Popular web browser by Google, see chrome.google.com for more information.

learn more… | top users | synonyms

2
votes
0answers
24 views

How do I completely delete the “Chrome Remote Desktop Viewer” that comes with Google Chrome? [migrated]

I had installed Google Chrome (Version 42) some weeks back because it looked like it was needed for some corporate purposes. Today I happened to go to the about:plugins page and noticed that it came ...
2
votes
2answers
152 views

Should I update my SHA-1 certificates? If so, how?

Q: Should I update my SHA-1 certificates? If so, how? Recently I noticed the "https:" has a red strike-through and warning in Chrome, but only on certain websites. Apparently this has been ...
-3
votes
0answers
56 views

Why Google Chrome browser change my IP? [migrated]

When i browse sites google suggest to me to change language of google search page to Romanians,I disable all of my google extensions and tools but problem still exists. how can i see hidden proxies or ...
4
votes
1answer
149 views

Can't get rid of “Your connection to website is encrypted with obsolete cryptography”

In my Nginx config I have: ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ...
-1
votes
1answer
36 views

Should a Web Search with Evernote results be a concern?

While using a Chromium based browser (Chromodo) and doing a regular Google search, Evernote is now appearing on the side with "related results in your notes". Does anyone know how they are doing ...
4
votes
3answers
123 views

Is my Google session safe when my computer is logged out or locked?

I've recently uploaded all the family photos to my Google Drive account. I have a strong password and 2 step verification enabled on my Google account. My home computer is (naturally) trusted and ...
5
votes
3answers
176 views

Ali Express hijacking my Chrome

So randomly every now and then, when I click on a link - instead of opening it normaly, a new tab is opened and some website with "tracking" in the name (I haven't caught the full name yet, it's quite ...
3
votes
2answers
341 views

Chrome showing SSL warning about SHA-1 when the sites don't use SHA-1

My version of Chrome on an iMac (latest 43.0.2357.130 (64-bit)) is showing an SSL warning for well-known sites (Hackernews, GitHub, DigitalOcean): This site uses a weak security configuration ...
1
vote
1answer
120 views

Using VPN in the UAE - safe or trackable?

I'm currently in the United Arab Emirates, and I am wondering if Etisalat or the UAE can track what I am doing if I use the ZenMate VPN addon to Chrome?
2
votes
0answers
46 views

What technologies does ChromeOS use to secure saved passwords?

I have read that Chrome will use the system's native credential tools to manage saved passwords (e.g. KeyChain on OSX, libsecret on Linux/GNOME etc). Does anyone know what tools are used on ChromeOS? ...
0
votes
2answers
140 views

Authenticating Hotmail's certificate and connection security

I've recently received the following error message from hotmail.com (or live.com) after I have logged in using Chrome browser, consistent using different accounts and computers (regardless of 2FA or ...
2
votes
1answer
36 views

are chrome extensions in the Chrome store generally safe?

Should I ever be worried about installing any chrome extension from the Chrome store? A lot of the Chrome extensions I have, have the permission "Read and change all your data on the websites you ...
3
votes
2answers
560 views

Obsolete cryptography (SHA1) warning although certificate uses SHA256

I ordered a certificate with SHA256 from Comodo and was wondering why Chrome shows this message: Your connection is encrypted with obsolete cryptography. The connection is encrypted using ...
0
votes
1answer
176 views

Google Chrome obsolete cryptography

I have a apache server running and following configuration for ssl: Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" SSLProtocol -all +TLSv1.2 SSLCompression Off ...
15
votes
2answers
2k views

Securing Google Chrome Browser against the Logjam exploit on Windows

Is there a way to fix Chrome against the Logjam TLS exploit on Windows? I have updated my Chrome to the latest version yet the https://weakdh.org/ website warns me that "web browser is vulnerable to ...
1
vote
1answer
72 views

Give Someone Access to Secure Website? [closed]

I have someone I hired on a Freelancing website working for me - so far he has worked for me for about two weeks and is doing a good job. In order for him to complete his work he will need access to ...
4
votes
1answer
112 views

Different SSL cert behavior with Chrome on desktop vs. Chrome on iOS

We have a website, https://uk.care.com, that has a GeoTrust multi-SAN cert on it. The cert is up-to-date, using SHA-256, TLS 1.2, etc. When we view the site in Chrome on various desktop systems it ...
1
vote
7answers
4k views

Malware ad.adsmatte infection

My PC is infected with malware, whenever I open a webpage and click on it a new tab opens on "ad.adsmatte.com". I scanned my PC with Malwarebytes but was unable to resolve the problem. So I ...
0
votes
0answers
499 views

Does this list every Chrome extension/addin that may leak privacy?

I am looking for a simple list of all extensions, preference, custom processes, and "flags" that may disclose a user's privacy or other details to a 3rd party. To that end, I discovered: ...
5
votes
1answer
152 views

How do I securely embed an <img> tag using a user-given URL?

If I hypothetically wanted to allow users to use an avatar from an arbitrary URL like this: <img class="avatar" src="{user input}" /> There are many problems that I can think about: There ...
0
votes
1answer
178 views

Why does Chrome display "Your connection to website… However, this page includes other resources which are not secure…”? [duplicate]

I know there is a similar post, but I thought this one is different because I do not get this consistently, the message and icon are different. Please compare the message with that of the so-called ...
6
votes
3answers
461 views

Favicon Redirection Possible Security Flaw

I have the domain example.com When I enter the URL https://api.example.com, Chrome loads the page and also tries to load https://myapp.example.com/favicon.ico, and that request receives a 301 ...
0
votes
2answers
280 views

Disabling CBC ciphers does not stop Chrome from negotiating to use CBC ciphers

I am getting an message about 'obsolete cryptography' from Chrome. Your connection to (site) is encrypted with obsolete cryptography. The connection is encrypted using AES_256_CBC... Per ...
0
votes
0answers
71 views

Problem in 'underscore.js' “new Function()” when CSP header is set.

In underscore.js, template rendering causes violation of the 'unsafe-eval' property, with CSP error at following line: "render = new Function(settings.variable || 'obj', '_', source);" The solution ...
7
votes
1answer
259 views

Distinguish between Wi-Fi Captive portal and MitM attack

Not sure whether this should be asked in Super User or here. How does Chrome distinguish between a Wi-Fi access point intercepting with a captive portal and a man-in-the-middle attack on HTTPS? Are ...
0
votes
1answer
52 views

MitM Chrome Mobile

I just came across the issue about MitM on Opera/Nokia browser 2013. I know, this is an "old" problem, but it seems very interesting to me. I was wondering how Chrome on mobile handles the SSL ...
8
votes
1answer
1k views

TLS 39 month certificate limit and Chrome's NET::ERR_CERT_VALIDITY_TOO_LONG error

Late last year the CA/Browser Forum decided to limit the maximum valid term of TLS/SSL certificates issued after 1 April 2015. After this time, as the official guidelines put it.. CAs SHALL NOT ...
1
vote
1answer
177 views

Is using Chromecast “a security nightmare”?

I'd like to use Chromecast on our office network. Doing so requires enabling UPnP (Universal Plug and Play). A quick search turns up statements like this: The US Department of Homeland Security ...
3
votes
3answers
7k views

Chrome showing cryptography as 'obsolete'

Similar to this question, Chrome is showing the connection cryptography as obsolete. Opera, IE and Firefox seem perfectly fine with the connection. My guess would be the message authentication is ...
1
vote
2answers
5k views

What is s3.amazonaws.com, and why is Chrome blocking it?

Lately, whenever I click on a download link in Google Chrome, it redirects to another link starting with s3.amazonaws.com, which in turn gets blocked either by Chrome or by my Antivirus (Comodo ...
2
votes
1answer
878 views

Cannot turn off XSS filter in Chrome

I am using the following command to launch Chrome: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --args --disable-web-security to turn off XSS auditor in chrome in Windows 7, but ...
0
votes
1answer
104 views

Audio not playing on Android (Kitkat 4.4.2 on LG G Pro 2 D838) via HTTPS [closed]

I am having issues playing an audio file on the chrome browser! This audio file plays on the chrome browser on my mobile LG G Pro-2(D838) running Kitkat 4.4.2 without any issues. But when i uploaded ...
2
votes
2answers
217 views

Might Google log every website I visit using Chrome?

I wanted to start using Chrome for quite some time now, but I really don't want to tell Google about whatever sites I visit. So I was wondering if Chrome sends any data to Google telling them what ...
0
votes
2answers
89 views

Browser Updated, yet still vulnerable to POODLE

So here's a situation, some of my company's partners notified us that they will be entirely disable their server's SSLv3 support. This prompts my superior to take this chance to update our operation ...
21
votes
4answers
40k views

Google Chrome “Your connection to website is encrypted with obsolete cryptography”

Google Chrome is showing new information in the certificate section. Is this a big deal? If so how can I fix it on the server end? EDIT: Thanks for the answers but I'm not skilled in cryptography ...
11
votes
1answer
2k views

Why would Chrome not display a padlock icon at all on an SSL site?

I have an internal website running on SSL, but when going through it in Chrome, I don't get a padlock icon at all: However, clicking it does show that the site is encrypted. There are a bunch of ...
2
votes
2answers
297 views

Strange file from YouTube

I was watching the video linked below and every time I refresh the page, a file named f.txt is downloaded that contains the following text. Video: https://www.youtube.com/watch?v=enbTb8PizTI Text: ...
1
vote
2answers
600 views

How should I deal with adware in chrome on ubuntu?

I use chrome (but also have firefox) on ubuntu 14.04 32-bit. Recently I started getting popups from 'softwareupdaterlp.com'. I had the sense to realize it was not legitimate and I didn't click install ...
3
votes
1answer
103 views

How is this web resource hidden from the user? [closed]

Motivation: I've been interested in how various agencies hide data, either through incompetence or willful intent, that is required to be "open". Specifically I've seen oil companies use images to ...
-1
votes
1answer
281 views

Fingerprint scanner browser support [closed]

I need to implement fingerprint scanning for all the users in a secure web app. Do fingerprint reader support chrome or firefox? From my google search they all seems to only be supported by IE. All ...
0
votes
2answers
50 views

Using bcrypt in chrome extension [closed]

I am developing a chrome extension for this non profit. Im also working on the server side component as well. Im not a full time developer so most of my knowledge has simply come from years of ...
0
votes
2answers
92 views

Type of SSL connection used when visiting google services

I have 2 computers running chrome: a) Win 8 , latest chrome b) Win 7 , latest chrome ~ 1.5 yr old high spec laptop Both display the Certificate Authority as: Google Internet Authority G2 computer ...
2
votes
1answer
629 views

Are my passwords saved in Google Chrome safe when I'm logged out?

I understand that Chrome uses the OS's password storage mechanism to protect passwords on your computer. 1 I also understand that these passwords can be (in my case, are) protected with a passphrase ...
2
votes
1answer
51 views

TOOL-BARS: How do toolbars manage to insert new settings on to the users computer when legitimate programs can't/won't do it?

I accidentally installed Ask Toolbar, and it changed my Homepage,Search engine and added some extra stuff. It did all this without alerting Google Chrome! But when I try to install a legitimate ...
1
vote
1answer
86 views

How to analyze why Chrome downloaded a particular file?

I had a very few Chrome tabs open (see appendix) and other safe websites. Suddenly, without any prompt or action from me, chrome starts downloading the file "NEW!_iPhone7_LEAKED_PHOTO.JPG.exe" which ...
0
votes
2answers
426 views

How did piratebay.se search engine get in Chrome as an “other search engine”

I have an IT client with a user who had piratebay.se/... listed within his Chrome's (v39, 64-bit, OS X, 10.10.1) "Other Search Engine" section. I know a user could manually add it and suspect the ...
0
votes
2answers
258 views

Additiona security measures for getting Chrome Saved Passwords via password management Hacked or Exposed?

I've noticed that there are quite a few applications out in the open now to decrypt chrome's password management features. I've seen hacks where a hacker remotes into a computer and runs an app ...
0
votes
1answer
115 views

Is my sha1 SSL cert safe if they expire before 2016?

According to the Google [1], if my SSL cert expire after 2016 and at some points they will show a warning. But, if all my cert expired before 2016, so I assume no action need to be taken to prevent ...
11
votes
2answers
878 views

How safe is it to use developer's version of the browsers [closed]

I have heard that the developer versions of browsers (chrome and firefox) are less secure than stable versions of them. Is it true? Is there any sense in using developer editions of browsers for ...
2
votes
2answers
200 views

Why Google Chrome complains about mozilla.org identity?

On a "brand new" (but fully updated) Windows XP installation (an Asus EeePC that I restored to factory setting and than updated with all Microsoft's upgrades) I installed a few days ago Google Chrome. ...