vote for the correct answer
A. B. C. D. E.BC.
The techniques that can bypass a user or computer's web browser privacy settings are Cross-site scripting (XSS) and Locally shared objects.
Cross-site scripting (XSS) is a type of web security vulnerability that enables an attacker to inject malicious code into a web page viewed by other users. This code can execute within the user's browser, allowing the attacker to steal user data, such as cookies or credentials, and bypass privacy settings.
Locally shared objects (LSOs), also known as Flash cookies, are used by Adobe Flash Player to store data on a user's computer. This data can include information about the user's browsing history, preferences, and login credentials, and can be used to bypass privacy settings. LSOs are not subject to the same restrictions as HTTP cookies, and can store up to 100 kilobytes of data, making them a useful tool for attackers.
SQL injection and LDAP injection are not techniques that can bypass a user or computer's web browser privacy settings. SQL injection is a technique that enables attackers to inject malicious SQL commands into a database, allowing them to modify or extract data from it. LDAP injection is a similar technique that targets LDAP databases, allowing attackers to extract or modify directory information.
Session hijacking is another technique that can be used to bypass security controls, but it does not directly involve web browser privacy settings. Session hijacking involves taking over a user's active session on a website or web application, allowing the attacker to impersonate the user and access their data.