- WhiteHat Security hacks into Chrome OS, exposes extension vulnerability at Black Hat
It’s been a rough Black Hat conference for Google. First, FusionX used the company’s homepage to pry into a host of SCADA systems, and now, a pair of experts have discovered a way to hack into Chrome OS. According to WhiteHat security researchers Matt Johansen and Kyle Osborn, one major issue is Google’s vet-free app approval process, which leaves its Chrome Web Store susceptible to malicious extensions. But there are also vulnerabilities within native extensions, like ScratchPad — a note-taking extension that stores data in Google Docs. Using a cross-site scripting injection, Johansen and Osborn were able to steal a user’s contacts and cookies, which could give hackers access to other accounts, including Gmail. Big G quickly patched the hole after WhiteHat uncovered it earlier this year, but researchers told Black Hat’s attendees that they’ve discovered similar vulnerabilities in other extensions, as well. In a statement, a Google spokesperson said, “This conversation is about the Web, not Chrome OS. Chromebooks raise security protections on computing hardware to new levels.” The company went on to say that its laptops can ward off attacks better than most, thanks to “a carefully designed extensions model and the advanced security available through Chrome that many users and experts have embraced.”
WhiteHat Security hacks into Chrome OS, exposes extension vulnerability at Black Hat originally appeared on Engadget on Sat, 06 Aug 2011 17:07:00 EDT. Please see our terms for use of feeds.
Permalink |
CNET | Email this | Comments
- Skype 5.5 uses VP8 for video chats, keeps the WebM love aflame
Despite forming a coalition with a bevy of companies, Google’s radical WebM video libertarianism has yet to take the world by storm — unless you’re talking El Goog’s browser or YouTube. Well, Mountain View can breathe a sigh of relief, as Skype — even after being bought by Microsoft — has carried through with its earlier support of the open-source standard, bundling it within last week’s Windows-only update. One-to-one and group video calls between version 5.5 clients now use WebM’s VP8 codec, succeeding its ancestor, On2’s VP7. Hey Redmond, who’s speaking Esperanto now?
Skype 5.5 uses VP8 for video chats, keeps the WebM love aflame originally appeared on Engadget on Sat, 06 Aug 2011 16:09:00 EDT. Please see our terms for use of feeds.
- Sony’s PlayStation Vita goes up for pre-order at Best Buy Canada
It’s been a long time coming, but it’s finally here — or at least its pre-order page is. Sony’s hotly anticipated PlayStation Vita has been on our minds since January, and now it’s making its Canadian
North Americanpre-order debut via Best Buy Canada. The product pages for both the WiFi-only and 3G editions list a release date of March 30th — which lines up with previous reports that the console won’t be gracing your stocking this Christmas — but we’d take that estimate with a heaping fistful of salt. If you’re itching to throw down some Canadian dollars, however, feel free to hop on over to the source to secure yours now.[Thanks, Silverfox]
Sony’s PlayStation Vita goes up for pre-order at Best Buy Canada originally appeared on Engadget on Sat, 06 Aug 2011 15:02:00 EDT. Please see our terms for use of feeds.
Permalink |
Best Buy Canada (1), (2) | Email this | Comments
Unlimited Mobile Cell Phone News and Reviews
Comments are closed.