Saturday, April 25, 2009

Bonus Security Credit for Google Chrome’s Strange Install

Last fall, many folks including myself commented about Google Chrome’s unusual install behavior. Our best guess at the time was that it represented an attempt to accelerate adoption, by allowing non-administrative users to install Chrome.

It also allowed lower-privileged domain users in corporate environments to install and use Chrome unless their IT specifically blocked it.

With this recent Chrome vulnerability and rapid patch cycle, though, I’ve come to see the install in a new light.

Firefox requires an admin to initialize an update. This can be done through programmatic remote admin or right on the console, but still requires intervention. IE can be updated via Windows auto-update, but if auto-update isn’t set to run or if a specific patch needs to be applied, it requires intervention. Chrome, on the other hand, will update itself on the fly for each user’s install (it does require a restart, but only of the Chrome app) unless the installer is cracked to remove the GoogleUpdater component.

Given the cost of having an out-of-date browser version versus the risk of having Chrome updated without admin knowledge … I have to say I like this approach.

9 comments:

Unknown said...

The holidays are a time ed hardy of getting together with friends ed hardy shoes and family, attending elaborate ed hardy clothing parties, and other exciting events ed hardy clothes that involves dressing up in stunning ed hardy store wardrobes. If you ed hardy Bikini are pregnant during ed hardy swimsuits the holidays, it does not ed hardy Caps mean that you are unable buy ed hardy to look fabulous and ed hardy swimwear stylish. Now, an expectant ed hardy sale mother has many styles of chic ed hardy glasses maternity clothing that allows cheap ed hardy her to show off her baby bump Christian audigier while looking spectacular.

Runescape Gold said...

I recently demanded some good information as well as had been searching for Yahoo because of it. I actually been to every web page this arrived for primary website along with didn't obtained almost any related final result then I consideration to look at minute one but got your website. This is just what I needed!


http://www.buylovejewelry.com/
http://gamepartygogo.com/

Anonymous said...

I recentlyDiablo 3 items demanded some beneficial information and details too as experienced been looking for for Yahoo because of it. I fundamentally been to just about every internet site this arrived for main internet site in inclusion to failed to obtained essentially any linked final end result then I concern to obtain a seem at instant Cheapest wow goldonly one but obtained your website. it is simply what I needed!

summermobile said...

Firefox requires an admin to initialize an update. This can be done through programmatic remote admin or right on the console, but still requires intervention.

http://www.meizu-mx5.com/

baixar facebook said...

I think I need it. Thank you for update information. i like your blog.
---
descargar mobogenie and descargar whatsapp para android and apply baixar facebook movel

facebook iniciar sesion celular gratis said...

This is the perfect post! Thanks for sharing this with us loved reading your article ---
facebook móvil and facebook movil gratis and apply facebook iniciar sesion

jogos do friv said...

Thanks for all your information,
----
i like play game clickjogos online free and play game juegos de pou

Cadencealida said...

GameMS is exactly the website you need. A paradise for every Madden player. We have enough Madden 20 coins for you to sell at a very low price, helping you build the most powerful team and gain an advantage in the game, Beat your opponents, let you better experience the joy brought by Madden 20.

kopi.J said...

WOW! I Love it...
and i thing thats good for you >>


DREAM MEANNING Thank you!