Questions tagged [chrome]
Popular web browser by Google, see chrome.google.com for more information.
519
questions
4
votes
0
answers
160
views
How does Google Chrome's "Warn you if passwords are exposed in a data breach" feature work?
This feature is enabled by default. It says the usernames and passwords would be encrypted before sending to google. But google would know the encryption keys it used and to compare it with leaked ...
- 41
18
votes
2
answers
6k
views
How is Xiaomi changing my browser home page?
I have recently observed that the home page of Google Chrome on my Xiaomi Android phone has been altered to a website called "Mintnav". I did not update any software. How is Xiaomi able to ...
- 197
0
votes
0
answers
185
views
Tried 3 things to make Chrome accept remote self-signed SSL cert
I have a sandbox Windows 2016 server in the cloud that only I use for dev, testing, and experimentation. I can access the site remotely from Chrome, but no matter what I try, Chrome displays the ...
- 101
0
votes
1
answer
437
views
"CORS Error" but Chrome sent the request anyway
I have created a page to attack a CSRF unprotected endpoint.
This endpoint accepts only JSON as payload, so I have used fetch with credentials: "include" properties. The page run locally ...
0
votes
1
answer
340
views
Recent Chrome version not supporting TLS 1.3 on mac Ventura 13.1 [closed]
Almost latest version of Chrome 112.0.5615.49 (Official Build) (x86_64), on macOS Ventura 13.1, keeps negotiating TLS only up to 1.2 version. I tried some of the same websites in Waterfox (Mozilla ...
- 161
0
votes
1
answer
155
views
Why does it seem like websites can still use JavaScript in Chrome after disabling JavaScript?
I have disabled JavaScript under "Site settings" in Chrome. That is, I selected: "Don't allow sites to use Javascript". After doing so, I encountered a webpage that somehow manages ...
- 1
1
vote
0
answers
463
views
Tool to Decrypt Chrome, Firefox and Edge login information [closed]
Im new to python but Ive created a couple of programs that can collect the user credentials for Google Chrome, Mozilla Firefox and Microsoft Edge and decrypt them then save the decrypted output to ....
- 11
1
vote
1
answer
53
views
Can the receiver of a saved wepbage I shared on chrome to Whatsapp access my mail
So I shared a webpage I wanted to print to a printshop via WhatsApp. When the operator opened the file, I could see my email and my name displayed on the print shops PC almost as if they have my email ...
- 13
4
votes
0
answers
163
views
What are the potential vulnerabilities with containerized rootless Chrome and --no-sandbox?
I'm evaluating running Chromium without native sandboxing in a rootless container. A few points:
You can containerize Chrome using rootless containers with something like podman. This will utilize ...
- 2,702
1
vote
0
answers
495
views
Recovering Chrome Passwords from Login Data File, Without Local State File
I ran the ForensIT profile migration wizard which migrates an existing profile to a new environment (from domain to workgroup, or vice versa). Doing so deletes encryption keys from Chrome's "...
- 11
1
vote
1
answer
197
views
How does an attacker modify local files when I access them in Chrome?
I have a trusted html file containing a script that handles sensitive information. When I open it in Chrome 108 on Android, it says:
What is this about?
The above warning seems to appear ...
- 379
1
vote
1
answer
303
views
How did hackers gain access to my Chrome and my social media accounts? [closed]
These are the things that have happened to me in the last few hours:
Weird tweets such as "Hello 91" and "Hello 87" were being tweeted from my account.
My Instagram account had ...
- 11
0
votes
0
answers
52
views
ARP Spoofing succeeded only partially
I have done arp spoofing to my phone using scapy and detected duplicate ips in the arp protocol with wireshark.
However, access to websites using chrome app was blocked, but youtube and onedrive apps ...
0
votes
0
answers
56
views
Why isn't google patching methods used for MITB by malware like Emotet?
Google Chrome uses CFG, ASLR, DEP, Remote PE blocking, Authenticode API, syscall-disabled, but malware like Emotet is still doing MITB web injects on the latest builds on Chrome(108.0.5359.95). Why ...
- 11
2
votes
3
answers
212
views
Is Chrome's view-source dangerous when visiting malicious sites? [duplicate]
What are the risks of viewing the source code of malicious pages on Google Chrome?
I want to go directly to view-source:https://example-site.com to visit the sites without rendering anything malicious ...
1
vote
1
answer
106
views
Security concern with hosting a chrome extension on a public server
We have chrome extension that is for internal use by our clients. It is force-installed via enterprise policy. So far, we have it published on the Chrome WebStore but we need to move off of it due to ...
- 111
1
vote
2
answers
176
views
Are browser extensions inherently unsafe?
If we're doing sensitive things in the browser, like logging into cryptocurrency exchanges, is it too risky to have any browser extensions, for fear that there's a virus or something in them?
- 13
0
votes
0
answers
653
views
Searching in Chrome redirects to "find.fnavigate-now.com"
It used to do a Google search. Now it redirects to this weird website, which itself redirects to Yahoo. What gives?
https://find.fnavigate-now.com/results.aspx?q=test&gd=SY1004294&searchsource=...
- 13
0
votes
1
answer
156
views
How easy is it really for malicious websites to steal session cookies or other data?
I would like to know how feasible an attack on a web browser is. Is that something that occurs frequently or is it difficult to manage for a malicious website to steal sensitive data using remote code ...
- 31
2
votes
2
answers
339
views
Suspicious "ChromeSync" pop-up in Android requesting credentials
Since late May, I have been getting suspicious pop-up messages overlay on top of android Apps (see screenshots), requesting entering of the "ChromeSync Passphrase" for my google account.
I ...
3
votes
1
answer
255
views
Bots learn about a new web site as soon as I open it in Chrome. How do I look for leaks?
I am a customer of a cloud hosting provider (Cloudways). I create a new web site which gets a new automatically generated subdomain (like https://phpstack-xxxx-yyyy.cloudwaysapps.com/). I use Chrome ...
- 33
0
votes
2
answers
950
views
Unintended file downloaded. Am I likely to have gotten a virus?
I clicked on a link that appeared to be perfectly legit. It proceeded to bring me to a suspicious website that downloaded a file to my PC automatically. I deleted the file quickly and never ran it. I ...
5
votes
0
answers
172
views
Is chrome not blocking all third party cookies?
I opened a website 99acres.com in incognito windows on two browsers on a Macbook. Following are the settings:
Chrome
Version: 100.0.4896.75 (latest)
Third Party cookies: Disabled
Firefox
Version: ...
- 151
0
votes
1
answer
272
views
How can a backdoor install a Chrome extension?
I read this: https://duo.com/decipher/malicious-chrome-extension-backdoor-uncovered-in-malware-campaign#:~:text=One%20of%20these%20is%20a,system%20and%20installing%20the%20extension. I quote this part ...
- 1
1
vote
0
answers
218
views
How do screenshot blocking technologies work? [closed]
I've noticed I can't take screenshots of videos in Star+. When I paste whatever I tried to shot, it comes all black (subtitles however are visible). After some research, I found out it happens with ...
- 111
0
votes
0
answers
109
views
When I visit an http://gofile.me/ link, how much information to I provide to the NAS server owner?
There are files I need from a heavy NAS user and they've given me a link of the form http://gofile.me/xxxxx/xxxxxxxxx If my laptop running the Chrome browser in macOS is connected to the internet via ...
- 1,415
0
votes
3
answers
10k
views
Is there a way to scan a pdf to ensure it doesn't contain anything that could be a virus?
The answers to Can a PDF file contain a virus? show that clearly it can!
Sometimes we can be quite sure a certain pdf should not need to do anything sophisticated - for example a book in pdf form - so ...
- 1,250
1
vote
2
answers
435
views
How Google protects and syncs the passwords?
I read this post but I want to know more details. I know that Google uses a Windows' function called CryptProtectData to encrypt user passwords on Windows and Google only stores the encrypted forms of ...
- 11
1
vote
0
answers
143
views
Chrome with QUIC enabled is making TLS connection to first Google search result
When I search a site by its name on Google search engine, my Chrome browser pings the first search result, making a TLS connection.
For example, if I search "github" on Google, the first ...
- 333
1
vote
1
answer
175
views
Data breach for my router in chrome
I have just logged into my router in Chrome, Win 10.
I got this warning.
I immediately changed the password.
But I have several questions.
Is the message reliable, in the sense that the breach ...
0
votes
0
answers
225
views
Google says my password has been found in data breach. HIBP knows nothing about it. Which data breach was that?
I've been using Chrome to save and sync my passwords across devices (and lately I am trying to switch to Bitwarden). Google warned me recently about a password I have used across multiple sites that ...
- 101
0
votes
0
answers
75
views
Most Secure ways to to authorize clients on their devices that are remotely connected by (AnyDesk, TeamViewer, etc...) without knowing the password
My case is I'm designing an app based on chromium browser powered by Electron .
And I need sometimes to log the clients in with some web apps. The password is only visible as dots in browsers by ...
- 1
0
votes
0
answers
20
views
Store login credentials securely with JavaScript [duplicate]
Today I have a web application that needs to store the user's email and password, so that when he opens the login screen, the authentication is done automatically.
For this, our application saves the ...
- 174
0
votes
1
answer
81
views
Am I compromised if Microsoft can identify me without browser content? [closed]
I am using Windows 7 and I had to re-install Chrome recently.
In doing this, once I had deleted my browser history and used BleachBit, I told my email server (Outlook) what email address I was ...
- 101
1
vote
0
answers
166
views
Is it possible to use an ed25519 security key with Google Chrome SSH applets?
After generating an OpenSSH EC key on a hardware security key:
$ ssh-keygen -t ed25519-sk -C comment
Is it possible to use this key with Google Chrome SSH applet or Mosh, in particular on non-Linux ...
- 517
0
votes
1
answer
997
views
How to view all SSL certificates for a website using Google Chrome?
How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same - details of only one certificate. How can I see ...
0
votes
0
answers
50
views
How Firefox and Google password managers protect your password [duplicate]
Based in this post in Google Chrome help they claim that they encrypt my username and password with a secret key known only to my device.
What is the algorithm used to generate this secret which is ...
- 11
0
votes
2
answers
142
views
What's the risk of keyboard languages being sent via Content-Language header?
The Android versions of Firefox and Chrome/Chromium and all derivatives (Ungoogled Chromium, Bromite, Brave) by default insert all the user's configured keyboard input languages into the Accept-...
- 291
2
votes
2
answers
355
views
How to do auth without user interaction in an enterprise environment?
We are building a Chrome Extension that will be force-installed on each employee's browser for the companies we work with.
We currently use OAuth but many employees are forgetting to sign up.
We are ...
- 121
0
votes
1
answer
1k
views
How does Chrome 78+ block all methods of DLL injection?
How does Chrome block all methods of code injection past version 78? It even blocks signed DLLs it doesn't have in a static list.
- 11
1
vote
2
answers
796
views
Safe or Unsafe to Store Passwords in Chrome on MacOS?
I've seen conflicting opinions on this, more than the below, but i.e.
Unsafe: https://www.techrepublic.com/article/why-you-should-never-allow-your-web-browser-to-save-your-passwords/
Safe: https://...
- 376
1
vote
2
answers
489
views
How to make google chrome completely untraceable like tor browser
I am using the following extensions on google chrome for complete privacy and to avoid tracking:
VPN Extension to hide actual IP
WebRTC prevent extension for disabling WebRTC
What other extensions ...
- 161
0
votes
1
answer
1k
views
Does copying cookies allow attackers to view pages that should be visible only after login?
TLDR;
Copying the request from ChromeDevTools along with all cookies allows me to view pages that I should not be able to view after logging in.
Have I been pwned ?
I just found a terrifyingly easy ...
- 275
0
votes
0
answers
127
views
Sending meaningless Addresses requests to a series of malicious IPs
i was testing somethings on browsers(It has nothing to do with what I am going to say) and accidentally i faced a case that when i browse meaningless addresses like abc/ signortest/ word/
the request ...
- 101
24
votes
3
answers
7k
views
How is it possible for boss to know I am finding a job?
Today, when my boss talking with me, he suddenly said: No you don't need to worry about it, everyday you have 3 or 4 messages with agent in Linkedin right?
I am very very surprised, because :
I work ...
- 351
5
votes
1
answer
803
views
How did Firefox get my passwords?
I just installed Firefox browser, while I have previously used Google Chrome as my main browser. I am using Windows 10.
During the installation and setup process for Firefox, I was given the option to ...
- 162
1
vote
1
answer
464
views
Unusual Google Chrome Download Redirection
When I go to https://www.google.com/chrome/, I get redirected to sign in and then forwarded to some app engine link as can be seen in the continue parameter of the following URL:
https[:]//accounts[.]...
- 11
1
vote
1
answer
150
views
Are saved passwords in browsers secure, when stored online?
Where are saved passwords stored if you login to a browser, so they sync whenever you login to that browser on another device. Where and how do Google, Firefox etc. save the passwords? Obviously its ...
- 11
0
votes
0
answers
520
views
Global variables accessible to other websites opened in same tab
Today I found a security issue with Chrome (or maybe other browsers I haven't tested yet).
What happens is that once you open a site and then open another site in the same tab, the previous site's ...
- 121
-4
votes
1
answer
215
views
Is chrome vulnerable to any zero day exploits right now?
i was using flvtbo youtube converter and i had to enable javascript.
i saw an ad come up from "multiadblock.com" which tried to lure me into downloading a chrome extension, but of course i ...
- 11