Skip to main content

Questions tagged [chrome]

Popular web browser by Google, see chrome.google.com for more information.

Filter by
Sorted by
Tagged with
10 votes
1 answer
2k views

Could a Google Chrome extension read my password?

I am concerned about the security of my passwords while using Google Chrome extensions. Specifically, I'd like to know if it's possible for a Chrome extension to read passwords that I enter on ...
goalTosin's user avatar
  • 103
1 vote
1 answer
87 views

CSP : Different hash for the same external library (Firefox vs Chrome)

During my implementation of a proof of concept for a CSP, I noticed that the hash value for the external library (jquery in this example) isn't the same between Firefox and Chrome and I can't figure ...
Marc's user avatar
  • 13
2 votes
1 answer
132 views

Does the school have access to email content of my personal email if logged into Chrome with my school account?

I sent an email to somebody with my personal email account (not my school email account). However, when using my personal email, I am doing it with a Chrome browser that I am logged in to using my ...
Amanra 's user avatar
4 votes
0 answers
277 views

How does Google Chrome's "Warn you if passwords are exposed in a data breach" feature work?

This feature is enabled by default. It says the usernames and passwords would be encrypted before sending to google. But google would know the encryption keys it used and to compare it with leaked ...
eee's user avatar
  • 41
18 votes
2 answers
6k views

How is Xiaomi changing my browser home page?

I have recently observed that the home page of Google Chrome on my Xiaomi Android phone has been altered to a website called "Mintnav". I did not update any software. How is Xiaomi able to ...
samurai jack's user avatar
0 votes
0 answers
518 views

Tried 3 things to make Chrome accept remote self-signed SSL cert

I have a sandbox Windows 2016 server in the cloud that only I use for dev, testing, and experimentation. I can access the site remotely from Chrome, but no matter what I try, Chrome displays the ...
HerrimanCoder's user avatar
0 votes
1 answer
892 views

"CORS Error" but Chrome sent the request anyway

I have created a page to attack a CSRF unprotected endpoint. This endpoint accepts only JSON as payload, so I have used fetch with credentials: "include" properties. The page run locally ...
A.DUPONCHEL's user avatar
0 votes
1 answer
615 views

Recent Chrome version not supporting TLS 1.3 on mac Ventura 13.1 [closed]

Almost latest version of Chrome 112.0.5615.49 (Official Build) (x86_64), on macOS Ventura 13.1, keeps negotiating TLS only up to 1.2 version. I tried some of the same websites in Waterfox (Mozilla ...
miran80's user avatar
  • 171
0 votes
1 answer
211 views

Why does it seem like websites can still use JavaScript in Chrome after disabling JavaScript?

I have disabled JavaScript under "Site settings" in Chrome. That is, I selected: "Don't allow sites to use Javascript". After doing so, I encountered a webpage that somehow manages ...
anon_wh1's user avatar
1 vote
0 answers
845 views

Tool to Decrypt Chrome, Firefox and Edge login information [closed]

Im new to python but Ive created a couple of programs that can collect the user credentials for Google Chrome, Mozilla Firefox and Microsoft Edge and decrypt them then save the decrypted output to ....
Luke Jordan's user avatar
1 vote
1 answer
92 views

Can the receiver of a saved wepbage I shared on chrome to Whatsapp access my mail

So I shared a webpage I wanted to print to a printshop via WhatsApp. When the operator opened the file, I could see my email and my name displayed on the print shops PC almost as if they have my email ...
Jay Bird's user avatar
4 votes
0 answers
262 views

What are the potential vulnerabilities with containerized rootless Chrome and --no-sandbox?

I'm evaluating running Chromium without native sandboxing in a rootless container. A few points: You can containerize Chrome using rootless containers with something like podman. This will utilize ...
Evan Carroll's user avatar
  • 2,863
1 vote
0 answers
811 views

Recovering Chrome Passwords from Login Data File, Without Local State File

I ran the ForensIT profile migration wizard which migrates an existing profile to a new environment (from domain to workgroup, or vice versa). Doing so deletes encryption keys from Chrome's "...
junioradams's user avatar
1 vote
1 answer
287 views

How does an attacker modify local files when I access them in Chrome?

I have a trusted html file containing a script that handles sensitive information. When I open it in Chrome 108 on Android, it says: What is this about? The above warning seems to appear ...
personal_cloud's user avatar
1 vote
1 answer
622 views

How did hackers gain access to my Chrome and my social media accounts? [closed]

These are the things that have happened to me in the last few hours: Weird tweets such as "Hello 91" and "Hello 87" were being tweeted from my account. My Instagram account had ...
Chygo Runner's user avatar
0 votes
0 answers
105 views

ARP Spoofing succeeded only partially

I have done arp spoofing to my phone using scapy and detected duplicate ips in the arp protocol with wireshark. However, access to websites using chrome app was blocked, but youtube and onedrive apps ...
kunokouki's user avatar
2 votes
3 answers
305 views

Is Chrome's view-source dangerous when visiting malicious sites? [duplicate]

What are the risks of viewing the source code of malicious pages on Google Chrome? I want to go directly to view-source:https://example-site.com to visit the sites without rendering anything malicious ...
clueless_robot's user avatar
2 votes
1 answer
178 views

Security concern with hosting a chrome extension on a public server

We have chrome extension that is for internal use by our clients. It is force-installed via enterprise policy. So far, we have it published on the Chrome WebStore but we need to move off of it due to ...
blissfool's user avatar
  • 121
1 vote
2 answers
391 views

Are browser extensions inherently unsafe?

If we're doing sensitive things in the browser, like logging into cryptocurrency exchanges, is it too risky to have any browser extensions, for fear that there's a virus or something in them?
fnavigate's user avatar
0 votes
0 answers
2k views

Searching in Chrome redirects to "find.fnavigate-now.com"

It used to do a Google search. Now it redirects to this weird website, which itself redirects to Yahoo. What gives? https://find.fnavigate-now.com/results.aspx?q=test&gd=SY1004294&searchsource=...
fnavigate's user avatar
0 votes
1 answer
431 views

How easy is it really for malicious websites to steal session cookies or other data?

I would like to know how feasible an attack on a web browser is. Is that something that occurs frequently or is it difficult to manage for a malicious website to steal sensitive data using remote code ...
noto77's user avatar
  • 41
2 votes
2 answers
473 views

Suspicious "ChromeSync" pop-up in Android requesting credentials

Since late May, I have been getting suspicious pop-up messages overlay on top of android Apps (see screenshots), requesting entering of the "ChromeSync Passphrase" for my google account. I ...
Travis Madson's user avatar
3 votes
1 answer
298 views

Bots learn about a new web site as soon as I open it in Chrome. How do I look for leaks?

I am a customer of a cloud hosting provider (Cloudways). I create a new web site which gets a new automatically generated subdomain (like https://phpstack-xxxx-yyyy.cloudwaysapps.com/). I use Chrome ...
Marassa's user avatar
  • 33
0 votes
2 answers
2k views

Unintended file downloaded. Am I likely to have gotten a virus?

I clicked on a link that appeared to be perfectly legit. It proceeded to bring me to a suspicious website that downloaded a file to my PC automatically. I deleted the file quickly and never ran it. I ...
user277538's user avatar
5 votes
0 answers
222 views

Is chrome not blocking all third party cookies?

I opened a website 99acres.com in incognito windows on two browsers on a Macbook. Following are the settings: Chrome Version: 100.0.4896.75 (latest) Third Party cookies: Disabled Firefox Version: ...
Pardhu's user avatar
  • 151
0 votes
1 answer
343 views

How can a backdoor install a Chrome extension?

I read this: https://duo.com/decipher/malicious-chrome-extension-backdoor-uncovered-in-malware-campaign#:~:text=One%20of%20these%20is%20a,system%20and%20installing%20the%20extension. I quote this part ...
Y K's user avatar
  • 1
1 vote
0 answers
318 views

How do screenshot blocking technologies work? [closed]

I've noticed I can't take screenshots of videos in Star+. When I paste whatever I tried to shot, it comes all black (subtitles however are visible). After some research, I found out it happens with ...
sourcream's user avatar
  • 111
0 votes
0 answers
164 views

When I visit an http://gofile.me/ link, how much information to I provide to the NAS server owner?

There are files I need from a heavy NAS user and they've given me a link of the form http://gofile.me/xxxxx/xxxxxxxxx If my laptop running the Chrome browser in macOS is connected to the internet via ...
uhoh's user avatar
  • 1,409
1 vote
3 answers
18k views

Is there a way to scan a pdf to ensure it doesn't contain anything that could be a virus?

The answers to Can a PDF file contain a virus? show that clearly it can! Sometimes we can be quite sure a certain pdf should not need to do anything sophisticated - for example a book in pdf form - so ...
stevec's user avatar
  • 1,300
2 votes
2 answers
630 views

How Google protects and syncs the passwords?

I read this post but I want to know more details. I know that Google uses a Windows' function called CryptProtectData to encrypt user passwords on Windows and Google only stores the encrypted forms of ...
John's user avatar
  • 21
1 vote
0 answers
191 views

Chrome with QUIC enabled is making TLS connection to first Google search result

When I search a site by its name on Google search engine, my Chrome browser pings the first search result, making a TLS connection. For example, if I search "github" on Google, the first ...
Marco Marsala's user avatar
1 vote
1 answer
337 views

Data breach for my router in chrome

I have just logged into my router in Chrome, Win 10. I got this warning. I immediately changed the password. But I have several questions. Is the message reliable, in the sense that the breach ...
sancho.s ReinstateMonicaCellio's user avatar
0 votes
0 answers
303 views

Google says my password has been found in data breach. HIBP knows nothing about it. Which data breach was that?

I've been using Chrome to save and sync my passwords across devices (and lately I am trying to switch to Bitwarden). Google warned me recently about a password I have used across multiple sites that ...
dragi's user avatar
  • 101
0 votes
0 answers
109 views

Most Secure ways to to authorize clients on their devices that are remotely connected by (AnyDesk, TeamViewer, etc...) without knowing the password

My case is I'm designing an app based on chromium browser powered by Electron . And I need sometimes to log the clients in with some web apps. The password is only visible as dots in browsers by ...
a.badawi's user avatar
0 votes
0 answers
20 views

Store login credentials securely with JavaScript [duplicate]

Today I have a web application that needs to store the user's email and password, so that when he opens the login screen, the authentication is done automatically. For this, our application saves the ...
Tom's user avatar
  • 174
0 votes
1 answer
113 views

Am I compromised if Microsoft can identify me without browser content? [closed]

I am using Windows 7 and I had to re-install Chrome recently. In doing this, once I had deleted my browser history and used BleachBit, I told my email server (Outlook) what email address I was ...
Nigel J's user avatar
  • 101
1 vote
0 answers
217 views

Is it possible to use an ed25519 security key with Google Chrome SSH applets?

After generating an OpenSSH EC key on a hardware security key: $ ssh-keygen -t ed25519-sk -C comment Is it possible to use this key with Google Chrome SSH applet or Mosh, in particular on non-Linux ...
Petr's user avatar
  • 517
0 votes
1 answer
1k views

How to view all SSL certificates for a website using Google Chrome?

How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same - details of only one certificate. How can I see ...
The Amateur Coder's user avatar
0 votes
0 answers
52 views

How Firefox and Google password managers protect your password [duplicate]

Based in this post in Google Chrome help they claim that they encrypt my username and password with a secret key known only to my device. What is the algorithm used to generate this secret which is ...
John's user avatar
  • 21
0 votes
2 answers
194 views

What's the risk of keyboard languages being sent via Content-Language header?

The Android versions of Firefox and Chrome/Chromium and all derivatives (Ungoogled Chromium, Bromite, Brave) by default insert all the user's configured keyboard input languages into the Accept-...
ccpizza's user avatar
  • 301
2 votes
2 answers
438 views

How to do auth without user interaction in an enterprise environment?

We are building a Chrome Extension that will be force-installed on each employee's browser for the companies we work with. We currently use OAuth but many employees are forgetting to sign up. We are ...
cypr's user avatar
  • 121
0 votes
1 answer
2k views

How does Chrome 78+ block all methods of DLL injection?

How does Chrome block all methods of code injection past version 78? It even blocks signed DLLs it doesn't have in a static list.
TJCoder's user avatar
  • 11
1 vote
2 answers
984 views

Safe or Unsafe to Store Passwords in Chrome on MacOS?

I've seen conflicting opinions on this, more than the below, but i.e. Unsafe: https://www.techrepublic.com/article/why-you-should-never-allow-your-web-browser-to-save-your-passwords/ Safe: https://...
TCooper's user avatar
  • 366
1 vote
2 answers
601 views

How to make google chrome completely untraceable like tor browser

I am using the following extensions on google chrome for complete privacy and to avoid tracking: VPN Extension to hide actual IP WebRTC prevent extension for disabling WebRTC What other extensions ...
Shashwat Kumar's user avatar
0 votes
1 answer
1k views

Does copying cookies allow attackers to view pages that should be visible only after login?

TLDR; Copying the request from ChromeDevTools along with all cookies allows me to view pages that I should not be able to view after logging in. Have I been pwned ? I just found a terrifyingly easy ...
ng.newbie's user avatar
  • 275
0 votes
0 answers
163 views

Sending meaningless Addresses requests to a series of malicious IPs

i was testing somethings on browsers(It has nothing to do with what I am going to say) and accidentally i faced a case that when i browse meaningless addresses like abc/ signortest/ word/ the request ...
Signor's user avatar
  • 101
24 votes
3 answers
7k views

How is it possible for boss to know I am finding a job?

Today, when my boss talking with me, he suddenly said: No you don't need to worry about it, everyday you have 3 or 4 messages with agent in Linkedin right? I am very very surprised, because : I work ...
Elisa's user avatar
  • 351
6 votes
1 answer
902 views

How did Firefox get my passwords?

I just installed Firefox browser, while I have previously used Google Chrome as my main browser. I am using Windows 10. During the installation and setup process for Firefox, I was given the option to ...
Hymns For Disco's user avatar
1 vote
1 answer
547 views

Unusual Google Chrome Download Redirection

When I go to https://www.google.com/chrome/, I get redirected to sign in and then forwarded to some app engine link as can be seen in the continue parameter of the following URL: https[:]//accounts[.]...
javaWebDev's user avatar
1 vote
1 answer
181 views

Are saved passwords in browsers secure, when stored online?

Where are saved passwords stored if you login to a browser, so they sync whenever you login to that browser on another device. Where and how do Google, Firefox etc. save the passwords? Obviously its ...
user2209430's user avatar

1
2 3 4 5
11