Chrome browser will block malware downloads

Let me guess, it will work like DNS filtering services?

 

You wouldn't be able to download it or access the site (if it hosts the file) in that case.

Didn't they already add download reputation protection? Wonder what's technically new.

 

That's the only sensible option IMO. What else? Make use of VirusTotal database is way to dependent to its users. Wouldn't be so effective.

Maybe they'll add a heuristic engine.

 

That's good news. The only problem is that Chrome doesn't have bookmarks menu... So big no no for me.

 

I don't seem to be missing anything with Chrome's bookmark toolbar and the "Other bookmarks" folder on it? The full bookmarks menu is always available in "Wrench (three bars) > Bookmarks", which shows the same items.

 

Well, if it will block downloads, it will be time to change browser after a long time.

You can have more than 35 bookmark favicons on the small resolution for a quick access, so why to use a bookmark menu?

 

Download reputation protection is not the same as blocking unwanted downloads, like drive-by downloads, exploits and etc. this is what Google Chrome needs, Firefox has extension called Public Fox, which thanks to password protection blocks any kind of downloads, sou if something wants to download itself it must broke through your password protection.
I'm actually hoping Google Chrome will use restrictions like SBIE 4-hopefully in newer version plus Public Fox type blockings with passoword protection of unwanted drive-by downloads and downloads of exploits and everything else.

 

Thanks for the info on Public Fox. I'll give it a try. I've been looking for something that would add some muscle to firefox.

 

I think this technology can be connected with CAMP that was mentioned few months ago
https://www.wilderssecurity.com/showthread.php?t=345534&highlight=camp
http://www.darkreading.com/monitoring/google-uses-reputation-to-detect-malicio/240152413
https://www.networkworld.com/news/2013/040913-camp-for-chrome-catches-99-268529.html?page=1

 

Incorporate browser scripting control, download from only official websites and don't click email links. That should be all it takes. I don't like the idea of adding more code to the browser to block something that can easily be stopped with currently available means.