.

Chrome - Google Enters the Browser Wars

<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Tue Sep 02, 2008 2:20 pm

Chrome - Google Enters the Browser Wars

With client side attacks on the rise due to greater success than attacks on network infrastructures directly, has Google paid enough attention to this trend as it enters its own browser into the fray?

In this article on CNN, Google tends to keep talking about changing the web as we know it and being more innovative. But MS on the other hand, with it's IE8 Beta now also available, is pushing the secutiy features of it's new offering such as InPrivate Browsing - not how it adds new innovations to the web itself.

Either way, it makes for interesting times.

Get Chrome Beta:
http://www.google.com/chrome

IE8 Beta:
http://www.microsoft.com/windows/intern ... fault.aspx

Some other random thoughts about Chrome:

1. What will now happen to Google's co-markleting efforts with Firefox?
2. Is Google neglicting those that alternate browsers the most, non-Windows users, by only releasing a Windows version?

Hmmmmmm...

Don
CISSP, MCSE, CSTA, Security+ SME
<<

oneeyedcarmen

User avatar

Full Member
Full Member

Posts: 233

Joined: Thu Jul 05, 2007 2:13 pm

Location: Baltimore, MD USA

Post Tue Sep 02, 2008 2:42 pm

Re: Chrome - Google Enters the Browser Wars

don wrote:...MS on the other hand, with it's IE8 Beta now also available, is pushing the secutiy features of it's new offering such as InPrivate Browsing...


Chrome has "incognito" windows...you know, so your wife won't know what porn you were looking at you were buying her for her birthday
Reluctant CISSP, Certified ASS
<<

oleDB

User avatar

Recruiters
Recruiters

Posts: 236

Joined: Thu Jul 20, 2006 8:58 am

Location: HOA

Post Tue Sep 02, 2008 3:11 pm

Re: Chrome - Google Enters the Browser Wars

Just what we need another piece of beta software running on the interweb ....
No seriously, why can't ANY developer deliver a browser that runs in a complete sandbox with a normal browsing experience. For some reason, they designed web content with need to access your system either with user privileges or system privileges that most 3rd party software runs as. UGH :-(

On a side note, anyone play around with Checkpoint's Forcefield? Its pretty cool, but breaks many java apps.
<<

sgt_mjc

Sr. Member
Sr. Member

Posts: 294

Joined: Tue Feb 05, 2008 8:34 am

Location: AL

Post Tue Sep 02, 2008 3:33 pm

Re: Chrome - Google Enters the Browser Wars

Google does make me a little nervous. We do a lot of testing here and IE has enough holes in it. Do we really need another browser? And as Don pointed out, did Google pay enough attention to security? We'll see.....
Mike Conway
CISSP
CompTia Security +
C|EH
<<

RoleReversal

User avatar

Hero Member
Hero Member

Posts: 928

Joined: Fri Jan 04, 2008 8:54 am

Location: UK

Post Wed Sep 03, 2008 3:12 am

Re: Chrome - Google Enters the Browser Wars

Received a link to this link to milw0rm in my inbox. I haven't had a chance to ( and probably won't) test the impact of the exploit but that is some fast work.

It's not remote execute code yet but it does set alarm bells off in my head. Think I'll let others play guinea pig for a while yet.
<<

venom77

User avatar

Hero Member
Hero Member

Posts: 1905

Joined: Mon Dec 11, 2006 3:23 pm

Post Wed Sep 03, 2008 8:07 am

Re: Chrome - Google Enters the Browser Wars

Wow! Nice... that didn't take long.. I'm sure there are more to follow too.
<<

RoleReversal

User avatar

Hero Member
Hero Member

Posts: 928

Joined: Fri Jan 04, 2008 8:54 am

Location: UK

Post Wed Sep 03, 2008 8:46 am

Re: Chrome - Google Enters the Browser Wars

BillV wrote:I'm sure there are more to follow too.


Courtesy of El Reg:

Chrome vulnerable to carpetbomb bug - Should be self explanatory. If you're going to rip code from third partied, make sure you patch any bugs, especially the known and well publicised ones....

Issues with Chrome EULA - Apparently the EULA allows Google to use any material posted to the web by yourself via Chrome without any copyright restrictions etc.

<edit to add...>
yet another Milw0rm exploit
</edit>

now I'll definitely let others be the guinea pigs, might give Chrome a crack in a couple of years.....
Last edited by RoleReversal on Wed Sep 03, 2008 10:23 am, edited 1 time in total.
<<

g00d_4sh

User avatar

Sr. Member
Sr. Member

Posts: 394

Joined: Tue Sep 18, 2007 1:50 pm

Location: Guayaquil, Ecuador

Post Wed Sep 03, 2008 12:37 pm

Re: Chrome - Google Enters the Browser Wars

Just a side note... not to sidetrack the thread, but have any of you read up on the memory requirements and process threads that IE8 beta makes?  Appearently it's about as memory intensive by itself as XP is.  Once again... I will stick with Opera myself.  Or... thumbdrives to boot off and run one time browsers from. >>
"Bad.. Good?  I'm the guy with the gun"
<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Wed Sep 03, 2008 2:31 pm

Re: Chrome - Google Enters the Browser Wars

IE8... from the company that brought you Vista!!

Don
CISSP, MCSE, CSTA, Security+ SME
<<

Grendel

User avatar

Full Member
Full Member

Posts: 246

Joined: Thu Aug 28, 2008 8:48 am

Location: Colorado Springs, CO

Post Wed Sep 03, 2008 4:48 pm

Re: Chrome - Google Enters the Browser Wars

- Thomas Wilhelm, MSCS MSM
ISSMP CISSP SCSECA SCNA IEM

Web Site:
  • http://HackingDojo.com
Author:
  • Professional Penetration Testing
  • Ninja Hacking
  • Penetration Tester's Open Source Toolkit
  • Metasploit Toolkit for Penetration Testing
  • Netcat Power Tools
<<

mad_irish

User avatar

Newbie
Newbie

Posts: 17

Joined: Thu Aug 14, 2008 7:45 am

Post Wed Sep 03, 2008 6:04 pm

Re: Chrome - Google Enters the Browser Wars

Chrome sports quite a few neat security features that are intriguing.

The sandboxed tabs seems to be one of the best features in the new browser, which will limit data leak from one tab to another.  Whereas most browsers run each tab inside the parent process, with Chrome, each tab is it's own independent process.  This means that one tab can't reach into the memory space of another tab (which actually effectively firewalls the tabs from one another, especially nice for the "incognito" tabs).

I'm a little perplexed by the incognito mode frankly.  It seems like a nifty feature, sure, but not all that practical if you're really serious about privacy.  The browser still collects cookies and transmits personal information and doesn't provide any of the protection that anonymous browsing via TOR or the privacy protection of encryption.  Your session can still be sniffed and the only real advantage is none of the data utilized by the browser is written to disk.  This might be nice in that the browser doesn't "remember" the URL's to sites you've visited or cache images, but you can customize most browsers to mimic this functionality.
<<

Grendel

User avatar

Full Member
Full Member

Posts: 246

Joined: Thu Aug 28, 2008 8:48 am

Location: Colorado Springs, CO

Post Thu Sep 04, 2008 10:05 am

Re: Chrome - Google Enters the Browser Wars

I see the incognito mode invaluable on public systems, especially schools, libraries, etc.  It may not do much for privacy across the network, but when someone is done at a public terminal, they'll feel a lot more secure walking away from an incognito session than what happens currently.
- Thomas Wilhelm, MSCS MSM
ISSMP CISSP SCSECA SCNA IEM

Web Site:
  • http://HackingDojo.com
Author:
  • Professional Penetration Testing
  • Ninja Hacking
  • Penetration Tester's Open Source Toolkit
  • Metasploit Toolkit for Penetration Testing
  • Netcat Power Tools
<<

sgt_mjc

Sr. Member
Sr. Member

Posts: 294

Joined: Tue Feb 05, 2008 8:34 am

Location: AL

Post Thu Sep 04, 2008 10:45 am

Re: Chrome - Google Enters the Browser Wars

I tried IE8 for grins and had a minor problem with signing into VMWare Server. Hopefully that will get worked out before IE8 goes into production. I have to use IE7 since the tools for the server don't work with Firefox. errrr.......
Mike Conway
CISSP
CompTia Security +
C|EH

Return to Other

Who is online

Users browsing this forum: No registered users and 2 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software