Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [chrome]

Popular web browser by Google, see chrome.google.com for more information.

0
votes
1answer
275 views

What concepts / technologies does Ultrasurf use?

How do tools like Ultrasurf works? At a very high level, what concepts / technologies are used by tools like this? How does it prevent others (employers/ censorship bodies) from seeing end user ...
4
votes
1answer
103 views

How secure is our privacy when using third party addons and extensions?

I use many addons and extensions in my browsers some of it is for ad blocking, taking screen shots and VPNs. This question came to my mind while using free VPN addons. I usually uses VPN addons for ...
6
votes
4answers
7k views

How safe is using personal Gmail and Google Account at work?

Two closely related questions: 1) My boss said it's ok for us to go on our personal email during our breaks. If I do this, can the company steal any information beyond what is viewable on the screen? ...
1
vote
0answers
64 views

Advertisment appears on my web browser [closed]

For 2 weeks, advertisements open themselves in my browser (In both new tab or external window). It is really annoying and disturbing. To solve the problem I tried using adblock, deleting all ...
0
votes
0answers
110 views

Recent persistent popups on Chrome trying to get me to download “Flash” [duplicate]

EDIT: I don't think this is 100% a duplicate, so if you've recently (around May 9th 2017) been seeing popups telling you to download Flash, I'd read on before following the link. It appears my Mac ...
1
vote
1answer
63 views

Is it possible or common for a website (without ads) to only sometimes do a malicious redirect?

Using Chrome, I went to a website of a company we were researching, following a link from a google search, and got redirected to a malicious website. After killing Chrome and scanning for viruses, I ...
1
vote
1answer
214 views

Is there a way to differentiate the certificates that came as part of the certificate chain from the ones already in the trust store?

OpenSSL shows the following certificate chain for example.com:443. $ openssl s_client -connect example.com:443 < /dev/null | head -10 depth=1 /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert ...
2
votes
1answer
513 views

XAMPP/Chrome net::ERR_CERT_INVALID on VALID Certificate Chain

I have set up my own Root CA and Intermediate CAs for my local sites (virtual sites). I also have installed them to trusted certificates in my computer and also the intermediate CAs on their own ...
0
votes
1answer
318 views

Why does OpenSSL show different CAs for mail.google.com:443 than what Chrome/Firefox shows? [duplicate]

Why does openssl show different certificate chain for mail.google.com:443 than what Chrome/Firefox shows? $ openssl s_client -connect mail.google.com:443 < /dev/null | head -10 depth=2 /C=US/O=...
1
vote
1answer
2k views

How to add AltName from csr file to crt file using “openssl x509 -req”?

I'm a webdeveloper and want to test my websites locally with a self signed SSL certificate. Everything was working great until a few days ago, when chrome started complaining about a missing AltName ...
5
votes
1answer
569 views

Way to practically identify punycode in Chrome?

I recently read some articles about phishing with punycode. To prevent it when using firefox, you simply type about:config and turn the parameter network.IDN_show_punycode = true. Now you can easily ...
1
vote
0answers
348 views

Is Chromium spying my keyboard? [closed]

I just typed into Eclipse (a different process): enum State { } Then I wanted to check about code conventions regarding those enums. So I typed into the address bar of Chromium "Java convention". ...
5
votes
1answer
317 views

Chrome is storing login POST requests in its memory

I am logging in to my site using Chrome (on Ubuntu). Even if I logout and close my browser I can see the login POST request content (containing username and Password) using "Hexedit". I have seen a ...
5
votes
2answers
527 views

LastPass vulnerability: Should LastPass users change all their passwords?

Reading about the recent vulnerability in LastPass extensions for FireFox and Chrome. The published exploit allows arbitrary code execution. The vulnerability also allowed access to stored passwords. ...
5
votes
1answer
7k views

Why is Google Chrome blocking raw SWF playback?

If you attempt to visit the URL of a raw SWF file, Chrome 57 refuses to display and instead asks if you want to download, with the warning "This type of file can harm your computer". However, if you ...
3
votes
1answer
99 views

two websites with same signing cert but google chrome says CA is invalid for one of them and not the other?

I have two websites: https://www.pap360.com/ https://www.scbn.org/ When I visit the first one with Google Chrome 57.0.2987.98 I get a "ERR_CERT_AUTHORITY_INVALID" error. But the second website gives ...
2
votes
0answers
177 views

Is the recent version of Google Chrome still compromised by Vault 7? [closed]

On Wikipedia page about Vault 7 we can read that Google Chrome (including other browsers) has been recently compromised (as of March 2017) by intelligence agencies. Has the exploit already been ...
2
votes
2answers
801 views

Does using incognito mode protect from browser fingerprinting techniques?

As far as I understand Chrome's and Firefox's incognito modes mean nothing is persisted. Cookies, Offline Storage, IndexedDB, cache, everything is flushed when you exit. Does this still leave a way (...
2
votes
0answers
90 views

Mechanisms of built-in password managers in browser

I am researching for auto-fill mechanisms in built-in web-browsers password managers. Using windows hosts file i am redirecting browser query to my web-server where i am storing the full copy of ...
3
votes
3answers
1k views

Why do browsers not reliable block pop-ups?

On both Chrome and Firefox I am unable to reliably block popups without extensions. Though both browsers come with such settings, there seems to be ways to circumvent this behavior. Now why is that? ...
0
votes
1answer
189 views

How could a website trigger a Windows pop up notification?

I browsed a web site that deals with currency exchange rates. I did not register. I just browsed it. It is a one page site, no registration is required to access the information. I was surprised a ...
0
votes
1answer
249 views

SVG virus/ malware with an extension on Google Chrome (one) [closed]

This question is about the SVG virus malware I got through Facebook, which adds a malicious Google Chrome extension. It's called one or ubo. Some articles write that it is ransomware. I think I ...
1
vote
1answer
445 views

Chrome users and malicious extensions

I have 2 users in Chrome. One is used for personal purposes has gmail box, google disk, etc. The second one is "business" user who has another configuration, it's own gmail, google disk, etc. Let's ...
1
vote
2answers
792 views

Chrome doesn't see SSL certificate for main domain while sees for www

I have the following issue: Chrome browser (both desktop and mobile) shows me "Not Secure" label for my main domain "https://astrakhan.ru/" while it works OK for "https://www.astrakhan.ru/". Firefox ...
5
votes
2answers
255 views

Avast malware-gen popups on mac when going onto google chrome website

Just today, I went onto google chrome and began using normal websites such as Google drive. However, the moment I went to these sites, my Mac began showing Avast popups to the side that said : They ...
2
votes
1answer
174 views

Plugins to increase security of Chrome? [closed]

What plugins are there for Chrome, that would increase security while browsing the web? For Firefox I have used NoScript, Flashblock, and AdBlock Plus, are there equivalents to these plugins for ...
1
vote
1answer
330 views

How is Google Smart Lock different from the previous password management mechanism in Chrome?

I am seeing a lot of hype about Smart Lock from Google. How does it differ?
6
votes
1answer
6k views

Is there any possibilities to bypass Chrome xss auditor in this case?

I just expiremented with xss in my own server. I wrote code like this: <?php if (isset($_POST['data'])) { echo "<a href='".htmlentities($_POST['data'])."'>Click Here</a>&...
4
votes
2answers
93 views

Using outdated Chrome 32-bit

Somewhat irrelevant, but still: Due to economical limits I am on a rather old PC. One of the issues is that it is 32-bit. I was using FireFox for a long time, but due to memory usage I finally went ...
1
vote
1answer
65 views

What determines the type of HTTPS indicator shown by Chrome? [duplicate]

I noticed recently that Chrome 55 shows different HTTPS indicators - sometimes it shows "🔒 Secure", sometimes it indicates the company name (which, to my understanding, is associated with the HTTPS ...
0
votes
0answers
908 views

ERR_SSL_PROTOCOL_ERROR on a site that doesn't use SSL/TLS, on an odd port

I've set up a server running Jenkins. The web-interface doesn't have SSL/TLS support turned on by default, and I have not attempted to turn it on, and do not want to turn it on (for now at least). ...
0
votes
0answers
172 views

Mixed content call every second in chrome

I have been getting this error in my chrome console every second and all the websites are loading very slow. Following is the error: (unknown) Mixed Content: The page at 'https://www.google.co.in/?...
-1
votes
1answer
101 views

SHA-1 Certificate warning on Windows7

I have installed a clean Win7 machine on a network where my own PC is connected. When I navigate to google.com from my PC (Win 8.1) I receive proper valid TLS connection. Yet when I navigate to google....
0
votes
0answers
14 views

How to deal with plugin that blocks access to Google Chrome settings? [duplicate]

A bad plugin has installed itself while I was closing several pop-ups on Google Chrome. I cannot assess my Google Chrome settings and its related section for the plug-in management anymore. Accessing ...
9
votes
2answers
996 views

Why does Chrome tell me this certificate is valid when it can't be verified?

Update: Now Chrome rejects this website for me. It seems the trusting is just cached somewhere? I guess this question isn't as interesting as I thought, but it'd be nice if someone could clarify it. ...
2
votes
0answers
110 views

Google Chrome wants connect at unknown IP [duplicate]

On my mac when I run Google Chrome, it wants connect at unknown domain on port 80, at example some domain name are: cccpveut, fuflavlorxna, crqzzif, ecc. They appear all domain name of first level........
0
votes
1answer
181 views

Can everyone see my Chrome passwords if they boot a live Linux distro?

I have an iMac 27" Late 2012. My browser is Google Chrome and I have a handful of passwords saved in it. When I come across a website that requires authentication, Chrome automates it without asking ...
0
votes
2answers
785 views

Where does Google search take my geolocation from?

After a bit of googling, found that the gs_l parameter that gets automatically appended to my google queries is my real location encoded in some way. The thing is, there is no sign of me having it ...
0
votes
1answer
622 views

Virus changed Google Chrome installation folder [duplicate]

I got the malware zooarm on my system, and it has changed my Google Chrome folder path to this: Executable Path: C:\Program Files (x86)\Zooarm\Application\chrome.exe Profile Path: C:\Users\...
3
votes
1answer
699 views

What are the major security differences between Chromium and Firefox? [closed]

I'm not sure how to get an informed, unbiased comparison between the security models of Firefox and Chromium. I've tried to google it, but all I find are uninformed anecdotes from random news sites, ...
1
vote
1answer
267 views

Solutions to diagnose PDF files for exploits?

I am downloading a PDF file, and would like to know how to diagnose security vulnerabilities in that file. Context: The last version of Google Chrome is giving me the following warning on a PDF ...
2
votes
2answers
888 views

Is Chromebleed still needed?

I've been running 'Chromebleed' for years now ... is it still needed? The latest advice I've found on various sites is now over 18 months old.
7
votes
5answers
15k views

How can you steal cookies from Chrome?

I'm new with security and have a few questions about it. I've searched and found that for example Google Chrome stores cookies in ~/.config/google-chrome/Default/Cookies. Just as an experiment I "...
8
votes
3answers
24k views

Chrome browser reports obsolete cipher (AES_256_CBC with HMAC-SHA1)

Jboss 6 server is configured to support these ciphers: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, ...
5
votes
2answers
500 views

How to configure Chrome to stop external websites accessing my router?

Yet another serious router vulnerability has been disclosed: https://www.exploit-db.com/exploits/40889/ This is a command execution vulnerability through the web interface. I'm not too concerned ...
1
vote
0answers
40 views

Reason for 'Your connection is not private' on Chromium but not Chrome? [duplicate]

I get this on some, but not all ssl enabled sites. Chromium: Version 53.0.2785.143 Built on Ubuntu , running on Ubuntu 14.04 (64-bit) Chrome: Version 54.0.2840.59 (64-bit) And here is the ...
1
vote
1answer
125 views

Does VPN protect from chrome sniffing

Let's say you browse the web with a VPN connection, but while being signed into your Google account on Chrome. Google still knows all of your browsing history, correct?
0
votes
0answers
51 views

Mint Linux & Chrome “Your connection is not private” only on Chrome [duplicate]

I am having a certificate error when trying to access https sites with Chrome. I do not have this problem with Firefox on the same computer/site. Date and time are correct. I have flushed the DNS ...
-1
votes
1answer
446 views

Does Google Chrome read the contents of screen

Lately I noticed that whenever I'm reading an article and I want to search something I read there, as I'm typing the keyword, Chrome autofills it. For example, I was reading a reddit post and someone ...
17
votes
1answer
775 views

How to verify Google sign-in screen is legit? (Linux Desktop) [duplicate]

I've installed an Electron app "Google Play Music Desktop Player" which presents a Google login screen: This is in a standalone window with no URL displayed. Although I have no reason not to trust ...