Google Chrome and Chrome OS (obviously) use the Google search engine by default. If so, it’s easy - and we’re gonna show you how.
Chrome and Firefox users should ensure that you have updated this extension.Quack: DuckDuckGo is growing in popularityĭo you want to make DuckDuckGo the default search engine in Google Chrome on the desktop or Chromebook? Meanwhile, if you have installed DuckDuckGo Privacy Essentials on your Microsoft Edge, you should better uninstall it until an official patch arrives. The company has issued patches for both Chrome and Firefox, but Microsoft Edge is still on the compromised list.
It is still unclear when DuckDuckGo plans to release the Microsoft Edge browser patch. It is why the lack of a patch becomes a severe concern for Microsoft Edge. Though the chances of an attacker gaining all these privileges are meager, the results could be catastrophic. If this happens, even the lines of communications secured with military-grade encryption will become transparent to the attacker. For instance, an attacker may manipulate online banking sessions to receive the login credentials or silently move funds. Once an attacker has ensured this access, they can use the privileged position and exploit the vulnerability to view and manipulate what a user sees on the browser screen. Simultaneously, it is easy for DuckDuckGo, its hosting provider, and even government agencies to know the complete whereabouts of a user once server-access is provided. A hacker needs to access the core server to deploy the real threats from this issue. Nevertheless, it is worth noting that a random attacker can exploit this vulnerability. In addition to gaining access to the web browsing history and sensitive information, the attacker can also run arbitrary code on any domain the user is visiting, according to this report. Since the attack could be based on a uXSS flaw, the attacker can achieve almost-complete control of a device where a user has installed the DuckDuckGo Privacy Essentials extensions.
0 kommentar(er)
