Questions tagged [chrome]

Popular web browser by Google, see chrome.google.com for more information.

Filter by
Sorted by
Tagged with
0 votes
0 answers
103 views

Suspicious "ChromeSync" pop-up in Android requesting credentials

Since late May, I have been getting suspicious pop-up messages overlay on top of android Apps (see screenshots), requesting entering of the "ChromeSync Passphrase" for my google account. I ...
user avatar
3 votes
1 answer
180 views

Bots learn about a new web site as soon as I open it in Chrome. How do I look for leaks?

I am a customer of a cloud hosting provider (Cloudways). I create a new web site which gets a new automatically generated subdomain (like https://phpstack-xxxx-yyyy.cloudwaysapps.com/). I use Chrome ...
user avatar
  • 33
0 votes
0 answers
45 views

I mistakenly clicked an .htm attachment from an spam email, help?

I messed up... I opened the htm file using chrome and entered my password... Upon realising that it wasn't a legit attachment, I immediately changed my Microsoft account password. However, I don't ...
user avatar
0 votes
2 answers
92 views

Unintended file downloaded. Am I likely to have gotten a virus?

I clicked on a link that appeared to be perfectly legit. It proceeded to bring me to a suspicious website that downloaded a file to my PC automatically. I deleted the file quickly and never ran it. I ...
user avatar
4 votes
0 answers
68 views

Is chrome not blocking all third party cookies?

I opened a website 99acres.com in incognito windows on two browsers on a Macbook. Following are the settings: Chrome Version: 100.0.4896.75 (latest) Third Party cookies: Disabled Firefox Version: ...
user avatar
  • 141
0 votes
2 answers
92 views

How can a backdoor install a Chrome extension?

I read this: https://duo.com/decipher/malicious-chrome-extension-backdoor-uncovered-in-malware-campaign#:~:text=One%20of%20these%20is%20a,system%20and%20installing%20the%20extension. I quote this part ...
user avatar
  • 1
1 vote
0 answers
84 views

How do screenshot blocking technologies work? [closed]

I've noticed I can't take screenshots of videos in Star+. When I paste whatever I tried to shot, it comes all black (subtitles however are visible). After some research, I found out it happens with ...
user avatar
  • 111
0 votes
0 answers
38 views

When I visit an http://gofile.me/ link, how much information to I provide to the NAS server owner?

There are files I need from a heavy NAS user and they've given me a link of the form http://gofile.me/xxxxx/xxxxxxxxx If my laptop running the Chrome browser in macOS is connected to the internet via ...
user avatar
  • 1,385
0 votes
3 answers
162 views

Is there a way to scan a pdf to ensure it doesn't contain anything that could be a virus?

The answers to Can a PDF file contain a virus? show that clearly it can! Sometimes we can be quite sure a certain pdf should not need to do anything sophisticated - for example a book in pdf form - so ...
user avatar
  • 1,214
1 vote
2 answers
99 views

How Google protects and syncs the passwords?

I read this post but I want to know more details. I know that Google uses a Windows' function called CryptProtectData to encrypt user passwords on Windows and Google only stores the encrypted forms of ...
user avatar
  • 21
1 vote
0 answers
56 views

Chrome with QUIC enabled is making TLS connection to first Google search result

When I search a site by its name on Google search engine, my Chrome browser pings the first search result, making a TLS connection. For example, if I search "github" on Google, the first ...
user avatar
1 vote
1 answer
72 views

Data breach for my router in chrome

I have just logged into my router in Chrome, Win 10. I got this warning. I immediately changed the password. But I have several questions. Is the message reliable, in the sense that the breach ...
user avatar
0 votes
0 answers
106 views

Google says my password has been found in data breach. HIBP knows nothing about it. Which data breach was that?

I've been using Chrome to save and sync my passwords across devices (and lately I am trying to switch to Bitwarden). Google warned me recently about a password I have used across multiple sites that ...
user avatar
  • 101
0 votes
0 answers
41 views

Most Secure ways to to authorize clients on their devices that are remotely connected by (AnyDesk, TeamViewer, etc...) without knowing the password

My case is I'm designing an app based on chromium browser powered by Electron . And I need sometimes to log the clients in with some web apps. The password is only visible as dots in browsers by ...
user avatar
0 votes
0 answers
19 views

Store login credentials securely with JavaScript [duplicate]

Today I have a web application that needs to store the user's email and password, so that when he opens the login screen, the authentication is done automatically. For this, our application saves the ...
user avatar
  • 153
0 votes
1 answer
70 views

Am I compromised if Microsoft can identify me without browser content? [closed]

I am using Windows 7 and I had to re-install Chrome recently. In doing this, once I had deleted my browser history and used BleachBit, I told my email server (Outlook) what email address I was ...
user avatar
  • 101
1 vote
0 answers
59 views

Is it possible to use an ed25519 security key with Google Chrome SSH applets?

After generating an OpenSSH EC key on a hardware security key: $ ssh-keygen -t ed25519-sk -C comment Is it possible to use this key with Google Chrome SSH applet or Mosh, in particular on non-Linux ...
user avatar
  • 475
0 votes
1 answer
131 views

How to view all SSL certificates for a website using Google Chrome?

How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same - details of only one certificate. How can I see ...
user avatar
0 votes
0 answers
70 views

Antivirus denies Chrome

Our AV (Carbon Black) has denied chrmstp.exe (Chrome installer). I did some digging as to why and I found that it thought that it was attempting to install a backdoor. Digging further, I found the ...
user avatar
  • 133
1 vote
0 answers
43 views

How Firefox and Google password managers protect your password [duplicate]

Based in this post in Google Chrome help they claim that they encrypt my username and password with a secret key known only to my device. What is the algorithm used to generate this secret which is ...
user avatar
  • 21
0 votes
2 answers
86 views

What's the risk of keyboard languages being sent via Content-Language header?

The Android versions of Firefox and Chrome/Chromium and all derivatives (Ungoogled Chromium, Bromite, Brave) by default insert all the user's configured keyboard input languages into the Accept-...
user avatar
  • 291
2 votes
2 answers
159 views

How to do auth without user interaction in an enterprise environment?

We are building a Chrome Extension that will be force-installed on each employee's browser for the companies we work with. We currently use OAuth but many employees are forgetting to sign up. We are ...
user avatar
  • 21
0 votes
1 answer
474 views

How does Chrome 78+ block all methods of DLL injection?

How does Chrome block all methods of code injection past version 78? It even blocks signed DLLs it doesn't have in a static list.
user avatar
1 vote
2 answers
391 views

Safe or Unsafe to Store Passwords in Chrome on MacOS?

I've seen conflicting opinions on this, more than the below, but i.e. Unsafe: https://www.techrepublic.com/article/why-you-should-never-allow-your-web-browser-to-save-your-passwords/ Safe: https://...
user avatar
  • 302
0 votes
0 answers
369 views

I can't decrypt chrome passwords offline with sha masterkey

I'm trying to decrypt a Chrome 80+ Login Data file offline using the SHA1 or SHA256 masterkey retrieved either using backupkey or lsass dump but no tool seems to work (I tried mimikatz, sharpdpapi, ...
user avatar
1 vote
2 answers
317 views

How to make google chrome completely untraceable like tor browser

I am using the following extensions on google chrome for complete privacy and to avoid tracking: VPN Extension to hide actual IP WebRTC prevent extension for disabling WebRTC What other extensions ...
user avatar
0 votes
1 answer
328 views

Does copying cookies allow attackers to view pages that should be visible only after login?

TLDR; Copying the request from ChromeDevTools along with all cookies allows me to view pages that I should not be able to view after logging in. Have I been pwned ? I just found a terrifyingly easy ...
user avatar
  • 265
0 votes
0 answers
117 views

Sending meaningless Addresses requests to a series of malicious IPs

i was testing somethings on browsers(It has nothing to do with what I am going to say) and accidentally i faced a case that when i browse meaningless addresses like abc/ signortest/ word/ the request ...
user avatar
  • 101
24 votes
3 answers
7k views

How is it possible for boss to know I am finding a job?

Today, when my boss talking with me, he suddenly said: No you don't need to worry about it, everyday you have 3 or 4 messages with agent in Linkedin right? I am very very surprised, because : I work ...
user avatar
  • 351
4 votes
1 answer
587 views

How did Firefox get my passwords?

I just installed Firefox browser, while I have previously used Google Chrome as my main browser. I am using Windows 10. During the installation and setup process for Firefox, I was given the option to ...
user avatar
1 vote
1 answer
280 views

Unusual Google Chrome Download Redirection

When I go to https://www.google.com/chrome/, I get redirected to sign in and then forwarded to some app engine link as can be seen in the continue parameter of the following URL: https[:]//accounts[.]...
user avatar
1 vote
1 answer
139 views

Are saved passwords in browsers secure, when stored online?

Where are saved passwords stored if you login to a browser, so they sync whenever you login to that browser on another device. Where and how do Google, Firefox etc. save the passwords? Obviously its ...
user avatar
0 votes
0 answers
195 views

Global variables accessible to other websites opened in same tab

Today I found a security issue with Chrome (or maybe other browsers I haven't tested yet). What happens is that once you open a site and then open another site in the same tab, the previous site's ...
user avatar
-4 votes
1 answer
203 views

Is chrome vulnerable to any zero day exploits right now?

i was using flvtbo youtube converter and i had to enable javascript. i saw an ad come up from "multiadblock.com" which tried to lure me into downloading a chrome extension, but of course i ...
user avatar
  • 11
3 votes
1 answer
188 views

Google Chrome folder protection during HDD forensics

Is there any protection provided by Chrome browser against HDD dump and further forensics (with volatility-like tools)? For example, is it possible to extract google profile from Chrome folder and use ...
user avatar
  • 155
0 votes
1 answer
358 views

Skip date check in Server certificate in Chrome

We have a web application on https port with server certificate valid from 01/01/2021 and valid to 31/12/2021. Due to some constraints the clients which are going to use web application are behind ...
user avatar
  • 101
1 vote
1 answer
137 views

Chrome extensions: tool to notify users of ownership change (to avoid malicious code injection)?

A problem with Chrome extensions was raised in an earlier question: extension owners can sell their extension to another owner, who can then insert malicious code. From a user's perspective, they may ...
user avatar
0 votes
0 answers
24 views

Practical ways to tell if a Chrome extension is safe? [duplicate]

After reading about Emails a browser extension developer gets from scammers (and the comments here) I understand that there are people who try to convince good addon developers to introduce shady (or ...
user avatar
  • 1,214
1 vote
1 answer
270 views

NET::ERR_CERT_AUTHORITY_INVALID in Chrome but not in Chromium or Firefox

I'm getting a NET::ERR_CERT_AUTHORITY_INVALID for the following google sponsored website: https://viz.mediapipe.dev/ NET::ERR_CERT_AUTHORITY_INVALID Subject: mediapipe.dev Issuer: GTS CA 1O1 Expires ...
user avatar
  • 293
4 votes
1 answer
629 views

How to restrict LAN addresses in a browser?

How to prevent Chrome to connect addresses from LAN to prevent CSRF attacks like this? <img src="http://192.168.0.1/some_action"> Info for other browsers is welcome here too.
user avatar
  • 1,699
4 votes
3 answers
649 views

Source code being injected into every website

I had a client contact me today because a website I developed (that deals with sensitive information) wasn't loading correctly on one computer on Chrome. After poking around for a while it appears to ...
user avatar
  • 141
1 vote
2 answers
248 views

Does a professional website know that person A switches the Chrome "user" and logged into its website with another email address?

Let's say I have account A on site example.com that has a policy of strictly one account per real person. I then create a new Gmail address, use that Gmail address to open a new Chrome user (not ...
user avatar
3 votes
0 answers
153 views

Can Chrome extensions access other Chrome extensions' data?

Can the data in a password-manager Chrome extension be accessed by a different Chrome extension? For example, if one were to install a malicious extension, could that extension access the data (i.e., ...
user avatar
  • 31
0 votes
1 answer
164 views

Can visiting website infect computer? [duplicate]

I have heard online that simply visiting a website can infect a computer. I had an instance recently where someone I know sent me a link but misspelled it. The misspelled link lead to a malicious ...
user avatar
0 votes
1 answer
258 views

Is it possible to setup a phishing “honeypot” for proof-of-concept purposes without getting the host/IP blacklisted?

In the company I work for, we have many clients and the vast majority of them have hosting with us and we make their web apps. One client, though, just applied for cyber security. Our CEH (certified ...
user avatar
  • 103
2 votes
0 answers
141 views

What is the threat-model of a malicious browser-extension accessing the data of *another browser-extension* that is security-critical?

Modern password-managers are moving towards a "fully-in-the-browser" model (see: historical RCE on LastPass, and now 1Password is also moving towards 1Password X as "the future" ...
user avatar
8 votes
2 answers
12k views

Chrome allow insecure localhost

I have just stumbled upon what is a very helpful flag in chrome (for developers): chrome://flags/#allow-insecure-localhost The flag is described as: Allow invalid certificates for resources loaded ...
user avatar
  • 185
0 votes
0 answers
50 views

Does Google Chrome send INCOGNITO search history data to Google? [duplicate]

Type Ctrl + Shift + N. Then type DIVIDED WE FALL and then click enter. Click a search result that takes you to YouTube. Go back to the search results. Retype "DIVIDED WE FALL by Valarie Kaur"...
user avatar
  • 339
22 votes
5 answers
13k views

Does Google collect and store data about activity done in Incognito mode?

Suppose that someone browses non-Youtube videos (like on Vimeo) in Google Chrome's Incognito mode. Does Google collect and store any data about this activity ("watched videos on Vimeo" ...
user avatar
  • 339
-1 votes
1 answer
186 views

Google says CVE-2020-15999 was for a zero day exploit found on 2020-10-19, but the CVE record was created on 2020-07-27. What am I missing?

There have been numerous reports in the last week about the Chrome exploit using a bug in the FreeType library. According to reports, this bug was found on 2020-10-19. https://chromereleases....
user avatar

1
2 3 4 5
11