Chrome security problem(?)

Message boards : Number crunching : Chrome security problem(?)
Message board moderation

To post messages, you must log in.

AuthorMessage
David S
Volunteer tester
Avatar

Send message
Joined: 4 Oct 99
Posts: 18352
Credit: 27,761,924
RAC: 12
United States
Message 1762574 - Posted: 5 Feb 2016, 18:23:21 UTC

A few days ago on my prime time surfer (Vista laptop that never goes anywhere, just sits on a computer table in front of the kitchen TV), I visited a page I probably shouldn't. I clicked on something that didn't even look like a link, and Chrome disappeared for a couple of seconds. When it came back, it seemed odd and unresponsive (even for that tired laptop). Also, it would not minimize when I clicked it in the task bar, and nothing else would come up when clicked in the task bar. I closed Chrome... only to discover that I had been seeing a fake, full-screen browser, with the real Chrome still running under it. I closed the tab with the questionable site. Shortly thereafter, in the one tab that was still open, I clicked my link for Seti and it wanted me to login. BUT, it said my connection was not secure. I did not click the login button and closed Chrome.

Then I ran a full scan in MS Security Essentials. It found four things, but said removal failed because there was not enough room on my hard drive. I deleted some stuff and moved some other stuff to the D: drive, then started another full scan. It had a thermal shutdown before it finished. I let it sit for a couple of days. When I finally started it up again, I ran another full scan, which found one thing but still couldn't remove it due to full hard drive.

Feeling I might have been overly paranoid (and forgetting the Seti security problem), I started Chrome and surfed Facebook for a bit. Then I went to Seti and once again got the login page with the security warning.

Any ideas what I should do now? I'm thinking maybe just remove Chrome and install a different browser altogether. (Also, Chrome warned me that it will soon stop getting updated because they won't support Vista any more.)
David
Sitting on my butt while others boldly go,
Waiting for a message from a small furry creature from Alpha Centauri.

ID: 1762574 · Report as offensive
JLDun
Volunteer tester
Avatar

Send message
Joined: 21 Apr 06
Posts: 573
Credit: 196,101
RAC: 0
United States
Message 1762590 - Posted: 5 Feb 2016, 18:43:36 UTC - in response to Message 1762574.  

If you're talking about the "Red Padlock" icon, I've clicked in it and saw a line about "The server didn't supply any Certificate Transparency information", but the second part of that screen says the encryption is good.
ID: 1762590 · Report as offensive
Jeanette
Volunteer tester

Send message
Joined: 25 Apr 15
Posts: 55
Credit: 7,827,469
RAC: 0
Denmark
Message 1762596 - Posted: 5 Feb 2016, 18:53:03 UTC - in response to Message 1762574.  

It sounds to me like you've gotten a virus and secure essentials isn't the anti-virus that has the best detection.
Try to DL Kapersky http://www.kaspersky.com/dk/free-virus-scan or Bitdefender http://www.bitdefender.com/solutions/free.html which both have better results in test, then let them scan the computer.

I've seen the Chrome Warning on an Ubuntu system on an old laptop, so it seems like Chrome is cutting the support on older systems.
ID: 1762596 · Report as offensive
David S
Volunteer tester
Avatar

Send message
Joined: 4 Oct 99
Posts: 18352
Credit: 27,761,924
RAC: 12
United States
Message 1762651 - Posted: 5 Feb 2016, 21:43:48 UTC - in response to Message 1762590.  

If you're talking about the "Red Padlock" icon, I've clicked in it and saw a line about "The server didn't supply any Certificate Transparency information", but the second part of that screen says the encryption is good.

There's a red slash through the "https:" in the address line. I think it says something somewhere about not being secure. If you need more detail, it will have to wait until tomorrow.
David
Sitting on my butt while others boldly go,
Waiting for a message from a small furry creature from Alpha Centauri.

ID: 1762651 · Report as offensive
David S
Volunteer tester
Avatar

Send message
Joined: 4 Oct 99
Posts: 18352
Credit: 27,761,924
RAC: 12
United States
Message 1762654 - Posted: 5 Feb 2016, 21:45:08 UTC - in response to Message 1762596.  

It sounds to me like you've gotten a virus and secure essentials isn't the anti-virus that has the best detection.
Try to DL Kapersky http://www.kaspersky.com/dk/free-virus-scan or Bitdefender http://www.bitdefender.com/solutions/free.html which both have better results in test, then let them scan the computer.

I've seen the Chrome Warning on an Ubuntu system on an old laptop, so it seems like Chrome is cutting the support on older systems.

Is there an AV that can install on a flash drive and run at system startup, perhaps before Windows even starts?
David
Sitting on my butt while others boldly go,
Waiting for a message from a small furry creature from Alpha Centauri.

ID: 1762654 · Report as offensive
Richard Haselgrove Project Donor
Volunteer tester

Send message
Joined: 4 Jul 99
Posts: 14650
Credit: 200,643,578
RAC: 874
United Kingdom
Message 1762673 - Posted: 5 Feb 2016, 23:05:49 UTC - in response to Message 1762651.  

If you're talking about the "Red Padlock" icon, I've clicked in it and saw a line about "The server didn't supply any Certificate Transparency information", but the second part of that screen says the encryption is good.

There's a red slash through the "https:" in the address line. I think it says something somewhere about not being secure. If you need more detail, it will have to wait until tomorrow.

Something like this?



By itself, that wouldn't worry me - just some statements of fact about the site. But your other comments about what happened when you access the other site do suggest that a one-off scan would be good, for peace of mind if nothing else. I'd also suggest running https://www.malwarebytes.org/, if you can squeeze it into the space you have available.
ID: 1762673 · Report as offensive
Jeanette
Volunteer tester

Send message
Joined: 25 Apr 15
Posts: 55
Credit: 7,827,469
RAC: 0
Denmark
Message 1762703 - Posted: 6 Feb 2016, 0:33:45 UTC - in response to Message 1762654.  
Last modified: 6 Feb 2016, 0:34:30 UTC

Is there an AV that can install on a flash drive and run at system startup, perhaps before Windows even starts?


This is an url to the danish page of F-secure:
https://www.f-secure.com/da_DK/web/home_dk/online-scanner

you get online scanning if you click the purple button saying "Kør nu"
(it won't let me get to the US-version)[/url]
ID: 1762703 · Report as offensive
JLDun
Volunteer tester
Avatar

Send message
Joined: 21 Apr 06
Posts: 573
Credit: 196,101
RAC: 0
United States
Message 1762708 - Posted: 6 Feb 2016, 0:59:04 UTC

ID: 1762708 · Report as offensive
Profile Jim_S
Avatar

Send message
Joined: 23 Feb 00
Posts: 4705
Credit: 64,560,357
RAC: 31
United States
Message 1762709 - Posted: 6 Feb 2016, 0:59:23 UTC

I've been running OPERA with no problems...And It's Chrome based.

I Desire Peace and Justice, Jim Scott (Mod-Ret.)
ID: 1762709 · Report as offensive
David S
Volunteer tester
Avatar

Send message
Joined: 4 Oct 99
Posts: 18352
Credit: 27,761,924
RAC: 12
United States
Message 1763471 - Posted: 8 Feb 2016, 16:18:45 UTC - in response to Message 1762708.  

15 Free Bootable Antivirus Tools (PC Support)

Thanks, I'll check that out.
David
Sitting on my butt while others boldly go,
Waiting for a message from a small furry creature from Alpha Centauri.

ID: 1763471 · Report as offensive
David S
Volunteer tester
Avatar

Send message
Joined: 4 Oct 99
Posts: 18352
Credit: 27,761,924
RAC: 12
United States
Message 1763473 - Posted: 8 Feb 2016, 16:24:13 UTC - in response to Message 1762709.  

I've been running OPERA with no problems...And It's Chrome based.

That leads me to a whole separate issue on another computer.

On the laptop I now carry around with me (since my smaller one broke a hinge), I'm using Opera as my browser. Lately, it won't complete downloads. Each one gets to 100%, but it won't say it's finished, and I can't initiate another download without exiting Opera, then using Task Manager to kill its process. Is anyone else seeing this problem? This is on Win7.
David
Sitting on my butt while others boldly go,
Waiting for a message from a small furry creature from Alpha Centauri.

ID: 1763473 · Report as offensive
bluestar

Send message
Joined: 5 Sep 12
Posts: 7031
Credit: 2,084,789
RAC: 3
Message 1763660 - Posted: 9 Feb 2016, 12:56:48 UTC
Last modified: 9 Feb 2016, 13:14:10 UTC

Hi David.

Are you having any problems when accessing certain web-pages here?

Like problems when a page is supposed to be https but perhaps rather should be http instead.

If you try downloading a file from a page which the browser thinks is not secure, the certificate for the page is more likely to blame rather than the file itself.

The general assumption is that any web page on the web being encrypted when being accessed using https does generally hold or is true and therefore, assuming that RSA-2048 should directly be used for such an encryption, therefore ends up being exactly the same.

With so many different security certificates around and being offered, in my opinion the best thing would be to focus all the different certificates currently available being based on RSA-2048 directly.

If doing so, the current situation being experienced would most likely improve quite significantly.
ID: 1763660 · Report as offensive
David S
Volunteer tester
Avatar

Send message
Joined: 4 Oct 99
Posts: 18352
Credit: 27,761,924
RAC: 12
United States
Message 1763667 - Posted: 9 Feb 2016, 14:40:23 UTC

Okay, here's what I see that's worrying me.





Is this in fact a problem, or should I just go ahead and log in anyway? I really don't know how I got logged out on this computer/browser. No other site is appearing to give me a problem.
David
Sitting on my butt while others boldly go,
Waiting for a message from a small furry creature from Alpha Centauri.

ID: 1763667 · Report as offensive
rob smith Crowdfunding Project Donor*Special Project $75 donorSpecial Project $250 donor
Volunteer moderator
Volunteer tester

Send message
Joined: 7 Mar 03
Posts: 22200
Credit: 416,307,556
RAC: 380
United Kingdom
Message 1763669 - Posted: 9 Feb 2016, 15:07:38 UTC

Its all to do with the way that the security certificates for SETI (don't) work.
There was a note floating around somewhere about this, explaining that in the case of SETI it is OK to ignore the warning.
Bob Smith
Member of Seti PIPPS (Pluto is a Planet Protest Society)
Somewhere in the (un)known Universe?
ID: 1763669 · Report as offensive

Message boards : Number crunching : Chrome security problem(?)


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.