Google looks to kill man in the middle attacks

Chromium updates will address man in the middle attacks, Google announces.

Chrome

Google Chrome researchers have announced Chromium updates to tackle man in the middle attacks, focusing on "mixed scripting" vulnerabilities.

These vulnerabilities occur when a page served over HTTPS loads a script, CSS or plug-in resource over HTTP.

"A man-in-the-middle attacker (such as someone on the same wireless network) can typically intercept the HTTP resource load and gain full access to the website loading the resource. It's often as bad as if the web page hadn't used HTTPS at all," read a blog post from Chris Evans and Tom Sepez - members of the Google Chrome Security Team.

They announced blocking mixed scripting conditions by default would be trialled in the first Chromium 14 canary release, meaning it could appear in the Google Chrome browser in future releases.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

An infobar showing when a script is being blocked will also be added.

"As a user, you can choose to reload the website without the block applied. Ideally, in the longer term, the infobar will not have the option for the user to bypass it," the Google researchers said.

"Our experience shows that some subset of users will attempt to click through' even the scariest of warnings - despite the hazards that can follow."

Tracking your identity

In another security play, Google introduced a new tool on Wednesday to help users monitor their identity on the internet.

Called Me on the Web,' the feature can be found within Google Dashboard beneath the account details link.

Advertisement - Article continues below

Me on the Web offers recommendations of notifications for mentions of users' names or email addresses in websites and news stories.

"Me on the Web also provides links to resources offering information on how to control what third-party information is posted about you on the web," said Andreas Tuerk, Google product manager, in a blog post.

"These include common tips like reaching out to the webmaster of a site to ask for the content to be taken down, or publishing additional information on your own to help make less relevant websites appear farther down in search results."

Featured Resources

What you need to know about migrating to SAP S/4HANA

Factors to assess how and when to begin migration

Download now

Your enterprise cloud solutions guide

Infrastructure designed to meet your company's IT needs for next-generation cloud applications

Download now

Testing for compliance just became easier

How you can use technology to ensure compliance in your organisation

Download now

Best practices for implementing security awareness training

How to develop a security awareness programme that will actually change behaviour

Download now
Advertisement

Recommended

Visit/cloud/cloud-computing/354479/google-adds-partners-to-real-time-translation-tools
cloud computing

Google adds partners to real-time translation tools

8 Jan 2020
Visit/hardware/354336/the-it-pro-products-of-the-year-2019-all-the-years-best-hardware
Hardware

The IT Pro Products of the Year 2019: All the year’s best hardware

24 Dec 2019
Visit/marketing-comms/search-engine-optimization-seo/354339/google-is-getting-worse-as-it-does-more
search engine optimization (SEO)

Google is getting worse as it does more

21 Dec 2019
Visit/security/internet-security/354417/avast-and-avg-extensions-pulled-from-chrome
internet security

Avast and AVG extensions pulled from Chrome

19 Dec 2019

Most Popular

Visit/policy-legislation/data-governance/354496/brexit-security-talks-under-threat-after-uk-accused-of
data governance

Brexit security talks under threat after UK accused of illegally copying Schengen data

10 Jan 2020
Visit/security/cyber-security/354468/if-not-passwords-then-what
cyber security

If not passwords then what?

8 Jan 2020
Visit/policy-legislation/31772/gdpr-and-brexit-how-will-one-affect-the-other
Policy & legislation

GDPR and Brexit: How will one affect the other?

9 Jan 2020
Visit/web-browser/30394/what-is-http-error-503-and-how-do-you-fix-it
web browser

What is HTTP error 503 and how do you fix it?

7 Jan 2020