Windows 7 Major security problem with Chrome

J

johnwhelan

Well-known member
https://www.bbc.com/news/technology-47494760

If you are still running win 7 please consider upgrading to win 10.

"While you can no longer use the “Get Windows 10” tool to upgrade from within Windows 7, 8, or 8.1, it is still possible to download Windows 10 installation media from Microsoft and then provide a Windows 7, 8, or 8.1 key when you install it. ... If it is, Windows 10 will be installed and activated on your PC." This was still working in 2018.

Cheerio John
 
Upgrade from 7 using the media creation tool was still working on the 2nd March, from 10 forums.

Chrome? ..... thought it was supposed to be hack proof ;o)
 
All operating systems and software eventually get their vulnerabilities exposed by unforeseen bugs in code.

Having a multi-layered approach to these things is the answer.

1. Don't visit sites that are questionable. DON'T PIRATE, go get a job and purchase the software you need, or you may find yourself facing blackbeard. (having a good firewall/anti-virus/malware protector helps here)

2. Use https everywhere. Lots of malicious sites don't use https because its harder to implement, and browsers refuse to view the site when the certificate is not signed properly / doesn't exist. Many web site servers require extra $$ to serve https (even on win10, works with firefox, https://www.eff.org/https-everywhere )

3. Use a firewall and don't let it AUTO decide what software to allow on the net, manually choose what programs you allow. (windows firewall is NOT good enough)

4. Unplug / Disable your internet connection when its not needed. (VERY important, no one NEEDS 24/7 internet)

5. WPA2 was cracked long ago, and most hardware routers and hardware makers cannot / will not update it. (see #4 for a real world solution to this, win10 will not protect you) https://www.zdnet.com/article/new-wi-fi-attack-cracks-wpawpa2-passwords-with-ease/

6. Turn on security features of browsers like firefox... (block third party content, trackers, third party cookies, turn on the do not track signal)

7. Use encrypted and anonymous search engines to help prevent metadata scraping and expoitation from organizations LIKE GOOGLE. (they can't protect their own browser, what makes you think they can protect their own metadata?) https://www.startpage.com/en/search/download-startpage-plugin.html

8. Stop using the internet for everything you do, GO to the bank, GO to the store, GO outside (novel concept, i know, or dare i say, turn it all off and read a book)

9. I will stress this again, DISABLE the internet connection by disabling the wireless/ethernet device when not in use/needed.

10. Staying protected with the latest OS offered isn't always going to protect you, sometimes the new stuff has more vulnerabilities that are yet to be discovered. YOU decide.

11. BACK UP EVERYTHING ONTO A EXTERNAL DRIVE THAT YOU DISCONNECT ONCE YOU MADE YOUR BACKUP.

12. ALWAYS use different passwords for every single site you login to. Change them regularly.

13. Using a browser that saves your passwords is a win/loose scenario. You can win using this because if you use a master password to protect the password list, you do not enter your passwords so keyloggers cannot scrape your password, just your master password, which should be unique also. If a hack gets access to your master password list this can be the loose scenario, but the master password might protect it, hacks would need a way to both steal the master password files, and your master password. Keyloggers that also steal your encrypted master password files are hard to implement (see #3 and #9) Keyloggers are easier to implement. This scenario is a win/loose in both situations.

14. Use a separate computer/laptop to do sensitive things like your banking, and do not use it for anything else, turn it off once done, install very minimal software onto it.

15. Firefox lets you turn off plugins / addons, keep them off when you don't need them. (your plugins should be set to ASK TO ACTIVATE) Then don't allow sites to activate FLASH and other plugins, unless you want to see them.

16. Firefox addons exist that let you selectively turn off scripting / javascript on all sites except those that you choose. (html5 script blocking in firefox addon, for example, install this addon, and visit youtube, and watch it NOT WORK, unless you allow the site to run html5 script)

17. Use a raspberrypi connected to a TV and any usb mouse/keyboard to view websites / youtube / streaming media video / audio. Part benefit here is they are linux, and slow, harder to have malicious code run due to their unique and slow hardware (wow, one time when slow hardware might help you). They are cheap and you can have a few for different tasks. https://www.amazon.com/CanaKit-Raspberry-Starter-Premium-Black/dp/B07BCC8PK7?ref_=bl_dp_s_web_3020163011

18. DO NOT USE ONLINE EMAIL. Use a offline email program like THUNDERBIRD. This can be setup to work with gmail. Set up your client to use POP so you can tell gmail to delete the online copy once downloaded to your pc. https://www.lifewire.com/gmail-access-thunderbird-1173150
Have it download all the email and then DELETE the email on the gmail google servers. https://superuser.com/questions/116...nt-delete-gmail-emails-after-downloading-them
This makes it so even if your online email is hacked, no hacker can see all your old emails that SHOW ALL YOUR LOGIN SITES AND ACTIVITY!!!!

19. Always keep your firefox and thunderbird updated by clicking the Help option on the top menu bar, and choose About Firefox or About Thunderbird. Never update either using ANY OTHER METHOD. (NEVER UPDATE either with a downloaded file, this is a known method hackers use constantly.)
Always use the Help / About page for updating. Or on your options menu its the same, choose the menu, choose help, choose about at the bottom. If an update is available, a button to update will show in the spot where it says that you are up to date.
 
Last edited:
TINE said:
All operating systems and software eventually get their vulnerabilities exposed by unforeseen bugs in code.

Having a multi-layered approach to these things is the answer.

1. Don't visit sites that are questionable. DON'T PIRATE, go get a job and purchase the software you need, or you may find yourself facing blackbeard. (having a good firewall/anti-virus/malware protector helps here)

2. Use https everywhere. Lots of malicious sites don't use https because its harder to implement, and browsers refuse to view the site when the certificate is not signed properly / doesn't exist. Many web site servers require extra $$ to serve https (even on win10, works with firefox, https://www.eff.org/https-everywhere )

3. Use a firewall and don't let it AUTO decide what software to allow on the net, manually choose what programs you allow. (windows firewall is NOT good enough)

4. Unplug / Disable your internet connection when its not needed. (VERY important, no one NEEDS 24/7 internet)

5. WPA2 was cracked long ago, and most hardware routers and hardware makers cannot / will not update it. (see #4 for a real world solution to this, win10 will not protect you) https://www.zdnet.com/article/new-wi-fi-attack-cracks-wpawpa2-passwords-with-ease/

6. Turn on security features of browsers like firefox... (block third party content, trackers, third party cookies, turn on the do not track signal)

7. Use encrypted and anonymous search engines to help prevent metadata scraping and expoitation from organizations LIKE GOOGLE. (they can't protect their own browser, what makes you think they can protect their own metadata?) https://www.startpage.com/en/search/download-startpage-plugin.html

8. Stop using the internet for everything you do, GO to the bank, GO to the store, GO outside (novel concept, i know, or dare i say, turn it all off and read a book)

9. I will stress this again, DISABLE the internet connection by disabling the wireless/ethernet device when not in use/needed.

10. Staying protected with the latest OS offered isn't always going to protect you, sometimes the new stuff has more vulnerabilities that are yet to be discovered. YOU decide.

11. BACK UP EVERYTHING ONTO A EXTERNAL DRIVE THAT YOU DISCONNECT ONCE YOU MADE YOUR BACKUP.

12. ALWAYS use different passwords for every single site you login to. Change them regularly.

13. Using a browser that saves your passwords is a win/loose scenario. You can win using this because if you use a master password to protect the password list, you do not enter your passwords so keyloggers cannot scrape your password, just your master password, which should be unique also. If a hack gets access to your master password list this can be the loose scenario, but the master password might protect it, hacks would need a way to both steal the master password files, and your master password. Keyloggers that also steal your encrypted master password files are hard to implement (see #3 and #9) Keyloggers are easier to implement. This scenario is a win/loose in both situations.

14. Use a separate computer/laptop to do sensitive things like your banking, and do not use it for anything else, turn it off once done, install very minimal software onto it.

15. Firefox lets you turn off plugins / addons, keep them off when you don't need them. (your plugins should be set to ASK TO ACTIVATE) Then don't allow sites to activate FLASH and other plugins, unless you want to see them.

16. Firefox addons exist that let you selectively turn off scripting / javascript on all sites except those that you choose. (html5 script blocking in firefox addon, for example, install this addon, and visit youtube, and watch it NOT WORK, unless you allow the site to run html5 script)

17. Use a raspberrypi connected to a TV and any usb mouse/keyboard to view websites / youtube / streaming media video / audio. Part benefit here is they are linux, and slow, harder to have malicious code run due to their unique and slow hardware (wow, one time when slow hardware might help you). They are cheap and you can have a few for different tasks. https://www.amazon.com/CanaKit-Raspberry-Starter-Premium-Black/dp/B07BCC8PK7?ref_=bl_dp_s_web_3020163011

18. DO NOT USE ONLINE EMAIL. Use a offline email program like THUNDERBIRD. This can be setup to work with gmail. Set up your client to use POP so you can tell gmail to delete the online copy once downloaded to your pc. https://www.lifewire.com/gmail-access-thunderbird-1173150
Have it download all the email and then DELETE the email on the gmail google servers. https://superuser.com/questions/116...nt-delete-gmail-emails-after-downloading-them
This makes it so even if your online email is hacked, no hacker can see all your old emails that SHOW ALL YOUR LOGIN SITES AND ACTIVITY!!!!

19. Always keep your firefox and thunderbird updated by clicking the Help option on the top menu bar, and choose About Firefox or About Thunderbird. Never update either using ANY OTHER METHOD. (NEVER UPDATE either with a downloaded file, this is a known method hackers use constantly.)
Always use the Help / About page for updating. Or on your options menu its the same, choose the menu, choose help, choose about at the bottom. If an update is available, a button to update will show in the spot where it says that you are up to date.
Click to expand...


On a more practical note, running windows 10 in a local account prevents some malware from installing. An Admin account is more vulnerable.

If you must on line bank then see if your bank supports FIDO U2F usb key. If they don't ask them nicely to consider it. Running in a dedicated local account will give you additional protection.

Backups look up UGREEN External Hard Drive Enclosure and put a hard drive in it. They come with a power switch to make it easy to disconnect once the back up is done.

The safest passwords are normally either a password manager or have a root password you use with a two or three letters for each site. The advice about changing passwords frequently isn't practical as it was found that people just used weaker passwords.

A good quality router that gets software updates goes a long way. If it's less than $100 US be suspicious. I quite like ASUS.

Cheerio John
 
I don't understand any of the above, but I saw an article strongly advising Chrome users to update their copy. So I opened Chrome and looked for an "update" menu or button to press but could not find anything. Even the Help search could find nothing on the word "update".

My copy of Chrome is quite old (because I almost never use it). So how do I update? Or should I simply delete Chrome? I would not miss it.
​

p.s. I have an up-to-date install of Win 10 as my operating system.


p.p.s. I just checked the "About Chrome" text and found that somehow it is already up to date. I guess it does it behind my back.
 
Last edited:
Dinorius_Redundicus said:
I don't understand any of the above, but I saw an article strongly advising Chrome users to update their copy. So I opened Chrome and looked for an "update" menu or button to press but could not find anything. Even the Help search could find nothing on the word "update".

My copy of Chrome is quite old (because I almost never use it). So how do I update? Or should I simply delete Chrome? I would not miss it.
​

p.s. I have an up-to-date install of Win 10 as my operating system.


p.p.s. I just checked the "About Chrome" text and found that somehow it is already up to date. I guess it does it behind my back.
Click to expand...

Chrome is sneaky and does auto update. If you are running win 10 then don't worry. It is probably worth while buying an external hard drive to do backups. The Ugreen case has a button you press to turn the drive on. You press it again to turn it off just drop in an internal hard drive. Win 7 backup is built into Win 10 and is my personal favourite and you'll need to be able to create a boot DVD so you need a DVD burner. External USB ones work well, Lite-on would be a favourite but other brands are probably made by Lite-on anyway.

Cheerio John
 
Thanks John. I have an external drive and use Solway's Plain Backup. Haven't got a boot DVD (but do have a DVD burner and player). I guess Win 10 Help will tell me how to make a boot DVD.
 
Dinorius_Redundicus said:
Thanks John. I have an external drive and use Solway's Plain Backup. Haven't got a boot DVD (but do have a DVD burner and player). I guess Win 10 Help will tell me how to make a boot DVD.
Click to expand...

Go to settings, backup and security backup looking for an older backup that takes you to the win 7 backup. Create a system repair disk. You also want a system image. The system repair disk is the bootable bit. When you use it it looks for the system image and restores it.

Your other backup software may well work perfectly but the problem can be if you don't know how to restore the system from the backup not many people will be able to assist you. I've seen that at work, one system admin used his own backup plan rather than use the central one. He was on vacation when they needed to do a restore and I was unable to help because there was no documentation. Fortunately they managed to get hold of him. They were on the central system the following week.

Win 7 backup has stood the test of time and its fairly simple. It also compressed the backups so they take up less room.

Cheerio John
 
johnwhelan said:
But somethings are more hack resistant than others and Chrome is fairly hack resistant. Note Chrome under win 10 does not have a problem.

Cheerio John
Click to expand...

There are MANY things that can be done, but in the end, it is just a matter of time:

[h=3]1. Operating System Updates[/h]
One of the most common ways that hackers compromise your computer is through the use of known “exploits”, or vulnerabilities in your system. The dark corners of the internet are full of message boards where hackers share their knowledge of these vulnerabilities, and the methods used to take advantage of them.The best way to protect your computer from exploits is to ensure that you have the latest updates and security fixes. Updates are easily available through the update feature on your computer, and you can even set the updates to be installed automatically.​
[h=3]2. Quality Antivirus Protection[/h]
This may seem obvious, but a staggering number of computers are brought in for maintenance, only to have the technician discover that there was no effective virus protection installed. Avoid products like Norton 360 that claim to provide some sort of comprehensive system protection. These products are generally bloated and inefficient, and will negatively impact your system’s performance, as well as providing substandard virus protection. You want your antivirus software to do one thing and do it well.Microsoft Security Essentials is a highly effective antivirus program, and it’s freely available for download. It doesn’t use up your system’s resources and will provide solid protection from mal-ware.​
[h=3]3. Personal Firewall Software[/h]
While Windows provides a built-in firewall, it is not exactly known for keeping hackers at bay. Personal firewall software, such as Zonelabs’ Zone Alarm 2.1, will add an important layer of protection, and prevent hackers from being able to maliciously access your system through open ports. And if your computer becomes a target, a good personal firewall will alert you to the attacks, allowing you to take extra steps to protect your system.For the extra-security conscious, hardware-based firewalls can be purchased and placed between your computer and your internet connection. While this can be viewed as overkill in many cases, adding a hardware firewall to your setup will virtually eliminate all but the most sophisticated of cyberattacks.​
[h=3]4. Using Strong Passwords[/h]
This is one of the most important, and least practiced, ways of making your system and personal information secure from hackers. Passwords protect your email, bank account, and even overall access to your computer, and if a hacker is able to crack one or more of your passwords, all manner of malfeasance can be accomplished.A simple trick for making your passwords secure and easy to remember is to simply replace ‘a’ with ‘@’, ‘i’ with ‘!’, ‘s’ with ‘$’, and ‘o’ with ‘0’, and then append the purpose of the password at the end. So if you use the word ‘mondays’, your email password becomes ‘m0nd@y$em@!l’, your bank account password becomes ‘m0nd@y$b@nk’, and your computer password becomes ‘m0nd@y$$y$tem’. This way, you have a password that is easy to remember and extremely difficult to guess.​
[h=3]5. Safe Email Practices[/h]
Compromising a person’s email, and then using that to spread the infection is one of the most common ways hackers carry out their attacks. People are more likely to open emails and attachments from friends, family, and co-workers, and if you’re compromised, you might not even be aware of the infectious emails being sent to your contacts.To avoid this, use common sense when checking your email. Don’t open attachments or click on links unless you are 100% sure that they are legitimate, even if it’s from someone you know well. Ensure that your email software is not configured to automatically download and/or open attachments, and turn off automatic display of images embedded in the message.Implementing these 5 steps will make your computer significantly more secure, allowing you to cruise the information superhighway with peace of mind.​
 
You must log in or register to reply here.

Similar threads

J
Notes on toys for backing up
Replies
4
Views
402
JCitron
J
B
win+11+22h2 Update bug can slow file downloading by 40%
Replies
18
Views
2K
boleyd
B
n3v_laurence
Trainz Plus Beta update - PC Only 121880
2
Replies
27
Views
2K
ZyxwvU
Z
J
I want to convert my ATX home-built PC into a Trainzing machine.
2
Replies
34
Views
3K
autodctr
A
T
Trainz Plus Alpha #2 Release
2 3
Replies
44
Views
4K
kajnos
K
Back
Top