Popular web browser by Google, see chrome.google.com for more information.
12
votes
5answers
764 views
Is Google Chrome a better secured browser?
I was amazed that IE 8, Safari, Firefox were hacked so fast. Is it really Chrome so good or it was not tested?
Has anyone other results of independent investigations about security of web browsers?
...
0
votes
1answer
70 views
Password storing in Google Chrome content scripts
I am planning to store the login credentials in Google Chrome content scripts. The content scripts will then use these credentials to login to a website when I open it in Chrome.
I wanted to ...
6
votes
3answers
273 views
Man-in-the-middle Blue coat proxy ssl or what?
I have just discovered that my workplace have enabled some new feature in the blue coat network proxy. It seems like all https certificates in chrome on windows is being issued by this internal ...
-1
votes
2answers
82 views
Inspecting “tidynetwork” element in chrome to find its origin on my laptop [closed]
Anyone heard of the "TidyNetwork" virus/malware? Is it possible to determine the origin of the ad that is created on web pages by Tidy by inspecting the element using developer tools? I am using ...
8
votes
2answers
644 views
Why do Chrome plugins need access to 'all my data' and 'browsing activity'?
Often I install simple add-ons for Google Chrome. However, they almost all need what appears to me as excessive access to my data. For instance, I install a plugin that allows me to click on any part ...
6
votes
3answers
2k views
Why is Chrome asking for the application-specific password and my account's password every time?
I enabled Google's two-factor authentication and found it ironic that Google Chrome Sync requires #1 You account password, and #2 an application-specific password. First of all, don't applications ...
7
votes
2answers
2k views
Worst case scenario, what can a Chrome extension do with “Your data on all websites” and “Your tabs and browsing activity”?
Chrome extensions, and just like other browsers, appear to often get quite some extensive access to your browser data. In fact, most extensions I've installed require access to:
Your data on all ...
0
votes
1answer
51 views
Can IE be made to imitate the behavior of Chrome's KeyGen element?
Is there any way I can repurpose existing ActiveX controls or functionality to get IE to work with the KeyGen element?
Assistance getting Safari to work with this optional HTML5 spec would be ...
3
votes
2answers
230 views
Is Chrome giving out information about me?
I'm stepping up my privacy online and have recently switched to Google Chrome, which may be a huge step backwards. Chrome pesters the user to sign in with their Gmail account. When I first created my ...
3
votes
1answer
177 views
How dangerous is a virus introduced to a malicious website in chrome?
I am using Google's Chrome browser under Linux (Ubuntu) 64 bit for web browsing.
If I a virus uses for example a leak in the flash player, the virus will get the privileges of the user who started ...
3
votes
2answers
119 views
Suspicious phone browser activity
On a droid Razr M, I used chrome to log in to Gmail instead of the app. It asked to log in as me on a toast at the bottom of the browser, taking my credentials from somewhere on the phone I assume. ...
2
votes
1answer
401 views
How disable Java in Chrome 23?
Well in case someone doesn't know yet... there is a new Java zero day.
I'm trying to disable it on Chrome but I can't find any option. Google searches says that the option for deactivate it is on ...
0
votes
2answers
882 views
Why does chrome connects to MarkMonitor (always on startup)
While using internet (over Chrome), I noticed that
lsof -i
returned certain suspicious URL(s). A whois lookup suggested that all of those belonged to MarkMonitor. For example:
chrome 3224 ...
3
votes
1answer
455 views
How Chrome avoids sslstrip?
I'm trying out Moxie's sslstrip tool in my pentester lab. It works in all my VM's but no in all browsers. Firefox and IE are vulnerable but Chrome seems to has a protection against.
Anyone know how ...
2
votes
4answers
806 views
What XSS attacks doesn't “Reflective XSS Protection” defeat?
Its been quite a while since I have played with cross site scripting vulnerabilities but today I came across a website today that was crying out to be tested for a basic XSS vulnerability.
So ...
5
votes
1answer
417 views
When and Why does Chrome display malware detection warning?
Google Chrome contains malware detection feature. When user visits some site, browser may display warning that site contains malware.
What does it mean that site contains malware? Does it mean that ...
0
votes
1answer
141 views
Please define “Carpet Bombing”
I saw a 2008 article about a certain vulnerability in WebKit which referred to "Carpet Bombing": https://www.cert.org/blogs/certcc/2008/09/carpet_bombing_and_directory_p.html (This vulnerability is ...
2
votes
1answer
2k views
Does Google Chrome protect against cross site scripting (XSS)?
In Firefox I've been using the NoScript extension to protect myself from certain malware attacks. NoScript is well known as it's a very powerful extension for Firefox and introduced protection from ...
3
votes
2answers
300 views
Are sandboxes overrated?
I've stumbled upon the following on the blog of the NoScript developer Giorgio Maone.
First, he quotes the following ArsTechnica article about an XSS bug in Adobe Flash:
As useful as sandboxes ...
3
votes
2answers
180 views
Chrome: Found a crash, is it a security vulnerability?
I have been able to make Google Chrome crash, and I was wondering if there are tools or heuristics to determine whether or not the crash is a security vulnerability.
How can I determine if a Chrome ...
2
votes
1answer
120 views
Chrome: Finding vulnerabilities using AddressSanitizer
I'm reading about AddressSanitizer, a tool that can be used to find memory bugs for Chrome (and other C/C++ software). I'm a little curious about what the process of using the tool involves:
1) Is it ...
3
votes
2answers
1k views
Do most browsers handle mixed encrypted and unencrypted content correctly?
In Google Chrome, when I go to an encrypted page that contains unencrypted content, I get the following pop-down, which allows me to either load or not load the insecure content, making a clear ...
5
votes
1answer
221 views
Understanding a vulnerability
http://code.google.com/p/chromium/issues/detail?id=68439
I am having a little bit of trouble understanding this report.
From what i have read, it appears as though removing certain dom nodes ...
3
votes
1answer
347 views
What is chrome.googleechotest.com?
I use chrome (dev channel) on mac osx lion and every now and then it tries to access chrome.googleechotest.com on port 80 (EDIT: and other ports!).
Anybody knows what is the deal with ...
4
votes
1answer
243 views
How do I check the code of a Chrome extension to make sure it's not stealing my info?
I've been reading more and more about just how much access browser extensions can have to your data. This is a little unsettling, so I'm curious if there is a way to Vet these extensions and make sure ...
2
votes
7answers
588 views
Chrome vs Explorer - how to explain in plain words that open-source is better?
Why open-source is better in plain words?
Yesterday I had a talk at a DIY bicycle workshop. There is a PC (running XP) that main application is checking emails (nothing really serious).
I found it ...
2
votes
2answers
513 views
Chrome reports on other browsers running
I was playing around with Chrome and typed the following in the address bar:
chrome://memory-redirect
And saw the note: "If other browsers (e.g. IE, Firefox, Safari) are running, I'll show you ...
