Google Alert 1.7 Password: Already an update following a bypass

We announced the release of Google Password Alert few days ago, an anti-phishing tool offered by Google as Chrome extension. But here, all versions have been stolen by security researchers (1.0, 1.4, 1.6). The 1.7 should arrive soon.



It is panic in Google! His new Password Alert extension has been the target of several hackers in recent days, and underwent extensive bypass less than 24 hours after its release. In summary, with some feat JavaScript lines, several security researchers have managed to circumvent the protection of the extension, not once, but more than 3 times, after each update to Google!

For more technical details, you can check it out here.

Currently, faced with the wave of discovered vulnerabilities, Google has simply removed the alert function for passwords, as can be seen currently on GitHub. It should be doc version 1.7, which will probably soon replace the currently distributed over 1.6 Chrome Store.

Big challenge for Google, which still seems to abandon one of the main features offered by the new security extension ... So far, over 70,000 Chrome users have already downloaded and installed the extension and lead them to Google upgrade to version 1.7 as soon as possible, the latter deactivating the alert function. To be continued!

Previous
Next Post »