Here’s a tip that uses Incognito/Private browsing mode to increase security.
Many browsers use plugins to extend browser functionality. For example, an ad-blocker plugin is (almost) required when trying to read foxnews.com. This is not a big deal
security wise, and the plugin most certainly makes the pages less distracting and easier to read. The concern is not the use of plugins on foxnews.com.
There is a concern with using plugins on your banking site, or any other site where you display or type personally identifiable information. These bank sites (ie, etrade.com) are just an example.
The little known fact is that browser plugins frequently have access to much of the data that is typed or displayed on the screen. That access is usually required to perform their function. But, what do those plugins do with the data. It’s technically possible for them to phone home with the information. That possibility is the potential security hole being plugged with this tip.
All browsers have a mode that prevents the retention of the ‘sites visited log’. This mode is called incognito (or private) pages. Incognito mode, for example, might be used when one visits web sites that they don’t want other users of that browser to know they visited. Maybe when one is looking for a location to host a surprise birthday party?
Incognito mode also loads without loading plugins. That’s the important part of this tip. Since plugins do not load in incognito mode (unless you’ve explicitly configured it such that the plugin must load), we can use incognito mode without the security risks of plugins. The tip: I suggest that any time you visit a website that is dealing with personally identifiable information, or any other site where you don’t want the possibility of your plugins having access to steal your information, you use an Incognito window (Chrome) or a Private Window (Firefox).
As a side note, the only plugin I allow in Incognito mode is “LastPass” as that is the only plugin that I absolutely trust.
Keywords: incognito private increase security removes plugins
Troy Frericks.
blog 28-Feb-2020
troyf<at>CyberSecurityRecap.com
=
Copyright 2015-2020 by Troy Frericks, https://CyberSecurityRecap.com/, https://DBArecap.com/.
#
