Google looks to kill man in the middle attacks

Chromium updates will address man in the middle attacks, Google announces.

Chrome

Google Chrome researchers have announced Chromium updates to tackle man in the middle attacks, focusing on "mixed scripting" vulnerabilities.

These vulnerabilities occur when a page served over HTTPS loads a script, CSS or plug-in resource over HTTP.

"A man-in-the-middle attacker (such as someone on the same wireless network) can typically intercept the HTTP resource load and gain full access to the website loading the resource. It's often as bad as if the web page hadn't used HTTPS at all," read a blog post from Chris Evans and Tom Sepez - members of the Google Chrome Security Team.

Advertisement - Article continues below

They announced blocking mixed scripting conditions by default would be trialled in the first Chromium 14 canary release, meaning it could appear in the Google Chrome browser in future releases.

An infobar showing when a script is being blocked will also be added.

"As a user, you can choose to reload the website without the block applied. Ideally, in the longer term, the infobar will not have the option for the user to bypass it," the Google researchers said.

"Our experience shows that some subset of users will attempt to click through' even the scariest of warnings - despite the hazards that can follow."

Advertisement
Advertisement - Article continues below

Tracking your identity

In another security play, Google introduced a new tool on Wednesday to help users monitor their identity on the internet.

Called Me on the Web,' the feature can be found within Google Dashboard beneath the account details link.

Me on the Web offers recommendations of notifications for mentions of users' names or email addresses in websites and news stories.

Advertisement - Article continues below

"Me on the Web also provides links to resources offering information on how to control what third-party information is posted about you on the web," said Andreas Tuerk, Google product manager, in a blog post.

"These include common tips like reaching out to the webmaster of a site to ask for the content to be taken down, or publishing additional information on your own to help make less relevant websites appear farther down in search results."

Featured Resources

The case for a marketing content hub

Transform your digital marketing to deliver customer expectations

Download now

Fast, flexible and compliant e-signatures for global businesses

Be at the forefront of digital transformation with electronic signatures

Download now

Why CEOS should care about the move to SAP S/4HANA

And how they can accelerate business value

Download now

IT faces new security challenges in the wake of COVID-19

Beat the crisis by learning how to secure your network

Download now
Advertisement

Recommended

Visit/mobile/google-android/355770/google-maps-celebrates-global-accessibility-awareness-day-with
Google Android

Google Maps celebrates Global Accessibility Awareness Day with Accessible Places

22 May 2020
Visit/business/policy-legislation/355687/justice-department-likely-bringing-an-antitrust-lawsuit-against
Policy & legislation

Justice Department likely bringing an antitrust lawsuit against Google

18 May 2020
Visit/hardware/laptops/355059/google-pixelbook-go-review-have-a-go-hero
Laptops

Google Pixelbook Go review: Have-a-go hero

18 May 2020
Visit/mobile/mobile-phones/355656/googles-pixel-team-shaken-up-after-disappointing-pixel-4-launch
Mobile Phones

Google’s Pixel team shaken up after disappointing Pixel 4 launch

14 May 2020

Most Popular

Visit/mobile/5g/355712/nokia-5g-speed-record
5G

Nokia breaks 5G record with speeds nearing 5Gbps

20 May 2020
Visit/cloud/cloud-computing/355742/microsoft-launches-public-cloud-service-for-health-care
cloud computing

Microsoft launches public cloud service for health care

21 May 2020
Visit/software/video-conferencing/355596/house-of-commons-to-ditch-zoom
video conferencing

House of Commons to ditch Zoom in favour of British alternative

11 May 2020