227
votes
Accepted
What stops Google from saving all the information on my computer through Google Chrome?
What processes and systems are in place so that Google is not able to copy the data on my computer?
None. Google Chrome usually runs with the permissions of your user account. The application can ...
- 44.7k
184
votes
Accepted
Chrome generated passwords not high entropy?
Conor's answer is a good starting point, but if you dig into Chromium's source the situation starts to look a little bleaker (but still better than not using a password manager at all).
Chrome 68 (...
- 15.6k
147
votes
Accepted
How secure is Chrome storing a password?
Chrome not only stores your password text, it will show it to you. Under settings -> advanced -> manage passwords you can find all your passwords for all your sites. Click show on any of them and it ...
- 1,682
91
votes
How secure is Chrome storing a password?
Chrome (under Windows) actually does encrypt the passwords when stored. But it does it in a way that only someone knowing your login password (or hijacking your login session) can actually use or view ...
- 1,156
86
votes
What stops Google from saving all the information on my computer through Google Chrome?
A piece of unsandboxed software running on a PC/Mac has (generally) the same privileges as the user running it and therefore can access any data that can be accessed by the user.
You are trusting ...
- 62.1k
71
votes
Accepted
Should I allow browsers to remember my passwords and synchronize them?
To expand on what @d1str0 said: if the creator of your browser wanted to steal your passwords, it would be trivial to send them to a manufacturer controlled server whenever you entered them - they don'...
- 27.4k
62
votes
Accepted
Can a browser extension (Chrome, Firefox, etc.) read the web console log?
Any extension that has access to the DOM can read whatever is written to the console by intercepting calls. The console is a JavaScript object; it is simple to proxy calls to console.log, like this ...
- 2,442
60
votes
Accepted
Chrome >50: Where can I see the negotiated cipher suite?
Update:
More recent Chrome versions make it both easier and harder.
The bad news: The “Details” link has been removed. Now you have to open the Developer Tools with Crtl+Shift+I or Cmd+Opt+I, or by ...
- 3,498
56
votes
Accepted
Does Google collect and store data about activity done in Incognito mode?
I think you need to distinguish between "Google" and "Chrome".
Chrome is a browser and the main feature of the Incognito mode is to delete any locally stored information from the ...
- 199k
53
votes
Accepted
Chrome: Your connection is private but someone might be able to change the look of the page
The page that your browser displays on the screen might consist of many elements: the HTML code, CSS, images, etc. Also some of the content might be provided, enhanced, or altered by (legitimate) ...
- 9,149
52
votes
How is it possible for boss to know I am finding a job?
Your boss is likely making assumptions. They can't read your messages on LinkedIn (unless you have your inmails forwarded to your work email and your company is monitoring your inbox....unlikely)
The ...
- 481
51
votes
Accepted
Are there objective reasons to not allow Google Chrome extensions, but to allow Firefox extensions?
I cannot answer the asked question, but I hope this could shed some light on your problem.
Should corporate security rules forbid usage of some browser extension?
IMHO the answer is YES here. Browser ...
- 26.5k
50
votes
Accepted
Does "Not Secure" mean HTTP?
What exactly Not Secure means ? Does it means HTTP only website ?
"Not secure" in Chrome means that the site isn't using HTTPS.
What are all possible reasons for site being Not Secure ?
To get ...
- 2,764
47
votes
Should I allow browsers to remember my passwords and synchronize them?
If you were worried about Chrome or Firefox stealing your passwords, you wouldn't be using them as a web browser in the first place.
An application like Keepass or LastPass can keep your passwords ...
- 2,348
46
votes
Accepted
Conflicting security messages about "chrome://settings" page; is it secure or not?
Yes, your settings page is secure. What you're seeing is just an inconsistency on Chrome's side.
In the devtools, only valid HTTPS connections are labeled "secure". Other documents, including local ...
- 44.7k
42
votes
Are there objective reasons to not allow Google Chrome extensions, but to allow Firefox extensions?
I suspect that Anders is right, and whoever set up the Chrome extension ban just didn't think about Firefox. If they realized that you were using Firefox to get around the ban, they'd probably forbid ...
- 4,436
42
votes
How is Xiaomi changing my browser home page?
You are running an operating system customized by Xiaomi. An operating system is the execution environment for the application. It has higher privileges then the applications themselves and can do ...
- 199k
40
votes
Accepted
Why does Chrome send four browsers in the user-agent header?
Presumably you mean the following four:
Mozilla/5.0 (X11; Linux x86_64)
AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/51.0.2704.63
Safari/537.36
most Web browsers use a User-Agent string value as ...
- 3,966
40
votes
What stops Google from saving all the information on my computer through Google Chrome?
If you are running a Linux distribution with SELinux, it is possible to have an additional layer of security. SELinux is an OS-level technology which allows tight restrictions on what processes — like ...
- 2,741
38
votes
Chrome generated passwords not high entropy?
Let me start with an important and accurate caveat:
http://dilbert.com/strip/2001-10-25
The math
Looking at the actual odds, there are 62 possible characters (a-zA-Z0-9) and therefore assuming all are ...
- 31k
37
votes
Why I am getting Facebook login pop up for every site?
This is a proxy authentication pop up! And it's most likely a proxy related attack.
When you connect to the Internet through a proxy, you'll be asked to enter username and password if the proxy ...
- 2,495
36
votes
Accepted
Why I am getting Facebook login pop up for every site?
TL;TR: it is probably a BlueCoat ProxySG or similar proxy which can be configured to behave that way. Nothing to worry about.
Details:
What you see is a dialog for HTTP basic access authentication. ...
- 199k
29
votes
How secure is Chrome storing a password?
Please, please, please stop reusing your passwords!
In Firefox you can actually set a master password which will protect your stored passwords from being viewed. This master password will also be ...
- 1,955
28
votes
Accepted
"google.com" is not HSTS protected?
Current situation
It is true that, as of Oct 2020, Google does not have HSTS on google.com, but only on www.google.com, and performs redirection first to www and then to https://. Even if there was a ...
- 18.7k
27
votes
Accepted
Can a malicious add-on access internet history and other sensitive info in Chrome/Firefox?
Modern browser extensions use the WebExtensions API, which enforces a permission model; basically, addons can only have the access that you grant them (you can't reject individual permissions though; ...
- 29.5k
25
votes
Accepted
Why is secp521r1 no longer supported in Chrome, others?
The main culprit is NSA Suite B -- or, rather, people who read that document as something that it is not. NSA Suite B says that NSA uses curves P-256 and P-384. Some people have chosen to interpret ...
- 172k
23
votes
What stops Google from saving all the information on my computer through Google Chrome?
Lawyers. You have a contract with Google stating what they will do / you allow them to do. This is called the Google Chrome Terms of Service . And obviously, you have carefully read it before ...
- 18.8k
21
votes
Accepted
Why do Firefox and Chrome "leak" critical security information out of the browser and how can I stop it?
Why do Firefox and Chrome allow such easy leaking of these session keys?
To make it easier for developers to analyze their network captures. The first time I used this feature was when trying to ...
- 6,078
20
votes
Accepted
How is it possible for boss to know I am finding a job?
Your employer is possibly using a service like "Keeper" from HiQ Labs, which can provide forward-looking attrition risk analysis based on LinkedIn data.
Keeper analyses LinkedIn user data ...
- 316
Only top scored, non community-wiki answers of a minimum length are eligible