Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [chrome]

Popular web browser by Google, see chrome.google.com for more information.

4
votes
1answer
102 views

Strange login in Chrome

I work from home in a company laptop. It has installed this software by the IT team: http://www.misutilities.com/network-asset-tracker-pro/ My main browser is FF and I use Chrome only to test my work....
4
votes
1answer
2k views

Pirate Bay Search Appearing in Chrome

While googling some errors today I noticed I had the option to use the pirate bay search Now I saw a similar question posted here How did piratebay.se search engine get in Chrome as an “...
1
vote
1answer
137 views

How to tell my HTTPS connection to a site uses PFS?

Does the browser have a UI for displaying the details about the TLS connection to the website, besides the "secure/insecure" icon?
1
vote
1answer
155 views

How does Google Chrome's JS Crypto RNG Work?

According to caniuse, Google Chrome has support for crypto.getRandomValues() for (presumably/hopefully) generating cryptographically secure random values. How is this implemented? As there have been ...
2
votes
1answer
484 views

What client software is affected by JPEG 2000 / TALOS-2016-0193/CVE-2016-8332

A vulnerability in JPEG 2000 file formats has been discovered. The articles seem to refer to OpenJPEG implementation when discussing this bug, however what's not clear is who is the vulnerable party....
2
votes
0answers
61 views

Website Data Log History ($10k lost) [closed]

I have lost access to a web wallet for a cryptocoin. That website generated an unique "seed" (private key) client-side and I forgot to write down that seed to access my wallet later on. So my question ...
3
votes
2answers
3k views

What should I do when I am using a public computer without secure access to my password manager?

I have my passwords saved in Chrome and I use Chrome sync. When I am on a public computer I can't sign into Chrome (per google's recommendations https://goo.gl/7cwGsC). Logging into gmail and going to ...
0
votes
1answer
280 views

Level of isolation that Chromium's “Guest Browsing” provides?

When using "add user" in guest browsing, what level of "isolation" does one get? If any? That is, I can log into google or facebook etc multiple times so I assume that at least cookies are separated ...
2
votes
1answer
361 views

In Chrome, how do I see a suspect HTTPS certificate before I visit the site?

If I attempt to connect to an HTTPS site with a certificate problem, Google Chrome displays the following: Your connection is not private Attackers might be trying to steal your information... ...
9
votes
2answers
9k views

My site has Certificate Transparency enabled but Chrome is still showing NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED

I have a site called www.goflyla.com and I purchased the SSL cert from RapidSSL with Certificate Transparency enabled. SSLLabs give a green line saying Certificate Transparency: Yes (certificate): ...
0
votes
1answer
832 views

How to prevent serious browser hijackers like this? [closed]

I am using Chrome and experiencing serious hijackers problems. After finish loading a website, the hijackers adds a full-screen transparent trap. When I clicked on it, it pops a new tab containing ...
0
votes
1answer
201 views

Secure touch kiosk system without updates?

We have a discussion here, if an internet enabled kiosk system can be set up securely without updating the system regularly. The facts in short: We are developing a new software product which ...
2
votes
2answers
118 views

ISO 27001 and ChromeOS logging

Is it possible to use ChromeOS devices within an organization that is ISO 27001 compliant? The consultant my employer has hired to assist us in becoming ISO 27001 certified has indicated that ...
31
votes
6answers
8k views

Chrome: Your connection is private but someone might be able to change the look of the page

I happened to come across this (govt) website which should be HTTPS-secured, but Chrome does not show the green lock. Instead it shows this: What does it mean? How can attackers leverage this ...
2
votes
1answer
137 views

What does “ oscrashed.xyz ” do to a computer?

I mistyped an URL into chrome and it redirected me to the site: oscrashed.xyz It appeared to be the typical scam site that asks you to call a number to get your computer unlocked or cleaned of ...
0
votes
0answers
332 views

How to install client certificates globally for Google Chrome in Ubuntu?

I am trying to install a client certificate to Google Chrome running on Ubuntu. I want any user who logs in to Ubuntu to be able to use this client certificate in Chrome. Even better if I can create ...
1
vote
1answer
608 views

How to access an HTTPS service running deprecated technology? (TLS 1.0) (phone works but not PC)

So this is the issue: I have a modem/router provided by my telco. The router exposes the usual 192.168.1.254 address for managment, but with my pc there's no way to open it, I tried with firefox, ...
0
votes
2answers
953 views

Google Chrome is redirecting before visiting a shopping website

I notice every few days (~5 days) that when I try to open an Amazon.in URL, before opening that URL, Chrome opens a different link which looks like an affiliate link. This link redirects to the actual ...
3
votes
3answers
471 views

How does the same origin policy apply to two different windows of a browser?

One particular scenario I am interested in: If I a open one chrome browser window with --disable-web-security option, then SOP is disabled. Will this window be able to access data on websites opened ...
2
votes
3answers
819 views

How secure is the native browser password autofill?

Safari, Chrome, Firefox, Edge, and IE all either have a suggest-password feature, or password archival feature. How secure are these passwords when stored on a computer? If replicated, how secure ...
4
votes
1answer
826 views

What are the disadvantages of Google Safe Browsing?

I'm currently undertaking my thesis regarding phishing detection. I understand that Google Safe Browsing relies on a constantly updated blacklist in order to classify webpages. Their blacklist does ...
2
votes
2answers
3k views

Script injection on all browsers

I have something injecting a script into all web browsers that I have tried - Firefox, IE, Edge, Chrome - and it doesn't look like an extension (since it is doing so in different web browsers). I ...
6
votes
1answer
1k views

Detecting disabled Chrome plugins using JavaScript

My cable was on the fritz this weekend and I had to visit a friend to watch HBO online. Something weird happened that has been bothering me. I have disabled the Flash plugin on Chrome, since all ...
2
votes
1answer
370 views

Is it normal for Chrome extensions to demand too many permission?

I tried to install a Chrome extension for downloading Facebook video clips, but it requests too many privileges in my opinion: Read and change all your data on the websites you visit Manage ...
1
vote
2answers
168 views

Can I trust browsers not to snoop into my activities?

Is there anything stopping web browsers from snooping into our activities? I don't mean web history or any of that generic stuff (Chrome already collects them, right?), but is it technically possible ...
16
votes
1answer
293 views

Preventing a site from appearing in the 'Most Visited' or 'speed dial' section of a web browser

Are there any established ways of preventing a website from appearing as an icon on the 'Most Visited' / 'Speed dial' / start page of a web browser? One example of this is the tab that opens by ...
5
votes
1answer
236 views

Why do Chrome and OpenSSL disagree over signature algorithm?

$ openssl version OpenSSL 1.0.2h 3 May 2016 $ openssl s_client -connect winkel.vpro.nl:443 < /dev/null 2>/dev/null | openssl x509 -text -in /dev/stdin | grep -i sha Signature Algorithm: ...
3
votes
1answer
180 views

How can a modern Windows/Linux system be compromised by a heap overflow in Chrome?

Wikipedia's article on Heap Overflow states: there are primarily three ways to protect against heap overflows. Several modern operating systems such as Windows and Linux provide some ...
4
votes
2answers
7k views

Why is CAcert not trusted by my browser?

I am fairly new to encryption and SSL. Today I googled a bit (read some atricles about security) and encountered the site https://cacert.org. I clicked it and was surprised. Chrome showed me a "not ...
11
votes
1answer
5k views

Why does Chrome send four browsers in the user-agent header?

I am using Chrome in linux with Version 51.0.2704.63 (64-bit). I recorded a HTTP request of Chrome and here is part of the recording: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (...
1
vote
1answer
233 views

What data is sent between an NFC/BTLE FIDO U2F device and Chrome (or other agent)?

I need to explain what "conversation" occurs between a FIDO U2F device (YubiKey NEO) and the agent (Chrome). I want to know if it's a challenge response, and ultimately figure out how much ...
0
votes
1answer
213 views

Virus in browser - affects chrome most of all [closed]

I seem to have a virus I cannot trace on my computer, it basically rewrites pages filled with ads in the form of videos. It seems to be using AJAX here is a screenshot attached. I traced a few files ...
2
votes
1answer
317 views

Will the Credential Management API now available in Chrome 51 be widely adopted?

Google Chrome 51 stable includes support for the Credential Management API. This implementation is based on the W3C spec. Will other browsers support this technology (particularly Safari)? Will web ...
25
votes
2answers
6k views

Why I am getting Facebook login pop up for every site?

My Chrome browser keeps prompting me for Facebook authentication, even though I have never logged on to Facebook from my PC. I am using Chrome browser from my company where they have a strong proxy ...
3
votes
3answers
6k views

Is QUIC (Quick UDP Internet Connections) safe to allow through firewall?

Our firewall currently blocks QUIC (UDP 443) traffic which seems to be enabled by default in Google Chrome. Is it safe to allow QUIC or should I wait until it is implemented in all the major browsers? ...
1
vote
2answers
63 views

Security of Chrome's Printing Output

On Linux systems the printing functionality of Chrome (printing of websites or PDF documents) generates PDF documents which are sent to the print server (e.g., CUPS). Are there any security mechanisms ...
4
votes
3answers
238 views

Could Google Chrome's lack of a download confirmation dialog be a security vulnerability?

Suppose the user is playing a game like flappy bird that requires constant tapping in the lower left area of the screen (where the downloaded file needs to be clicked). Then while the user is ...
0
votes
1answer
316 views

mail.ru and slightsearch.ru hijacking browser default search engine set by admin

I recently got malware installed on my PC that contained software that infected my google chrome, by hijacking my default search engine. I tried: Removing newly installed programs from PC, using ...
19
votes
1answer
36k views

Chrome >50: Where can I see the negotiated cipher suite?

This is about Chrome 50 and later. When visiting an https site, where can I find the negotiated cipher suite? I know where to find this info in previous versions of Chrome but I'm not able to find it ...
4
votes
2answers
132 views

Why would a modern browser allow internal resources to be loaded from an external page

Recently someone announced that several Arris surfboard models lacked any form of authentication to perform functions such as reboot and factory reset a modem with a single http call. Read more on ...
1
vote
2answers
2k views

Random autofill [closed]

I was trying to pay for something just now, and when I put my name in the chrome autofill came up and I clicked it. The address that showed up was wrong though but corresponded to the postcode of one ...
4
votes
2answers
1k views

How do I protect my passwords from WebBrowserPassView?

I just got shocked with what can be achieved with WebBrowserPassView. It basically shows every password I've saved in my browser (Chrome). I guess other users on my PC could get my passwords that ...
5
votes
2answers
149 views

Can going to a bad website on firefox, or installing a malcious firefox plugin, infect other parts of my home folder on a Linux system?

BTW, I don't mean root, just a plain user. I'm worried because I'm scared that if I do such things I could infect my Chromium folder. I got a huge case of OCD.
1
vote
0answers
168 views

Have there been any known “in the wild” exploits of any Google Chrome (Android) 40.0.2214.89 vulnerabilities?

https://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-15031/version_id-179594/Google-Chrome-40.0.2214.89.html I looked for any news about them and couldn't find anything. Anyone ...
0
votes
2answers
2k views

Malware or viruses by browser redirects?

Recently was browsing and clicked on a link to the following address: (In code blocks so you cant accidently click it) http://paycheck-calculator.org/ Clicking on this quickly loaded 2-3 different ...
3
votes
2answers
974 views

SSL browser session keys

I am trying to export/write the SSL master secret and keys to a file from the chromium browser. I would appreciate if someone could advice me how to do this. To write the premaster secret we can ...
13
votes
2answers
2k views

Google Chrome says “Your connection to example.com is encrypted using an obsolete cipher suite.”

I get following info when I click on lock icon on address bar: I have couple of questions: Q1. What are the security concerns here? Q2. Even after 'obsolete cipher suit' message, Chrome is able to ...
3
votes
1answer
1k views

Firefox & Chrome Strong Ciphers

Of the following ciphers for RSA authentication, Firefox and Chrome do not use stronger than ECDHE-RSA-AES128-SHA256. ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD ...
76
votes
13answers
27k views

Should I allow browsers to remember my passwords and synchronize them?

I wonder, how wise is it to allow Chrome and Firefox to a) remember the passwords b) synchronize them? My gut tells me that if it's not man in the middle who can intercept them, but Google and Mozilla ...
0
votes
2answers
1k views

Can Chrome browser history be seen on work wifi, even if not re-loaded?

I use the work wifi daily but am always conscious of using work related sites. However Android tends to keep most apps running in the browser so my windows(tabs) are never essentially closed down. ...