Forums Search Login Register
New Posts Todays Posts Find Users Posts Unanswered Threads Help Mark Forums as Read

Thread Options  Subscribe to this thread Subscribed Users  Add Reply 
Posts: 2,786
Researchers Find Chrome OS Vulnerability

/u94712/chrome_os.jpg" alt="chrome" width="228" height="228" style="float: right;" />With the Black Hat security conference going on right now, it’s the season for new hacks. Although, we didn’t really expect Google’s cloud-based Chrome OS to be a star this year. Google highlighted the increased security of Chrome OS when it was announced, but a team of security researchers has managed to use web tools to gain access to user data.

Matt Johanson and Kyle Osborn spent a few months looking at Chrome OS, eventually finding a flaw in the ScratchPad extension included on ever ChromeBook. ScratchPad is used to take notes and save them to the cloud. The exploit allows the hacker to access a user’s cloud data like Gmail, contacts, Docs, and Google Voice messages. Google has been working on improving security in Chrome extensions, so hopefully this type of attack won’t be repeated.

Johanson and Osborn demoed the hack live on stage. Despite the gasps of the assembled crowd, many researchers are not surprised. They worry that the use of techniques like XSS and clickjacking will result in more exploits in Chrome OS. Do you think the lack of a real on-disc operating system will make Chrome users more secure, or is this just the beginning?

08-04-2011, 06:53 PM
Subscribe to this thread Subscribed Users  Add Reply 

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Chrome OS Update Adds Google Now to App Launcher wjeremiahnicholscc 0 275 04-20-2015 04:33 AM
Last Post: wjeremiahnicholscc
  Chromebit HDMI Dongle Turns Your Display into a Chrome Device AvyeC1990 0 189 03-31-2015 04:09 PM
Last Post: AvyeC1990
  Chrome 42 Beta Includes Push Notifications itsmeamandaneode 0 188 03-16-2015 08:30 AM
Last Post: itsmeamandaneode
  Security Researcher Warns of Vulnerability Affecting Several Netgear Routers joaltun85 0 209 02-16-2015 12:49 PM
Last Post: joaltun85
  Researchers Warn of Zero Day Vulnerability in Internet Explorer 11 vbasilshawh 0 213 02-06-2015 02:58 PM
Last Post: vbasilshawh
  Microsoft Calls Out Google for Disclosing Unpatched Windows 8.1 Vulnerability danastacrrzynnt 0 189 01-12-2015 01:35 PM
Last Post: danastacrrzynnt
  Google Posts Unpatched Windows 8.1 Vulnerability After Disclosure Deadline Dogg the Booty Hunter 0 180 01-02-2015 04:09 PM
Last Post: Dogg the Booty Hunter
  Are Chrome and Android About to Merge? nandymorenoi 0 133 10-20-2014 08:24 AM
Last Post: nandymorenoi
  Security Researchers Release BadUSB Attack Code Hill3530 0 225 10-06-2014 09:19 AM
Last Post: Hill3530
  ARChron Hack Brings Android Apps to Chrome for Linux, OS X and Windows ftishabergers 0 166 09-22-2014 05:53 AM
Last Post: ftishabergers

Forum Jump:

User(s) browsing this thread: 1 Guest(s)

Contact Us Privacy Policy Top RSS
Forum Software By: MyBB, © 2002-2018