gHacks technology news » chrome nightly builds http://www.ghacks.net A technology blog covering software, mobile phones, gadgets, security, the Internet and other relevant areas. Mon, 23 Nov 2009 22:22:46 +0000 http://wordpress.org/?v=2.8.6 en hourly 1 Google Chrome Address Spoofing Vulnerability http://www.ghacks.net/2008/10/28/google-chrome-address-spoofing-vulnerability/ http://www.ghacks.net/2008/10/28/google-chrome-address-spoofing-vulnerability/#comments Tue, 28 Oct 2008 10:16:41 +0000 Martin http://www.ghacks.net/?p=7916 Are that many security vulnerabilities of Google Chrome coming to light because it is less secure than other web browsers? Or is it because everyone is putting more effort into discovering vulnerabilities because it is Google’s browser? Whatever it is; No week passes by without the discovery of a new security vulnerability in Google Chrome.

The latest security vulnerability was discovered by researcher Liu Die Yu of the TopsecTianRongXin research lab in Beijing who discovered a way to spoof the address that is shown in the browser’s address bar. His proof of concept demonstration makes use of a button and Javascript. A user pressing the button will see an url change in the browser’s address bar. A look in the source code however reveals that the user is still on the same site and not at the website shown in the address bar.

The flaw could be used to display a PayPal button (or Google Checkout) on a website that would lead to a fake website where the user’s login credentials could be easily fished.

Google will release an end user update soon that will fix the security vulnerability. The only safe thing to do until then is to either switch to Dev Channel builds for the time being that already have a fix included or stop using Google Chrome until the security vulnerability has been patched.

One could think that other browsers based on Webkit are vulnerable as well. This is not the case however according to Liu Die Yu who attributed the security vulnerability to code added by Google developers.

Tags: , , , , ,

Related posts

]]> http://www.ghacks.net/2008/10/28/google-chrome-address-spoofing-vulnerability/feed/ 0 Google Chrome Nightly Builds Downloader http://www.ghacks.net/2008/09/07/google-chrome-nightly-builds-downloader/ http://www.ghacks.net/2008/09/07/google-chrome-nightly-builds-downloader/#comments Sun, 07 Sep 2008 16:44:47 +0000 Martin http://www.ghacks.net/?p=6849 Google is releasing nightly builds of Google Chrome like crazy, up to 10 releases per day is a lot and it is hard to keep up with the releases because the nightly builds come without automatic update functionality.

Donation Coder user Dirhael developed a simple application that checks for new nightly builds of Google Chrome and download them automatically for the user.

The nightly builds checker is a portable application that can be executed from any location. The tool provides two main buttons: The first button checks for the latest nightly build version of Google Chrome on the Google server and the download button downloads that version if the user decides to click the button. The latest version that has been downloaded using the application is listed in the application so that the user can compare the versions before downloading.

nightly build google chrome

The build status is also listed in the application which provides information if the latest build did pass all unit tests. The nightly builds of Google Chrome can be run from the location that they have been unpacked into which means that no installation is required.

Tags: , , , , , ,

Related posts

]]> http://www.ghacks.net/2008/09/07/google-chrome-nightly-builds-downloader/feed/ 8