Google Chrome OS hacked by whitehats

[javajolt]

It’s always fun to see how tough an Operating System is when the experts get a chance to throw stones at it.

A pair of experts (WhiteHat security researchers Matt Johansen and Kyle Osborn) have discovered a way to hack into Chrome OS.

They say that Google’s vet-free app approval process leaves its Chrome Web Store susceptible to malicious extensions.

Using a cross-site scripting injection, Johansen and Osborn were able to steal a user’s contacts and cookies, which could give hackers access to other accounts, including Gmail.

Google quickly patched the hole after WhiteHat uncovered it earlier this year, but researchers told Black Hat’s attendees that they’ve discovered similar vulnerabilities in other extensions, as well.

You can be sure that as soon as Windows 8 Beta is released, there will be throngs of both Blackhats and Whitehats looking for vulnerabilities within the OS.