Wiki sulla sicurezza

Schrems II is the 2020 EU court ruling that invalidated the Privacy Shield, reshaping how personal data may be transferred from the EU to the United States.

Session hijacking steals the token issued after a successful login, letting an attacker act as the user without ever needing a password or MFA code.

SIM swapping is the hijacking of a victim's phone number by porting it to an attacker's SIM, turning SMS-based security codes into the attacker's mail.

SMS pumping is a fraud scheme in which bots trigger masses of verification texts to premium-rate numbers, leaving the targeted business with the bill.

Strong Customer Authentication is the PSD2 requirement that electronic payments in the EEA be confirmed with two independent factors, reshaping checkout flows.

The BFSG is Germany's Accessibility Strengthening Act, the national law implementing the European Accessibility Act, in force since 28 June 2025.

The dark web is the portion of the internet reachable only through anonymizing networks like Tor, home to legitimate privacy use and stolen-data marketplaces alike.

The European Accessibility Act (EAA) is the EU directive that makes key products and digital services, including e-commerce, accessible. It has applied since June 2025.

The GDPR is the EU's General Data Protection Regulation, the law governing how personal data of people in the EU may be collected, processed and shared.

TLS fingerprinting identifies client software by how it negotiates encryption, exposing bots that lie in their user agent before a single page loads.

Toll fraud triggers calls or texts to premium-rate numbers the attacker profits from, often by abusing an app's phone verification flow with bots.

Triangulation fraud uses a fake storefront to take real customers' money, then fulfills their orders from a legitimate shop using stolen cards.

Two-factor authentication secures logins by requiring a second, independent proof of identity beyond the password, whether knowledge, possession, or biometrics.

WCAG (Web Content Accessibility Guidelines) is the W3C standard defining how web content must be built so people with disabilities can perceive and use it.

Web scraping is the automated extraction of data from websites. It powers search engines and price comparison, along with content theft and competitive abuse.

Web skimming injects malicious code into a checkout page to capture card details as customers type them, often called Magecart after its most infamous form.