Questions tagged [chrome]

Popular web browser by Google, see chrome.google.com for more information.

29 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
1answer
873 views

non secure connection in youtube

I was browsing a while ago on youtube, I saw it shows an insecure connection even though it was over https. I'm using ghostery and adblock to block trackers but nothing more, I don't think it's the ...
3
votes
0answers
120 views

HTML link with “noopener” and/or “noreferrer” in Chrome/Chromium results in unexpected behaviour

There are several attacks possible when embedding links with target="_blank". This is where rel="noopener" and rel="noreferrer" should help. I am expecting that clicking the following link <a ...
3
votes
0answers
99 views

Mechanisms of built-in password managers in browser

I am researching for auto-fill mechanisms in built-in web-browsers password managers. Using windows hosts file i am redirecting browser query to my web-server where i am storing the full copy of ...
2
votes
0answers
682 views

Does Chrome cache smartcard PIN?

When I have authenticated with a server suing TLS/SSL using HTTPS using a smartcard and PIN and I invalidate the TLS session by restarting the server, refreshing Chrome browser does not reprompt for a ...
2
votes
0answers
291 views

HTML Injection on iOS?

I had an uncommon issue with both Safari and Chrome on an iPhone 6 running iOS 9.0.1 last night - a number of sites were displayed with altered links and/or additional links (clearly from a third-...
2
votes
0answers
5k views

Does this list every Chrome extension/addin that may leak privacy?

I am looking for a simple list of all extensions, preference, custom processes, and "flags" that may disclose a user's privacy or other details to a 3rd party. To that end, I discovered: chrome://net-...
2
votes
1answer
157 views

Can my G Suite admin see my browsing history if: I am in incognito mode on iPad Chrome?

Can my G suite admin see by browsing history if: I am in incognito mode on iPad Chrome? iPadOS beta 3. I'm signed in with a G Suite account. If they are monitoring me, is it visible? Is there any way ...
1
vote
0answers
51 views

How/When does Chrome queries Certificate Transparency (CT) log servers to ask for inclusion proof of certificates and how can I debug them?

I’ve been trying to understand how does Chrome interact with CT log servers. According to what I’ve read so far, Chrome sends inclusion proof requests (“GET https:///ct/v2/get-proof-by-hash” - https://...
1
vote
0answers
38 views

Securing internal API credentials on a public chrome extension

I've developed a Chrome extension that I plan to publish to the Chrome Web Store. On the server side, I've implemented OAuth 2 (using access tokens and refresh tokens) with support for generation of ...
1
vote
0answers
22 views

Is it possible to open Chrome's databases.db in another MacBook?

According to this post, Chrome passwords are stored in /Users/$USER/Library/Application Support/Google/Chrome/Default/databases/Databases.db. Is it possible for an attacker to copy Chrome passwords ...
1
vote
0answers
89 views

What is the essence of Google Chrome’s new controversial sign-in feature?

What is the essence of Google Chrome’s new controversial sign-in feature? How does it work and how does it differ from what was it before? What is the danger of it? Is Chromium affected?
1
vote
2answers
273 views

Malware techiques via Linux Chrome and its effects, non-root

Is it possible to visit a website with Chrome on Ubuntu and have that site execute shell code on my machine without explicitly downloading anything nor click on some Chrome execute question/popup? If ...
1
vote
0answers
519 views

Bypassing the minimum size limit of a popup window in Chrome?

Recently I have come across several popup windows in chrome that somehow bypass the minimum height and width of a new window the browser usually imposes allowing them to hide mostly under the task bar,...
1
vote
1answer
71 views

Restricting user sign-in on Chrome for Business

I'm currently evaluating the configuration of Chrome for Business in a corporate environment. There is a setting which prevents users from signing into Chrome with their personal accounts. My gut ...
1
vote
0answers
621 views

Is this 0-day RCE Exploit for Chrome fake?

I found this guy claiming that he has a 0-day Exploit for Chrome, Firefox and Windows 10, but to me it seems to be fake... Video - 0day RCE Exploit for Google Chrome 59.0.3071.86 Here is video for ...
1
vote
0answers
3k views

Google Chrome and Certificate Problem

When I try to connect google.com and youtube.com with Chrome, I got the error below; 1. 2. Your connection is not private Attackers might be trying to steal your information from www.google.com.tr ...
1
vote
0answers
180 views

Have there been any known “in the wild” exploits of any Google Chrome (Android) 40.0.2214.89 vulnerabilities?

https://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-15031/version_id-179594/Google-Chrome-40.0.2214.89.html I looked for any news about them and couldn't find anything. Anyone ...
1
vote
0answers
92 views

Is there an extension/command line for OSX Chromium to save website passwords in LOCALSTORAGE instead of the system's keychain?

My situation: I want to use a portable-app implementation of Chromium running on a removable drive, so I never leave any passwords stored on the kaychain of any computer I use. Portable Chromium is ...
1
vote
0answers
1k views

Google Chrome Crash Report Analysis

I am new to the field of crash analysis. I recently, by accident, happened to crash Google Chrome. I do not know the reason as to why the crash really happened. I'd like to know it in depth though. ...
0
votes
0answers
33 views

Browser Exploiting - Using SyncManager to keep Service Workers alive forever

I just read the paper "Master of Web Puppets: Abusing Web Browsers for Persistent and Stealthy Computation". The authors claim to use the SyncManager Interface in order to keep Service Workers alive ...
0
votes
0answers
89 views

Browser passwords used on multiple domains?

I have 100 domains with authentication backed by the same LDAP database. There is a single-sign on, but it's not implemented with OAuth. That is to say, per user, each domain accepts the same user/...
0
votes
0answers
59 views

On The Use Of Unsanboxed Plugins In The Chrome Browser

The following questions relate to unsandboxed plugins under Settings > Advanced > Content settings > Unsandboxed plugins. The first thing I'd like to know is whether this setting is basically for ...
0
votes
0answers
394 views

Payment Handlers In Google Chrome

Are there any privacy/security risks associated with using payment handlers in Google Chrome? Somehow, the idea of having my financial information stored in a browser makes me feel uncomfortable. I ...
0
votes
1answer
171 views

Bitdefender showing lot of Getting Suspicious Connection Blocked from Chrome extension Toby

I'm using GetToby Chrome extension to manage my tabs and save them for later. Lately, I've been getting lots of notifications from BitDefender about blocked suspicious attempt: chrome.exe attempted ...
0
votes
0answers
19 views

Can a limited permission Chrome extension access multidomain cookies?

Can a Chrome extension that's only allowed to "read and modify all data on youtube.com" access or modify data related to my Google account? (Background: The sign in window is hosted at a different ...
0
votes
0answers
33 views

security of <link rel=“canonical”>

today I was a bit surprised to see a <link rel="canonical">-Tag in action: I was reading this news article on my android phone and wanted to share it: https://www.golem.de/news/hyundai-nexo-...
0
votes
0answers
1k views

ERR_SSL_PROTOCOL_ERROR on a site that doesn't use SSL/TLS, on an odd port

I've set up a server running Jenkins. The web-interface doesn't have SSL/TLS support turned on by default, and I have not attempted to turn it on, and do not want to turn it on (for now at least). ...
0
votes
0answers
389 views

How to install client certificates globally for Google Chrome in Ubuntu?

I am trying to install a client certificate to Google Chrome running on Ubuntu. I want any user who logs in to Ubuntu to be able to use this client certificate in Chrome. Even better if I can create ...
-1
votes
1answer
103 views

SHA-1 Certificate warning on Windows7

I have installed a clean Win7 machine on a network where my own PC is connected. When I navigate to google.com from my PC (Win 8.1) I receive proper valid TLS connection. Yet when I navigate to google....