Web Security

Front

You click a link in an email from your "bank" asking you to verify your account.

Hack or Not?

Back

Hack: Phishing

Front

A website asks for your username and password but the URL starts with “http://”.

Hack or Not?

Back

Hack: Unsecured Transmission

Front

You write your passwords in a notebook at home.

Hack or Not?

Back

Not necessarily a hack, but a weak practice

Front

Your friend installs a browser extension that says it can “block ads and improve speed,” but it asks for access to all your browsing data.

• Hack or Not?

Back

Hack: Potential Malware or Spyware

Front

A website asks you to login, but you can see other user info by changing the number in the URL.

• Hack or Not?

Back

Hack: Broken Access Control

Front

You reuse the same password across your email, Facebook, and school portal.

Hack or Not?

Back

Hack (Risk of credential stuffing or account takeover)

Front

You receive a free USB flash drive at a tech event and plug it into your laptop without scanning.

Hack or Not?

Back

Hack (Could contain malware or viruses)

Front

You use a password manager to create and store complex passwords.

Hack or Not?

Back

Not – Good security practice.

Front

Your browser warns you that a site’s SSL certificate is invalid, but you continue anyway.

Hack or Not?

Back

Hack – Risk of man-in-the-middle attack.

Front

You install a free app that asks for camera and microphone access, even though it’s just a calculator.

Hack or Not?

Back

Hack – Suspicious permissions, possible spyware.