Questions tagged [chrome]

Popular web browser by Google, see chrome.google.com for more information.

Filter by
Sorted by
Tagged with
1 vote
1 answer
198 views

Restricting user sign-in on Chrome for Business

I'm currently evaluating the configuration of Chrome for Business in a corporate environment. There is a setting which prevents users from signing into Chrome with their personal accounts. My gut ...
1 vote
2 answers
390 views

Safe or Unsafe to Store Passwords in Chrome on MacOS?

I've seen conflicting opinions on this, more than the below, but i.e. Unsafe: https://www.techrepublic.com/article/why-you-should-never-allow-your-web-browser-to-save-your-passwords/ Safe: https://...
0 votes
1 answer
356 views

Skip date check in Server certificate in Chrome

We have a web application on https port with server certificate valid from 01/01/2021 and valid to 31/12/2021. Due to some constraints the clients which are going to use web application are behind ...
9 votes
1 answer
30k views

How to make Firefox ignore the X-XSS-Protection response header?

I have two questions: How can I make Firefox ignore the X-XSS-Protection header? I have a website which sends an X-XSS-Protection: 1 header and I want my Firefox to ignore that header, because it ...
1 vote
1 answer
517 views

What is this URL that loads each time Google Chrome spawns?

What does this URL do that opens each time Google Chrome loads? http://redirector.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOWVmQUFXS041NV9ZVXlJVWwxbGc5TUM4dw/7519.422.0....
1 vote
2 answers
8k views

Google Chrome and Certificate Problem

When I try to connect google.com and youtube.com with Chrome, I got the error below; 1. 2. Your connection is not private Attackers might be trying to steal your information from www.google.com.tr ...
5 votes
1 answer
9k views

Why is Google Chrome blocking raw SWF playback?

If you attempt to visit the URL of a raw SWF file, Chrome 57 refuses to display and instead asks if you want to download, with the warning "This type of file can harm your computer". However, if you ...
0 votes
0 answers
96 views

Suspicious "ChromeSync" pop-up in Android requesting credentials

Since late May, I have been getting suspicious pop-up messages overlay on top of android Apps (see screenshots), requesting entering of the "ChromeSync Passphrase" for my google account. I ...
0 votes
2 answers
92 views

Unintended file downloaded. Am I likely to have gotten a virus?

I clicked on a link that appeared to be perfectly legit. It proceeded to bring me to a suspicious website that downloaded a file to my PC automatically. I deleted the file quickly and never ran it. I ...
3 votes
1 answer
178 views

Bots learn about a new web site as soon as I open it in Chrome. How do I look for leaks?

I am a customer of a cloud hosting provider (Cloudways). I create a new web site which gets a new automatically generated subdomain (like https://phpstack-xxxx-yyyy.cloudwaysapps.com/). I use Chrome ...
0 votes
0 answers
45 views

I mistakenly clicked an .htm attachment from an spam email, help?

I messed up... I opened the htm file using chrome and entered my password... Upon realising that it wasn't a legit attachment, I immediately changed my Microsoft account password. However, I don't ...
1 vote
1 answer
137 views

Chrome extensions: tool to notify users of ownership change (to avoid malicious code injection)?

A problem with Chrome extensions was raised in an earlier question: extension owners can sell their extension to another owner, who can then insert malicious code. From a user's perspective, they may ...
0 votes
2 answers
92 views

How can a backdoor install a Chrome extension?

I read this: https://duo.com/decipher/malicious-chrome-extension-backdoor-uncovered-in-malware-campaign#:~:text=One%20of%20these%20is%20a,system%20and%20installing%20the%20extension. I quote this part ...
4 votes
0 answers
68 views

Is chrome not blocking all third party cookies?

I opened a website 99acres.com in incognito windows on two browsers on a Macbook. Following are the settings: Chrome Version: 100.0.4896.75 (latest) Third Party cookies: Disabled Firefox Version: ...
4 votes
2 answers
255 views

Can going to a bad website on firefox, or installing a malcious firefox plugin, infect other parts of my home folder on a Linux system?

BTW, I don't mean root, just a plain user. I'm worried because I'm scared that if I do such things I could infect my Chromium folder. I got a huge case of OCD.
3 votes
2 answers
543 views

Malware techiques via Linux Chrome and its effects, non-root

Is it possible to visit a website with Chrome on Ubuntu and have that site execute shell code on my machine without explicitly downloading anything nor click on some Chrome execute question/popup? If ...
3 votes
3 answers
1k views

Can Google Chrome read/scan my ProtonMail inbox page?

If I used Google Chrome to visit ProtonMail website, it would not be difficult for Google to read my emails since it would just need to scan/read the content of the page. Messages are encrypted just ...
1 vote
2 answers
97 views

How Google protects and syncs the passwords?

I read this post but I want to know more details. I know that Google uses a Windows' function called CryptProtectData to encrypt user passwords on Windows and Google only stores the encrypted forms of ...
2 votes
2 answers
159 views

How to do auth without user interaction in an enterprise environment?

We are building a Chrome Extension that will be force-installed on each employee's browser for the companies we work with. We currently use OAuth but many employees are forgetting to sign up. We are ...
1 vote
0 answers
83 views

How do screenshot blocking technologies work? [closed]

I've noticed I can't take screenshots of videos in Star+. When I paste whatever I tried to shot, it comes all black (subtitles however are visible). After some research, I found out it happens with ...
0 votes
0 answers
37 views

When I visit an http://gofile.me/ link, how much information to I provide to the NAS server owner?

There are files I need from a heavy NAS user and they've given me a link of the form http://gofile.me/xxxxx/xxxxxxxxx If my laptop running the Chrome browser in macOS is connected to the internet via ...
0 votes
3 answers
157 views

Is there a way to scan a pdf to ensure it doesn't contain anything that could be a virus?

The answers to Can a PDF file contain a virus? show that clearly it can! Sometimes we can be quite sure a certain pdf should not need to do anything sophisticated - for example a book in pdf form - so ...
1 vote
0 answers
56 views

Chrome with QUIC enabled is making TLS connection to first Google search result

When I search a site by its name on Google search engine, my Chrome browser pings the first search result, making a TLS connection. For example, if I search "github" on Google, the first ...
4 votes
2 answers
8k views

Pirate Bay Search Appearing in Chrome

While googling some errors today I noticed I had the option to use the pirate bay search Now I saw a similar question posted here How did piratebay.se search engine get in Chrome as an “other search ...
1 vote
1 answer
70 views

Data breach for my router in chrome

I have just logged into my router in Chrome, Win 10. I got this warning. I immediately changed the password. But I have several questions. Is the message reliable, in the sense that the breach ...
0 votes
0 answers
106 views

Google says my password has been found in data breach. HIBP knows nothing about it. Which data breach was that?

I've been using Chrome to save and sync my passwords across devices (and lately I am trying to switch to Bitwarden). Google warned me recently about a password I have used across multiple sites that ...
0 votes
0 answers
41 views

Most Secure ways to to authorize clients on their devices that are remotely connected by (AnyDesk, TeamViewer, etc...) without knowing the password

My case is I'm designing an app based on chromium browser powered by Electron . And I need sometimes to log the clients in with some web apps. The password is only visible as dots in browsers by ...
0 votes
0 answers
19 views

Store login credentials securely with JavaScript [duplicate]

Today I have a web application that needs to store the user's email and password, so that when he opens the login screen, the authentication is done automatically. For this, our application saves the ...
0 votes
1 answer
70 views

Am I compromised if Microsoft can identify me without browser content? [closed]

I am using Windows 7 and I had to re-install Chrome recently. In doing this, once I had deleted my browser history and used BleachBit, I told my email server (Outlook) what email address I was ...
1 vote
0 answers
58 views

Is it possible to use an ed25519 security key with Google Chrome SSH applets?

After generating an OpenSSH EC key on a hardware security key: $ ssh-keygen -t ed25519-sk -C comment Is it possible to use this key with Google Chrome SSH applet or Mosh, in particular on non-Linux ...
0 votes
1 answer
128 views

How to view all SSL certificates for a website using Google Chrome?

How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same - details of only one certificate. How can I see ...
0 votes
0 answers
69 views

Antivirus denies Chrome

Our AV (Carbon Black) has denied chrmstp.exe (Chrome installer). I did some digging as to why and I found that it thought that it was attempting to install a backdoor. Digging further, I found the ...
130 votes
9 answers
34k views

What stops Google from saving all the information on my computer through Google Chrome?

I noticed that in Google Chrome, if I type in file:///C:/Users/MyUsername/Desktop/ it shows me all of the folders on my Desktop, and I can type open up PDFs and such in chrome just by typing in the ...
0 votes
1 answer
257 views

Is it possible to setup a phishing “honeypot” for proof-of-concept purposes without getting the host/IP blacklisted?

In the company I work for, we have many clients and the vast majority of them have hosting with us and we make their web apps. One client, though, just applied for cyber security. Our CEH (certified ...
1 vote
0 answers
43 views

How Firefox and Google password managers protect your password [duplicate]

Based in this post in Google Chrome help they claim that they encrypt my username and password with a secret key known only to my device. What is the algorithm used to generate this secret which is ...
0 votes
2 answers
86 views

What's the risk of keyboard languages being sent via Content-Language header?

The Android versions of Firefox and Chrome/Chromium and all derivatives (Ungoogled Chromium, Bromite, Brave) by default insert all the user's configured keyboard input languages into the Accept-...
0 votes
1 answer
471 views

How does Chrome 78+ block all methods of DLL injection?

How does Chrome block all methods of code injection past version 78? It even blocks signed DLLs it doesn't have in a static list.
4 votes
1 answer
545 views

How Are Google Chrome Synced Passwords Encrypted If I Can Reset the Password to My Account

Services like Dashlane and Bitwarden are unable to decrypt your passwords without your Master Password. So, how does Chrome do it when they also state that your passwords are encrypted using your ...
4 votes
3 answers
648 views

Source code being injected into every website

I had a client contact me today because a website I developed (that deals with sensitive information) wasn't loading correctly on one computer on Chrome. After poking around for a while it appears to ...
10 votes
3 answers
37k views

Difference between X-Forwarded-For IP, X-Real-IP, VPNs and TOR

I have this Google Chrome Privacy Preserving Extension that I am working on. Where I can spoof the header information e.g user agents and else. When I spoof X-Forwarded-For IP and go to http://...
0 votes
0 answers
366 views

I can't decrypt chrome passwords offline with sha masterkey

I'm trying to decrypt a Chrome 80+ Login Data file offline using the SHA1 or SHA256 masterkey retrieved either using backupkey or lsass dump but no tool seems to work (I tried mimikatz, sharpdpapi, ...
7 votes
3 answers
28k views

Username and password stored under form data in Chrome Dev Tools

When I record the network tab in Chrome Developer Tools when logging in to my site I find that the username and password are stored in plaintext under form data. You can also find it in Safari, ...
1 vote
2 answers
311 views

How to make google chrome completely untraceable like tor browser

I am using the following extensions on google chrome for complete privacy and to avoid tracking: VPN Extension to hide actual IP WebRTC prevent extension for disabling WebRTC What other extensions ...
1 vote
3 answers
993 views

Can website detect if I’m using chrome remote desktop?

I was wondering if the website can detect the remote operation of my PC while I’m visiting. For example; I visit one website and click here and there while using my laptop for controlling my desktop ...
0 votes
1 answer
325 views

Does copying cookies allow attackers to view pages that should be visible only after login?

TLDR; Copying the request from ChromeDevTools along with all cookies allows me to view pages that I should not be able to view after logging in. Have I been pwned ? I just found a terrifyingly easy ...
141 votes
9 answers
93k views

How secure is Chrome storing a password?

Whenever I enter a login into a new site, Chrome asks me if it should store the login details. I used to believe this was fairly secure. If someone found my computer unlocked, they could get past the ...
24 votes
3 answers
7k views

How is it possible for boss to know I am finding a job?

Today, when my boss talking with me, he suddenly said: No you don't need to worry about it, everyday you have 3 or 4 messages with agent in Linkedin right? I am very very surprised, because : I work ...
0 votes
0 answers
117 views

Sending meaningless Addresses requests to a series of malicious IPs

i was testing somethings on browsers(It has nothing to do with what I am going to say) and accidentally i faced a case that when i browse meaningless addresses like abc/ signortest/ word/ the request ...
4 votes
1 answer
587 views

How did Firefox get my passwords?

I just installed Firefox browser, while I have previously used Google Chrome as my main browser. I am using Windows 10. During the installation and setup process for Firefox, I was given the option to ...
1 vote
1 answer
280 views

Unusual Google Chrome Download Redirection

When I go to https://www.google.com/chrome/, I get redirected to sign in and then forwarded to some app engine link as can be seen in the continue parameter of the following URL: https[:]//accounts[.]...

1
2 3 4 5
11