Questions tagged [chrome]
Popular web browser by Google, see chrome.google.com for more information.
524 questions
1
vote
0
answers
79
views
Detecting drive-by-download attack on android
Context: I received a text message about unpaid ticket on the same day I parked at a hospital dropoff zone. The number was from an entirely different province and the url looked very odd. Not a number ...
0
votes
1
answer
143
views
Ways Google identifies browser activity done in incognito mode? [duplicate]
I saw Google are being sued for tracking you in incognito mode and was curious as to how they identify the 'you' if you're not logged in to a Google account. Or are they logging the activity but not ...
- 9
0
votes
1
answer
77
views
What does installation of a VPN chrome extension do to the traffic from chrome
I am a networking noob who is trying to understand stuff from the expert community here. Here is my issue, I have a Proxy client ABC installed in my PC and all my traffic is routed through this proxy ...
21
votes
2
answers
4k
views
Could a Google Chrome extension read my password?
I am concerned about the security of my passwords while using Google Chrome extensions. Specifically, I'd like to know if it's possible for a Chrome extension to read passwords that I enter on ...
- 321
1
vote
1
answer
150
views
CSP : Different hash for the same external library (Firefox vs Chrome)
During my implementation of a proof of concept for a CSP, I noticed that the hash value for the external library (jquery in this example) isn't the same between Firefox and Chrome and I can't figure ...
- 13
2
votes
1
answer
370
views
Does the school have access to email content of my personal email if logged into Chrome with my school account?
I sent an email to somebody with my personal email account (not my school email account). However, when using my personal email, I am doing it with a Chrome browser that I am logged in to using my ...
- 21
4
votes
0
answers
323
views
How does Google Chrome's "Warn you if passwords are exposed in a data breach" feature work?
This feature is enabled by default. It says the usernames and passwords would be encrypted before sending to google. But google would know the encryption keys it used and to compare it with leaked ...
- 41
18
votes
2
answers
6k
views
How is Xiaomi changing my browser home page?
I have recently observed that the home page of Google Chrome on my Xiaomi Android phone has been altered to a website called "Mintnav". I did not update any software. How is Xiaomi able to ...
- 197
0
votes
0
answers
575
views
Tried 3 things to make Chrome accept remote self-signed SSL cert
I have a sandbox Windows 2016 server in the cloud that only I use for dev, testing, and experimentation. I can access the site remotely from Chrome, but no matter what I try, Chrome displays the ...
- 101
0
votes
1
answer
1k
views
"CORS Error" but Chrome sent the request anyway
I have created a page to attack a CSRF unprotected endpoint.
This endpoint accepts only JSON as payload, so I have used fetch with credentials: "include" properties. The page run locally ...
0
votes
1
answer
706
views
Recent Chrome version not supporting TLS 1.3 on mac Ventura 13.1 [closed]
Almost latest version of Chrome 112.0.5615.49 (Official Build) (x86_64), on macOS Ventura 13.1, keeps negotiating TLS only up to 1.2 version. I tried some of the same websites in Waterfox (Mozilla ...
- 171
0
votes
1
answer
227
views
Why does it seem like websites can still use JavaScript in Chrome after disabling JavaScript?
I have disabled JavaScript under "Site settings" in Chrome. That is, I selected: "Don't allow sites to use Javascript". After doing so, I encountered a webpage that somehow manages ...
- 1
1
vote
0
answers
1k
views
Tool to Decrypt Chrome, Firefox and Edge login information [closed]
Im new to python but Ive created a couple of programs that can collect the user credentials for Google Chrome, Mozilla Firefox and Microsoft Edge and decrypt them then save the decrypted output to ....
- 11
1
vote
1
answer
98
views
Can the receiver of a saved wepbage I shared on chrome to Whatsapp access my mail
So I shared a webpage I wanted to print to a printshop via WhatsApp. When the operator opened the file, I could see my email and my name displayed on the print shops PC almost as if they have my email ...
- 13
4
votes
0
answers
286
views
What are the potential vulnerabilities with containerized rootless Chrome and --no-sandbox?
I'm evaluating running Chromium without native sandboxing in a rootless container. A few points:
You can containerize Chrome using rootless containers with something like podman. This will utilize ...
- 3,107
1
vote
0
answers
991
views
Recovering Chrome Passwords from Login Data File, Without Local State File
I ran the ForensIT profile migration wizard which migrates an existing profile to a new environment (from domain to workgroup, or vice versa). Doing so deletes encryption keys from Chrome's "...
- 11
1
vote
1
answer
316
views
How does an attacker modify local files when I access them in Chrome?
I have a trusted html file containing a script that handles sensitive information. When I open it in Chrome 108 on Android, it says:
What is this about?
The above warning seems to appear ...
- 389
1
vote
1
answer
1k
views
How did hackers gain access to my Chrome and my social media accounts? [closed]
These are the things that have happened to me in the last few hours:
Weird tweets such as "Hello 91" and "Hello 87" were being tweeted from my account.
My Instagram account had ...
- 11
1
vote
0
answers
113
views
ARP Spoofing succeeded only partially
I have done arp spoofing to my phone using scapy and detected duplicate ips in the arp protocol with wireshark.
However, access to websites using chrome app was blocked, but youtube and onedrive apps ...
- 11
2
votes
3
answers
373
views
Is Chrome's view-source dangerous when visiting malicious sites? [duplicate]
What are the risks of viewing the source code of malicious pages on Google Chrome?
I want to go directly to view-source:https://example-site.com to visit the sites without rendering anything malicious ...
2
votes
1
answer
184
views
Security concern with hosting a chrome extension on a public server
We have chrome extension that is for internal use by our clients. It is force-installed via enterprise policy. So far, we have it published on the Chrome WebStore but we need to move off of it due to ...
- 121
1
vote
2
answers
517
views
Are browser extensions inherently unsafe?
If we're doing sensitive things in the browser, like logging into cryptocurrency exchanges, is it too risky to have any browser extensions, for fear that there's a virus or something in them?
- 13
0
votes
0
answers
2k
views
Searching in Chrome redirects to "find.fnavigate-now.com"
It used to do a Google search. Now it redirects to this weird website, which itself redirects to Yahoo. What gives?
https://find.fnavigate-now.com/results.aspx?q=test&gd=SY1004294&searchsource=...
- 13
0
votes
1
answer
729
views
How easy is it really for malicious websites to steal session cookies or other data?
I would like to know how feasible an attack on a web browser is. Is that something that occurs frequently or is it difficult to manage for a malicious website to steal sensitive data using remote code ...
- 41
2
votes
2
answers
577
views
Suspicious "ChromeSync" pop-up in Android requesting credentials
Since late May, I have been getting suspicious pop-up messages overlay on top of android Apps (see screenshots), requesting entering of the "ChromeSync Passphrase" for my google account.
I ...
3
votes
1
answer
313
views
Bots learn about a new web site as soon as I open it in Chrome. How do I look for leaks?
I am a customer of a cloud hosting provider (Cloudways). I create a new web site which gets a new automatically generated subdomain (like https://phpstack-xxxx-yyyy.cloudwaysapps.com/). I use Chrome ...
- 33
0
votes
2
answers
3k
views
Unintended file downloaded. Am I likely to have gotten a virus?
I clicked on a link that appeared to be perfectly legit. It proceeded to bring me to a suspicious website that downloaded a file to my PC automatically. I deleted the file quickly and never ran it. I ...
5
votes
1
answer
266
views
Is chrome not blocking all third party cookies?
I opened a website 99acres.com in incognito windows on two browsers on a Macbook. Following are the settings:
Chrome
Version: 100.0.4896.75 (latest)
Third Party cookies: Disabled
Firefox
Version: ...
- 151
0
votes
1
answer
374
views
How can a backdoor install a Chrome extension?
I read this: https://duo.com/decipher/malicious-chrome-extension-backdoor-uncovered-in-malware-campaign#:~:text=One%20of%20these%20is%20a,system%20and%20installing%20the%20extension. I quote this part ...
- 1
1
vote
0
answers
405
views
How do screenshot blocking technologies work? [closed]
I've noticed I can't take screenshots of videos in Star+. When I paste whatever I tried to shot, it comes all black (subtitles however are visible). After some research, I found out it happens with ...
- 121
0
votes
0
answers
239
views
When I visit an http://gofile.me/ link, how much information to I provide to the NAS server owner?
There are files I need from a heavy NAS user and they've given me a link of the form http://gofile.me/xxxxx/xxxxxxxxx If my laptop running the Chrome browser in macOS is connected to the internet via ...
- 1,409
2
votes
3
answers
22k
views
Is there a way to scan a pdf to ensure it doesn't contain anything that could be a virus?
The answers to Can a PDF file contain a virus? show that clearly it can!
Sometimes we can be quite sure a certain pdf should not need to do anything sophisticated - for example a book in pdf form - so ...
- 1,320
2
votes
2
answers
776
views
How Google protects and syncs the passwords?
I read this post but I want to know more details. I know that Google uses a Windows' function called CryptProtectData to encrypt user passwords on Windows and Google only stores the encrypted forms of ...
- 21
1
vote
0
answers
224
views
Chrome with QUIC enabled is making TLS connection to first Google search result
When I search a site by its name on Google search engine, my Chrome browser pings the first search result, making a TLS connection.
For example, if I search "github" on Google, the first ...
- 333
1
vote
1
answer
452
views
Data breach for my router in chrome
I have just logged into my router in Chrome, Win 10.
I got this warning.
I immediately changed the password.
But I have several questions.
Is the message reliable, in the sense that the breach ...
0
votes
0
answers
325
views
Google says my password has been found in data breach. HIBP knows nothing about it. Which data breach was that?
I've been using Chrome to save and sync my passwords across devices (and lately I am trying to switch to Bitwarden). Google warned me recently about a password I have used across multiple sites that ...
- 101
0
votes
0
answers
114
views
Most Secure ways to to authorize clients on their devices that are remotely connected by (AnyDesk, TeamViewer, etc...) without knowing the password
My case is I'm designing an app based on chromium browser powered by Electron .
And I need sometimes to log the clients in with some web apps. The password is only visible as dots in browsers by ...
- 1
0
votes
0
answers
20
views
Store login credentials securely with JavaScript [duplicate]
Today I have a web application that needs to store the user's email and password, so that when he opens the login screen, the authentication is done automatically.
For this, our application saves the ...
- 174
0
votes
1
answer
115
views
Am I compromised if Microsoft can identify me without browser content? [closed]
I am using Windows 7 and I had to re-install Chrome recently.
In doing this, once I had deleted my browser history and used BleachBit, I told my email server (Outlook) what email address I was ...
- 101
1
vote
0
answers
243
views
Is it possible to use an ed25519 security key with Google Chrome SSH applets?
After generating an OpenSSH EC key on a hardware security key:
$ ssh-keygen -t ed25519-sk -C comment
Is it possible to use this key with Google Chrome SSH applet or Mosh, in particular on non-Linux ...
- 537
0
votes
1
answer
2k
views
How to view all SSL certificates for a website using Google Chrome?
How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same - details of only one certificate. How can I see ...
0
votes
0
answers
52
views
How Firefox and Google password managers protect your password [duplicate]
Based in this post in Google Chrome help they claim that they encrypt my username and password with a secret key known only to my device.
What is the algorithm used to generate this secret which is ...
- 21
0
votes
2
answers
221
views
What's the risk of keyboard languages being sent via Content-Language header?
The Android versions of Firefox and Chrome/Chromium and all derivatives (Ungoogled Chromium, Bromite, Brave) by default insert all the user's configured keyboard input languages into the Accept-...
- 301
2
votes
2
answers
491
views
How to do auth without user interaction in an enterprise environment?
We are building a Chrome Extension that will be force-installed on each employee's browser for the companies we work with.
We currently use OAuth but many employees are forgetting to sign up.
We are ...
- 121
1
vote
1
answer
2k
views
How does Chrome 78+ block all methods of DLL injection?
How does Chrome block all methods of code injection past version 78? It even blocks signed DLLs it doesn't have in a static list.
- 21
1
vote
2
answers
1k
views
Safe or Unsafe to Store Passwords in Chrome on MacOS?
I've seen conflicting opinions on this, more than the below, but i.e.
Unsafe: https://www.techrepublic.com/article/why-you-should-never-allow-your-web-browser-to-save-your-passwords/
Safe: https://...
- 366
1
vote
2
answers
670
views
How to make google chrome completely untraceable like tor browser
I am using the following extensions on google chrome for complete privacy and to avoid tracking:
VPN Extension to hide actual IP
WebRTC prevent extension for disabling WebRTC
What other extensions ...
- 161
0
votes
1
answer
1k
views
Does copying cookies allow attackers to view pages that should be visible only after login?
TLDR;
Copying the request from ChromeDevTools along with all cookies allows me to view pages that I should not be able to view after logging in.
Have I been pwned ?
I just found a terrifyingly easy ...
- 275
0
votes
0
answers
178
views
Sending meaningless Addresses requests to a series of malicious IPs
i was testing somethings on browsers(It has nothing to do with what I am going to say) and accidentally i faced a case that when i browse meaningless addresses like abc/ signortest/ word/
the request ...
- 101
24
votes
3
answers
7k
views
How is it possible for boss to know I am finding a job?
Today, when my boss talking with me, he suddenly said: No you don't need to worry about it, everyday you have 3 or 4 messages with agent in Linkedin right?
I am very very surprised, because :
I work ...
- 351