Browser Extensions, Chrome 105, and Google's 'Security' Posing (also Openwashing)
-
When extension pages are web-accessible | Almost Secure
And then I proceeded talking about extension pages as if this security mechanism were always in place. But that isn’t the case of course, and extensions will quite often disable it at least partially.
The impact of extension pages being exposed to the web is severe and warrants a thorough discussion in a separate article. So here it comes.
-
Chrome 105 is here for Windows, macOS and Linux
Right on schedule, the next milestone update to the Chrome browser has started rolling out to Windows, macOS, and Linux users. This update is relatively light in the features department but delivers a healthy batch of security updates and patches. Let’s take a look at what’s new in Chrome 105 for Desktop.
-
Google invites bug hunters to scrutinize its open source projects
Google wants to improve the security of its open source projects and those projects’ third-party dependencies by offering rewards for bugs found in them.
“Depending on the severity of the vulnerability and the project’s importance, rewards will range from $100 to $31,337. The larger amounts will also go to unusual or particularly interesting vulnerabilities, so creativity is encouraged,” Googlers Francis Perron and Krzysztof Kotowicz explained.