Questions tagged [chrome]
Popular web browser by Google, see chrome.google.com for more information.
83 questions
8
votes
2
answers
5k
views
Can malicious Javascript in local HTML -file send files to internet in Firefox/Chrome?
Download example.html -file from random website to my computer desktop
Open example.html -file from desktop with Google Chrome
Now Chrome executes javascript from example.html -file that searches ...
- 181
6
votes
2
answers
2k
views
Can a web app fingerprint your device as identical to a native app's fingeprint
I have installed an app on Android and my account got shadowbanned. I sniffed out the traffic with fiddler and see they use a analytics service that assigns your device a fingerprint.
I tried the web ...
- 227
6
votes
1
answer
890
views
How will Certificate Transparency be enforced?
The Chrome team has announced that "[they]’ll be moving forward with [their] plan to require Certificate Transparency for all newly issued, publicly trusted certificates starting in April 2018."
It's ...
- 425
6
votes
1
answer
921
views
Inspecting code elements in browser when logging in
When I use the built-in Chrome inspect element, click on the networking tab and view a login.action file or session file, it shows the password in plain text. Is this normal?
- 345
6
votes
1
answer
466
views
Prevent Chrome extensions from betraying me
As has been discussed in this answer, a flaw with the Chrome Web Store is that an honest-but-naive developer may sell a popular browser extension to someone like Techno SoLotions, assuming that Techno ...
- 2,120
6
votes
1
answer
975
views
How did Firefox get my passwords?
I just installed Firefox browser, while I have previously used Google Chrome as my main browser. I am using Windows 10.
During the installation and setup process for Firefox, I was given the option to ...
- 172
6
votes
1
answer
1k
views
Regarding Windows password and Chrome's 'Remember password' Feature
Google Chrome browser helps in password management by prompting users to remember their passwords for the websites. These saved passwords can be accessed from the browsers "settings" menu, and to do ...
- 1,452
5
votes
1
answer
23k
views
Vulnerability of Chrome's "Login Data" file after being orphaned from the host system
Suppose someone were to knick a "Login Data" file from a Windows computer's Google Chrome profile. They don't know the machine's user account password, but they may have some ideas as to what it ...
- 51
5
votes
1
answer
3k
views
Revoked cert not showing revoked in Chrome 64.0.3282.186
As far as I can tell (ssllabs.com / ssldecoder.org) the certificate for www.sarahah.com has been revoked:
Serial C1:18:2F:1A:91:A9:0E:03
CRL - Revoked on CRL: http://crl.godaddy.com/gdig2s1-792.crl
...
- 155
5
votes
3
answers
390
views
Is my Google session safe when my computer is logged out or locked?
I've recently uploaded all the family photos to my Google Drive account. I have a strong password and 2 step verification enabled on my Google account. My home computer is (naturally) trusted and ...
- 189
4
votes
3
answers
3k
views
How are CRLsets more secure?
Google Chrome doesn't do typical CRL/OSCP checks, instead it depends on CRLsets. In simple terms, Google scoops up the CRLs from most CAs, trims them down and delivers the CRLset to the browser via ...
- 3,248
4
votes
7
answers
2k
views
Chrome vs Explorer - how to explain in plain words that open-source is better?
Why open-source is better in plain words?
Yesterday I had a talk at a DIY bicycle workshop. There is a PC (running XP) that main application is checking emails (nothing really serious).
I found it ...
- 575
4
votes
1
answer
1k
views
Different SSL cert behavior with Chrome on desktop vs. Chrome on iOS
We have a website, https://uk.care.com, that has a GeoTrust multi-SAN cert on it. The cert is up-to-date, using SHA-256, TLS 1.2, etc. When we view the site in Chrome on various desktop systems it ...
- 143
4
votes
2
answers
2k
views
SSL browser session keys
I am trying to export/write the SSL master secret and keys to a file from the chromium browser. I would appreciate if someone could advice me how to do this.
To write the premaster secret we can ...
- 51
3
votes
2
answers
201
views
Why would a modern browser allow internal resources to be loaded from an external page
Recently someone announced that several Arris surfboard models lacked any form of authentication to perform functions such as reboot and factory reset a modem with a single http call.
Read more on ...
- 133
3
votes
1
answer
517
views
How do browsers import password data from other browsers?
Specifically, how did the new Microsoft Edge (based on Chromium?) import my passwords from Google Chrome (which are synced to my Google account and supposedly secure)?
I'm on Windows 10. Does Windows ...
- 155
3
votes
2
answers
3k
views
Do most browsers handle mixed encrypted and unencrypted content correctly?
In Google Chrome, when I go to an encrypted page that contains unencrypted content, I get the following pop-down, which allows me to either load or not load the insecure content, making a clear ...
- 445
3
votes
1
answer
432
views
Chrome: Found a crash, is it a security vulnerability?
I have been able to make Google Chrome crash, and I was wondering if there are tools or heuristics to determine whether or not the crash is a security vulnerability.
How can I determine if a Chrome ...
- 1,725
3
votes
0
answers
364
views
How/When does Chrome queries Certificate Transparency (CT) log servers to ask for inclusion proof of certificates and how can I debug them?
I’ve been trying to understand how does Chrome interact with CT log servers. According to what I’ve read so far, Chrome sends inclusion proof requests (“GET https:///ct/v2/get-proof-by-hash” - https://...
- 31
2
votes
1
answer
242
views
How to defend myself against potential malicious browser add-ons?
So previously I asked a question about what type of private data can addons extract from my browser :
Can a malicious add-on access internet history and such in Chrome/Firefox?
and it turns out if ...
- 363
2
votes
1
answer
338
views
How can a modern Windows/Linux system be compromised by a heap overflow in Chrome?
Wikipedia's article on Heap Overflow states:
there are primarily three ways to protect against heap overflows.
Several modern operating systems such as Windows and Linux provide
some ...
- 133
2
votes
0
answers
2k
views
Does Chrome cache smartcard PIN?
When I have authenticated with a server suing TLS/SSL using HTTPS using a smartcard and PIN and I invalidate the TLS session by restarting the server, refreshing Chrome browser does not reprompt for a ...
- 131
1
vote
1
answer
316
views
How does an attacker modify local files when I access them in Chrome?
I have a trusted html file containing a script that handles sensitive information. When I open it in Chrome 108 on Android, it says:
What is this about?
The above warning seems to appear ...
- 389
1
vote
2
answers
517
views
Are browser extensions inherently unsafe?
If we're doing sensitive things in the browser, like logging into cryptocurrency exchanges, is it too risky to have any browser extensions, for fear that there's a virus or something in them?
- 13
1
vote
0
answers
701
views
CA certificate somehow not taken by browsers on android [closed]
This is a follow up question related to this answer.
In short: I am importing the self signed Root CA certificate into android system via
Settings -> Security -> Trusted Credentials -> ...
- 131
1
vote
1
answer
748
views
How to tell my HTTPS connection to a site uses PFS?
Does the browser have a UI for displaying the details about the TLS connection to the website, besides the "secure/insecure" icon?
- 8,654
1
vote
1
answer
990
views
Solutions to diagnose PDF files for exploits?
I am downloading a PDF file, and would like to know how to diagnose security vulnerabilities in that file.
Context:
The last version of Google Chrome is giving me the following warning on a PDF ...
- 113
1
vote
1
answer
3k
views
Can my computer be compromised by uBlock/Adblock filter list?
uBlock is open source and suppose I trust the author. But filter lists are something that is maintained by other people. Is it possible to add something to a filter list to compromise computer/browser,...
- 715
1
vote
1
answer
3k
views
Burp Suite - Although my configurations are correct, still Chrome doesn't allows me to access HTTPS sites and throws an error!
I'm having a hard time accessing sites with HSTS enabled via burp proxy in Chrome. Everything works perfectly fine with Firefox and IE, but Chrome has stopped working since yesterday.
I've followed ...
- 21
0
votes
2
answers
337
views
Can IE be made to imitate the behavior of Chrome's KeyGen element?
Is there any way I can repurpose existing ActiveX controls or functionality to get IE to work with the KeyGen element?
Assistance getting Safari to work with this optional HTML5 spec would be ...
- 51.1k
0
votes
2
answers
3k
views
How did piratebay.se search engine get in Chrome as an "other search engine"
I have an IT client with a user who had piratebay.se/... listed within his Chrome's (v39, 64-bit, OS X, 10.10.1) "Other Search Engine" section.
I know a user could manually add it and suspect the ...
user27014
0
votes
1
answer
6k
views
Brute-Forcing a Chrome Login Data file
Say I have a "Login Data" Chrome file that is encrypted with the user's Windows password. Is there a way I can brute-force the file and try to decrypt it using every password possible?
- 3
0
votes
2
answers
1k
views
Private Google account at work
I have an old private tablet at work with my private Google account on it .It's connected to our WiFi, where i logged in with my personal working code. Never use it much as I just play some music on ...
- 1