Posts Tagged ‘chrome’

Full LastPass 4.1.42 Exploit Discovered

Tuesday, March 21st, 2017

Password managers must make an incredibly tempting target for hackers. Heads up, LastPass users!

Tavis Ormandy, a prolific member of Google’s Project Zero initiative, revealed that he discovered a new security issue in LastPass 4.1.42 (and maybe earlier). Ormandy revealed that he discovered an exploit, but did not reveal it. Project Zero discoveries are reported to the companies who produce the affected products. The companies have 90 days to react, usually by creating a new product version that they make available publicly to all customers.

(more…)

Pwn2Own 2017: Windows, Ubuntu, Edge, Safari and Firefox Exploited

Friday, March 17th, 2017

The good news is that Chrome managed to resist hacking (this time.)

The tenth anniversary of the Pwn2Own gathering of hackers, Pwn2Own 2017, saw eleven teams attempt to exploit products across four categories. The products that teams were allowed to target this year included operating systems and web browsers, but also the new product categories Enterprise applications and server-side. Programs like Adobe Reader, and Apache Web Server, were added as targets by the Pwn2Own committee.

(more…)

Chrome – The “HoeflerText Font wasn’t Found” Scam

Friday, February 24th, 2017

Here’s a clever new scam that disguises itself as a font error.

It is interesting from a purely scientific angle how attackers come up with new methods and schemes to distribute malicious payloads on to user systems. The “HoeflerText” font wasn’t found is a recent attack that changes website text so that it looks as if a font is missing, to get users to download and install an alleged update for Chrome that adds the font to the system.

(more…)

How to Force Flash Updates in Chrome

Thursday, February 23rd, 2017

Even though Flash is quickly falling out of favor with many users, there are still plenty of folks who rely on Flash. Since Chrome is sometimes a bit slow about pushing Flash updates, security conscious Flash users might want to be a bit more proactive about updates.

The following guide walks you through the steps of checking the installed Flash version in Google Chrome, and forcing it to update if an outdated version is used by the browser. All versions of the Google Chrome web browser ship with Adobe Flash installed natively in the browser. While Chrome does not support classic NPAPI plugins anymore, Chrome is still supporting PPAPI plugins of which Flash is one.

(more…)

Microsoft Publishes Long-Awaited February 2017 Flash Update KB4010250

Wednesday, February 22nd, 2017

Better late than never, I guess …

Microsoft announced last week that it would not release security patches on February’s Patch Day. In fact, the February Patch Day was canceled completely by the company; a first in the Patch Day’s history. Microsoft revealed that it would delay the February Patch Day to the March Patch Day. This means that the February 2017 security patches will be released alongside the March 2017 patches by the company. This would not be a problem where it not for known unpatched security issues. A SMB security issue was revealed on February 3rd, 2017 that affects Windows 8, Windows 10 and Windows Server.

(more…)

How to Display Certificate Details in Chrome

Friday, February 10th, 2017

It bugs me to no end when software companies do this. When they move familiar tools and services to a hard-to-find location, it always feels like somebody broke into my office overnight and rearranged my desk, just for the heck of it.

Google is on a roll. After removing user control over some plugins installed in the browser, the company moved information about security certificates of sites to a place where most users may never find it. More and more sites on the Internet move to https. Doing so has advantages, but there is also a considerable amount of pressure by browser makers and search engines to get sites to migrate. Google is on the forefront of all of this. It may come as a surprise therefore that the company made the decision to move certificate information from the address bar to the browser’s Developer Tools.

(more…)

Google Wants You to Use an Up to Date Version of Chrome

Thursday, February 2nd, 2017

If you’re using Chrome 53 or an earlier version, get ready to be pressured to upgrade.

Google, just like Microsoft and probably any other company on the planet that produces software, wants you to use the most recent version of their products and not older versions. The company tries to keep Google Chrome users current through various means, but most importantly updating services that will check for and download Chrome updates automatically whenever discovered. Google announced yesterday that it plans to tighten the screws just a little bit for users on older versions of Chrome.

(more…)

Page Not Found? Load Archived Copies with Wayback Machine for Chrome

Tuesday, January 31st, 2017

The Wayback Machine isn’t just a very useful website, now it’s also a Chrome extension.

Wayback Machine is a new browser extension for Google Chrome that detects page error codes to suggest to access archived copies of the page. There is a saying that the Internet won’t forget a thing, and that it is difficult to impossible to remove content from the Internet completely. While that is the case, it is no rare occurrence that Internet users encounter deleted, redirected or temporarily unavailable pages or entire sites.

(more…)

Chrome to Throttle Expensive Background Pages

Friday, January 27th, 2017

Although this sounds like a good idea in many ways, the possibility of impacting notification services and messengers does seem like a serious drawback.

Google plans to roll out a change in Chrome Stable soon that will have the browser throttle timers in background tabs to improve battery life and browsing performance. The motivation behind the chance is that some pages consume a lot of CPU when they are in the background. Google mentions JavaScript advertisements and analytics scripts explicitly but it is not limited to that.
The core idea is to limit the processing power that background tabs get in Chrome once the feature lands.

(more…)

Chrome Annoyance – New Tabs No Longer Added to Tab Bar

Wednesday, January 18th, 2017

If you’re in the habit of keeping a lot of tabs open in Chrome, you’ve probably noticed this too. Fortunately, there are a number of extensions that can correct this issue …

If you have a medium number of tabs open in a Google Chrome window, you may experience that new tabs that you open in the browser are not shown at all anymore in the interface. One big annoyance of Google Chrome is the browser’s tab display behavior in my opinion. Chrome reduces the size of tabs as you open more just like any other browser, but instead of enabling scrolling when tabs cannot be minimized anymore, the browser simply stops showing those new tabs in its interface.

(more…)