Questions tagged [chromium]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
26 views

Does NW.js send “crash reports” to Google (or anyone external) by default? [migrated]

https://nwjs.readthedocs.io/en/latest/References/Manifest%20Format/ crash_report_url Once the app crashed, the crash dump file and information about the runtime environment will be sent to the crash ...
-1
votes
1answer
210 views

Is Brave private?

I have been using Brave for a long time now. Lately, I realized it uses Chromium. I really dislike using Google because of my data privacy. So I am starting to wonder if Brave does the same thing.
1
vote
0answers
41 views

How am I supposed to trust binaries “submitted by anyone”? [duplicate]

I finally found a Chromium fork which appears to have made a serious effort to remove all the Google cancer. Sadly, I see this: https://ungoogled-software.github.io/ungoogled-chromium-binaries/ ...
0
votes
1answer
182 views

How does Chromium's sandboxing compare to Firejail's?

I am increasingly being requested to join videoconferences through Zoom, which I don't trust to run on my machine. I understand that there are two common ways of sandboxing this software: you can ...
1
vote
2answers
723 views

Where to put SAN

Where SAN means: Subject Alternative Name. I feel I have a basic misunderstanding in which certificate the SAN stuff shall go: ca or server or both or what? It might be 3 Years or more in the past, ...
9
votes
3answers
2k views

How to securely run Puppeteer / Chromium in a Docker container?

Attempting to run Puppeteer, a Node library to control a headless Chromium (in order to do things like create a PDF of a website), in Docker is a surprisingly fiddly thing. The problem is that, from ...
3
votes
0answers
157 views

How/When does Chrome queries Certificate Transparency (CT) log servers to ask for inclusion proof of certificates and how can I debug them?

I’ve been trying to understand how does Chrome interact with CT log servers. According to what I’ve read so far, Chrome sends inclusion proof requests (“GET https:///ct/v2/get-proof-by-hash” - https://...
3
votes
0answers
553 views

HTML link with “noopener” and/or “noreferrer” in Chrome/Chromium results in unexpected behaviour

There are several attacks possible when embedding links with target="_blank". This is where rel="noopener" and rel="noreferrer" should help. I am expecting that clicking the following link <a ...
1
vote
1answer
37 views

restoring logged out gmail session in running instance of chromium browser?

My situation is: +I have created a special purpose gmail account +I used a complicated password to protect the account. On purpose, I did not use any 2FA options are a "reset" email address or phone ...
1
vote
0answers
94 views

What is the essence of Google Chrome’s new controversial sign-in feature?

What is the essence of Google Chrome’s new controversial sign-in feature? How does it work and how does it differ from what was it before? What is the danger of it? Is Chromium affected?
2
votes
1answer
372 views

Are the details about the Widevine bug now public?

There was a bug in Widevine last year which enabled downloading Encrypted Media Extension Content. They stated that they would give full details after 90 days. Was this meant for public disclosure or ...
1
vote
1answer
1k views

chrome is launched and tries to open a wierd website

I have this wierd problem that once in a while (I guess mostly when I plug my laptop to adapter) chromium is lauched by itself and loads this wbesite: http://gestyy.com/wPEFwy I can guess that there ...
29
votes
1answer
4k views

Conflicting security messages about “chrome://settings” page; is it secure or not?

Accessing the chrome://settings page, I see two things contradicting each other: The ribbon below the address bar shows "You're viewing a secure Chromium Page." On the other hand, the security ...
5
votes
0answers
506 views

How does Chrome distrust Symantec Certificates?

Sometime back Google Chrome had announced plans to distrust Symantec certificates. I am trying to figure out how this is done for a POC. When I visit chase.com on Google Chrome, I get the following ...
0
votes
2answers
1k views

HTTPS connection issue on Chrome/Chromium/Opera

I am trying to build a light web server on an embedded device, and trying to add HTTPS to it by introducing mbedTLS. I can use Firefox or IE to make connections without any problem. However, when ...
6
votes
2answers
2k views

Chromium Malware (possible) on my Linux Machine

Running Chromium 60.0.3112.11 on Linux Ubuntu 16.04 Chromium attempts to access my Linux machine's media upon autocompleting bankofamerica.com, wellsfargo.com, americanexpress.com, or discover.com. ...
1
vote
1answer
215 views

How can Chromium access my Firefox history?

I have 3 Firefox profiles set up ("home", "work", and "tmp") and one Chromium profile. I currently have Firefox open in the "home" profile and Chromium open. When I started another instance of ...
1
vote
0answers
460 views

Is Chromium spying my keyboard? [closed]

I just typed into Eclipse (a different process): enum State { } Then I wanted to check about code conventions regarding those enums. So I typed into the address bar of Chromium "Java convention". ...
7
votes
1answer
5k views

Privacy with Chromium?

How private is Chromium for Windows, Linux and Android? Will a standard Chromium installation contain code that will phone home to Google or otherwise send out identifying information? Are there other ...
11
votes
1answer
5k views

Why is one of three browsers (Chromium) reporting an invalid HTTPS certificate?

A few days ago, Chromium started to report Flickr's certificate as problematic: The server presented a certificate that was not publicly disclosed using the Certificate Transparency policy. This is a ...