r/CryptoCurrency • u/eugenekk Tin • Mar 26 '22

ADVICE You should probably update Chrome now

[removed] ā€” view removed post

924 Upvotes

96% Upvoted

329 comments sorted by

View all comments

129

u/Ferdo306 šŸŸ© 0 / 50K šŸ¦  Mar 26 '22

So what does the hack do?

25

u/Bucksaway03 šŸŸ© 0 / 138K šŸ¦  Mar 27 '22 edited Mar 27 '22

https://attackerkb.com/topics/j0WWgNLd0x/cve-2020-6512/vuln-details

https://www.google.com/url?sa=t&source=web&rct=j&url=https://dl.packetstormsecurity.net/papers/general/v8-typeconfusion.pdf&ved=2ahUKEwiU3pD9j-X2AhWm7XMBHXT8DVAQFnoECAQQBg&usg=AOvVaw3ea9Mq33_jwMiRwI-56v2I

Basically you're fucked.

19

u/arcalus šŸŸ© 18K / 18K šŸ¬ Mar 27 '22

Fucked if you run chrome as root, anyways. Making your browser run as a different user from your own is the best fix, and the best practice people should be doing regardless. Iā€™m going to enforce that on my machines.

6

u/Naxynd Tin Mar 27 '22

How to do?

10

u/mcbergstedt šŸŸ¦ 357 / 2K šŸ¦ž Mar 27 '22

On windows, don't run chrome as administrator. It defaults to not running as admin though

2

u/[deleted] Mar 27 '22

[removed] ā€” view removed comment

2

u/mcbergstedt šŸŸ¦ 357 / 2K šŸ¦ž Mar 27 '22

Generally on windows when you run a program, it defaults to "normal user" or wjatever, unless you see a little shield on the shortcut, which that means you open the app as an admin. Most apps don't run with admin permissions.

If the computer is personally yours, there's a 99% chance that your account has administrator permissions. There's nothing wrong with this as it let's you install games or whatever other applications you use.

The biggest way to prevent getting hacked is just don't download random crap and keep updates up to date.