IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [chrome]

Popular web browser by Google, see chrome.google.com for more information.

506 questions
159
votes
4 answers

What exactly does it mean when Chrome reports 'no certificate transparency information was supplied by the server?'

When visiting Gmail in Chrome, if I click on the lock icon in the address bar and go to the connection tab, I receive a message 'no certificate transparency information was supplied by the server' (before Chrome 45, the message was displayed as 'the…
Andrew
  • 1,806
  • 2
  • 12
  • 9
142
votes
9 answers

How secure is Chrome storing a password?

Whenever I enter a login into a new site, Chrome asks me if it should store the login details. I used to believe this was fairly secure. If someone found my computer unlocked, they could get past the login screen for some website using the stored…
Tony Ruth
  • 1,363
  • 2
  • 7
  • 5
131
votes
9 answers

What stops Google from saving all the information on my computer through Google Chrome?

I noticed that in Google Chrome, if I type in file:///C:/Users/MyUsername/Desktop/ it shows me all of the folders on my Desktop, and I can type open up PDFs and such in chrome just by typing in the file path. What processes and systems are in place…
Pro Q
  • 1,349
  • 2
  • 7
  • 10
94
votes
4 answers

Chrome generated passwords not high entropy?

On Chrome, if you open a sign up page, it will offer to fill and remember the password field. I did this and got the following sequence of passwords offered as…
gngdb
  • 853
  • 1
  • 6
  • 6
82
votes
2 answers

Worst case scenario, what can a Chrome extension do with "Your data on all websites" and "Your tabs and browsing activity"?

Chrome extensions, and just like other browsers, appear to often get quite some extensive access to your browser data. In fact, most extensions I've installed require access to: Your data on all websites Your tabs and browsing activity And this…
please delete me
  • 1,235
  • 2
  • 10
  • 7
77
votes
13 answers

Should I allow browsers to remember my passwords and synchronize them?

I wonder, how wise is it to allow Chrome and Firefox to a) remember the passwords b) synchronize them? My gut tells me that if it's not man in the middle who can intercept them, but Google and Mozilla themselves can see them on their servers or with…
Incerteza
  • 2,177
  • 3
  • 15
  • 22
65
votes
5 answers

Google Chrome "Your connection to website is encrypted with obsolete cryptography"

Google Chrome is showing new information in the certificate section. Is this a big deal? If so how can I fix it on the server end? EDIT: Thanks for the answers but I'm not skilled in cryptography so the only thing I can update with is this…
IMcPwn
  • 813
  • 1
  • 7
  • 9
65
votes
6 answers

Are there objective reasons to not allow Google Chrome extensions, but to allow Firefox extensions?

Recently, the company I work for has forbidden usage of any extensions in Chrome. They also do not allow account sync. This affected virtually all Web developers since they use Chrome to test their front-end code and use an extension or two to…
Alexei
  • 2,183
  • 3
  • 9
  • 23
56
votes
5 answers

IMG tag vulnerability

Is it safe to display images from arbitrary domains? I.e. let's say I have an image on my page: What if image.gif will return some js attack vector, but not the image? Is there any known vectors? I've tried…
Paul Podlipensky
  • 2,837
  • 4
  • 21
  • 25
43
votes
1 answer

Chrome >50: Where can I see the negotiated cipher suite?

This is about Chrome 50 and later. When visiting an https site, where can I find the negotiated cipher suite? I know where to find this info in previous versions of Chrome but I'm not able to find it in versions greater or equal to 50.
HorstKevin
  • 1,328
  • 2
  • 14
  • 27
39
votes
1 answer

Can a browser extension (Chrome, Firefox, etc.) read the web console log?

I realized that my bank handles sensitive information in the web console log, so my concern is if any browser extension could read the log?
Nyan D' Sparkle
  • 509
  • 4
  • 6
34
votes
3 answers

Does "Not Secure" mean HTTP?

I work for a corporation and we are all given a kind of employee login system whose URL goes like this in the image below. (Sorry, I cannot disclose the full URL.) I thought "Not Secure" had something to do with SSL certificates or something like…
C0deDaedalus
  • 728
  • 1
  • 8
  • 17
32
votes
3 answers

Are official browser add-ons really safe?

Almost any browser addon/extension that I install on my Chrome or Firefox (be it Firebug, RESTClient, ...) warns me, saying: It [the add-on] can: Access your data on all website Access your tabs and browsing activity Now, practically speaking, I…
Harry
  • 861
  • 8
  • 12
32
votes
1 answer

"google.com" is not HSTS protected?

Issue: Oftentimes people enter google.com directly in the browser's address bar without including either the http:// or https:// prefixes. Using Chrome DevTools on a fresh incognito session, I ran the following…
el_tigro
  • 694
  • 8
  • 14
32
votes
5 answers

How do I know if a Google Chrome extension is leaking data?

Many Google Chrome extensions require permissions to read the contents of webpages the user visits. How can the user verify whether and to what extent a certain Chrome extension leaks data?
gen
  • 1,660
  • 2
  • 18
  • 18
1
2 3
…
33 34