New issue
Advanced search Search tips

Issue 693830 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Mar 2017
Cc:
EstimatedDays: ----
NextAction: 2017-03-02
OS: Chrome
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: hack

Reported by frankiek...@gmail.com, Feb 18 2017

Issue description

Chomebook Hack (Unblock sites) *Warning only do after you have read them all if on Chromebooks*

Turn off chromebook
Hold ESC and Refresh (F3) while you tap the power button
In screen with ! in middle of screen press and hold CTRL + D
When new screen opens with something like (OS Verification is off) press ENTER (will take a moment)
When the Chromebooks loads up press SPACE then ENTER
Login (do not use school email)
[Extra notes: If it says cannot enroll in enterprise, press the link that says learn more then CTRL + ALT + E]
[To connect to SFPS WiFi at bottom]

Chromebook Reverse Hack (Re-"schoolify" it) *The school knows about this hack now, no way to block it though. This is reverse so they do not have proof.
Turn off chromebook
Hold ESC and Refresh (F3) while you tap the power button
In screen with ! in middle of screen press and hold CTRL + D
When new screen opens with something like (OS Verification is off) press ENTER (will take a moment)
When the Chromebooks loads up press SPACE then ENTER
Login (With school email)
[Extra notes: If it says cannot enroll in enterprise, press the link that says learn more then CTRL + ALT + E]
[To connect to SFPS WiFi at below]

Connect to SFPS WiFi
In Quick Settings (Thing at bottom right) go to wifi press SFPS
Make sure it is exactly as below (Do not change anything else)
AP Method: PEAP
CA Certificate: Do Not Check
Enter your Username and Password to sign into SFPS computer (For NTHS Students - Not echo)
No Anonymous Indentity
Press Connect
 
Labels: OS-Chrome
Cc: jorgelo@chromium.org
Labels: Needs-Feedback
Thanks for the report, but unfortunately I do not understand the impact of these steps. Would you please explain what the steps allow you to achieve and why that is a security vulnerability? Thank you.

Comment 3 by vakh@chromium.org, Mar 1 2017

NextAction: 2017-03-02
Ping. Could you please provide additional information asked in #c2. Thanks.
In the absence of more information, we'll need to mark this bug as WontFix.

Comment 4 by vakh@chromium.org, Mar 2 2017

Status: WontFix (was: Unconfirmed)
Since we haven't heard back from you and it is not clear yet whether this is a security vulnerability, I am marking this as WontFix.
Please feel free to re-open the bug with more information. Thanks.
Project Member

Comment 5 by sheriffbot@chromium.org, Jun 9 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment