Script From Unauthenticated Sources - Chrome

[DisgruntledCarthaginian]

https://forums.malwarebytes.org/index.php?showtopic=125369

 

I was browsing the forums just about now and I saw the little shield thing on the google chrome URL Bar, and I'm wondering, what does it do/mean? I'm interested, because its on the MBAM Forums and I'm slightly paranoid about PC issues.

[AdvancedSetup]

Not sure what you mean by "shield thing"

Can you post either a log file from MBAM or a Screen shot of what you're talking about please.

Thanks

[David H. Lipman]

Logos and Graphics can be used legitimately and with illegitimate software.  Just viewing a "Shield" is insufficient to come to a conclusion.  One has to look at it fully in context.

[hoople]

He's using https and the shield is chrome's way of alerting that the youtube embed is disabled because it isn't. This is normal and secure behavior and has nothing to do with any malware on your system.

https://support.google.com/chrome/answer/1342714?hl=en

[AdvancedSetup]

Not sure how you would gather that from what he posted but if that's what he posted about thank you for the input hoople.

[hoople]

If it helps, this is a screenshot.

http://i.imgur.com/9JLkufs.png

[AdvancedSetup]

Ah... okay I see.  Thanks.  I don't use Chrome so didn't realize what was meant.  That is due to mixed content which cross-site scripting can take advantage of trying to get you to run something you don't even realize is trying to run.

 

Thanks again

[David H. Lipman]

I may be wrong but I do not believe XSS is associated with Mixed-Content browsing. 

[AdvancedSetup]

It is associated in that XSS is often used in an iframe using non secure content.  Basically the site will use a hidden iframe in the browser so that they can use cross-site scripting to attempt to do things.  On a secure https protocol with mixed-content blocked it negates that action because typically one that is trying to attack your system is not going to purchase and setup a secure https certificate site.  Certainly many other methods of XSS and attack vectors but https should help for some cases, but if mixed-content is set to allow then it won't do anything.

[David H. Lipman]

Just one more concept for me to spend "a little" more time on....

[AdvancedSetup]

When I say it won't do anything I mean that if there is an http iframe there that is hidden and you allow mixed content you won't see it and it may possibly be allowed to do its damage.

[MaryLovesJustice]

I noticed today that I have a "shield" in the upper right corner of my EXPOSED Free Speak Blog. It says "script from unauthenticated sources, like hoppel experienced and posted here to this forum:  http://i.imgur.com/9JLkufs.png . I want to know HOW to get rid of it. Every article in my EXPOSED blog is censored information, and I don't need any "shield" to affect the public's confidence to read my articles. That is probably what is hoped by whatever cyberstalker did something to get a shield on my blog. The shield appeared after I published my "reparations" article. I wrote about the "shield" in an article called "EXPOSED blog shielded after reparations article"

http://justicegagged.blogspot.com/2013/11/exposed-blog-shielded-after-reparations.html

The Justice Gagged article at the link immediately above gives some possibilities as to why the shield appeared. How does this "shield" affect my readers? Do they get a warning before opening my blog? Could you please tell me how to get rid of the shield? If not, I have to go through and copy each and every article into a new blog, which will be very time consuming. Thank you for any advice you can give.

[MaryLovesJustice]

Is there some way to copy an entire blog in one step? 

[hoople]

No stalkers involved in this case MaryLovesJustice. The gadget 'FeedWitter' on your blog is both not configured and not written to use https to link to twitter.