Google Chrome

[groo]

I just downloaded Google's "Chrome" browser, and am busy surfing through my list of websites to see if they display properly. So far it's been a good experience on a P4 with 2G DDR2 under XP SP3.

[tumbleweed]

Hey , I just installed sp3 on my xp home edition and chrome too. I like chrome so far, it is very streamlined and so far seems to be robust and flexible like firefox. my initial impression is this will be a keeper, what ya think groo?

[groo]

Well Chrome worked properly with all the websites I normally visit in a day. But it doesn't have AdBlock Plus. :)

[lriv]

Google Chrome Hit With Another Security Bug

--------------------------------------------------------------------------------

Less than a week after the release of Google (NSDQ:GOOG)'s new Web browser Chrome, security researchers detected a buffer overflow vulnerability that could enable remote attackers to completely take control of a user's computer.
The detected buffer overflow vulnerability, deemed critical by security experts, is the result of a boundary error in the handling of the "Save As" function. If a user saves a Web page serving malicious content, the program could cause a stack-based overflow error, which could open the door for remote hackers to unleash malicious code on a user's machine.

Remote attackers could then exploit the flaw by constructing a specially crafted Web page infused with malicious code. The attacker could then entice a victim to open and then save the infected page, which would subsequently malicious code onto the victim's computer and give the attacker complete access to the affected system.

Chrome's latest buffer overflow vulnerability is one of about half a dozen errors detected in the newly released beta Web browser, about half of which allow for remote code execution, experts say. Another vulnerability, discovered shortly after the browser's release Tuesday, included a carpetbombing glitch that stemmed from a fundamental flaw in the underlying user agent Safari 3.1.

However experts say that several Chrome beta version flaws are anticipated and will likely be worked out with the final version as the browser is subsequently tested.

"I think for a new product like Chrome, it doesn't concern me much that they're discovering the number of vulnerabilities and the details are getting out there. That's the point of beta, especially open source beta," said John Bambenek, handler for the SANS Internet Storm Center. "I think that the people who are really into getting exploits on a number of machines are not interested in messing with Chrome until (Google) gets some distribution out there."

"If it's not public information, the hackers don't have it either," he added.

And despite some errors that could lead to remote exploitation, experts say that because the browser is still in beta and not yet widely adopted, security threats for most users for the time being remains small.

"I don't think the consumer impact is very large yet," said Bambenek, "but that could change very quickly."

[dankgirl2]

Beta,,,,,,,,,,,,,
Everyone puts out a beta first to workout the bugs, (except Microsoft) they just put out their stuff and make the users suffer.

I love the new chrome, pictures pop much faster and web sites open faster.
jm2c
hugs
dg2

[smokinbasser]

Be aware Google records your searches with your ID and will turn over all information to the LEO without so much as a whimper. No matter how great chrome is I'll pass on it thank you. If you doubt this happens do a search 1st

[aendrew]

@smokinbasser:

You know, I never thought of this before. Part of Google Chrome's main interface is a massive internal version of the Google personalized start page that incorporates your browsing history and a bunch of other stuff. This is all server-side, I'm assuming. That means that Google knows where you surf.

Like, apparently it has a privacy mode that doesn't keep a history, but then you're still trusting Google.

I've been wanting a Mac beta, but now I'm not so sure...

[netbuddy]

I hate to "P" on peoples bonfire but if your going to trust Google then you need your head searching. Like Microsoft, Google has a history of "Anti-trust" cases against them and namely in the area of privacy.

People running google products need to be aware that Google have a track record and anti-trust cases brought against them.

I recently had to see my bank manager because they had decided to start using google products in the HTTPS: banking server. After my visit & complaint and highlighting issues with google... it vanished from the secure server.

Simply put google have no regard for your personal data or privacy and like a leopards spots that do not change, google have not changed, all they have done is become more covert in their intelligence gathering by issuing products that are masquerading as helpful and useful software.

Stay sharp & be wise.

[smokinbasser]

For several years now I have been using a site called scroogle scraper.com and you type your search terms in and it goes to google but without your addy just scroogle s and all info is deleted when you close scroogle.

[grinkeeper]

you know I also have not really thought about my security while browsing med MJ sites..seeing the people posting in this thread have much more advanced knowledge of this subject I do have a couple questions..

SHOULD I BE WORRIED ABOUT USING GOOGLE SEARCH ENGINE,LOGGING MY SEARCHED AND IP?

WHAT ABOUT IMAGES ON THINGS LIKE PHOTOBUCKET AND SIMILAR SITES, IS THIS A ISSUE I NEED TO BE VERY CONCERNED OVER?

DO I NEEED TO GO THROUGH A PROXY WHEN I LOG INTO MY MJ FORUMS AND SITES OF THIS NATURE ?

IS T.Y. SECURE TO BE POSTING PICTURES ON?

AFTER SEEING A FEW EXCELLENT SITES GO DOWN SUCH AS OVERGROW.COM, DOES LEO USE THE INFO TO FIND POTENTIAL BUSTS...

---------------------------------

YOU JUST GOT ME REALLY THINKING ABOUT THE WHOLE SECURITY ISSUE , HOPE YOU CAN POST A LITTLE INFO ON THE SUBJECT FOR US...

[netbuddy]

@grinkeeper,

Your IP address will always be logged, theirs no actual way you can hide it, even the best hacks in the world can be eventually found. Without your IP address you couldn't connect to the internet. The issue is running google products, stuff you download and install like google earth and desktop, etc.

I use google search engine myself for all searches I just do not use any software that they produce.

[grinkeeper]

what about a google search bar in my firefox?

[Kalidi]

Im ignorant to this whole thing. How are people getting in trouble with using google? Are people getting arrested thru g? I would understand some concerns with youth and scams but If a doctor does a search for MMJ could this lead to said doc having problems. I am thinking there are a million people using g. How or what do they look for to report a user. Or is this sorta port for police to get your computer tag up with google and they have you searching for MMJ or something else illegal.

Thanks for any info. Just curious.

Peace

[smokinbasser]

that is scroogle scraper .org sorry

[netbuddy]

what about a google search bar in my firefox?

FireFox... if you click the pointy down arrow next to the "G" for google, you can change this to yahoo or any other search engine of your choice.

That is not a helper bar like the intalled ones like 'Comet Cursor' which is supposed to be non intrusive, etc BUT it is well know for snooping and plenty of issues have been raised over privacy with this tool bar helper installed on the target browser. Comet Cursor helper bar which also goes under the guise of allowing the user to choose what ever cursor type you want. Fact is that it track sites and clicks and has been a suspect in the passing of personal information back to its servers.

If you look at the vendor of the add on, if it is a well known company like AVG or ZoneAlarm then yes, you should be ok because these people are in the business of protecting your PC whilst others are not.

BE VERY AWARE of installing so called anti-spyware broswer add ons, these are very often the opposite and in the case of comet cursor, once installed you can not remove it. Some browser add-ons require you to call obscure premium rate numbers to obtain a de-install code!!!! If you typed in the following "comet cursor privacy" to your search bar and took a look, you will soon see what I mean.

Anyway, FireFox search bar is not connected to google, it just allows you to put into the search box what your looking for without having to roll up to the google search window as that presents your search to the google server which is safer than loading the google search page and loading background scripts & other embedded objects / code.

If Google continues to gobble up the internet to the point it becomes the intergoole... I will retire from using the internet. That is just how much I trust them.

[netbuddy]

Im ignorant to this whole thing. How are people getting in trouble with using google? Are people getting arrested thru g? I would understand some concerns with youth and scams but If a doctor does a search for MMJ could this lead to said doc having problems. I am thinking there are a million people using g. How or what do they look for to report a user. Or is this sorta port for police to get your computer tag up with google and they have you searching for MMJ or something else illegal.

Thanks for any info. Just curious.

Peace

Such is the power of the technology that runs the internet, your ISP can in real time filter all its users and it will know what type of traffic is being sent and received, eg if its pictures, films or programs and who your connected to. They know this because your connected to them.

Google uses the same raw power to provide its service to the public and with the use of powerful expressions (regular expressions) pin point data its interested in.

Here: http://www.ethicalhacker.net/content/view/41/2/ is a link to a website that can give you all the information you need to begin using google to help you redefine your search methods and get at the data you want.

I use google like it was a peer to peer download client, you would no believe just how much junk is viewable on the internet despite people never indexing it in a web site. That is why I say "Google Sees ALL!"

Happy Hacking.