Google claims that its browser Google Chrome is able to isolate events that may crash a browser, isolated within those individual tabs. However, an issue exists with how Google Chrome handles undefined handlers in chrome.dll version 0.2.149.27 which is the latest version of the browser. A crash can result without any user interaction.

When a user visits a malicious link which has an undefined handler and followed by a special character, the browser crashes. You can also crash the browser by typing the characters :% in the Chrome URL bar. Google Chrome crashes with a message ” Whoa! Google Chrome has crashed. Restart now?”

Tested on : Windows Vista SP1, Windows XP SP2, Windows XP SP3

Howto: Type :% in the Google Chrome URL bar

Google Chrome crashes with all Tabs

Proof of Concept:

Note: Do not hover over the link below if you are currently using Google Chrome and running something critical. Google Chrome actively links to any URL in any page. So, you don’t even have to click on the link below for Google Chrome to crash. A mere hover will do.

PoC Working exploit to crash Google Chrome:
Click for a demo HERE

According to SecuriTeam, it crashes on “int3″ at 0x01002FF3 as an exception/trap, followed by “POP EBP” instruction when pointed out by the EIP register at 0x01002FF4

UPDATE (9/7/2008): Google has patched this vulnerability in Chrome. They released an update to the browser. Please make sure you update your current version to 0.2.149.29

A Keyboard Shortcut according to Wikipedia states that a keyboard shortcut (or accelerator key, shortcut key, hot key, key binding, keybinding, key combo, etc.) is a key or set of keys that performs a predefined function. These functions can often be done via some other, more indirect mechanism, such as using a menu, typing a longer command, and/or using a pointing device. By reducing such sequences to a few keystrokes, this can often save the user time, hence “shortcut”.

Google’s Gmail service has grown to be one of the most popular web based email services out there. They were the first ones to provide 1GB of free email storage whereas other providers such as Microsoft’s Hotmail and Yahoo’s Yahoo mail only provided a storage space of 4MB and 2MB respectively. While other free webbased email solutions have tried to catch uo with GMail in terms of storage capacity and features, Google’s GMail is still the king especially among the techie and geek community. Google’s support pages do an excellent job outlining the various keyboard shortcuts, they just do a dump on you with no breakdown of your various seperate needs.  I will try to break it down by categories below and in some cases, I will use Google’s own words explaining GMail’s shortcut features.

Caution: The keyboard shortcuts in GMail are case-sensitive.

TIP: This blog allows you to print articles. Make use of the print this option in this article for a formatted page for printing.

First off, verify that you have keyboard shortcuts enabled on your GMail account. To do so, login to your GMail account, then go to Settings and under the General Tab options, you will see an option to enable or diasable keyboard shortcuts in GMail.

Searching your GMail messages / conversations:

Navigating through your GMail messages

Writing and Sending Email

Acting on your Email

References

1. GMail keyboard shortcuts on Google’s support pages

2. Digital Inspiration secret Gmail keyboard shortcut to delete a conversation

A CAPTCHA (an initialism for “Completely Automated Public Turing test to tell Computers and Humans Apart”, is a type of challenge-response test used in computing to determine whether or not the user is human. A common type of CAPTCHA requires that the user type the letters of a distorted image, sometimes with the addition of an obscured sequence of letters or digits that appears on the screen.

Okay so I get the funniest thing in the mail today. A buddy of mine apparantly got this while he was associating his GMail Id with one of Google’s Orkut Service. He gets the CAPTCHA as “retard”