Skip to main content

Chrome

Opt-out of Facebook permissions via new add-on

posted onNovember 29, 2011
by l33tdawg

Still in rough development, a new extension for Google Chrome puts in your hands a useful power tool for separating your data from Facebook apps of dubious origin. Called OOptOut (download), the add-on by Chad Selph helpfully lists above the Facebook header for you any permissions that a newly-installed Facebook app requests.

Chrome Bug No Security Threat, Argues Google

posted onOctober 26, 2011
by l33tdawg

Google's Chrome contains a critical vulnerability that under certain circumstances allows attackers to plant malware on a Windows PC, a security company said last week.

According to Slovenia-based Acros Security, Google would not categorize the bug as a vulnerability, and instead called it a "strange behavior that [they] should consider changing."

Bug may enable remote code execution in Chrome

posted onOctober 25, 2011
by l33tdawg

Google Chrome contains a vulnerability that could allow an attacker to silently execute remote code on a victim's machine outside of the browser's built-in sandbox protections, according to researchers at Slovenia-based Acros Security.

According to Google, however, the issue is not technically a flaw, but rather a “strange behavior” that would require substantial user manipulation to exploit.

Google shells out $10,000 to fix 10 high-risk Chrome browser flaws

posted onOctober 5, 2011
by l33tdawg

Google has shipped another Chrome browser update with fixes for several “high-risk” security vulnerabilities that expose Windows, Mac OS X and Linux users to malicious hacker attacks.

The new Google Chrome version 14.0.835.202 also contains Adobe Flash Player 11, a software update that includes several security and privacy goodies.

As part of its bug bounty program, Google spent about $10,000 to buy the rights to the vulnerability information from security researchers.

Google updates Chrome to restore browser after Microsoft blunder

posted onOctober 4, 2011
by l33tdawg

Google updated Chrome over the weekend to help users affected by Microsoft's errant flagging of the browser as malware.

New versions of Chrome for both the "stable" and "beta" channels were released Saturday, the day after Microsoft's antivirus products identified Chrome as the Zeus botnet Trojan, and deleted the "chrome.exe" file on some users' Windows PCs.

27% of tested Google Chrome extensions allow data theft

posted onSeptember 30, 2011
by l33tdawg

27 of a 100 tested Google Chrome extensions have been found vulnerable to data (passwords, history, etc.) extraction attacks though specially crafted malicious websites or by attackers on public WiFi networks.

A trio of security researchers have manually analyzed 50 of the most popular Chrome extensions and added to that list 50 more chosen by random.

New Google Chrome version fixes 32 bugs

posted onSeptember 20, 2011
by l33tdawg

Google has fixed 32 security vulnerabilities in its popular Chrome Web browser and in process released a shiny, updated version of Chrome.

Chrome version 14 was rolled out on Sept. 16, and updated to address security flaws in the previous version of the browser, which an attacker could use to perform several exploits against users, including spoofing URLs and injecting malicious code on infected systems, Google wrote on its Chrome blog.

Lockdown-evading Chrome Frame exits beta

posted onAugust 31, 2011
by l33tdawg

Google, after working for months on a version of its Chrome Frame that can sidestep PC lockdown constraints, has released the first stable version of the plug-in for Internet Explorer.

Chrome Frame embeds a version of Google's browser into older versions of Microsoft's browser. Chrome Frame shows Web pages using the Chrome engine when Web programmers have set a flag that the software checks for.