Live data from Hacker News

Chrome is blocking wired.com

wired.com

31–40 of 98 posts

Re: Chrome is blocking wired.com

#35

Blocked for me, Ubuntu 13.10, Firefox 28.0. The main page is not blocked but anything I click on is blocked. Here is the Why page: Safe Browsing Diagnostic page for wired.com/2014/04 What is the current listing status for wired.com/2014/04? Site is listed as suspicious - visiting this web site may harm your computer. What happened when Google visited this site? Of the 135 pages we tested on the site over the past 90…

Chrome lists two images as "malware":

    http://www.wired.com/playbook/wp-content/uploads/2013/07/soccer_w.jpg

    http://www.wired.com/playbook/wp-content/uploads/2013/06/bike-press-w.jpg
Both return actual images, so perhaps at some point in the past when wired.com was scanned these URLs redirected to somewhere malicious?

Screenshot: http://cl.ly/image/1m3g3L2v3w3C

Re: Chrome is blocking wired.com

#36

I'm a little confused how a webpage can infect a machine with malware? Is this typically through Java Applets/other plugins?

having hacked websites serve infected or specially crafted files that exploit 0 day bugs is a very common vector actually. like 0 day PDF reader bugs - they spread by being linked to in phishing emails for example. people click on them and boom they load a bad PDF and are drive by infected.

specially crafted jpgs and gifs have also been used to exploit overflows in image handling code.

Re: Chrome is blocking wired.com

#38

I'm a little confused how a webpage can infect a machine with malware? Is this typically through Java Applets/other plugins?

Exploiting programming errors in the browser is one way.

Because browsers are written in very unsafe programming languages (C++), bugs are regularly exploitable so that by specially crafting the bug-triggering input data they can be fooled to scribble content-controlled data inside the browser's memory space. For example, a memory handling bug might let the page overwrite some of the browser's code with data coming from the web page.

This lets the web page break into your computer, running arbitrary code of its choosing on your box.

Browser plugins can be similarly targeted instead of the browser itself.

Re: Chrome is blocking wired.com

#40
post #16

The message I got when I proceed is: ------- The website at www.wired.com contains elements from sites which appear to host malware – software that can hurt your computer or otherwise operate without your consent. Just visiting a site that contains malware can infect your computer. Below is a list of all the unsafe elements for the page. Click on the Diagnostic link for more information on the thread for a specific e…

http://www.checkpoint.com/defense/advisories/public/2004/cpa... https://news.ycombinator.com/item?id=7537719 maybe chrome can detect these even if they aren't using same dlls?
Post reply on HN