OSNews:

OSNews: http://www.osnews.com/story/23119/MalaRIA_-_I_m_in_your_browser_surfin_your_webs Exploring the Future of Computing en-us Copyright 2001-2013, David Adams adam+nospam@osnews.com Sat, 18 May 2013 15:30:55 GMT http://www.osnews.com/images/osnews.gif OSNews.com http://www.osnews.com is Chrome vulnerable? http://www.osnews.com/thread?417516 http://www.osnews.com/thread?417516 Is Google Chrome vulnerable, given it takes additional security measures - sandboxing, code sniffing,lowered security token, prevention of file uploading without explicit user selection, etc. Wed, 07 Apr 2010 10:00:00 GMT donotreply@osnews.com (project_2501) Comments RE: is Chrome vulnerable? http://www.osnews.com/thread?417517 http://www.osnews.com/thread?417517 Basically, Yes. This attack can take place using any reasonable browser.

The vulnerability is not Chrome's. It's a server which is configured insecurely that facilitates it.Edited 2010-04-07 10:10 UTC Wed, 07 Apr 2010 10:08:00 GMT donotreply@osnews.com (avih) Comments Not news, or a flaw http://www.osnews.com/thread?417525 http://www.osnews.com/thread?417525 crossdomain.xml files are a deliberate mechanism to remove the protection afforded by the Same Origin policy. If a developer creates one, they are deliberately removing or loosening a security measure.

This article is the equivalent of pointing out that removing locks from your doors is a bad idea, because it allows people to get in even if they don't have the keys. Of course that is true, but not worthy to be called either news or a flaw. Wed, 07 Apr 2010 10:57:00 GMT donotreply@osnews.com (spookylukey) Comments RE: Not news, or a flaw http://www.osnews.com/thread?417529 http://www.osnews.com/thread?417529 Itâs a human flawâ"but a flaw it still is. Hackers exploit all flaws, including human ones. Wed, 07 Apr 2010 11:10:00 GMT donotreply@osnews.com (Kroc) Comments RE[2]: Not news, or a flaw http://www.osnews.com/thread?417560 http://www.osnews.com/thread?417560

Itâs a human flawâ"but a flaw it still is. Hackers exploit all flaws, including human ones.

Very true.
Flamewars and personal opinions aside even I'd admit that most of the instances of malware on Windows is down to flawd humans.

In fact, I can think of at least one occasion when a computer has been set up properly (virus scanner et al) and the user /DISABLED/ the security apps because a porn site told him too! Wed, 07 Apr 2010 16:09:00 GMT donotreply@osnews.com (Laurence) Comments RE[2]: is Chrome vulnerable? http://www.osnews.com/thread?417632 http://www.osnews.com/thread?417632 Correct. I've tested it in Chrome, and as expected it works there as well Wed, 07 Apr 2010 21:12:00 GMT donotreply@osnews.com (eoftedal) Comments RE[2]: Not news, or a flaw http://www.osnews.com/thread?417671 http://www.osnews.com/thread?417671 As we already know, 98% of computer [security|software|etc...] problems usually stand between the screen and the chair. Thu, 08 Apr 2010 01:26:00 GMT donotreply@osnews.com (dvhh) Comments