{"id":105127,"date":"2022-09-18T09:36:45","date_gmt":"2022-09-18T07:36:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda"},"modified":"2022-09-18T09:36:45","modified_gmt":"2022-09-18T07:36:46","slug":"v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","title":{"rendered":"Se ha identificado una fuga de contrase\u00f1as en Chrome a trav\u00e9s de campos con vista previa de entrada oculta.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Se ha detectado un problema en el navegador Chrome al enviar datos confidenciales a los servidores de Google al activar el modo avanzado de correcci\u00f3n ortogr\u00e1fica, que implica la verificaci\u00f3n a trav\u00e9s de un servicio externo. El problema tambi\u00e9n se presenta en el navegador Edge al utilizar la extensi\u00f3n Microsoft Editor. <\/p>\n

Se descubri\u00f3 que el texto para la verificaci\u00f3n se env\u00eda, entre otras cosas, desde formularios de entrada que contienen datos confidenciales, incluidos campos que contienen nombres de usuario, direcciones, correos electr\u00f3nicos, datos del pasaporte e incluso contrase\u00f1as, si los campos de entrada de contrase\u00f1as no est\u00e1n restringidos por la etiqueta est\u00e1ndar . Por ejemplo, el problema lleva a enviar a servidor<\/a> www.googleapis.com de contrase\u00f1as si se activa la opci\u00f3n para mostrar la contrase\u00f1a introducida, implementada en los servicios de Google Cloud (Secret Manager), AWS (Secrets Manager), Facebook, Office 365, Alibaba Cloud y LastPass. De 30 sitios conocidos probados, incluidos redes sociales, bancos, plataformas en la nube y tiendas en l\u00ednea, 29 resultaron ser vulnerables a la filtraci\u00f3n. <\/p>\n

En AWS y LastPass, el problema ya se ha resuelto r\u00e1pidamente a trav\u00e9s de la adici\u00f3n del par\u00e1metro 'spellcheck=false' en la etiqueta 'input'. Para bloquear el env\u00edo de datos del lado del usuario, se debe desactivar en la configuraci\u00f3n la verificaci\u00f3n ortogr\u00e1fica avanzada (secci\u00f3n 'Languages\/Spell check\/Enhanced spell check' o 'Idiomas\/P revisi\u00f3n ortogr\u00e1fica\/Verificaci\u00f3n avanzada', por defecto la verificaci\u00f3n avanzada est\u00e1 desactivada).

\"Se<\/center> 1\t
\"Se<\/center>
\n
Fuente: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Google \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0430\u0432\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f, \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Edge \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Microsoft Editor. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0442\u0435\u043a\u0441\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442\u0441\u044f \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u0437 \u0444\u043e\u0440\u043c \u0432\u0432\u043e\u0434\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u0437 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105128,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105127","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Se ha detectado una filtraci\u00f3n de contrase\u00f1as en Chrome desde campos con vista previa de entrada oculta | ProHoster","description":"Se ha detectado un problema en el navegador Chrome al enviar datos confidenciales a los servidores de Google al activar el modo avanzado de correcci\u00f3n ortogr\u00e1fica, que implica la verificaci\u00f3n a trav\u00e9s de un servicio externo.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 \u043f\u043e\u043b\u0435\u0439 \u0441 \u043f\u0440\u0435\u0434\u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u043e\u043c \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 | ProHoster","og:description":"\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Google \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0430\u0432\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f, \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-09-18T07:36:46+00:00","article:modified_time":"2022-09-18T07:36:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/105127","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=105127"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/105127\/revisions"}],"predecessor-version":[{"id":173008,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/105127\/revisions\/173008"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media\/105128"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=105127"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=105127"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=105127"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}