Popular web browser by Google, see chrome.google.com for more information.

learn more… | top users | synonyms

4
votes
1answer
345 views

How dangerous is a virus introduced to a malicious website in chrome?

I am using Google's Chrome browser under Linux (Ubuntu) 64 bit for web browsing. If I a virus uses for example a leak in the flash player, the virus will get the privileges of the user who started ...
3
votes
2answers
196 views

Suspicious phone browser activity

On a droid Razr M, I used chrome to log in to Gmail instead of the app. It asked to log in as me on a toast at the bottom of the browser, taking my credentials from somewhere on the phone I assume. ...
2
votes
1answer
505 views

How disable Java in Chrome 23?

Well in case someone doesn't know yet... there is a new Java zero day. I'm trying to disable it on Chrome but I can't find any option. Google searches says that the option for deactivate it is on ...
0
votes
1answer
114 views

Can IE be made to imitate the behavior of Chrome's KeyGen element?

Is there any way I can repurpose existing ActiveX controls or functionality to get IE to work with the KeyGen element? Assistance getting Safari to work with this optional HTML5 spec would be ...
3
votes
1answer
1k views

How Chrome avoids sslstrip?

I'm trying out Moxie's sslstrip tool in my pentester lab. It works in all my VM's but no in all browsers. Firefox and IE are vulnerable but Chrome seems to has a protection against. Anyone know how ...
2
votes
4answers
1k views

What XSS attacks doesn't “Reflective XSS Protection” defeat?

Its been quite a while since I have played with cross site scripting vulnerabilities but today I came across a website today that was crying out to be tested for a basic XSS vulnerability. So ...
5
votes
1answer
634 views

When and Why does Chrome display malware detection warning?

Google Chrome contains malware detection feature. When user visits some site, browser may display warning that site contains malware. What does it mean that site contains malware? Does it mean that ...
0
votes
1answer
163 views

Please define “Carpet Bombing”

I saw a 2008 article about a certain vulnerability in WebKit which referred to "Carpet Bombing": https://www.cert.org/blogs/certcc/2008/09/carpet_bombing_and_directory_p.html (This vulnerability is ...
6
votes
3answers
5k views

Why is Chrome asking for the application-specific password and my account's password every time?

I enabled Google's two-factor authentication and found it ironic that Google Chrome Sync requires #1 You account password, and #2 an application-specific password. First of all, don't applications ...
3
votes
2answers
200 views

Chrome: Found a crash, is it a security vulnerability?

I have been able to make Google Chrome crash, and I was wondering if there are tools or heuristics to determine whether or not the crash is a security vulnerability. How can I determine if a Chrome ...
2
votes
1answer
169 views

Chrome: Finding vulnerabilities using AddressSanitizer

I'm reading about AddressSanitizer, a tool that can be used to find memory bugs for Chrome (and other C/C++ software). I'm a little curious about what the process of using the tool involves: 1) Is it ...
1
vote
2answers
2k views

Why does chrome connects to MarkMonitor (always on startup)

While using internet (over Chrome), I noticed that lsof -i returned certain suspicious URL(s). A whois lookup suggested that all of those belonged to MarkMonitor. For example: chrome 3224 ...
3
votes
2answers
2k views

Do most browsers handle mixed encrypted and unencrypted content correctly?

In Google Chrome, when I go to an encrypted page that contains unencrypted content, I get the following pop-down, which allows me to either load or not load the insecure content, making a clear ...
4
votes
2answers
363 views

Are sandboxes overrated?

I've stumbled upon the following on the blog of the NoScript developer Giorgio Maone. First, he quotes the following ArsTechnica article about an XSS bug in Adobe Flash: As useful as sandboxes ...
6
votes
1answer
5k views

Does Google Chrome protect against cross site scripting (XSS)?

In Firefox I've been using the NoScript extension to protect myself from certain malware attacks. NoScript is well known as it's a very powerful extension for Firefox and introduced protection from ...
5
votes
1answer
250 views

Understanding a vulnerability

http://code.google.com/p/chromium/issues/detail?id=68439 I am having a little bit of trouble understanding this report. From what i have read, it appears as though removing certain dom nodes ...
8
votes
2answers
3k views

Worst case scenario, what can a Chrome extension do with “Your data on all websites” and “Your tabs and browsing activity”?

Chrome extensions, and just like other browsers, appear to often get quite some extensive access to your browser data. In fact, most extensions I've installed require access to: Your data on all ...
3
votes
1answer
426 views

What is chrome.googleechotest.com?

I use chrome (dev channel) on mac osx lion and every now and then it tries to access chrome.googleechotest.com on port 80 (EDIT: and other ports!). Anybody knows what is the deal with ...
6
votes
1answer
357 views

How do I check the code of a Chrome extension to make sure it's not stealing my info?

I've been reading more and more about just how much access browser extensions can have to your data. This is a little unsettling, so I'm curious if there is a way to Vet these extensions and make sure ...
2
votes
7answers
727 views

Chrome vs Explorer - how to explain in plain words that open-source is better?

Why open-source is better in plain words? Yesterday I had a talk at a DIY bicycle workshop. There is a PC (running XP) that main application is checking emails (nothing really serious). I found it ...
2
votes
2answers
751 views

Chrome reports on other browsers running

I was playing around with Chrome and typed the following in the address bar: chrome://memory-redirect And saw the note: "If other browsers (e.g. IE, Firefox, Safari) are running, I'll show you ...
12
votes
2answers
999 views

Why do Chrome extensions need access to 'all my data' and 'browsing activity'?

Often I install simple add-ons for Google Chrome. However, they almost all need what appears to me as excessive access to my data. For instance, I install an extension that allows me to click on any ...
1
vote
2answers
741 views

Are Google Chrome Extensions vulnerable?

I've just discovered this: You can create IFRAME pointing to "chrome-extension://" protocol You can access IFRAME content with jQuery Does this mean, I'm able to use badly written Chrome ...
15
votes
5answers
978 views

Is Google Chrome a better secured browser?

I was amazed that IE 8, Safari, Firefox were hacked so fast. Is it really Chrome so good or it was not tested? Has anyone other results of independent investigations about security of web browsers? ...