Skip to main content
Share Your Experience: Take the 2024 Developer Survey
226 votes
Accepted

What stops Google from saving all the information on my computer through Google Chrome?

What processes and systems are in place so that Google is not able to copy the data on my computer? None. Google Chrome usually runs with the permissions of your user account. The application can ...
Arminius's user avatar
  • 44.8k
184 votes
Accepted

Chrome generated passwords not high entropy?

Conor's answer is a good starting point, but if you dig into Chromium's source the situation starts to look a little bleaker (but still better than not using a password manager at all). Chrome 68 (...
AndrolGenhald's user avatar
145 votes
Accepted

How secure is Chrome storing a password?

Chrome not only stores your password text, it will show it to you. Under settings -> advanced -> manage passwords you can find all your passwords for all your sites. Click show on any of them and it ...
Meir Maor's user avatar
  • 1,682
92 votes

How secure is Chrome storing a password?

Chrome (under Windows) actually does encrypt the passwords when stored. But it does it in a way that only someone knowing your login password (or hijacking your login session) can actually use or view ...
Henno Brandsma's user avatar
86 votes

What stops Google from saving all the information on my computer through Google Chrome?

A piece of unsandboxed software running on a PC/Mac has (generally) the same privileges as the user running it and therefore can access any data that can be accessed by the user. You are trusting ...
Rory McCune's user avatar
  • 62.3k
61 votes
Accepted

Can a browser extension (Chrome, Firefox, etc.) read the web console log?

Any extension that has access to the DOM can read whatever is written to the console by intercepting calls. The console is a JavaScript object; it is simple to proxy calls to console.log, like this ...
Fire Quacker's user avatar
  • 2,432
60 votes
Accepted

Chrome >50: Where can I see the negotiated cipher suite?

Update: More recent Chrome versions make it both easier and harder. The bad news: The “Details” link has been removed. Now you have to open the Developer Tools with Crtl+Shift+I or Cmd+Opt+I, or by ...
Matt Nordhoff's user avatar
56 votes
Accepted

Does Google collect and store data about activity done in Incognito mode?

I think you need to distinguish between "Google" and "Chrome". Chrome is a browser and the main feature of the Incognito mode is to delete any locally stored information from the ...
Steffen Ullrich's user avatar
53 votes
Accepted

Chrome: Your connection is private but someone might be able to change the look of the page

The page that your browser displays on the screen might consist of many elements: the HTML code, CSS, images, etc. Also some of the content might be provided, enhanced, or altered by (legitimate) ...
techraf's user avatar
  • 9,139
53 votes

How is it possible for boss to know I am finding a job?

Your boss is likely making assumptions. They can't read your messages on LinkedIn (unless you have your inmails forwarded to your work email and your company is monitoring your inbox....unlikely) The ...
Josh Madrid's user avatar
50 votes
Accepted

Are there objective reasons to not allow Google Chrome extensions, but to allow Firefox extensions?

I cannot answer the asked question, but I hope this could shed some light on your problem. Should corporate security rules forbid usage of some browser extension? IMHO the answer is YES here. Browser ...
Serge Ballesta's user avatar
49 votes
Accepted

Does "Not Secure" mean HTTP?

What exactly Not Secure means ? Does it means HTTP only website ? "Not secure" in Chrome means that the site isn't using HTTPS. What are all possible reasons for site being Not Secure ? To get ...
Joe's user avatar
  • 2,764
45 votes
Accepted

Conflicting security messages about "chrome://settings" page; is it secure or not?

Yes, your settings page is secure. What you're seeing is just an inconsistency on Chrome's side. In the devtools, only valid HTTPS connections are labeled "secure". Other documents, including local ...
Arminius's user avatar
  • 44.8k
42 votes
Accepted

Why does Chrome send four browsers in the user-agent header?

Presumably you mean the following four: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.63 Safari/537.36 most Web browsers use a User-Agent string value as ...
Jedi's user avatar
  • 3,986
42 votes

Are there objective reasons to not allow Google Chrome extensions, but to allow Firefox extensions?

I suspect that Anders is right, and whoever set up the Chrome extension ban just didn't think about Firefox. If they realized that you were using Firefox to get around the ban, they'd probably forbid ...
Ilmari Karonen's user avatar
42 votes

How is Xiaomi changing my browser home page?

You are running an operating system customized by Xiaomi. An operating system is the execution environment for the application. It has higher privileges then the applications themselves and can do ...
Steffen Ullrich's user avatar
40 votes

What stops Google from saving all the information on my computer through Google Chrome?

If you are running a Linux distribution with SELinux, it is possible to have an additional layer of security. SELinux is an OS-level technology which allows tight restrictions on what processes — like ...
mattdm's user avatar
  • 2,711
38 votes

Chrome generated passwords not high entropy?

Let me start with an important and accurate caveat: http://dilbert.com/strip/2001-10-25 The math Looking at the actual odds, there are 62 possible characters (a-zA-Z0-9) and therefore assuming all are ...
Conor Mancone's user avatar
37 votes

Why I am getting Facebook login pop up for every site?

This is a proxy authentication pop up! And it's most likely a proxy related attack. When you connect to the Internet through a proxy, you'll be asked to enter username and password if the proxy ...
Eibo's user avatar
  • 2,495
36 votes
Accepted

Why I am getting Facebook login pop up for every site?

TL;TR: it is probably a BlueCoat ProxySG or similar proxy which can be configured to behave that way. Nothing to worry about. Details: What you see is a dialog for HTTP basic access authentication. ...
Steffen Ullrich's user avatar
29 votes

How secure is Chrome storing a password?

Please, please, please stop reusing your passwords! In Firefox you can actually set a master password which will protect your stored passwords from being viewed. This master password will also be ...
Elias's user avatar
  • 1,980
27 votes
Accepted

Can a malicious add-on access internet history and other sensitive info in Chrome/Firefox?

Modern browser extensions use the WebExtensions API, which enforces a permission model; basically, addons can only have the access that you grant them (you can't reject individual permissions though; ...
tim's user avatar
  • 29.6k
27 votes
Accepted

"google.com" is not HSTS protected?

Current situation It is true that, as of Oct 2020, Google does not have HSTS on google.com, but only on www.google.com, and performs redirection first to www and then to https://. Even if there was a ...
Esa Jokinen's user avatar
23 votes

What stops Google from saving all the information on my computer through Google Chrome?

Lawyers. You have a contract with Google stating what they will do / you allow them to do. This is called the Google Chrome Terms of Service . And obviously, you have carefully read it before ...
Ángel's user avatar
  • 18.9k
20 votes
Accepted

How is it possible for boss to know I am finding a job?

Your employer is possibly using a service like "Keeper" from HiQ Labs, which can provide forward-looking attrition risk analysis based on LinkedIn data. Keeper analyses LinkedIn user data ...
bsod's user avatar
  • 316
19 votes

What stops Google from saving all the information on my computer through Google Chrome?

What processes and systems are in place so that Google is not able to copy the data on my computer? There's not anything in place that makes it so they can't but there's something in place that makes ...
Wayne Werner's user avatar
  • 1,835
17 votes
Accepted

Why do Chrome and Firefox report a different server certificate and issuer than OpenSSL?

Unsure for your exact use case, but that is what the Server Name Indication TLS extension precisely addresses. In HTTPS, the SSL handshake where the server presents its certificate occurs before the ...
Serge Ballesta's user avatar
14 votes
Accepted

Google Chrome says "Your connection to example.com is encrypted using an obsolete cipher suite."

Alright, here we go: Question 1 TLS 1.0 is not quite perfect. See the answers to this question for details. 3DES is somewhat odd these days, but still okay, nonetheless depricated by AES. using RSA ...
Tobi Nary's user avatar
  • 14.4k
13 votes

How can you steal cookies from Chrome?

This is how it's done. Go to some site, let's say facebook/netflix . Check out the cookies that the site uses to authenticate you, you can edit the cookies from the dev tools! just mess around with ...
Joaquin Brandan's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible