Google's getting rid of the Chrome lock icon

Image: Google

Do you know what the lock icon means on the Google Chrome browser? Well, you're not alone. That's why Google will replace this icon next to the web address bar with a version of the "tune" icon you see above. According to Google's research, only 11 percent of users realize it refers to HTTPS encryption. And some users think it means the site is trustworthy, which is an issue when phishing sites use the tech.

Click to read more ...

Google Chrome on Android lets you lock Incognito tabs behind biometric authentication

Source: Google

With this new feature rolling out on Android, you can hide what you browse privately in Incognito mode. Google is bringing the option to lock your Chrome Incognito sessions behind biometric authentication. So, if someone's using your phone, they can't see what you browse privately. (Of course, they can see the tabs you have in the regular Chrome browser.) 

When you have the feature enabled, you must verify your identity through face unlock or fingerprint every time you want to return to an Incognito tab after exiting Chrome or moving to another app. Google first started testing the feature on iOS. You can check if it's available on your Android device by heading into Settings > Privacy and Security > Lock Incognito tabs when you leave Chrome. 

Source

Google Chrome rolls out passkey support

Screenshot: The Verge

It's now possible to go passwordless on Chrome. Google Chrome now brings passkeys to Chrome Stable M108 after going through a testing period in October. It's now available on desktop and mobile, running Windows 11, macOS, and Android. You can sync passkeys from Android to other devices either through Google's password manager or a supported third-party app like 1Password or Dashlane. A passkey is a unique identity stored on your phone, computer, and other devices (similar to a USB security key). Sites or apps that support the passkey API can let you login through a quick confirmation combined with your device's biometrics or other secure authentication methods.

Source

Time to update your Google Chrome browser

Another zero-day exploit has hit Chrome, and Google has started rolling out a security fix. So, if you haven't updated your Chrome browser recently, now is the time to do just that. Watch out for the update 107.0.5304.121. The vulnerability tracked as CVE-2022-4135 in the database of security bugs and vulnerabilities let a remote attacker break out of the Chrome sandbox using a special HTML webpage with a heap buffer overflow. Google has acknowledged reports that an exploit for the vulnerability exists in the wild.

Source