TweakTown
Tech content trusted by users in North America and around the world
5,677 Reviews & Articles | 36,080 News Posts
Weekly Giveaway: Fractal Design Arc Cases Contest (Global Entry!)

Chrome in last place for Password Security

Ties with Safari

| Hacking & Security News | Posted: Dec 15, 2008 2:35 pm

Last week Google's Chrome crawled out of Beta Status and into the realm of final software. But is this really a good thing?

 

Prior to its release Chrome can under scrutiny for caching and saving all browsed pages, sending search data to Google and for having very poor security.

 

Now we can add a lack of good password security to the list of issues with Chrome. According to a report from Chapin Information Services Chrome tied with Safari for last place in terms of password security.

 

Read the full report here.

 

Chrome in last place for Password Security

Among the problems are three in particular that, when combined, allow password thieves to take passwords without the user's knowledge.

 

1 - The destination where passwords are sent is not checked.
2 - The location where passwords are requested is not checked.
3 - Invisible form elements can trigger password management.

 

A technique described and demonstrated by CIS two years ago leveraged such vulnerabilities without using client-side scripting. The implication was that an attacker need not have full control over a target server or a victim's computer to obtain a password from their web browser.

 

Related Tags

Further Reading: Read and find more Hacking & Security news at our Hacking & Security news index page.

Do you get our news RSS feed? Get It!

Post a Comment about this news

Latest Tech News Posts

View More News Posts

Latest Downloads

View More Latest Downloads

TweakTown Web Poll

Question: Did EA kill the Battlefield franchise with the terrible BF4 issues?

Yes, Battlefield is doomed

No, Battlefield will live on strong

I'm not sure, but I know EA needs to improve its game

or View the Results

View More Polls

Forum Activity

View More Forum Posts

Press Releases

View More Press Releases
Get TweakTown updates via Facebook!
Just click the "Like" button below