Tag Archive | "Browser"

Google Chrome, Mozilla Firefox Leaked Facebook User Data Caused by Browser Vulnerability

Google Chrome and Mozilla Firefox might have inadvertently leaked the Facebook usernames, profile pictures and even the likes of their users because of a side-channel vulnerability.

A side-channel vulnerability was discovered in a CSS3 feature dubbed the “mix-blend-mode.” This allowed a hacker to discover the identity of a Facebook account holder using Chrome or Firefox by getting them to visit a specially-designed website.

This critical flaw was discovered in 2017 by security researchers Dario Weißer and Ruslan Habalov and also by independent researcher Max May.

The researchers created a proof-of-concept (POC) exploit to show how the vulnerability could be misused. Weißer and Habalov’s concept showed how they were able to visually harvest data like username, profile picture, and “like” status of a user. What’s more, this insidious hack could be accomplished in the background when the user visits a malicious website.

The visual leak could happen on sites using iFrames that connect to Facebook in via login buttons and social plugins. Due to a security feature called the “same-origin policy,” sites can’t directly access iFrame content. But the researchers were able to get the information by developing an overlay on the cross-origin iFrame in order to work with the underlying pixels.

It took Habalov and Weißer’s POC about 20 seconds to get the username and about five minutes to create a vague copy of the profile picture. The program also took about 500 milliseconds to check the “like” status. Keep in mind, however, that for this vulnerability to work, the user should be logged into their Facebook account.

Habalov and Weißer privately notified both Google and Mozilla and steps were taken to contain the threat. Google was able to fix the flaw on their end when version 63 was released last December. On Firefox’s end, a patch was made available 14 days ago with the release of the browser’s version 60. The delay was due to the researchers’ late disclosure of their findings to Mozilla.

IE and Edge browsers weren’t exposed to the side-channel exploit as they don’t support the needed feature. Safari was also safe from the flaw.

[Featured image via Pixabay]

The post Google Chrome, Mozilla Firefox Leaked Facebook User Data Caused by Browser Vulnerability appeared first on WebProNews.


WebProNews

Posted in IM NewsComments Off

Google’s Chrome browser to drop secure label for all HTTPS sites

In addition, Chrome will mark all HTTP web sites as not secure.
Please visit Search Engine Land for the full article.



Please visit Search Engine Land for the full article.


Search Engine Land: News & Info About SEO, PPC, SEM, Search Engines & Search Marketing

Posted in IM NewsComments Off

Google is extending Search capabilities to iMessage and other browser apps on iOS

New extensions bring the search engine into more apps on iOS.

The post Google is extending Search capabilities to iMessage and other browser apps on iOS appeared first on Search Engine Land.



Please visit Search Engine Land for the full article.


Search Engine Land: News & Info About SEO, PPC, SEM, Search Engines & Search Marketing

Posted in IM NewsComments Off

Mozilla’s Firefox Quantum Aims to Dethrone Google Chrome as Fastest Internet Browser

Google Chrome, the leading U.S. browser at the moment, is about to face some serious competition up ahead. Mozilla just unveiled an improved version of its browser called the Firefox Quantum touted to be drastically faster than its predecessor and offering browsing speeds said to even surpass that of Chrome.

During the late 2000’s, Mozilla Firefox had one of the fastest user growth among Internet browsers according to Forbes. Unfortunately, the browser’s growth lost steam and is now lagging behind rivals Google Chrome and Apple Safari. Chrome is currently leading the pack in the U.S. with a market share of 44.5 percent followed by Safari at 25.4 percent. Firefox, in the meantime, only managed to secure a 7.4 percent share.

Posted in IM NewsComments Off

Microsoft’s Curious Plea to Stay with Their Browser

Browser wars are a touchy subject, especially around the folks from Microsoft who have seen their Internet Explorer dominance be eroded by the likes of Mozilla’s Firefox and the dreaded Google Chrome browser among others.

Internet Explorer 9 is the latest and greatest from Microsoft. They need to promote its existence so earlier this month this ad surfaced on YouTube. I just saw it for the first time and, from a purely marketing perspective, it’s, well, puzzling to say the least.

Being self-deprecating can be an effective technique in modern day advertising. The humorous take on any ad is one proven way to get the attention of your target and the attention needed to get your message across.

In this case, it seems like Microsoft has confused funny with disturbing. Is it a good practice to have your message of “being improved” delivered by someone who is portrayed as someone that no one would want to be around for any reason? Sure you can play the ‘crazy card’for laughs but when you are saying that maybe you have to be nuts to like Internet Explorer 9 (indirectly but it’s there) you should have a sit down with your ad agency.

What’s your take on this ad from Microsoft? It’s Friday so relax a little and take a few minutes to be heard.



Marketing Pilgrim – Internet News and Opinion

Posted in IM NewsComments Off

Google Apps Could Soon Not Work In Your Browser

In a quiet announcement on their Docs blog, Google said they would not be supporting Firefox 3.5, Internet Explorer 7, and Safari 3 or older browsers as of August 1.

They warn “in these older browsers you may have trouble using certain featur…
Search Engine Watch – Latest

Posted in IM NewsComments Off

13 Websites for Search Engine and Browser Market Share Statistics

Knowing which search engines and browsers are popular is vital in allocating resource and budget to campaigns and checking sites function across browsers. But once you move outside of Western markets, the assumptions many campaigns are based on be…
Search Engine Watch – Latest

Posted in IM NewsComments Off


Advert