Skip to main content

How to lock down Chrome from insecure plug-ins

Malware writers often target vulnerabilities in browser plug-ins such as Adobe Flash and Java. Undisclosed vulnerabilities and zero-day exploits on plug-ins are a common occurrence. If you use Chrome you can take advantage of the browser’s built in PDF plug-in, plug-in blocking and sandboxing capabilities. This is what you need to do.

First, make sure you are running the latest developer build of Chrome, i.e. Chrome 7, because we are going to use some of its improved security features. (Click on the wrench icon and select ‘About Google Chrome’ to check the version number.)

Disable Adobe PDF Reader plug-in

Adobe’s PDF plug-in has been targeted by zero-day exploits twice in last three months. Last week’s exploit is already under attack. To protect yourself from the exploit and all future Adobe PDF vulnerabilities, disable the Adobe Reader plug-in on your browser.

You can do this by typing chrome://plugin in Chrome’s address bar and clicking on Disable against the Adobe Reader plug-in entry.

Enable Chrome PDF plug-in

Now that you have disabled the Adobe Reader plug-in you won’t be able to view PDF files within the browser. To get back this functionality, enable the built in PDF plug-in.

Type chrome://plugin in Chrome’s address bar or omnibox and simple click on Enable under Chrome PDF Viewer.

chrome-pdf-enable

Allow only sandboxed plug-ins to run

Click on the wrench icon in Chrome and click on Options. Select the tab “Under the hood” and click on Content Settings.

Highlight Plug-ins. Choose the middle option – “Allow only sandboxed plugins”.

chrome-sandboxed-plugin

Once this option is turned on, any embedded objects that require a plug-in to run will be replaced with plug-in holder icon. Click on the icon to enable the plug-in. Additionally, an info bar appears on the top giving you the option to whitelist the domain from future plug-in blocking.

You can test this feature by visiting any YouTube page.

chrome-plugin-block

There you have it, a built in Flash blocker.

Get warned of out-of-date plug-ins

Periodically visit the chrome://plugin page and check the list of plug-ins installed. Chrome will issue a warning if newer updates of plug-ins are available for download.

chrome-plugin-warnings

Alternatively, you can install the Secbrowsing extension and get automatic alerts of out-of-date and vulnerable plugins.

chrome-secbrowsing

Labels:

Comments

Post a Comment

Popular posts from this blog

How to Record CPU and Memory Usage Over Time in Windows?

Whenever the computer is lagging or some application is taking too long to respond, we usually fire up task manager and look under the Performance tab or under Processes to check on processor utilization or the amount of free memory available. The task manager is ideal for real-time analysis of CPU and memory utilization. It even displays a short history of CPU utilization in the form of a graph. You get a small time-window, about 30 seconds or so, depending on how large the viewing area is.
17 comments
Read more

How to Schedule Changes to Your Facebook Page Cover Photo

Facebook’s current layout, the so called Timeline, features a prominent, large cover photo that some people are using in a lot of different creative ways. Timeline is also available for Facebook Pages that people can use to promote their website or business or event. Although you can change the cover photo as often as you like, it’s meant to be static – something which you design and leave it for at least a few weeks or months like a redesigned website. However, there are times when you may want to change the cover photo frequently and periodically to match event dates or some special promotion that you are running or plan to run. So, here is how you can do that.
1 comment
Read more

Diagram 101: Different Types of Diagrams and When To Use Them

Diagrams are a great way to visualize information and convey meaning. The problem is that there’s too many different types of diagrams, so it can be hard to know which ones you should use in any given situation. To help you out, we’ve created this diagram that lays out the 7 most common types of diagrams and when they’re best used:
Post a Comment
Read more