|
|||||||||||||||||
![]() |
|||||||||||||||||
|
Google chrome browser is pretty simple. Once you start you’re presented with a fresh white page that’s pretty much separate in borders and most of the common buttons that you would see on a traditional browser. A security code work behind the application that tries to block malware from executing and interacting with the main operating system. This “sandbox” feature gives all browser processes just enough privilege to run inside of Chrome and Google hopes it will stop the majority of hacker attacks.
Sandboxing applications isn’t anything new and most people have heard of JAVA applications running in a sandbox. Users dont bother about programming, they are concern of the application usage and its authentication. Using a vulnerability that was showed off at this year’s Black Hat security conference, Aviv Raff has developed proof of concept code that forces Chrome to open up applications on the desktop. You can run the code at this link, but don’t worry it doesn’t do anything too horrible as it just pops up a notepad window.
But before you shout OMG vulnerability!, notice what you had to do to get that window to open. First you had to be tricked into browsing to the website (ok not really that hard to do) and then you had to click the download button in the bottom-left corner that shows an executable .JAR icon. Hmmmm…. Not exactly a huge vulnerability for security conscious users, but perhaps a minor annoyance to regular folks – just hope the hacker doesn’t run anything more serious than Notepad.
Chrome browser has some great security features that far eclipses any “vulnerability” so far discovered. New browser tabs inside of Chrome run are processed independently of others and if one tab crashes if doesn’t take the rest of the browser with it. There’s also an incognito mode that lets you browse web pages without caching any information.
So don’t worry and give Chrome a try. Yeah the browser is beta and yes there may be some undiscovered security vulnerabilities, but really can you say anything difference about Firefox and Internet Explorer?
One cannot say the chrome is foolproof but the concept behind its development is simple and aim at anti hacking activities. Lets see how the hackers discover the loopholes in this application especially designed to deal hackers.