Improved plug-in security coming to Google Chrome
You could almost mistake The Chromium Blog's opening paragraph as bittersweet reflection on Google's rumble in the jungle with China. It's actually a good post on the basics of vulnerability exploitation and malware installation, but basically it surmises that plug-ins are the weakest link in Internet security today.Firefox already checks your plug-ins at start-up, and Mozilla has a Plugin Checker for other browsers. Chrome, which already has a built-in sandboxed Flash plug-in (with a PDF reader coming soon), now wants to go one step further: out-of-date plug-ins will simply be disabled. If you continue to browse with an out-of-date Java plug-in, Java applets will simply not load. Chrome will then remind you to update your plug-in.
The next step, which is pretty neat but probably less useful for everyday non-poweruser Web users, is 'warnings before running infrequently used plug-ins.' Many plug-ins aren't used on a day to day basis, so when they are activated Chrome will let you know.
As always, we'll let you know when these new features appear in the Chromium developer builds!












Comments
1
Subscribe to commentspontiac76Jul 3rd 2010 2:44AM
Honestly, the only thing I use Chrome for is to use GMail and Google Reader. I've had nothing but issues with it. Probably the fault of XMarks, and not Chrome itself, but XMarks was re-adding bookmarks to my menu, even when I went into the XMarks site and deleted the offending bookmark. It STILL showed up. Annoying.
Now I'm finding that it won't play nice with certain sites and just basically crashes.
So, for me, top security for Chrome is going the way of never installing another plug-in for it again. But then again, we'll probably see that Microsoft will attempt to infiltrate my Linux run Chrome browser and install some stupid plugin on its own.