The Register® — Biting the hand that feeds IT

Feeds

Carpetbomb bug tarnishes Google Chrome

Shiny new vulnerabilities winkled out already

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

Google Chrome isn't officially out yet, but security researchers have already picked the browser apart to discover a security vulnerability.

The WebKit engine used inside Chrome leaves it vulnerable to the infamous Safari carpetbombing flaw, security researcher Aviv Raff warns. The flaw stems from a combination of a vulnerability in Apple Safari WebKit and a Java security bug, security blogger Ryan Naraine reports.

As a result Windows users of the beta software might be tricked into downloading malicious files onto their desktop. Raff has published a harmless proof-of-concept exploit in order to illustrate his concerns.

Apple patched the vulnerability with Safari v3.1.2, but the underlying software behind Chrome is based on older code, hence the vulnerability.

Security watchers warn further vulnerabilities are bound to arise. Against this many are praising the speed and built-in security features of the browser. Chrome features built-in sandboxing for each tab, anti-phishing technology and a privacy (ie smut-surfing) mode. ®

Agentless Backup is Not a Myth

Re: Why would Google push their own browser?

Actually, the answer is much simpler that. Since Google is dependent on Microsoft, Mozilla, Opera and the like for the means to push their ads, it only makes sense for them to eliminate the middle man as much as possible. They have likely incorporated lots of code for ad-serving that won't be bypassed by helpful plugins like Adblock.

If the answer doesn't have something to do with world domination, then we're not talking about Google.

No reason to use the Google-approved browser when we already have good choices. I've been using Firefox since the early Mozilla betas and certainly haven't been disappointed in a long time. I don't really care about how well it renders some really screwed up smiley face test either, but I do want to block ads as I see fit and the addons like LiveHTTPHeaders and features like the Password Manager make the browser a better user experience than I can get with any of the others.

1
0

All left

Looking at my website in Chrome, I find that everything now hugs the left margin even though the code says to centre it all. It simply can't interpret layout code.

This is a really basic flaw. I know its a Beta but this is a Bad Beta.

0
0

Re:not such a big problem

The minimal option has also a minimal control about cookies.

'Restrict how third parties cookie can be used" - what is that? seems to still accept all of them.

Now, I set my default search to scroogle (url http://www.scroogle.org/cgi-bin/nbbw.cgi?Gw=%s) only browse sites in my LAN and still the infamous google ID cookie appears every time you start the browser. It does not matter if you delete it , it comes back after while.

0
0

More from The Register

 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?
 breaking news
'BadNews is malware' says outfit that found it
Google says code harmless but Lookout says code base is evolving
Panda-peddlers cuffed for chess gambling gambit
More porridge on the menu for Chinese coders after second offence
 breaking news
Yes, maybe we should keep hackers in the clink for YEARS, mulls EU
Watch out black hats, they just might throw away the key
Microsoft borks botnet takedown in Citadel snafu
Stupid Redmond kicked over our honeypots, wail white hats