#CoSoSec #Browsers

Chrome users will now see warnings alerting them of suspicious files (based on lower confidence verdicts and unknown risk of user harm) or dangerous files (on high confidence verdicts and high risk of user harm)

Chrome browser now also sends suspicious files to the company's servers for a deeper scan for users with Enhanced Protection mode enabled

"These two tiers of warnings are distinguished by iconography, color, and text, to make it easy for users to quickly and confidently make the best choice for themselves based on the nature of the danger and Safe Browsing's level of certainty,"

https://security.googleblog.com/2024/07/building-security-into-redesigned.html

When downloading password-protected archives (e.g., zip, .7z, or .rar), users with Enhanced Protection toggled get prompted to enter the password before sending the file for additional scanning via Google's Safe Browsing service.

​Chrome in Standard Protection mode will also be asked to enter the passwords of the downloaded archives.

However, both the file and the password stay on the local device, and "only the metadata of the archive contents are checked with Safe Browsing," the Chrome Security team says.

@ecksmc

Remember when Google said it didn’t collect information and then, oopsie, turns out they did?

I can’t trust Google to tell me the weather.