Google Chrome

[Angry Dan]

If anyone has installed this I would urge to read the following and then uninstall it:

Google Chrome vulnerable to carpet-bombing flaw

Google’s shiny new Web browser is vulnerable to a carpet-bombing vulnerability that could expose Windows users to malicious hacker attacks.

Just hours after the release of Google Chrome, researcher Aviv Raff discovered that he could combine two vulnerabilities — a flaw in Apple Safari (WebKit) and a Java bug discussed at this year’s Black Hat conference — to trick users into launching executables direct from the new browser.

Raff has cooked up a harmless demo of the attack in action, showing how a Google Chrome users can be lured into downloading and launching a JAR (Java Archive) file that gets executed without warning.

In the proof-of-concept, Raff’s code shows how a malicious hacker can use a clever social engineering lure — it requires two mouse clicks — to plant malware on Windows desktops.

The Google Chrome user-agent shows that Chrome is actually WebKit 525.13 (Safari 3.1), which is an outdated/vulnerable version of that browser.

[color]Apple patched the carpet-bombing issue with Safari v3.1.2.

Some Google Chrome early adopters using Windows Vista are reporting that files downloaded from the Internet are automatically dropped on the desktop, setting up a scenario where a combo-attack using this unpatched IE flaw could be used in attacks.[/color]

[O2 Steve]

well if you will use Beta software

[Tom]

Dan aint got a clue what your talking about ! but you are the expert, Ive just uninstalled it, I will take your word for it. I only installed it last night,

Cheers for the advice

[Shoka]

Windows only, can't run it if I wanted too.

Harry

[Angry Dan]

I am just looking into setting up all my home PCs as virtual machines, having messed about with them at work a bit they seem to be the way forward in terms of virus protection and sytem reliability. (This includes all you Unix, Linux users who mistakenly think you are imune from the treats PM me your IP address and I will show you)

When I am happy/convinced that there is a free version available that offers the same benifits I will create a presentation/guide of how to set up and post it here for those people interested.


I will check it out and if as I suspect

[Stix]

Nice one Dan... This flaw is being kept awfully quiet for now by Google!

[jb2cool]

and this is worse than IE in what way?

All browsers have flaws, they just have not been found yet.

[O2 Steve]

Cynical hat goes on...

The guys at Redmond learn of yet another new browser, this time from Google who are also making moves on the web app market - just like they want to. So "undisclosed senior executive" picks up the phone and dials the R&D team ordering them to pull holes in the beta and then leak the flaws....

hmmm maybe