<div dir="ltr">Hi all,<br><br>I've been playing around with Google's new web browser and Tor. I thought it might be good to share my findings with everyone.<br>After reading Google's privacy policy[1], I for one would not want to use this on a regular basis, if at all.<br>
<br>The first bug I tried was an old one I found with Firefox; the NEWS:// URI type.<br>Any link that has a NEWS:// URI will launch Outlook Express and attempt to contact the server in the URL...without using Tor.<br><br>
The second bug I found resulted in local file/folder disclosure.<br>This is very similar to the one I found in Internet Explorer.<br><br>The third bug I found was with MIME-TYPEs, specifically Windows Media Player supported formats.<br>
The BANNER tag can also leak your IP address when the playlist is loaded *IF* WMP is not set to use a proxy.<br>Also, a playlist in WMP can specify protocols that use UDP, hence, no proxy support...no Tor.<br>
<br>On the flip-side, it is very cool how each browser tab is it's own process, making several types of attacks much more difficult.<br>However, with an invasive privacy policy, local
proxy bypassing, and local files/folders able to be read from your hard
drive, I've decided not to use this browser.<br><br>It just doesn't feel privacy/anonymity friendly to me.<br>
Anyone else want to chime in on this?<br><br><br>- Kyle<br><br>[1] <a href="http://www.google.com/chrome/intl/en/privacy.html">http://www.google.com/chrome/intl/en/privacy.html</a><br>(Basically states you have no privacy when using Chrome)</div>