PDA

View Full Version : Is Chrome 10 really secure?


Hugger
March 12th, 2011, 11:25 AM
Maybe I'm looking at this the wrong way.
I had some trouble installing Chrome on my Windows 7 Pro x64. The Red 'X' would re-size the browser window. To close Chrome I had to use Task Manager.
So I uninstalled it twice and cleaned my system.
The third time time I did a few reboots after the install and now it seems to be working properly.
Now for the security part.
I know not too much can happen from cookies in a well protected system. For years I've been using Sandboxie and Firefox. Nothing that I can remember got past SB.
But when I close Chrome I'm left with a bunch of cookies that Hitman Pro finds.
Am I looking at this the wrong way?
Thanks.
Hugger

MrBrian
March 12th, 2011, 12:53 PM
Chrome 10 has a sandboxed Flash Player, and also blocks by default some outdated plugins, such as outdated Java. On the other hand, if you have Java installed, be aware that Java is not sandboxed by Chrome. See Java runs with different integrity level in Internet Explo. vs. low integrity Firefox (http://www.wilderssecurity.com/showthread.php?t=293404) for more details.

I would fully expect that Chrome allows cookies to be set, so no surprise there.

TOMxEU
March 12th, 2011, 12:59 PM
Did you set up to block 3rd party cookies? Or you can block all cookies except allowed. You can also set up to clean cookies when a browser is closed.

m00nbl00d
March 12th, 2011, 01:16 PM
-{ Quote: "Chrome 10 has a sandboxed Flash Player, and also blocks by default some outdated plugins, such as outdated Java. On the other hand, if you have Java installed, be aware that Java is not sandboxed by Chrome. See Java runs with different integrity level in Internet Explo. vs. low integrity Firefox (http://www.wilderssecurity.com/showthread.php?t=293404) for more details.

I would fully expect that Chrome allows cookies to be set, so no surprise there." }-

The command switch -safe-plugins should make Java start sandboxed?

MrBrian
March 12th, 2011, 01:19 PM
-{ Quote: "The command switch -safe-plugins should make Java start sandboxed?" }-

I would think so. I didn't test that though.