Search results for 'app:weblogs' matching tags 'chrome' and 'Security'

Security agencies rally against Google Chrome

Anonymous — Fri, 12 Sep 2008 05:00:00 GMT

http://www.myitforum.com/absolutenm/templates/IndustryNews.aspx?articleid=5658&zoneid=71

Google updates beta browser

Anonymous — Tue, 09 Sep 2008 05:00:00 GMT

Chrome gets an update to fix the Google developers’ security oversights…

http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html

In the post they iterate how important it is that you keep their updater program on your computer. Unfortunately, they don’t mention that you can only get rid of the updater program manually.

“Automatic updates are a key security feature in helping to ensure the safety of Google Chrome users.”

Actually, I think uninstalling is probably the best security measure at this point. Don’t run this browser on a production computer. Of course, we all know that about beta products right? I mean, you’re not running the Gmail beta (or any other Google beta) on your production computer, are you?

More goodness…Chrome installs outside of the Vista protected zone

Anonymous — Fri, 05 Sep 2008 05:00:00 GMT

Google Chrome plays outside of Vista Security Zones

Chrome keeps track of your finances

Anonymous — Fri, 05 Sep 2008 05:00:00 GMT

With a few utterly simple keywords like balance, account and Sept., everything from balance information, account numbers and even how much you spent at Costco can be pulled up.

http://www.myitforum.com/absolutenm/templates/IndustryNews.aspx?articleid=5599&zoneid=71

Google Chrome Crashes with All Tabs

Anonymous — Wed, 03 Sep 2008 05:00:00 GMT

Software:

Google Chrome Browser 0.2.149.27

Tested:

Windows XP Professional SP3

Result:

Google Chrome Crashes with All Tabs

Problem:

An issue exists in how chrome behaves with undefined-handlers in chrome.dll version

0.2.149.27. A crash can result without user interaction. When a user is made to visit

a malicious link, which has an undefined handler followed by a 'special' character,

the chrome crashes with a Google Chrome message window "Whoa! Google Chrome has crashed.

Restart now?". It lies in dealing with the POP EBP instruction when pointed out by the

EIP register at 0x01002FF4.

Proof of Concept:

http://evilfingers.com/advisory/google_chrome_poc.php