Questions tagged [chrome]

Popular web browser by Google, see chrome.google.com for more information.

Filter by
Sorted by
Tagged with
1
vote
1answer
30 views

Chrome: why is invalid certificate usage for resources loaded from localhost disabled?

In chrome there is a flag called: allow-insecure-localhost. As far as I can tell all it does is block localhost connection over tls if the certificate is self signed. Why is this feature turned off ...
0
votes
0answers
37 views

WhatsApp web on Google Chrome scanning the QR code do nothing [closed]

I've noticed this issue a week ago, I'm unable to scan the QR code for WhatsApp web on Google Chrome tab, it just does nothing. I've tried incognito window in Google Chrome but it doesn't show any ...
2
votes
1answer
87 views

How do I know if a Google Chrome extension is leaking data?

Many Google Chrome extensions require permissions to read the contents of webpages the user visits. How can the user verify whether and to what extent a certain Chrome extension leaks data?
2
votes
0answers
34 views

DevTool requests full access to YOURPATH, make sure that you do not expose any sensitive information dialog [closed]

I came across this warning message in chrome after I executed a command in the browser inspector, and realised this question had been asked on stackoverflow here but the answers do not contain so much ...
0
votes
1answer
148 views

Run your own code on chrome:// url?

Recently I've been trying to escape sandbox Chrome OS for fun, bounties, etc. I found you can run straight system commands through chrome:// urls (such as displaying USB Detected message, or something)...
1
vote
0answers
56 views

does pasting a url into a chrome file upload dialog box (windows process) have security issues?

When using Chrome and I select a file for upload on a website that accepts files, a Windows dialog box appears for me to select a file. I can then paste a URL address for a file in the dialog box, ...
1
vote
1answer
126 views

Can Chromebooks be affected by malware from an SD Card?

I've got an SD card that I think might contain infected files. However, those files are from my Windows days. I hear that Chrome OS is pretty hardy, and that it's really only posisble to get damage ...
3
votes
0answers
135 views

How does Chrome's Renderer Code Integrity Protection Work?

I recently heard of Chrome's Renderer Code Integrity Protection, which is apparently supposed to prevent unsigned dlls from being loaded into the chrome.exe process, and figured I'd test what would ...
6
votes
0answers
218 views

Why does Chrome not allow the modification of these headers by extensions?

The Chrome WebRequests API mentions that specific request headers are not available to the onBeforeSendHeaders event, meaning that extensions cannot read and/or modify these headers. Here is an ...
38
votes
1answer
5k views

Can a browser extension (Chrome, Firefox, etc.) read the web console log?

I realized that my bank handles sensitive information in the web console log, so my concern is if any browser extension could read the log?
0
votes
2answers
314 views

Why does Firefox (version 71.0 (64-bit)) indicate “weak encryption” but Google Chrome (Version 79.0.3945.88) does not?

I read that Mozilla uses its own trust certificate store but does "weak encryption" have anything to do with whether the browser trusts the certificate? Has it got anything to do with the signature ...
-1
votes
1answer
331 views

Why is Google Remote Desktop not detected by company?

My company has been applying really strict information security policies with firewalls and good quality network equipment this is to prevent from someone to connect to the company network. Many of ...
1
vote
1answer
1k views

How to decrypt Chrome saved password from “Login Data” file

Is there a way to decrypt passwords from Chrome Login Data file? My goal is learning about the backend process of this decryption, so I don't want to use any pre-built applications.
1
vote
0answers
37 views

WMI Performance Adapter function for Chrome browser?

Does someone know why the WMI Performance Adapter (WmiApSrv.exe) always starts when launching Chrome browser? Whats the function of this service? I have heared this service can be maliciously used to ...
7
votes
3answers
439 views

Browser setups to stay safe from malware and unwanted stuff

I have to set up a browser to surf the internet. I'm trying to stay safe from malware as much as possible. (I already know that there's no way to stay 100% safe.) My idea is to use Firefox with these ...
2
votes
1answer
131 views

Browser copy function overridden silently, is this security risk?

I came across a site which overrides copy functionality and injects current page url as paste value. I was trying to select couple of words and instead it copied the page link. Simple developer tools ...
1
vote
1answer
306 views

Preventing CSRF with SameSite=“strict” without degrading user experience?

ASP.NET will soon begin reflecting Google's decision to default cookies to SameSite="strict" in a defense against CSRF attacks: https://devblogs.microsoft.com/aspnet/upcoming-samesite-cookie-changes-...
-2
votes
1answer
50 views

Monitor data traffic in chrome:// protocols

With Burp Suite we can capture the traffic of protocols like http, https. But i want now monitor the data traffic in urls like chrome://settings
0
votes
0answers
30 views

Chrome on Android connects to suspicious address on open [duplicate]

I had legitimate suspicion that someone is spying on my internet traffic. So I connected my Android phone to proxy via mitmproxy. I noticed that when I opened Chrome, it automatically connects to ...
1
vote
0answers
137 views

Bizarre request being made from Chrome

I've been seeing a very weird request being made from my Chrome browser (haven't noticed it on Brave). It does not run on all websites, and not all the time (it can appear on a website, then after a ...
1
vote
1answer
232 views

What is this URL that loads each time Google Chrome spawns?

What does this URL do that opens each time Google Chrome loads? http://redirector.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOWVmQUFXS041NV9ZVXlJVWwxbGc5TUM4dw/7519.422.0....
1
vote
1answer
298 views

Does Google Chrome store browsing history on their servers?

Does Google Chrome store browsing history on their servers? I think, if for example I use private browsing, Chrome can still log my activity.
2
votes
1answer
3k views

When I disable an installed extension in Chrome, will it still try to connect to the internet?

I have an extension in Chrome, called Daxab ultimate, that I use, because on certain adult sites it lets me stream the video in 1080p and without the extension its 720p. So, if I turn on the ...
0
votes
1answer
128 views

Blocking Standard Users (Win 10) from Adding Chrome Extensions

I want to block standard users (Win 10) from adding Chrome extensions. When the standard user renames the default folder, it overwrites any security policies applied on the Extensions folder.
0
votes
1answer
248 views

Predicting Math.random() sequence using V8's MWC1616 algorithm

If you have the seeds for Math.random() using mwc1616, are the random numbers generated in the same order every time / are they repeating? Basically wondering if, given a seed, can I predict past ...
6
votes
2answers
1k views

Did google chrome kill public key pinning?

I've read many articles talking about google chrome killing public key pinning in Chrome 67 (May 2018). See here, here, and here. However, I haven't found any information about whether or not they ...
3
votes
1answer
525 views

Can my G Suite admin see my browsing history if: I am in incognito mode on iPad Chrome?

Can my G suite admin see by browsing history if: I am in incognito mode on iPad Chrome? iPadOS beta 3. I'm signed in with a G Suite account. If they are monitoring me, is it visible? Is there any way ...
0
votes
1answer
98 views

How to stop other programs from reading passwords stored in my browser?

I was very surprised and alarmed to see that a free software could list passwords stored by browser in plain text. I thought that these passwords (such as the ones for email) are encrypted and can't ...
1
vote
1answer
641 views

How can Instagram cause Chrome to attempt to login and show me my username when I'm using incognito mode?

When I reach Instagram user pages while in Incognito mode, Chrome pops up a window with my non-incognito username asking whether or not to sign in. See screenshot below. Although I assume Chrome ...
0
votes
1answer
525 views

I logged into my work computer with my personal email, can my employer see my google search history on Chrome? [duplicate]

Stupid mistake here. Today at home using my work computer I logged into my gmail on Chrome to check my personal email. I then went to look something up in google and saw several google search ...
-1
votes
1answer
85 views

How to delete browser malware? [closed]

I've got some malware so now my browser is sending requests to strange sites: Also if I click on any html element in a browser It may redirect me to unwanted pages I've tried to fix this using ...
0
votes
0answers
34 views

Saved browser login information disappearing [duplicate]

I recently noticed that my browser (Chrome) is not saving my login state for websites anymore. The first time it happened I didn't thought much of it but it happened again and again. I also noticed ...
0
votes
1answer
262 views

Is it possible to browse HSTS sites over SOCKS5 proxy?

I am unable to browse HSTS websites using SOCKS5 proxy in chrome browser...getting this error... This site can’t be reached The web page at https://www.instagram.com/accounts/login/?hl=en might ...
0
votes
1answer
693 views

Installed sketchy Chrome extension - Potential malware infection?

So... Tired me was browsing through Ikea's website this morning and tried to use one of their visualisation tool. Got an error message saying that I was not running the lastest version of Adobe Flash. ...
2
votes
1answer
103 views

Why would Chrome return non-deterministic bytes for a versioned release? [closed]

From the: Abusing SHA-1 collisions for Chromium updates https://news.ycombinator.com/item?id=20114809 https://github.com/NixOS/nixpkgs/blob/master/pkgs/applications/networking/browsers/chromium/...
-2
votes
1answer
96 views

is it possible that an attacker catch a page name from history?

like if an attacker sets a dns rebinding would he be able to get the router name from the history so he can make his attack more accurate .
2
votes
0answers
83 views

How/When does Chrome queries Certificate Transparency (CT) log servers to ask for inclusion proof of certificates and how can I debug them?

I’ve been trying to understand how does Chrome interact with CT log servers. According to what I’ve read so far, Chrome sends inclusion proof requests (“GET https:///ct/v2/get-proof-by-hash” - https://...
0
votes
0answers
40 views

Browser Exploiting - Using SyncManager to keep Service Workers alive forever

I just read the paper "Master of Web Puppets: Abusing Web Browsers for Persistent and Stealthy Computation". The authors claim to use the SyncManager Interface in order to keep Service Workers alive ...
3
votes
2answers
194 views

Can Google deduce the visited URLs from Safe Browsing reports?

The Google Chrome Privacy Whitepaper has a part about Safe Browsing, which says (emphasis mine): If you navigate to a URL that appears on the list, Chrome sends a partial URL fingerprint (the ...
6
votes
1answer
155 views

Information obtained from executing Javascript math functions in browser

I came across interesting piece of javascript across few sites. It's executing Javascript math functions such as abs, acos, random etc. thousands of times - or four thousand times in my case, though ...
1
vote
1answer
70 views

local environment development and HTTPS: interaction with Chrome requirement of CT logs

The commonly suggested wisdom for local development environments with HTTPS is to use a self-created Root CA and use certificates issued from that CA. However, Chrome requires Certificate Transparancy ...
0
votes
0answers
90 views

Browser passwords used on multiple domains?

I have 100 domains with authentication backed by the same LDAP database. There is a single-sign on, but it's not implemented with OAuth. That is to say, per user, each domain accepts the same user/...
1
vote
1answer
85 views

How to defend myself against potential malicious browser add-ons?

So previously I asked a question about what type of private data can addons extract from my browser : Can a malicious add-on access internet history and such in Chrome/Firefox? and it turns out if ...
19
votes
2answers
3k views

Can a malicious add-on access internet history and such in Chrome/Firefox?

How does Chrome/Firefox make sure add-ons are safe? Do they have any protection against a malicious add-on? How much access can add-ons have? Can they access internet history or maybe even cookies ...
0
votes
5answers
330 views

Is my Google Drive still secure if Chrome was heavily compromised?

I use an Apple eMac desktop computer. I formerly used Safari as my main browser. I migrated to Chrome as it is integrated with Google products. I use Google Drive very extensively as my main ...
0
votes
1answer
291 views

XSS triggered but chrome didn't show popup. What exactly was going on?

Related to my previous question on XSS in canonical link. At the beginning I turned off Chrome's XSS auditor and tried executing XSS with just onload event using following payload which did not ...
0
votes
1answer
116 views

Are there any chrome extension VPNs that use the chrome.vpnProvider API? [closed]

Seems most extensions use the old proxy api which requires giving them full "read and change site data" access. A more recent API is available made for VPNs: https://developer.chrome.com/extensions/...
0
votes
2answers
679 views

What does “This request does not comply with Chrome's Certificate Transparency policy.” in Chrome's Security Tab mean?

When you open up Chrome's DevTools and switch to the Security Tab you'll see the message This request does not comply with Chrome's Certificate Transparency policy. on some origins. (Example: https://...
0
votes
0answers
214 views

On The Use Of Unsanboxed Plugins In The Chrome Browser

The following questions relate to unsandboxed plugins under Settings > Advanced > Content settings > Unsandboxed plugins. The first thing I'd like to know is whether this setting is basically for ...
4
votes
0answers
1k views

Payment Handlers In Google Chrome

Are there any privacy/security risks associated with using payment handlers in Google Chrome? Somehow, the idea of having my financial information stored in a browser makes me feel uncomfortable. I ...

1
2 3 4 5
9